| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Minianwendungen werden nicht mehr richtig angezeigtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
03.03.2013, 12:32
| #1 |
 |  Minianwendungen werden nicht mehr richtig angezeigt Hallo zusammen, seit kurzem werden bei mir die Minianwendungen nicht mehr richtig angezeigt. Meist nur ein kleiner schwarzer und weißer fleck. Handelt es sich hier möglicherweise um einen Virus? Vielleicht kennt sich einer von euch damit aus.  duddl |
|
03.03.2013, 18:15
| #2 |
| /// Malware-holic   | Minianwendungen werden nicht mehr richtig angezeigt Hi,
__________________Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
__________________ |
|
03.03.2013, 21:01
| #3 |
| | Minianwendungen werden nicht mehr richtig angezeigt Bitdefender sagt mir dass otl eine bösartige anwendung sei, soll ich sie also nicht ausführen?
__________________ |
|
03.03.2013, 21:12
| #4 |
| /// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt doch ist n Fehlalarm
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
03.03.2013, 21:28
| #5 | |
| | Minianwendungen werden nicht mehr richtig angezeigtZitat:
OTL Logfile: Code:
ATTFilter OTL logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: Google CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 ???,????,????cr67com,????,??????,?????112scg,tt???8bc8,????? O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ O1 - Hosts: 127.0.0.1 100sexlinks.com - Informationen zum Thema Sex links. Diese Website steht zum Verkauf! O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys [2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys [2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll [2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL [2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL [2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL [2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL [2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL [2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL [2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309 [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc [2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc [2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll [2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll [2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll [2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc [2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc [2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc [2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc [2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc [2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc [2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc [2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll [2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll [2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll [2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc [2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc [2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll [2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll [2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl [2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll [2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe [2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll [2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== < End of report > Wie kann man nochmal die Texte zitieren bzw. einfügen. also mit welchen Zeichen? hallo? |
|
04.03.2013, 14:20
| #6 |
| | Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys [2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys [2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll [2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL [2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL [2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL [2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL [2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL [2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL [2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309 [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc [2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc [2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll [2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll [2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll [2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc [2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc [2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc [2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc [2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc [2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc [2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc [2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll [2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll [2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll [2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc [2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc [2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll [2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll [2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl [2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll [2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe [2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll [2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== < End of report > |
|
04.03.2013, 14:21
| #7 |
| | Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys [2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys [2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll [2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL [2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL [2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL [2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL [2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL [2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL [2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309 [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc [2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc [2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll [2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll [2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll [2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc [2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc [2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc [2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc [2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc [2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc [2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc [2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll [2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll [2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll [2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc [2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc [2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll [2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll [2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl [2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll [2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe [2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll [2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== < End of report > |
|
04.03.2013, 14:24
| #8 |
| | Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL Extras logfile created on: 03.03.2013 21:30:20 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free
5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
[HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
Directory [AddToPlaylistApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Key error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01DBE142-27E9-4773-A0CD-B304003A5DF7}" = lport=137 | protocol=17 | dir=in | app=system |
"{12F58715-4624-4FD1-B010-BDBB1E7B080E}" = rport=137 | protocol=17 | dir=out | app=system |
"{1D2089B8-89D0-4BA7-A5B4-8F155E15D214}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{32A2271E-7150-4DA8-8C6D-BEE0170453F2}" = lport=138 | protocol=17 | dir=in | app=system |
"{37CFFEA8-E16F-43E4-BF1A-F88551A92DE4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39748B89-9815-4550-B841-532E2154ACF6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3D59763D-1ED3-4C74-BDFA-8A8FCC9FC525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3EB7CAEB-87BB-4EA0-B067-ACC73089BC53}" = rport=139 | protocol=6 | dir=out | app=system |
"{4361BAA7-7834-412A-9E44-1BA065BD74E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4839B456-FDA6-4BEB-8D20-3376989267D7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{49BABFCE-DC11-4F95-ACBC-9C8BE5EDC36D}" = lport=139 | protocol=6 | dir=in | app=system |
"{4DE142EE-3AC5-4683-A93D-73C964D0A799}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{56A0396B-6F40-4055-A5C3-5063299FB17E}" = rport=138 | protocol=17 | dir=out | app=system |
"{66F5B08D-0A57-46B4-AA17-F10C3C22F759}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8C8F29E3-63A1-4816-81E5-EE4150655CFB}" = lport=445 | protocol=6 | dir=in | app=system |
"{90695147-1B32-4BF1-929C-80FA22015799}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A86F6B4F-9E54-4DB3-AA76-A0A683C3E610}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AFC82FD5-38F0-4F3E-9E7D-057741979768}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4066647-0930-4F92-AED6-7BFA6D998905}" = lport=10243 | protocol=6 | dir=in | app=system |
"{EAB4A630-A4D2-4BD4-8678-B51E957BE3FC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EFE6FD3C-175A-4490-963E-25D99B7C8EA2}" = rport=445 | protocol=6 | dir=out | app=system |
"{F48DB664-08F0-4795-9171-196F48F7B1D2}" = lport=80 | protocol=6 | dir=in | name=www |
"{F5167275-B910-4332-8B20-73F7A0B8BBCF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FFA4C39C-5201-4494-9C67-A43E86E58075}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06D07C9B-2AD0-4369-AB48-298D5D18296B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{0AF7B335-6CF4-4D3E-8667-438F4A4EADDA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{1253855C-B82A-4533-A923-299F385CEE73}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{15EA55BC-0D82-4443-B1D0-D1D174C8B98A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{31EF75E5-69F3-4986-A494-697A2D4B0B79}" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{3367344A-00FA-45DB-846E-477E214F9D96}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{36C659E4-9313-4E22-A9CA-B5B3FE55F6F6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{47A7770A-CDF0-42BE-B810-BC82EC215190}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4CF43D84-0084-43ED-B110-3D63EDF671BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4E9C997D-58B2-4974-9A3B-5B3FBC9FBDDD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{55224F95-277E-482D-BC14-B97F8D85E435}" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{5E76D313-567F-495F-8B8C-24A65DD02DA5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6156A7B9-18E4-4FF5-AF53-F97D16C2D1AF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{664CA150-E671-4567-90EC-299E6D3B4035}" = protocol=6 | dir=out | app=system |
"{791C8FDF-21B4-4874-B18A-F02E0285293E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{80C8EE46-FD19-483A-B00E-A9CCE3000760}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{8CC52C5F-AA3B-41D7-A1B7-203AA9B2C047}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{94D74F6B-79F1-46DB-A69A-A8B39BE3639D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB6B0AAB-C44F-418A-969C-D4712E88839F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ACE84729-F7CE-40F2-BBFE-1E21659DB267}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C95F78A8-49C0-44EC-99C4-940067C828E7}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{DAD0094F-D544-4CED-A3C4-ECC5FD4C9F36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E72A7411-CB21-440F-B894-74A43100BFD3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E9182B6C-9065-48DF-8991-4E7BE3001FE6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{5AE05BC8-C5D2-4583-AED7-24C58FC6768E}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"TCP Query User{6C914251-2626-430D-84DE-5249E13427AF}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{0DF4C5BA-CE9D-4847-A7DD-9D84929383D0}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"UDP Query User{3669F7DB-5032-4F4F-AA0A-01C4A71BADEC}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{152A537F-45E9-4B15-8847-2E3E5BE61859}" = Intel® Trusted Connect Service Client
"{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 6.1
"{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{23C3F5C0-566B-478B-AAB6-197ADAD0C945}" = Uniblue SpeedUpMyPC 2009
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program
"{2C26B97F-698E-4E04-B398-8203B147859B}_is1" = TOPP Vorlagen-Druckstudio (5156)
"{33FFD86B-569C-9E8D-6659-A1F84D07CAD0}" = AMD Catalyst Install Manager
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53B17A98-5BF0-40BC-AAFF-850A357975AC}" = HP Quick Launch
"{5F32D89B-D3A0-4562-AC03-F6DE4614AE1A}" = DVB-T USB DEVICE
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74292F90-895A-4FC6-A692-9641532B1B63}" = ArcSoft TotalMedia 3.5
"{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{BBBA20E0-D9F3-4C6F-83AC-D66EFC0BFA93}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE
"{E2E7A0E8-77C4-495F-8FA3-63DAEDAA2DB3}" = F-Secure PSC Prerequisites
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}" = Uniblue RegistryBooster 2009
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung
"1&1 Mail & Media GmbH Toolbar IE8" = WEB.DE MailCheck für Internet Explorer
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12
"Bitdefender" = Bitdefender Internet Security 2013
"BitTorrent" = BitTorrent
"DMX5_is1" = DriverMax 6
"DriverEasy_is1" = DriverEasy 4.4.2
"Finale NotePad 2012" = Finale NotePad 2012
"Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128
"Freemake Video Converter_is1" = Freemake Video Converter Version 3.2.0
"freeocr_is1" = FreeOCR v4.2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"SynTPDeinstKey" = Synaptics TouchPad Driver
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"WinPcapInst" = WinPcap 4.1.2
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1&1 Mail & Media WEB.DE MailCheck GC" = WEB.DE MailCheck für Google Chrome
"Google Chrome" = Google Chrome
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 02.03.2013 04:40:40 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 04:47:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Error - 02.03.2013 04:47:24 | Computer Name = Alexander-HP630 | Source = Application
Error | ID = 1000
Error - 02.03.2013 05:09:33 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 07:46:25 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
13.0.3020.2, Zeitstempel: 0x51067abd Name des fehlerhaften Moduls: unknown, Version:
0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000
ID
des fehlerhaften Prozesses: 0x8c0 Startzeit der fehlerhaften Anwendung: 0x01ce1723c5213387
Pfad
der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
Pfad
des fehlerhaften Moduls: unknown Berichtskennung: cf90084a-832e-11e2-8f0e-e4115bf9b2f0
Error - 02.03.2013 07:47:41 | Computer Name = Alexander-HP630 | Source = Microsoft-Windows-CAPI2 | ID = 512
Description = Vom Kryptografiedienst konnte das VSS-Sicherungsobjekt "System Writer"
nicht initialisiert werden. Details: Could not query the status of the EventSystem
service. System Error: Der Computer wird heruntergefahren. .
Error - 02.03.2013 07:51:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 07:57:20 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 07:58:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
13.0.3020.2, Zeitstempel: 0x51067abd Name des fehlerhaften Moduls: ntdll.dll, Version:
6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d
ID
des fehlerhaften Prozesses: 0x8b0 Startzeit der fehlerhaften Anwendung: 0x01ce173d14bd2c26
Pfad
der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: 7c1d470b-8330-11e2-8fd3-e4115bf9b2f0
Error - 02.03.2013 08:02:06 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 09:38:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
[ Media Center Events ]
Error - 03.12.2012 14:10:35 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:35 - Fehler beim Herstellen der Internetverbindung. 19:10:35
- Serververbindung konnte nicht hergestellt werden..
Error - 03.12.2012 14:10:44 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:40 - Fehler beim Herstellen der Internetverbindung. 19:10:40
- Serververbindung konnte nicht hergestellt werden..
Error - 04.12.2012 09:37:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:39 - Fehler beim Herstellen der Internetverbindung. 14:37:39
- Serververbindung konnte nicht hergestellt werden..
Error - 04.12.2012 09:37:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:44 - Fehler beim Herstellen der Internetverbindung. 14:37:44
- Serververbindung konnte nicht hergestellt werden..
Error - 05.12.2012 12:09:49 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 17:09:49 - Directory konnte nicht abgerufen werden (Fehler: Timeout
für Vorgang überschritten)
Error - 06.12.2012 11:54:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:39 - Fehler beim Herstellen der Internetverbindung. 16:54:39
- Serververbindung konnte nicht hergestellt werden..
Error - 06.12.2012 11:54:48 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:44 - Fehler beim Herstellen der Internetverbindung. 16:54:44
- Serververbindung konnte nicht hergestellt werden..
Error - 14.12.2012 10:40:37 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:37 - Fehler beim Herstellen der Internetverbindung. 15:40:37
- Serververbindung konnte nicht hergestellt werden..
Error - 14.12.2012 10:40:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:43 - Fehler beim Herstellen der Internetverbindung. 15:40:43
- Serververbindung konnte nicht hergestellt werden..
Error - 15.12.2012 15:52:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 20:52:47 - Fehler beim Herstellen der Internetverbindung. 20:52:47
- Serververbindung konnte nicht hergestellt werden..
[ Spybot - Search and Destroy Events ]
Error - 14.01.2013 13:49:32 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 16.01.2013 13:50:00 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 14.02.2013 10:55:06 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 19.02.2013 09:38:05 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 21.02.2013 13:14:11 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 23.02.2013 05:17:13 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 23.02.2013 16:11:47 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 01.03.2013 12:07:35 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 01.03.2013 14:53:53 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 03.03.2013 04:36:59 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
[ System Events ]
Error - 17.02.2013 04:31:32 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst IPBusEnum erreicht.
Error - 17.02.2013 04:32:26 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
und wird nicht verwendet. Der Treiber wurde entladen.
Error - 17.02.2013 15:52:04 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
Error - 17.02.2013 16:30:21 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
Error - 18.02.2013 09:10:09 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
und wird nicht verwendet. Der Treiber wurde entladen.
Error - 18.02.2013 12:49:33 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
40517705
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
Error - 18.02.2013 12:56:23 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
Error - 18.02.2013 13:34:45 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
< End of report >
|
|
04.03.2013, 19:31
| #9 |
| /// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt steht doch oben groß und breit, in der codebox und dass in die otl eingabebox
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
04.03.2013, 20:14
| #10 |
| | Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL logfile created on: 04.03.2013 19:40:08 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 35,42% Memory free 5,21 Gb Paging File | 2,84 Gb Available in Paging File | 54,48% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 513,40 Gb Free Space | 86,13% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (avkmgr) -- system32\DRIVERS\avkmgr.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation) DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No CLSID value found. O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{E21663EC-B5F9-4842-8303-EE4FDADFEF6D} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpReg: avgnt - hkey= - key= - File not found MsConfig - StartUpReg: Spybot-S&D Cleaning - hkey= - key= - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) MsConfig - State: "services" - 0 MsConfig - State: "startup" - 2 CREATERESTOREPOINT System Restore Service not available. ========== Files/Folders - Created Within 30 Days ========== [2013.03.04 18:51:52 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2013.03.04 18:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2013.03.04 18:28:01 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2013.03.04 18:28:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2013.03.04 18:19:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2013.03.04 16:33:53 | 000,000,000 | ---D | C] -- C:\Program Files\Avira [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.04 19:12:05 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.04 19:12:04 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.04 18:51:52 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2013.03.04 18:28:06 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2013.03.04 16:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.04 16:17:23 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.04 16:16:51 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.04 18:28:06 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.04 19:36:17 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.04 18:25:39 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.03.04 16:21:39 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.04 18:28:06 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2012.10.01 13:20:42 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2013.02.24 20:23:38 | 000,000,000 | ---D | M] -- C:\Dell [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2013.02.25 16:47:38 | 000,000,000 | ---D | M] -- C:\Drivers [2013.02.24 10:59:28 | 000,000,000 | ---D | M] -- C:\Driver_allOS [2012.10.26 22:06:06 | 000,000,000 | ---D | M] -- C:\FreeOCR [2012.09.27 15:10:41 | 000,000,000 | ---D | M] -- C:\HP [2013.02.24 19:54:29 | 000,000,000 | ---D | M] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.01.05 21:30:37 | 000,000,000 | ---D | M] -- C:\Macromedia [2012.12.29 13:41:45 | 000,000,000 | ---D | M] -- C:\Mozilla [2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs [2013.03.04 18:28:01 | 000,000,000 | R--D | M] -- C:\Program Files [2013.03.04 18:27:08 | 000,000,000 | -H-D | M] -- C:\ProgramData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Programme [2012.10.20 13:20:56 | 000,000,000 | ---D | M] -- C:\PSFONTS [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Recovery [2013.02.19 14:41:41 | 000,000,000 | R--D | M] -- C:\Sandbox [2012.09.29 08:39:29 | 000,000,000 | ---D | M] -- C:\SiLabs [2013.02.26 21:15:24 | 000,000,000 | ---D | M] -- C:\swsetup [2013.03.04 18:19:23 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2013.02.04 20:26:37 | 000,000,000 | ---D | M] -- C:\TDSSKiller_Quarantine [2013.02.15 12:43:10 | 000,000,000 | ---D | M] -- C:\toolbarImages [2012.09.29 10:40:45 | 000,000,000 | ---D | M] -- C:\UserData [2012.11.17 16:39:29 | 000,000,000 | R--D | M] -- C:\Users [2013.03.03 13:09:44 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < C:\Windows\system32\*.tsp > [2009.07.14 02:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp [2009.07.14 02:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp [2009.07.14 02:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp [2009.07.14 02:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp [2010.11.20 13:16:53 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp [4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ] [2009.07.14 05:53:46 | 000,032,630 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT [2012.10.03 17:01:17 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job [2013.01.09 20:46:10 | 000,001,090 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [2013.01.09 20:46:10 | 000,001,094 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\Tasks\DriverEasy Scheduled Scan.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job < MD5 for: AGP440.SYS > [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16552_none_dd2bf0ef82c7be83\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16593_none_dd01b18982e7479e\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.20669_none_ddb1bfd49be72b9f\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.20713_none_dde1cf9a9bc40507\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: EXPLORER.EXE > [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe [2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe [2012.11.13 14:07:52 | 003,906,584 | ---- | M] (Safer-Networking Ltd.) MD5=E4A0900CF535888DDD85B10040CA3E34 -- C:\Program Files\Spybot - Search & Destroy 2\explorer.exe < MD5 for: IASTOR.SYS > [2011.05.20 08:43:02 | 000,461,592 | ---- | M] (Intel Corporation) MD5=DB81F413FA4E3F328CAD7B5D59EF3F21 -- C:\Windows\System32\drivers\iaStor.sys < MD5 for: IASTORV.SYS > [2010.05.12 10:05:35 | 000,332,168 | ---- | M] (Intel Corporation) MD5=2D2918606673C46769FB516A5ACE958E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_aed9db9de9265a3a\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys [2010.05.12 10:20:41 | 000,332,160 | ---- | M] (Intel Corporation) MD5=FE8186428F0AB44F0E500C7AA33E9B51 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_afb9f9af020317a3\iaStorV.sys < MD5 for: NETLOGON.DLL > [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2010.05.12 10:05:45 | 000,143,752 | ---- | M] (NVIDIA Corporation) MD5=1D8B6A440DFF2BDEAA4EB209FCBA21BF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_39a34c4d205d0412\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys [2010.05.12 10:20:52 | 000,143,752 | ---- | M] (NVIDIA Corporation) MD5=F3596C8A63D3871890B0D3A0DFFEF0D0 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_3a836a5e3939c17b\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll < MD5 for: USERINIT.EXE > [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WINLOGON.EXE > [2012.12.14 16:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > [2012.08.29 17:24:08 | 000,161,312 | ---- | M] (BitDefender LLC) Unable to obtain MD5 -- C:\Windows\system32\drivers\gzflt.sys < %systemroot%\System32\config\*.sav > < %systemroot%\system32\*.dll /lockedfiles > [4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ] < %USERPROFILE%\*.* > [2013.03.04 20:05:26 | 007,340,032 | ---- | M] () -- C:\Users\Info\NTUSER.DAT [2013.02.03 17:27:53 | 006,815,744 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.bak [2013.03.04 20:05:26 | 000,262,144 | -HS- | M] () -- C:\Users\Info\ntuser.dat.LOG1 [2012.09.27 11:34:15 | 000,000,000 | -HS- | M] () -- C:\Users\Info\ntuser.dat.LOG2 [2013.02.03 17:30:51 | 000,000,000 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.sav.LOG1 [2013.02.03 17:30:51 | 000,000,000 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.sav.LOG2 [2012.09.27 12:04:28 | 000,065,536 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2012.09.27 12:04:28 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2012.09.27 12:04:28 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2013.02.03 21:33:02 | 000,065,536 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TM.blf [2013.02.03 21:33:02 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms [2013.02.03 21:33:02 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms [2012.09.27 11:34:16 | 000,000,020 | -HS- | M] () -- C:\Users\Info\ntuser.ini [2012.11.07 17:24:01 | 000,019,449 | ---- | M] () -- C:\Users\Info\return.txt < %USERPROFILE%\Local Settings\Temp\*.exe > < %USERPROFILE%\Local Settings\Temp\*.dll > < %USERPROFILE%\Application Data\*.exe > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < End of report > |
|
04.03.2013, 20:15
| #11 |
| | Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL Extras logfile created on: 04.03.2013 19:40:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,61 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 35,42% Memory free
5,21 Gb Paging File | 2,84 Gb Available in Paging File | 54,48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 513,40 Gb Free Space | 86,13% Space Free | Partition Type: NTFS
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
[HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
Directory [AddToPlaylistApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Key error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01DBE142-27E9-4773-A0CD-B304003A5DF7}" = lport=137 | protocol=17 | dir=in | app=system |
"{12F58715-4624-4FD1-B010-BDBB1E7B080E}" = rport=137 | protocol=17 | dir=out | app=system |
"{1D2089B8-89D0-4BA7-A5B4-8F155E15D214}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{32A2271E-7150-4DA8-8C6D-BEE0170453F2}" = lport=138 | protocol=17 | dir=in | app=system |
"{37CFFEA8-E16F-43E4-BF1A-F88551A92DE4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39748B89-9815-4550-B841-532E2154ACF6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3D59763D-1ED3-4C74-BDFA-8A8FCC9FC525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3EB7CAEB-87BB-4EA0-B067-ACC73089BC53}" = rport=139 | protocol=6 | dir=out | app=system |
"{4361BAA7-7834-412A-9E44-1BA065BD74E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4839B456-FDA6-4BEB-8D20-3376989267D7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{49BABFCE-DC11-4F95-ACBC-9C8BE5EDC36D}" = lport=139 | protocol=6 | dir=in | app=system |
"{4DE142EE-3AC5-4683-A93D-73C964D0A799}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{56A0396B-6F40-4055-A5C3-5063299FB17E}" = rport=138 | protocol=17 | dir=out | app=system |
"{66F5B08D-0A57-46B4-AA17-F10C3C22F759}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8C8F29E3-63A1-4816-81E5-EE4150655CFB}" = lport=445 | protocol=6 | dir=in | app=system |
"{90695147-1B32-4BF1-929C-80FA22015799}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A86F6B4F-9E54-4DB3-AA76-A0A683C3E610}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AFC82FD5-38F0-4F3E-9E7D-057741979768}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4066647-0930-4F92-AED6-7BFA6D998905}" = lport=10243 | protocol=6 | dir=in | app=system |
"{EAB4A630-A4D2-4BD4-8678-B51E957BE3FC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EFE6FD3C-175A-4490-963E-25D99B7C8EA2}" = rport=445 | protocol=6 | dir=out | app=system |
"{F48DB664-08F0-4795-9171-196F48F7B1D2}" = lport=80 | protocol=6 | dir=in | name=www |
"{F5167275-B910-4332-8B20-73F7A0B8BBCF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FFA4C39C-5201-4494-9C67-A43E86E58075}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06D07C9B-2AD0-4369-AB48-298D5D18296B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{0AF7B335-6CF4-4D3E-8667-438F4A4EADDA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{1253855C-B82A-4533-A923-299F385CEE73}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{15EA55BC-0D82-4443-B1D0-D1D174C8B98A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{31EF75E5-69F3-4986-A494-697A2D4B0B79}" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{3367344A-00FA-45DB-846E-477E214F9D96}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{36C659E4-9313-4E22-A9CA-B5B3FE55F6F6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{47A7770A-CDF0-42BE-B810-BC82EC215190}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4CF43D84-0084-43ED-B110-3D63EDF671BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4E9C997D-58B2-4974-9A3B-5B3FBC9FBDDD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{55224F95-277E-482D-BC14-B97F8D85E435}" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{5E76D313-567F-495F-8B8C-24A65DD02DA5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6156A7B9-18E4-4FF5-AF53-F97D16C2D1AF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{664CA150-E671-4567-90EC-299E6D3B4035}" = protocol=6 | dir=out | app=system |
"{791C8FDF-21B4-4874-B18A-F02E0285293E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{80C8EE46-FD19-483A-B00E-A9CCE3000760}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{8CC52C5F-AA3B-41D7-A1B7-203AA9B2C047}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{94D74F6B-79F1-46DB-A69A-A8B39BE3639D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB6B0AAB-C44F-418A-969C-D4712E88839F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ACE84729-F7CE-40F2-BBFE-1E21659DB267}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C95F78A8-49C0-44EC-99C4-940067C828E7}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{DAD0094F-D544-4CED-A3C4-ECC5FD4C9F36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E72A7411-CB21-440F-B894-74A43100BFD3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E9182B6C-9065-48DF-8991-4E7BE3001FE6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{5AE05BC8-C5D2-4583-AED7-24C58FC6768E}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"TCP Query User{6C914251-2626-430D-84DE-5249E13427AF}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{0DF4C5BA-CE9D-4847-A7DD-9D84929383D0}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"UDP Query User{3669F7DB-5032-4F4F-AA0A-01C4A71BADEC}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{152A537F-45E9-4B15-8847-2E3E5BE61859}" = Intel® Trusted Connect Service Client
"{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 6.1
"{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{23C3F5C0-566B-478B-AAB6-197ADAD0C945}" = Uniblue SpeedUpMyPC 2009
"{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program
"{2C26B97F-698E-4E04-B398-8203B147859B}_is1" = TOPP Vorlagen-Druckstudio (5156)
"{33FFD86B-569C-9E8D-6659-A1F84D07CAD0}" = AMD Catalyst Install Manager
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53B17A98-5BF0-40BC-AAFF-850A357975AC}" = HP Quick Launch
"{5F32D89B-D3A0-4562-AC03-F6DE4614AE1A}" = DVB-T USB DEVICE
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74292F90-895A-4FC6-A692-9641532B1B63}" = ArcSoft TotalMedia 3.5
"{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{BBBA20E0-D9F3-4C6F-83AC-D66EFC0BFA93}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE
"{E2E7A0E8-77C4-495F-8FA3-63DAEDAA2DB3}" = F-Secure PSC Prerequisites
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}" = Uniblue RegistryBooster 2009
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12
"Bitdefender" = Bitdefender Internet Security 2013
"BitTorrent" = BitTorrent
"DMX5_is1" = DriverMax 6
"DriverEasy_is1" = DriverEasy 4.4.2
"Finale NotePad 2012" = Finale NotePad 2012
"Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128
"Freemake Video Converter_is1" = Freemake Video Converter Version 3.2.0
"freeocr_is1" = FreeOCR v4.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"SynTPDeinstKey" = Synaptics TouchPad Driver
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"WinPcapInst" = WinPcap 4.1.2
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1&1 Mail & Media WEB.DE MailCheck GC" = WEB.DE MailCheck für Google Chrome
"Google Chrome" = Google Chrome
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 02.03.2013 07:58:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
13.0.3020.2, Zeitstempel: 0x51067abd Name des fehlerhaften Moduls: ntdll.dll, Version:
6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d
ID
des fehlerhaften Prozesses: 0x8b0 Startzeit der fehlerhaften Anwendung: 0x01ce173d14bd2c26
Pfad
der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: 7c1d470b-8330-11e2-8fd3-e4115bf9b2f0
Error - 02.03.2013 08:02:06 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 09:38:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
Error - 02.03.2013 11:37:49 | Computer Name = Alexander-HP630 | Source = VSS | ID = 8194
Description =
Error - 02.03.2013 12:26:37 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\innovative
solutions\drivermax\DPInst\amd64\dpinst.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2013 12:26:37 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\innovative
solutions\drivermax\DPInst\ia64\dpinst.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2013 12:26:46 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\MaxxAudioControl64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2013 12:26:47 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\RAVBg64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2013 12:26:47 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\RAVCpl64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2013 12:26:50 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\vncutil64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2013 12:26:52 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\WDM\vncutil64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
[ Media Center Events ]
Error - 03.12.2012 14:10:35 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:35 - Fehler beim Herstellen der Internetverbindung. 19:10:35
- Serververbindung konnte nicht hergestellt werden..
Error - 03.12.2012 14:10:44 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:40 - Fehler beim Herstellen der Internetverbindung. 19:10:40
- Serververbindung konnte nicht hergestellt werden..
Error - 04.12.2012 09:37:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:39 - Fehler beim Herstellen der Internetverbindung. 14:37:39
- Serververbindung konnte nicht hergestellt werden..
Error - 04.12.2012 09:37:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:44 - Fehler beim Herstellen der Internetverbindung. 14:37:44
- Serververbindung konnte nicht hergestellt werden..
Error - 05.12.2012 12:09:49 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 17:09:49 - Directory konnte nicht abgerufen werden (Fehler: Timeout
für Vorgang überschritten)
Error - 06.12.2012 11:54:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:39 - Fehler beim Herstellen der Internetverbindung. 16:54:39
- Serververbindung konnte nicht hergestellt werden..
Error - 06.12.2012 11:54:48 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:44 - Fehler beim Herstellen der Internetverbindung. 16:54:44
- Serververbindung konnte nicht hergestellt werden..
Error - 14.12.2012 10:40:37 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:37 - Fehler beim Herstellen der Internetverbindung. 15:40:37
- Serververbindung konnte nicht hergestellt werden..
Error - 14.12.2012 10:40:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:43 - Fehler beim Herstellen der Internetverbindung. 15:40:43
- Serververbindung konnte nicht hergestellt werden..
Error - 15.12.2012 15:52:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 20:52:47 - Fehler beim Herstellen der Internetverbindung. 20:52:47
- Serververbindung konnte nicht hergestellt werden..
[ Spybot - Search and Destroy Events ]
Error - 14.01.2013 13:49:32 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 16.01.2013 13:50:00 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 14.02.2013 10:55:06 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 19.02.2013 09:38:05 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 21.02.2013 13:14:11 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 23.02.2013 05:17:13 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 23.02.2013 16:11:47 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 01.03.2013 12:07:35 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 01.03.2013 14:53:53 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
Error - 03.03.2013 04:36:59 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
[ System Events ]
Error - 17.02.2013 04:31:32 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst IPBusEnum erreicht.
Error - 17.02.2013 04:32:26 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
und wird nicht verwendet. Der Treiber wurde entladen.
Error - 17.02.2013 15:52:04 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
Error - 17.02.2013 16:30:21 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
Error - 18.02.2013 09:10:09 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
und wird nicht verwendet. Der Treiber wurde entladen.
Error - 18.02.2013 12:49:33 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
40517705
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
Error - 18.02.2013 12:56:23 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
Error - 18.02.2013 13:34:45 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
< End of report >
|
|
04.03.2013, 21:05
| #12 |
| /// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt Hi, Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
04.03.2013, 21:26
| #13 |
| | Minianwendungen werden nicht mehr richtig angezeigt Er hat keine Bedrohungen gefunden: Code:
ATTFilter 21:23:45.0711 2816 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:23:46.0142 2816 ============================================================
21:23:46.0142 2816 Current date / time: 2013/03/04 21:23:46.0142
21:23:46.0142 2816 SystemInfo:
21:23:46.0142 2816
21:23:46.0142 2816 OS Version: 6.1.7601 ServicePack: 1.0
21:23:46.0142 2816 Product type: Workstation
21:23:46.0143 2816 ComputerName: ALEXANDER-HP630
21:23:46.0143 2816 UserName: Info
21:23:46.0143 2816 Windows directory: C:\Windows
21:23:46.0143 2816 System windows directory: C:\Windows
21:23:46.0143 2816 Processor architecture: Intel x86
21:23:46.0143 2816 Number of processors: 2
21:23:46.0143 2816 Page size: 0x1000
21:23:46.0143 2816 Boot type: Normal boot
21:23:46.0143 2816 ============================================================
21:23:49.0736 2816 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
21:23:49.0738 2816 ============================================================
21:23:49.0738 2816 \Device\Harddisk0\DR0:
21:23:49.0739 2816 MBR partitions:
21:23:49.0739 2816 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:23:49.0739 2816 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x4A825800
21:23:49.0739 2816 ============================================================
21:23:49.0782 2816 C: <-> \Device\Harddisk0\DR0\Partition2
21:23:49.0782 2816 ============================================================
21:23:49.0782 2816 Initialize success
21:23:49.0782 2816 ============================================================
21:24:12.0623 3544 ============================================================
21:24:12.0623 3544 Scan started
21:24:12.0623 3544 Mode: Manual; SigCheck; TDLFS;
21:24:12.0623 3544 ============================================================
21:24:13.0761 3544 ================ Scan system memory ========================
21:24:13.0761 3544 System memory - ok
21:24:13.0762 3544 ================ Scan services =============================
21:24:13.0987 3544 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
21:24:14.0139 3544 1394ohci - ok
21:24:14.0178 3544 40517705 - ok
21:24:14.0292 3544 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
21:24:14.0689 3544 ACDaemon - ok
21:24:14.0730 3544 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:24:14.0758 3544 ACPI - ok
21:24:14.0793 3544 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
21:24:14.0860 3544 AcpiPmi - ok
21:24:14.0956 3544 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
21:24:16.0846 3544 AdobeARMservice - ok
21:24:16.0885 3544 [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:24:16.0987 3544 AdobeFlashPlayerUpdateSvc - ok
21:24:17.0019 3544 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
21:24:17.0066 3544 adp94xx - ok
21:24:17.0101 3544 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
21:24:17.0170 3544 adpahci - ok
21:24:17.0203 3544 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
21:24:17.0238 3544 adpu320 - ok
21:24:17.0287 3544 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:24:17.0340 3544 AeLookupSvc - ok
21:24:17.0425 3544 [ A6CE73469591554279DA63BE715DBC93 ] AERTFilters C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
21:24:17.0560 3544 AERTFilters - ok
21:24:17.0606 3544 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
21:24:17.0662 3544 AFD - ok
21:24:17.0717 3544 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
21:24:17.0738 3544 agp440 - ok
21:24:17.0773 3544 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
21:24:17.0798 3544 aic78xx - ok
21:24:17.0829 3544 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
21:24:17.0896 3544 ALG - ok
21:24:17.0920 3544 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
21:24:17.0952 3544 aliide - ok
21:24:17.0978 3544 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
21:24:18.0024 3544 amdagp - ok
21:24:18.0043 3544 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
21:24:18.0064 3544 amdide - ok
21:24:18.0094 3544 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
21:24:18.0189 3544 AmdK8 - ok
21:24:18.0220 3544 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
21:24:18.0261 3544 AmdPPM - ok
21:24:18.0294 3544 [ E7F4D42D8076EC60E21715CD11743A0D ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:24:18.0318 3544 amdsata - ok
21:24:18.0352 3544 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
21:24:18.0393 3544 amdsbs - ok
21:24:18.0417 3544 [ 146459D2B08BFDCBFA856D9947043C81 ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:24:18.0439 3544 amdxata - ok
21:24:18.0478 3544 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
21:24:18.0647 3544 AppID - ok
21:24:18.0678 3544 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:24:18.0761 3544 AppIDSvc - ok
21:24:18.0806 3544 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll
21:24:18.0859 3544 Appinfo - ok
21:24:18.0879 3544 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
21:24:18.0927 3544 AppMgmt - ok
21:24:18.0946 3544 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
21:24:18.0969 3544 arc - ok
21:24:18.0989 3544 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
21:24:19.0029 3544 arcsas - ok
21:24:19.0057 3544 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:24:19.0270 3544 AsyncMac - ok
21:24:19.0308 3544 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
21:24:19.0367 3544 atapi - ok
21:24:19.0371 3544 AthBTPort - ok
21:24:19.0475 3544 [ E573045DFBEAD298A8DFCD11CAC71B93 ] athr C:\Windows\system32\DRIVERS\athr.sys
21:24:19.0713 3544 athr - ok
21:24:19.0785 3544 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:24:19.0879 3544 AudioEndpointBuilder - ok
21:24:19.0911 3544 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
21:24:19.0961 3544 Audiosrv - ok
21:24:20.0003 3544 [ F3D3B0AFFD227AA2BFC80C1A4536BAA0 ] avc3 C:\Windows\system32\DRIVERS\avc3.sys
21:24:20.0305 3544 avc3 - ok
21:24:20.0350 3544 [ 7F9B99B564E7C9FBB6729ED95B5BBB24 ] avchv C:\Windows\system32\DRIVERS\avchv.sys
21:24:20.0469 3544 avchv - ok
21:24:20.0495 3544 [ C7BE750843A8A39167187FD28634A25E ] avckf C:\Windows\system32\DRIVERS\avckf.sys
21:24:20.0673 3544 avckf - ok
21:24:20.0682 3544 AVFSFilter - ok
21:24:20.0714 3544 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:24:20.0809 3544 AxInstSV - ok
21:24:20.0852 3544 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
21:24:20.0898 3544 b06bdrv - ok
21:24:20.0931 3544 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
21:24:20.0996 3544 b57nd60x - ok
21:24:21.0114 3544 [ 0FB5160737E1027936425C1E5FF2AEF9 ] BdDesktopParental C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe
21:24:21.0230 3544 BdDesktopParental - ok
21:24:21.0294 3544 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
21:24:21.0358 3544 BDESVC - ok
21:24:21.0453 3544 [ 2C8F82DC54215B2FE064EFF996F39D9B ] BdfNdisf c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys
21:24:21.0577 3544 BdfNdisf - ok
21:24:21.0615 3544 [ 2F66C9DF34134419928BAC00E21E2679 ] bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys
21:24:21.0839 3544 bdfwfpf - ok
21:24:21.0871 3544 [ B6CBFC9D825BB2D955620CD4D8EF07F9 ] BDSandBox C:\Windows\system32\drivers\bdsandbox.sys
21:24:21.0986 3544 BDSandBox - ok
21:24:22.0071 3544 [ A7478F77584F8DB6AD74B2BBE1144886 ] bdselfpr C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys
21:24:22.0295 3544 bdselfpr - ok
21:24:22.0340 3544 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
21:24:22.0399 3544 Beep - ok
21:24:22.0483 3544 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
21:24:22.0556 3544 BFE - ok
21:24:22.0616 3544 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
21:24:22.0683 3544 BITS - ok
21:24:22.0715 3544 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
21:24:22.0794 3544 blbdrive - ok
21:24:23.0151 3544 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:24:23.0353 3544 Bonjour Service - ok
21:24:23.0401 3544 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:24:23.0442 3544 bowser - ok
21:24:23.0483 3544 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:24:23.0559 3544 BrFiltLo - ok
21:24:23.0584 3544 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:24:23.0628 3544 BrFiltUp - ok
21:24:23.0665 3544 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
21:24:23.0708 3544 Browser - ok
21:24:23.0747 3544 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
21:24:23.0821 3544 Brserid - ok
21:24:23.0842 3544 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
21:24:23.0869 3544 BrSerWdm - ok
21:24:23.0893 3544 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
21:24:23.0936 3544 BrUsbMdm - ok
21:24:23.0967 3544 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
21:24:24.0001 3544 BrUsbSer - ok
21:24:24.0007 3544 BTATH_A2DP - ok
21:24:24.0016 3544 BTATH_BUS - ok
21:24:24.0028 3544 BTATH_HCRP - ok
21:24:24.0039 3544 BTATH_LWFLT - ok
21:24:24.0049 3544 BTATH_RCP - ok
21:24:24.0117 3544 [ C840DFF077AA30FF64DEF169CBB49164 ] BtFilter C:\Windows\system32\DRIVERS\btfilter.sys
21:24:24.0197 3544 BtFilter - ok
21:24:24.0230 3544 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
21:24:24.0294 3544 BthEnum - ok
21:24:24.0308 3544 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
21:24:24.0335 3544 BTHMODEM - ok
21:24:24.0406 3544 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
21:24:24.0434 3544 BthPan - ok
21:24:24.0481 3544 [ C2FBF6D271D9A94D839C416BF186EAD9 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
21:24:24.0526 3544 BTHPORT - ok
21:24:24.0579 3544 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
21:24:24.0657 3544 bthserv - ok
21:24:24.0685 3544 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
21:24:24.0724 3544 BTHUSB - ok
21:24:24.0748 3544 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:24:24.0823 3544 cdfs - ok
21:24:24.0852 3544 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:24:24.0900 3544 cdrom - ok
21:24:24.0943 3544 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
21:24:25.0001 3544 CertPropSvc - ok
21:24:25.0029 3544 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
21:24:25.0083 3544 circlass - ok
21:24:25.0128 3544 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
21:24:25.0171 3544 CLFS - ok
21:24:25.0237 3544 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:24:25.0258 3544 clr_optimization_v2.0.50727_32 - ok
21:24:25.0297 3544 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:24:25.0319 3544 clr_optimization_v4.0.30319_32 - ok
21:24:25.0341 3544 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
21:24:25.0389 3544 CmBatt - ok
21:24:25.0445 3544 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:24:25.0465 3544 cmdide - ok
21:24:25.0530 3544 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
21:24:25.0597 3544 CNG - ok
21:24:25.0631 3544 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
21:24:25.0657 3544 Compbatt - ok
21:24:25.0700 3544 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
21:24:25.0727 3544 CompositeBus - ok
21:24:25.0731 3544 COMSysApp - ok
21:24:25.0767 3544 [ 86E4082CF6991814E03FAB6DEA22C225 ] cphs C:\Windows\system32\IntelCpHeciSvc.exe
21:24:25.0861 3544 cphs - ok
21:24:25.0913 3544 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
21:24:25.0934 3544 crcdisk - ok
21:24:25.0961 3544 [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:24:25.0989 3544 CryptSvc - ok
21:24:26.0039 3544 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
21:24:26.0105 3544 CSC - ok
21:24:26.0153 3544 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
21:24:26.0224 3544 CscService - ok
21:24:26.0266 3544 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
21:24:26.0328 3544 DcomLaunch - ok
21:24:26.0365 3544 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
21:24:26.0430 3544 defragsvc - ok
21:24:26.0462 3544 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:24:26.0530 3544 DfsC - ok
21:24:26.0555 3544 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
21:24:26.0639 3544 Dhcp - ok
21:24:26.0676 3544 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
21:24:26.0742 3544 discache - ok
21:24:26.0765 3544 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
21:24:26.0788 3544 Disk - ok
21:24:26.0893 3544 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:24:26.0930 3544 Dnscache - ok
21:24:26.0954 3544 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
21:24:27.0017 3544 dot3svc - ok
21:24:27.0051 3544 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
21:24:27.0163 3544 DPS - ok
21:24:27.0204 3544 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:24:27.0261 3544 drmkaud - ok
21:24:27.0300 3544 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:24:27.0342 3544 DXGKrnl - ok
21:24:27.0383 3544 [ 22EF8965101685ADD128F03A2B03CE16 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
21:24:27.0413 3544 E1G60 - ok
21:24:27.0451 3544 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
21:24:27.0522 3544 EapHost - ok
21:24:27.0881 3544 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
21:24:28.0002 3544 ebdrv - ok
21:24:28.0080 3544 [ A00B61CBF4015C1F04D2D66BCF1A6450 ] ebinfiltr C:\Windows\system32\DRIVERS\ebinfiltr.sys
21:24:28.0141 3544 ebinfiltr - ok
21:24:28.0180 3544 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
21:24:28.0219 3544 EFS - ok
21:24:28.0303 3544 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:24:28.0378 3544 ehRecvr - ok
21:24:28.0418 3544 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
21:24:28.0507 3544 ehSched - ok
21:24:28.0539 3544 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
21:24:28.0574 3544 elxstor - ok
21:24:28.0601 3544 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:24:28.0626 3544 ErrDev - ok
21:24:28.0691 3544 esgiguard - ok
21:24:28.0753 3544 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
21:24:28.0819 3544 EventSystem - ok
21:24:28.0847 3544 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
21:24:28.0908 3544 exfat - ok
21:24:28.0949 3544 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:24:29.0011 3544 fastfat - ok
21:24:29.0051 3544 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
21:24:29.0101 3544 Fax - ok
21:24:29.0115 3544 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:24:29.0154 3544 fdc - ok
21:24:29.0203 3544 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
21:24:29.0263 3544 fdPHost - ok
21:24:29.0287 3544 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
21:24:29.0352 3544 FDResPub - ok
21:24:29.0400 3544 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:24:29.0425 3544 FileInfo - ok
21:24:29.0443 3544 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:24:29.0521 3544 Filetrace - ok
21:24:29.0558 3544 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:24:29.0583 3544 flpydisk - ok
21:24:29.0606 3544 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:24:29.0634 3544 FltMgr - ok
21:24:29.0714 3544 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
21:24:29.0876 3544 FontCache - ok
21:24:29.0965 3544 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:24:29.0985 3544 FontCache3.0.0.0 - ok
21:24:30.0008 3544 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:24:30.0029 3544 FsDepends - ok
21:24:30.0062 3544 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:24:30.0084 3544 Fs_Rec - ok
21:24:30.0125 3544 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:24:30.0155 3544 fvevol - ok
21:24:30.0195 3544 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
21:24:30.0223 3544 gagp30kx - ok
21:24:30.0267 3544 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:24:30.0311 3544 GEARAspiWDM - ok
21:24:30.0370 3544 [ 34F8E8CCE094942282425ED937A9ECF1 ] GeneStor C:\Windows\system32\DRIVERS\GeneStor.sys
21:24:30.0418 3544 GeneStor - ok
21:24:30.0473 3544 [ 01B2BE86C39752A0FFB30ED1FB4A141C ] gfiark C:\Windows\system32\drivers\gfiark.sys
21:24:30.0579 3544 gfiark - ok
21:24:30.0657 3544 [ 483924F92E55A5F9423201EC635E2CED ] gfibto C:\Windows\system32\drivers\gfibto.sys
21:24:30.0718 3544 gfibto - ok
21:24:30.0792 3544 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
21:24:30.0870 3544 gpsvc - ok
21:24:30.0939 3544 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
21:24:31.0141 3544 gupdate - ok
21:24:31.0156 3544 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
21:24:31.0198 3544 gupdatem - ok
21:24:31.0265 3544 [ 479664FA3E1BD3E0B828971A0D500D4E ] gzflt C:\Windows\system32\DRIVERS\gzflt.sys
21:24:31.0446 3544 gzflt - ok
21:24:31.0498 3544 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
21:24:31.0562 3544 hcw85cir - ok
21:24:31.0594 3544 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:24:31.0645 3544 HdAudAddService - ok
21:24:31.0670 3544 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
21:24:31.0723 3544 HDAudBus - ok
21:24:31.0757 3544 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
21:24:31.0795 3544 HidBatt - ok
21:24:31.0816 3544 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
21:24:31.0871 3544 HidBth - ok
21:24:31.0899 3544 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
21:24:31.0944 3544 HidIr - ok
21:24:31.0979 3544 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
21:24:32.0043 3544 hidserv - ok
21:24:32.0085 3544 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:24:32.0125 3544 HidUsb - ok
21:24:32.0168 3544 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:24:32.0289 3544 hkmsvc - ok
21:24:32.0340 3544 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:24:32.0396 3544 HomeGroupListener - ok
21:24:32.0433 3544 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:24:32.0490 3544 HomeGroupProvider - ok
21:24:32.0513 3544 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:24:32.0536 3544 HpSAMD - ok
21:24:32.0563 3544 [ 2BEC76BDCD1BC080210325E7B5094834 ] HPWMISVC C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
21:24:32.0662 3544 HPWMISVC - ok
21:24:32.0719 3544 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:24:32.0773 3544 HTTP - ok
21:24:32.0815 3544 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:24:32.0835 3544 hwpolicy - ok
21:24:32.0884 3544 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
21:24:32.0923 3544 i8042prt - ok
21:24:32.0965 3544 [ DB81F413FA4E3F328CAD7B5D59EF3F21 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
21:24:33.0089 3544 iaStor - ok
21:24:33.0139 3544 [ 902F9086295B54B516B9664327079739 ] iaStorA C:\Windows\system32\DRIVERS\iaStorA.sys
21:24:33.0197 3544 iaStorA - ok
21:24:33.0304 3544 [ 777788D9B63CCEEEF2DB353BA4EDD454 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:24:33.0570 3544 IAStorDataMgrSvc - ok
21:24:33.0592 3544 [ 13F98AAE8E9030C38A9DA7DADE6325A9 ] iaStorF C:\Windows\system32\DRIVERS\iaStorF.sys
21:24:33.0640 3544 iaStorF - ok
21:24:33.0688 3544 [ A3CAE5D281DB4CFF7CFF8233507EE5AD ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:24:33.0720 3544 iaStorV - ok
21:24:33.0797 3544 [ 83FF82FE209E7997067B375DAD6CF23D ] ICCS C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
21:24:33.0849 3544 ICCS - ok
21:24:34.0010 3544 [ 2B0EBB2199D71D79938998252BE8144E ] IconMan_R C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
21:24:34.0271 3544 IconMan_R - ok
21:24:34.0366 3544 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:24:34.0576 3544 idsvc - ok
21:24:34.0706 3544 [ 8CC51204BCE551B90B45E97BE446C48B ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
21:24:34.0906 3544 igfx - ok
21:24:34.0945 3544 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
21:24:34.0969 3544 iirsp - ok
21:24:35.0020 3544 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
21:24:35.0096 3544 IKEEXT - ok
21:24:35.0228 3544 [ BFD7663C508B6D6B20D2C15255EA7096 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
21:24:35.0396 3544 IntcAzAudAddService - ok
21:24:35.0444 3544 [ 6A6E1B319A47FA7AF2AE6B6815AE9854 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
21:24:35.0503 3544 IntcDAud - ok
21:24:35.0621 3544 [ AE2B75CD6C71F5706AD485FD6693CFF7 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
21:24:35.0749 3544 Intel(R) Capability Licensing Service Interface - ok
21:24:35.0778 3544 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
21:24:35.0799 3544 intelide - ok
21:24:35.0853 3544 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:24:35.0896 3544 intelppm - ok
21:24:35.0931 3544 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:24:36.0003 3544 IPBusEnum - ok
21:24:36.0037 3544 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:24:36.0121 3544 IpFilterDriver - ok
21:24:36.0195 3544 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:24:36.0272 3544 iphlpsvc - ok
21:24:36.0324 3544 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
21:24:36.0367 3544 IPMIDRV - ok
21:24:36.0411 3544 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:24:36.0468 3544 IPNAT - ok
21:24:36.0520 3544 [ EF1C51222117B37AFBFF8F4642EA8C62 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
21:24:36.0616 3544 iPod Service - ok
21:24:36.0645 3544 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:24:36.0778 3544 IRENUM - ok
21:24:36.0801 3544 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:24:36.0825 3544 isapnp - ok
21:24:36.0856 3544 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
21:24:36.0887 3544 iScsiPrt - ok
21:24:36.0971 3544 [ 3C4002D339491AF73D663FFC7F6E5ECB ] jhi_service C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
21:24:37.0050 3544 jhi_service - ok
21:24:37.0074 3544 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:24:37.0104 3544 kbdclass - ok
21:24:37.0136 3544 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:24:37.0161 3544 kbdhid - ok
21:24:37.0180 3544 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
21:24:37.0215 3544 KeyIso - ok
21:24:37.0289 3544 [ EA26CB00F83686856F2C79673C00C686 ] kl1 C:\Windows\system32\DRIVERS\kl1.sys
21:24:37.0350 3544 kl1 - ok
21:24:37.0477 3544 [ 654BDF113971B6DFAEA21D5554EBF5F6 ] KLIF C:\Windows\system32\DRIVERS\klif.sys
21:24:37.0587 3544 KLIF - ok
21:24:37.0662 3544 [ 24AEBAD59D1DE8A7CC36E8F09F999362 ] klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys
21:24:37.0731 3544 klkbdflt - ok
21:24:37.0762 3544 [ A58507C2827C3AE1D4CCB2746AAB349F ] klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys
21:24:37.0813 3544 klmouflt - ok
21:24:37.0863 3544 [ B20DB17BC4E54B78EAB16D15B058E75B ] kltdi C:\Windows\system32\DRIVERS\kltdi.sys
21:24:37.0912 3544 kltdi - ok
21:24:37.0975 3544 [ 71A38C123600172511C26BFABD0EF579 ] kneps C:\Windows\system32\DRIVERS\kneps.sys
21:24:38.0010 3544 kneps - ok
21:24:38.0040 3544 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:24:38.0063 3544 KSecDD - ok
21:24:38.0086 3544 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:24:38.0111 3544 KSecPkg - ok
21:24:38.0152 3544 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
21:24:38.0219 3544 KtmRm - ok
21:24:38.0342 3544 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
21:24:38.0421 3544 LanmanServer - ok
21:24:38.0497 3544 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:24:38.0594 3544 LanmanWorkstation - ok
21:24:38.0700 3544 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:24:38.0780 3544 lltdio - ok
21:24:38.0887 3544 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:24:38.0974 3544 lltdsvc - ok
21:24:38.0993 3544 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
21:24:39.0118 3544 lmhosts - ok
21:24:39.0277 3544 [ 4269D44BB47A6DA5D80B11F4C8536458 ] LMS C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:24:39.0451 3544 LMS - ok
21:24:39.0473 3544 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
21:24:39.0495 3544 LSI_FC - ok
21:24:39.0541 3544 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
21:24:39.0609 3544 LSI_SAS - ok
21:24:39.0651 3544 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:24:39.0672 3544 LSI_SAS2 - ok
21:24:39.0689 3544 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:24:39.0713 3544 LSI_SCSI - ok
21:24:39.0730 3544 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
21:24:39.0788 3544 luafv - ok
21:24:39.0794 3544 massfilter - ok
21:24:39.0963 3544 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
21:24:39.0989 3544 MBAMProtector - ok
21:24:40.0134 3544 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
21:24:40.0185 3544 MBAMScheduler - ok
21:24:40.0382 3544 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
21:24:40.0476 3544 MBAMService - ok
21:24:40.0633 3544 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys
21:24:40.0747 3544 MBAMSwissArmy - ok
21:24:40.0786 3544 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:24:40.0852 3544 Mcx2Svc - ok
21:24:40.0910 3544 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
21:24:40.0930 3544 megasas - ok
21:24:40.0988 3544 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
21:24:41.0015 3544 MegaSR - ok
21:24:41.0110 3544 [ 9E0A56C77E9244D2CAAC3811F4B47FCB ] MEI C:\Windows\system32\DRIVERS\HECI.sys
21:24:41.0185 3544 MEI - ok
21:24:41.0285 3544 MEMSWEEP2 - ok
21:24:41.0374 3544 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
21:24:41.0419 3544 MMCSS - ok
21:24:41.0462 3544 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
21:24:41.0517 3544 Modem - ok
21:24:41.0541 3544 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:24:41.0585 3544 monitor - ok
21:24:41.0616 3544 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:24:41.0637 3544 mouclass - ok
21:24:41.0697 3544 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:24:41.0770 3544 mouhid - ok
21:24:41.0841 3544 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:24:41.0864 3544 mountmgr - ok
21:24:41.0965 3544 [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
21:24:42.0026 3544 MozillaMaintenance - ok
21:24:42.0066 3544 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
21:24:42.0089 3544 mpio - ok
21:24:42.0133 3544 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:24:42.0175 3544 mpsdrv - ok
21:24:42.0227 3544 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
21:24:42.0314 3544 MpsSvc - ok
21:24:42.0348 3544 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:24:42.0445 3544 MRxDAV - ok
21:24:42.0487 3544 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:24:42.0578 3544 mrxsmb - ok
21:24:42.0603 3544 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:24:42.0668 3544 mrxsmb10 - ok
21:24:42.0700 3544 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:24:42.0725 3544 mrxsmb20 - ok
21:24:42.0769 3544 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
21:24:42.0789 3544 msahci - ok
21:24:42.0868 3544 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:24:42.0892 3544 msdsm - ok
21:24:42.0930 3544 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
21:24:42.0972 3544 MSDTC - ok
21:24:43.0025 3544 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:24:43.0069 3544 Msfs - ok
21:24:43.0105 3544 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:24:43.0171 3544 mshidkmdf - ok
21:24:43.0236 3544 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:24:43.0257 3544 msisadrv - ok
21:24:43.0304 3544 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:24:43.0383 3544 MSiSCSI - ok
21:24:43.0390 3544 msiserver - ok
21:24:43.0446 3544 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:24:43.0585 3544 MSKSSRV - ok
21:24:43.0642 3544 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:24:43.0744 3544 MSPCLOCK - ok
21:24:43.0790 3544 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:24:43.0833 3544 MSPQM - ok
21:24:43.0887 3544 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:24:43.0911 3544 MsRPC - ok
21:24:43.0952 3544 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
21:24:43.0973 3544 mssmbios - ok
21:24:44.0010 3544 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:24:44.0053 3544 MSTEE - ok
21:24:44.0083 3544 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
21:24:44.0147 3544 MTConfig - ok
21:24:44.0172 3544 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
21:24:44.0195 3544 Mup - ok
21:24:44.0262 3544 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
21:24:44.0344 3544 napagent - ok
21:24:44.0401 3544 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:24:44.0489 3544 NativeWifiP - ok
21:24:44.0572 3544 [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:24:44.0641 3544 NDIS - ok
21:24:44.0669 3544 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:24:44.0713 3544 NdisCap - ok
21:24:44.0740 3544 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:24:44.0825 3544 NdisTapi - ok
21:24:44.0857 3544 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:24:44.0946 3544 Ndisuio - ok
21:24:44.0992 3544 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:24:45.0060 3544 NdisWan - ok
21:24:45.0129 3544 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:24:45.0210 3544 NDProxy - ok
21:24:45.0248 3544 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:24:45.0303 3544 NetBIOS - ok
21:24:45.0350 3544 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:24:45.0436 3544 NetBT - ok
21:24:45.0468 3544 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
21:24:45.0547 3544 Netlogon - ok
21:24:45.0610 3544 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
21:24:45.0706 3544 Netman - ok
21:24:45.0745 3544 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
21:24:45.0846 3544 netprofm - ok
21:24:45.0879 3544 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:24:45.0900 3544 NetTcpPortSharing - ok
21:24:46.0000 3544 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
21:24:46.0021 3544 nfrd960 - ok
21:24:46.0074 3544 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:24:46.0154 3544 NlaSvc - ok
21:24:46.0191 3544 [ B48DC6ABCD3AEFF8618350CCBDC6B09A ] npf C:\Windows\system32\drivers\npf.sys
21:24:46.0219 3544 npf - ok
21:24:46.0248 3544 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:24:46.0304 3544 Npfs - ok
21:24:46.0339 3544 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
21:24:46.0408 3544 nsi - ok
21:24:46.0430 3544 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:24:46.0481 3544 nsiproxy - ok
21:24:46.0558 3544 [ 33C3093D09017CFE2E219F2472BFF6EB ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:24:46.0682 3544 Ntfs - ok
21:24:46.0728 3544 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
21:24:46.0871 3544 Null - ok
21:24:46.0916 3544 [ AF2EEC9580C1D32FB7EAF105D9784061 ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:24:46.0939 3544 nvraid - ok
21:24:46.0970 3544 [ 9283C58EBAA2618F93482EB5DABCEC82 ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:24:47.0031 3544 nvstor - ok
21:24:47.0075 3544 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:24:47.0097 3544 nv_agp - ok
21:24:47.0142 3544 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
21:24:47.0202 3544 ohci1394 - ok
21:24:47.0240 3544 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:24:47.0296 3544 p2pimsvc - ok
21:24:47.0458 3544 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
21:24:47.0487 3544 p2psvc - ok
21:24:47.0597 3544 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:24:47.0621 3544 Parport - ok
21:24:47.0661 3544 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:24:47.0716 3544 partmgr - ok
21:24:47.0755 3544 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
21:24:47.0836 3544 Parvdm - ok
21:24:47.0892 3544 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:24:47.0940 3544 PcaSvc - ok
21:24:47.0964 3544 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
21:24:47.0987 3544 pci - ok
21:24:48.0033 3544 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
21:24:48.0053 3544 pciide - ok
21:24:48.0091 3544 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
21:24:48.0118 3544 pcmcia - ok
21:24:48.0127 3544 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
21:24:48.0149 3544 pcw - ok
21:24:48.0192 3544 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:24:48.0249 3544 PEAUTH - ok
21:24:48.0355 3544 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
21:24:48.0414 3544 PeerDistSvc - ok
21:24:48.0502 3544 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
21:24:48.0568 3544 pla - ok
21:24:48.0608 3544 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:24:48.0636 3544 PlugPlay - ok
21:24:48.0672 3544 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:24:48.0705 3544 PNRPAutoReg - ok
21:24:48.0760 3544 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:24:48.0787 3544 PNRPsvc - ok
21:24:48.0825 3544 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:24:48.0905 3544 PolicyAgent - ok
21:24:48.0943 3544 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
21:24:48.0987 3544 Power - ok
21:24:49.0020 3544 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:24:49.0081 3544 PptpMiniport - ok
21:24:49.0098 3544 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
21:24:49.0122 3544 Processor - ok
21:24:49.0181 3544 [ 43CA4CCC22D52FB58E8988F0198851D0 ] ProfSvc C:\Windows\system32\profsvc.dll
21:24:49.0227 3544 ProfSvc - ok
21:24:49.0245 3544 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:24:49.0279 3544 ProtectedStorage - ok
21:24:49.0306 3544 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:24:49.0351 3544 Psched - ok
21:24:49.0391 3544 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
21:24:49.0470 3544 ql2300 - ok
21:24:49.0502 3544 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
21:24:49.0525 3544 ql40xx - ok
21:24:49.0559 3544 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
21:24:49.0590 3544 QWAVE - ok
21:24:49.0609 3544 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:24:49.0648 3544 QWAVEdrv - ok
21:24:49.0683 3544 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:24:49.0745 3544 RasAcd - ok
21:24:49.0794 3544 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
21:24:49.0848 3544 RasAgileVpn - ok
21:24:49.0887 3544 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
21:24:49.0931 3544 RasAuto - ok
21:24:49.0956 3544 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:24:50.0021 3544 Rasl2tp - ok
21:24:50.0068 3544 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
21:24:50.0150 3544 RasMan - ok
21:24:50.0172 3544 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:24:50.0217 3544 RasPppoe - ok
21:24:50.0254 3544 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:24:50.0386 3544 RasSstp - ok
21:24:50.0435 3544 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:24:50.0497 3544 rdbss - ok
21:24:50.0514 3544 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
21:24:50.0599 3544 rdpbus - ok
21:24:50.0653 3544 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:24:50.0766 3544 RDPCDD - ok
21:24:50.0808 3544 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
21:24:50.0843 3544 RDPDR - ok
21:24:50.0852 3544 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:24:50.0893 3544 RDPENCDD - ok
21:24:51.0050 3544 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
21:24:51.0218 3544 RDPREFMP - ok
21:24:51.0258 3544 [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:24:51.0282 3544 RdpVideoMiniport - ok
21:24:51.0317 3544 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:24:51.0379 3544 RDPWD - ok
21:24:51.0420 3544 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:24:51.0460 3544 rdyboost - ok
21:24:51.0504 3544 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
21:24:51.0546 3544 RemoteAccess - ok
21:24:51.0601 3544 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:24:51.0650 3544 RemoteRegistry - ok
21:24:51.0676 3544 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
21:24:51.0753 3544 RFCOMM - ok
21:24:51.0827 3544 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:24:51.0905 3544 RpcEptMapper - ok
21:24:51.0935 3544 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
21:24:51.0984 3544 RpcLocator - ok
21:24:52.0020 3544 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
21:24:52.0068 3544 RpcSs - ok
21:24:52.0113 3544 [ D600D0C37E77CBAF0FDC409FAD6FFDCB ] RSPCIESTOR C:\Windows\system32\DRIVERS\RtsPStor.sys
21:24:52.0182 3544 RSPCIESTOR - ok
21:24:52.0208 3544 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:24:52.0370 3544 rspndr - ok
21:24:52.0455 3544 [ D255C9B800D24380B0698AA03C6C4E80 ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
21:24:52.0523 3544 RtkAudioService - ok
21:24:52.0574 3544 [ 0085ADFE591291B219BADF2D3EBD0BEB ] RTL2832UBDA C:\Windows\system32\drivers\RTL2832UBDA.sys
21:24:52.0649 3544 RTL2832UBDA - ok
21:24:52.0738 3544 [ 653347DBF9CE61B104F237D7B2B33CCF ] RTL2832UUSB C:\Windows\system32\Drivers\RTL2832UUSB.sys
21:24:52.0767 3544 RTL2832UUSB - ok
21:24:52.0790 3544 [ 13AB7EC17C94ACFE93F96EC96BD6B05D ] RTL2832U_IRHID C:\Windows\system32\DRIVERS\RTL2832U_IRHID.sys
21:24:52.0835 3544 RTL2832U_IRHID - ok
21:24:52.0889 3544 [ 9AA3A8EBB12201D24211AB003612BA04 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
21:24:52.0937 3544 RTL8167 - ok
21:24:52.0985 3544 [ 9EA88492B1DAB90DCE43A6F2C0E133BD ] RTSTOR C:\Windows\system32\drivers\RTSTOR.SYS
21:24:53.0151 3544 RTSTOR - ok
21:24:53.0198 3544 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
21:24:53.0225 3544 s3cap - ok
21:24:53.0267 3544 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
21:24:53.0289 3544 SamSs - ok
21:24:53.0325 3544 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:24:53.0348 3544 sbp2port - ok
21:24:53.0383 3544 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:24:53.0426 3544 SCardSvr - ok
21:24:53.0468 3544 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:24:53.0521 3544 scfilter - ok
21:24:53.0567 3544 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
21:24:53.0635 3544 Schedule - ok
21:24:53.0674 3544 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
21:24:53.0717 3544 SCPolicySvc - ok
21:24:53.0747 3544 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:24:53.0783 3544 SDRSVC - ok
21:24:53.0909 3544 [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
21:24:54.0093 3544 SDUpdateService - ok
21:24:54.0186 3544 [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
21:24:54.0252 3544 SDWSCService - ok
21:24:54.0287 3544 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:24:54.0355 3544 secdrv - ok
21:24:54.0394 3544 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
21:24:54.0439 3544 seclogon - ok
21:24:54.0450 3544 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
21:24:54.0496 3544 SENS - ok
21:24:54.0520 3544 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:24:54.0559 3544 SensrSvc - ok
21:24:54.0579 3544 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
21:24:54.0603 3544 Serenum - ok
21:24:54.0635 3544 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
21:24:54.0674 3544 Serial - ok
21:24:54.0755 3544 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
21:24:54.0815 3544 sermouse - ok
21:24:54.0870 3544 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
21:24:54.0929 3544 SessionEnv - ok
21:24:54.0989 3544 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:24:55.0026 3544 sffdisk - ok
21:24:55.0044 3544 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:24:55.0087 3544 sffp_mmc - ok
21:24:55.0111 3544 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:24:55.0151 3544 sffp_sd - ok
21:24:55.0191 3544 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
21:24:55.0244 3544 sfloppy - ok
21:24:55.0407 3544 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:24:55.0482 3544 SharedAccess - ok
21:24:55.0591 3544 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:24:55.0787 3544 ShellHWDetection - ok
21:24:55.0837 3544 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
21:24:55.0869 3544 sisagp - ok
21:24:55.0891 3544 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:24:55.0915 3544 SiSRaid2 - ok
21:24:55.0940 3544 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
21:24:55.0963 3544 SiSRaid4 - ok
21:24:55.0998 3544 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:24:56.0062 3544 Smb - ok
21:24:56.0139 3544 [ 8E6E91BEB9545D412470FA2035373BD6 ] SmbDrv C:\Windows\system32\DRIVERS\Smb_driver.sys
21:24:56.0195 3544 SmbDrv - ok
21:24:56.0268 3544 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:24:56.0341 3544 SNMPTRAP - ok
21:24:56.0433 3544 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
21:24:56.0493 3544 spldr - ok
21:24:56.0730 3544 [ 866A43013535DC8587C258E43579C764 ] Spooler C:\Windows\System32\spoolsv.exe
21:24:56.0846 3544 Spooler - ok
21:24:57.0192 3544 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
21:24:57.0303 3544 sppsvc - ok
21:24:57.0361 3544 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
21:24:57.0412 3544 sppuinotify - ok
21:24:57.0449 3544 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
21:24:57.0497 3544 srv - ok
21:24:57.0561 3544 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:24:57.0604 3544 srv2 - ok
21:24:57.0628 3544 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:24:57.0664 3544 srvnet - ok
21:24:57.0722 3544 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:24:57.0787 3544 SSDPSRV - ok
21:24:57.0811 3544 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:24:57.0872 3544 SstpSvc - ok
21:24:57.0901 3544 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
21:24:57.0922 3544 stexstor - ok
21:24:57.0981 3544 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
21:24:58.0048 3544 StiSvc - ok
21:24:58.0073 3544 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
21:24:58.0096 3544 storflt - ok
21:24:58.0145 3544 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
21:24:58.0167 3544 storvsc - ok
21:24:58.0192 3544 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
21:24:58.0213 3544 swenum - ok
21:24:58.0296 3544 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
21:24:58.0345 3544 swprv - ok
21:24:58.0357 3544 Synth3dVsc - ok
21:24:58.0429 3544 [ 6DD49E1A5FA0F01824652F1A0A8866FB ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
21:24:58.0484 3544 SynTP - ok
21:24:58.0554 3544 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
21:24:58.0651 3544 SysMain - ok
21:24:58.0694 3544 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:24:58.0734 3544 TabletInputService - ok
21:24:58.0819 3544 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
21:24:58.0864 3544 TapiSrv - ok
21:24:58.0919 3544 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
21:24:58.0984 3544 TBS - ok
21:24:59.0062 3544 [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:24:59.0147 3544 Tcpip - ok
21:24:59.0181 3544 [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:24:59.0250 3544 TCPIP6 - ok
21:24:59.0297 3544 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:24:59.0352 3544 tcpipreg - ok
21:24:59.0403 3544 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:24:59.0440 3544 TDPIPE - ok
21:24:59.0473 3544 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:24:59.0509 3544 TDTCP - ok
21:24:59.0555 3544 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:24:59.0597 3544 tdx - ok
21:24:59.0613 3544 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
21:24:59.0634 3544 TermDD - ok
21:24:59.0688 3544 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
21:24:59.0757 3544 TermService - ok
21:24:59.0796 3544 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
21:24:59.0838 3544 Themes - ok
21:24:59.0872 3544 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
21:24:59.0917 3544 THREADORDER - ok
21:24:59.0942 3544 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
21:25:00.0000 3544 TrkWks - ok
21:25:00.0085 3544 [ F2AEE22231046CAD8D2F94D2C0F9BEFB ] trufos C:\Windows\system32\DRIVERS\trufos.sys
21:25:00.0126 3544 trufos - ok
21:25:00.0264 3544 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:25:00.0366 3544 TrustedInstaller - ok
21:25:00.0394 3544 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:25:00.0453 3544 tssecsrv - ok
21:25:00.0517 3544 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:25:00.0540 3544 TsUsbFlt - ok
21:25:00.0552 3544 tsusbhub - ok
21:25:00.0732 3544 [ FC740E4FF236B72CA59B8F762D30C7F3 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
21:25:00.0842 3544 TuneUp.UtilitiesSvc - ok
21:25:00.0935 3544 [ 94C4CD2D19B8C4137A46261F229FEC24 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys
21:25:00.0963 3544 TuneUpUtilitiesDrv - ok
21:25:01.0004 3544 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:25:01.0064 3544 tunnel - ok
21:25:01.0114 3544 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
21:25:01.0135 3544 uagp35 - ok
21:25:01.0180 3544 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:25:01.0239 3544 udfs - ok
21:25:01.0299 3544 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:25:01.0333 3544 UI0Detect - ok
21:25:01.0384 3544 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:25:01.0406 3544 uliagpkx - ok
21:25:01.0449 3544 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\DRIVERS\umbus.sys
21:25:01.0490 3544 umbus - ok
21:25:01.0522 3544 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
21:25:01.0546 3544 UmPass - ok
21:25:01.0611 3544 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
21:25:01.0646 3544 UmRdpService - ok
21:25:01.0737 3544 [ DBE2E6388379D5CC78099650541E9566 ] UNS C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
21:25:01.0823 3544 UNS - ok
21:25:01.0903 3544 [ 32BE9DFF9A8DFE2EACA30E0A63C523AE ] UPDATESRV C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe
21:25:01.0967 3544 UPDATESRV - ok
21:25:02.0031 3544 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
21:25:02.0096 3544 upnphost - ok
21:25:02.0148 3544 [ 7E72E7D7E0757D59481D530FD2B0BFAE ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:25:02.0172 3544 usbccgp - ok
21:25:02.0199 3544 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:25:02.0228 3544 usbcir - ok
21:25:02.0263 3544 [ CFBCE999C057D78979A181C9C60F208E ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:25:02.0304 3544 usbehci - ok
21:25:02.0332 3544 [ 9D22AAD9AC6A07C691A1113E5F860868 ] usbhub C:\Windows\system32\drivers\usbhub.sys
21:25:02.0380 3544 usbhub - ok
21:25:02.0414 3544 [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci C:\Windows\system32\drivers\usbohci.sys
21:25:02.0469 3544 usbohci - ok
21:25:02.0512 3544 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
21:25:02.0559 3544 usbprint - ok
21:25:02.0613 3544 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
21:25:02.0640 3544 usbscan - ok
21:25:02.0657 3544 [ BF63EBFC6979FEFB2BC03DF7989A0C1A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:25:02.0682 3544 USBSTOR - ok
21:25:02.0706 3544 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
21:25:02.0749 3544 usbuhci - ok
21:25:02.0783 3544 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
21:25:02.0842 3544 usbvideo - ok
21:25:02.0908 3544 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
21:25:02.0962 3544 UxSms - ok
21:25:03.0024 3544 [ 57324E62405EC114C6C1A6F1C9704E8F ] UxTuneUp C:\Windows\System32\uxtuneup.dll
21:25:03.0054 3544 UxTuneUp - ok
21:25:03.0077 3544 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
21:25:03.0111 3544 VaultSvc - ok
21:25:03.0158 3544 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:25:03.0253 3544 vdrvroot - ok
21:25:03.0393 3544 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
21:25:03.0526 3544 vds - ok
21:25:03.0619 3544 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:25:03.0645 3544 vga - ok
21:25:03.0670 3544 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
21:25:03.0715 3544 VgaSave - ok
21:25:03.0725 3544 VGPU - ok
21:25:03.0781 3544 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
21:25:03.0805 3544 vhdmp - ok
21:25:03.0824 3544 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
21:25:03.0847 3544 viaagp - ok
21:25:03.0890 3544 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
21:25:03.0914 3544 ViaC7 - ok
21:25:03.0959 3544 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
21:25:03.0979 3544 viaide - ok
21:25:04.0027 3544 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
21:25:04.0054 3544 vmbus - ok
21:25:04.0098 3544 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
21:25:04.0163 3544 VMBusHID - ok
21:25:04.0195 3544 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:25:04.0225 3544 volmgr - ok
21:25:04.0265 3544 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:25:04.0291 3544 volmgrx - ok
21:25:04.0320 3544 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:25:04.0348 3544 volsnap - ok
21:25:04.0377 3544 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
21:25:04.0401 3544 vsmraid - ok
21:25:04.0492 3544 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
21:25:04.0568 3544 VSS - ok
21:25:04.0727 3544 [ 3951CAE99EDAF72193EA0F4C8A857BB0 ] VSSERV C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
21:25:04.0859 3544 VSSERV - ok
21:25:04.0878 3544 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
21:25:04.0923 3544 vwifibus - ok
21:25:04.0937 3544 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
21:25:04.0983 3544 vwififlt - ok
21:25:05.0020 3544 [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
21:25:05.0047 3544 vwifimp - ok
21:25:05.0252 3544 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
21:25:05.0427 3544 W32Time - ok
21:25:05.0477 3544 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
21:25:05.0512 3544 WacomPen - ok
21:25:05.0605 3544 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
21:25:05.0647 3544 WANARP - ok
21:25:05.0671 3544 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:25:05.0712 3544 Wanarpv6 - ok
21:25:05.0773 3544 WatAdminSvc - ok
21:25:05.0863 3544 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
21:25:05.0923 3544 wbengine - ok
21:25:05.0973 3544 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:25:06.0049 3544 WbioSrvc - ok
21:25:06.0088 3544 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:25:06.0149 3544 wcncsvc - ok
21:25:06.0195 3544 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:25:06.0224 3544 WcsPlugInService - ok
21:25:06.0295 3544 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
21:25:06.0332 3544 Wd - ok
21:25:06.0437 3544 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:25:06.0470 3544 Wdf01000 - ok
21:25:06.0496 3544 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:25:06.0595 3544 WdiServiceHost - ok
21:25:06.0619 3544 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:25:06.0647 3544 WdiSystemHost - ok
21:25:06.0697 3544 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
21:25:06.0729 3544 WebClient - ok
21:25:06.0787 3544 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:25:06.0834 3544 Wecsvc - ok
21:25:06.0858 3544 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:25:06.0915 3544 wercplsupport - ok
21:25:06.0936 3544 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
21:25:06.0982 3544 WerSvc - ok
21:25:07.0002 3544 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
21:25:07.0064 3544 WfpLwf - ok
21:25:07.0112 3544 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:25:07.0132 3544 WIMMount - ok
21:25:07.0240 3544 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
21:25:07.0300 3544 WinDefend - ok
21:25:07.0320 3544 WinHttpAutoProxySvc - ok
21:25:07.0417 3544 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:25:07.0479 3544 Winmgmt - ok
21:25:07.0558 3544 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
21:25:07.0631 3544 WinRM - ok
21:25:07.0702 3544 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
21:25:07.0729 3544 WinUsb - ok
21:25:07.0806 3544 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
21:25:07.0847 3544 Wlansvc - ok
21:25:07.0884 3544 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
21:25:07.0930 3544 WmiAcpi - ok
21:25:07.0983 3544 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:25:08.0038 3544 wmiApSrv - ok
21:25:08.0117 3544 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
21:25:08.0192 3544 WMPNetworkSvc - ok
21:25:08.0226 3544 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:25:08.0250 3544 WPCSvc - ok
21:25:08.0294 3544 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:25:08.0350 3544 WPDBusEnum - ok
21:25:08.0386 3544 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:25:08.0456 3544 ws2ifsl - ok
21:25:08.0502 3544 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
21:25:08.0548 3544 wscsvc - ok
21:25:08.0562 3544 WSearch - ok
21:25:08.0885 3544 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
21:25:08.0950 3544 wuauserv - ok
21:25:08.0994 3544 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:25:09.0062 3544 WudfPf - ok
21:25:09.0096 3544 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:25:09.0164 3544 WUDFRd - ok
21:25:09.0224 3544 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:25:09.0393 3544 wudfsvc - ok
21:25:09.0554 3544 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
21:25:09.0599 3544 WwanSvc - ok
21:25:09.0617 3544 ZTEusbmdm6k - ok
21:25:09.0632 3544 ZTEusbnmea - ok
21:25:09.0648 3544 ZTEusbser6k - ok
21:25:09.0691 3544 ================ Scan global ===============================
21:25:09.0772 3544 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
21:25:09.0813 3544 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
21:25:09.0825 3544 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
21:25:09.0862 3544 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
21:25:09.0882 3544 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
21:25:09.0887 3544 [Global] - ok
21:25:09.0890 3544 ================ Scan MBR ==================================
21:25:09.0906 3544 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:25:10.0697 3544 \Device\Harddisk0\DR0 - ok
21:25:10.0698 3544 ================ Scan VBR ==================================
21:25:10.0737 3544 [ 54BA4C37D203C2B279E01A9F91269268 ] \Device\Harddisk0\DR0\Partition1
21:25:10.0756 3544 \Device\Harddisk0\DR0\Partition1 - ok
21:25:10.0775 3544 [ EC5907C4C3860910EB67263B34C7422C ] \Device\Harddisk0\DR0\Partition2
21:25:10.0777 3544 \Device\Harddisk0\DR0\Partition2 - ok
21:25:10.0778 3544 ============================================================
21:25:10.0778 3544 Scan finished
21:25:10.0778 3544 ============================================================
21:25:10.0793 3128 Detected object count: 0
21:25:10.0793 3128 Actual detected object count: 0
|
|
04.03.2013, 21:27
| #14 |
| /// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt Sehr gut. Scan mit Combofix
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
05.03.2013, 13:58
| #15 |
| | Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter ComboFix 13-03-04.01 - Info 05.03.2013 7:03.1.2 - x86
ausgeführt von:: c:\users\Info\Desktop\ComboFix.exe
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\337
c:\program files\Common Files\337\libcef\1.963.439\icudt.dll
c:\program files\Common Files\337\libcef\1.963.439\libcef.dll
c:\program files\Common Files\337\libcef\1.963.439\locales\en-US.pak
c:\program files\KeyDownload-Addon\KeYDownload.dll
c:\programdata\1359390656.bdinstall.bin
c:\programdata\1362068248.bdinstall.bin
c:\programdata\1362069055.bdinstall.bin
c:\programdata\1362069438.bdinstall.bin
c:\programdata\1362069898.bdinstall.bin
c:\programdata\1362071103.bdinstall.bin
c:\programdata\1362227762.3824.bin
c:\programdata\1362227762.5144.bin
c:\programdata\1362227762.5612.bin
c:\programdata\1362227762.5916.bin
c:\programdata\1362227762.bdinstall.bin
c:\programdata\1362228095.bdinstall.bin
c:\windows\system32\SET1641.tmp
c:\windows\system32\SET800.tmp
c:\windows\system32\SET8DB.tmp
c:\windows\system32\SET9D6.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-02-05 bis 2013-03-05 ))))))))))))))))))))))))))))))
.
.
2013-03-05 06:11 . 2013-03-05 06:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-04 17:28 . 2013-03-04 17:28 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-03-04 17:28 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-04 17:20 . 2013-03-04 17:20 -------- d-----w- c:\users\Info\AppData\Roaming\Malwarebytes
2013-03-04 17:19 . 2013-03-04 17:19 -------- d-----w- c:\programdata\Malwarebytes
2013-03-04 13:00 . 2013-03-04 12:59 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-03-02 17:53 . 2013-03-02 17:53 -------- d-----w- c:\users\Info\AppData\Roaming\Petrax Software
2013-03-02 17:53 . 2013-03-02 17:53 -------- d-----w- c:\program files\Petrax Software
2013-03-02 17:01 . 2013-03-02 17:01 -------- d-----w- c:\users\Info\AppData\Roaming\iPumper
2013-03-02 14:50 . 2013-03-02 14:50 -------- d-----w- c:\program files\DLLSuite
2013-02-28 18:00 . 2012-08-13 17:24 75096 ----a-w- c:\windows\system32\drivers\klflt.sys
2013-02-28 17:38 . 2013-02-28 17:38 72704 ----a-w- c:\windows\system32\drivers\bdvedisk.sys
2013-02-28 17:07 . 2012-11-12 16:11 66392 ------w- c:\windows\system32\drivers\bdsandbox.sys
2013-02-28 17:07 . 2012-07-06 13:13 77192 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys
2013-02-28 17:07 . 2013-01-11 19:29 482928 ----a-w- c:\windows\system32\drivers\avckf.sys
2013-02-28 17:07 . 2013-01-11 19:29 625128 ----a-w- c:\windows\system32\drivers\avc3.sys
2013-02-28 17:07 . 2013-03-02 12:41 -------- d-----w- c:\users\Info\AppData\Roaming\Bitdefender
2013-02-28 17:07 . 2013-02-28 17:08 -------- d-----w- c:\programdata\Bitdefender
2013-02-28 17:05 . 2012-08-29 16:24 161312 ----a-w- c:\windows\system32\drivers\gzflt.sys
2013-02-28 17:05 . 2012-10-31 11:13 343456 ----a-w- c:\windows\system32\drivers\trufos.sys
2013-02-27 20:21 . 2013-02-27 20:21 -------- d-----w- c:\programdata\Synaptics
2013-02-27 18:37 . 2010-03-16 09:58 14400 ----a-w- c:\windows\system32\drivers\ebinfiltr.sys
2013-02-27 17:40 . 2013-02-27 17:40 -------- d-----w- c:\programdata\UUdb
2013-02-27 17:40 . 2013-02-27 17:40 -------- d-----w- c:\programdata\1&1 Mail & Media GmbH
2013-02-27 14:58 . 2012-08-10 11:09 469120 ----a-w- c:\windows\system32\drivers\btfilter.sys
2013-02-26 19:03 . 2013-02-26 19:03 -------- d-----w- c:\program files\ATI Technologies
2013-02-26 18:47 . 2013-02-26 18:47 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-26 15:32 . 2013-02-26 15:51 -------- dc-h--w- c:\programdata\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
2013-02-26 15:27 . 2013-02-26 15:33 -------- d-----w- c:\program files\Uniblue
2013-02-26 15:25 . 2013-02-26 15:51 -------- dc-h--w- c:\programdata\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
2013-02-26 15:23 . 2013-02-26 15:23 -------- dc-h--w- c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2013-02-26 15:17 . 2013-02-26 15:47 -------- d-----w- c:\program files\Driver Checker
2013-02-26 15:09 . 2013-02-26 15:09 -------- d-----w- c:\programdata\Uniblue
2013-02-26 12:50 . 2013-02-26 12:50 -------- d-----w- c:\users\Info\AppData\Roaming\Leadertech
2013-02-26 12:50 . 2013-02-26 12:50 53248 ----a-r- c:\users\Info\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2013-02-26 12:47 . 2013-02-26 12:57 -------- d-----w- c:\programdata\Logitech
2013-02-26 12:46 . 2013-02-26 12:57 -------- d-----w- c:\programdata\Logishrd
2013-02-25 18:33 . 2013-02-26 12:57 -------- d-----w- c:\program files\Common Files\LogiShrd
2013-02-25 18:33 . 2013-02-26 12:54 -------- d-----w- c:\users\Info\AppData\Roaming\Logitech
2013-02-25 18:33 . 2013-02-25 18:33 -------- d-----w- c:\users\Info\AppData\Roaming\Logishrd
2013-02-25 17:48 . 2013-03-04 17:29 -------- d-----w- c:\users\Info\AppData\Roaming\BitTorrent
2013-02-25 17:43 . 2013-02-25 17:47 -------- d-----w- c:\users\Info\AppData\Roaming\uTorrent
2013-02-25 16:27 . 2011-05-25 19:08 49152 ----a-w- c:\windows\system32\UMonit.exe
2013-02-25 16:27 . 2011-05-25 16:57 8323072 ----a-w- c:\windows\system32\GeneIcon.dll
2013-02-25 16:27 . 2009-10-26 14:52 139264 ----a-w- c:\windows\system32\ustor.dll
2013-02-25 16:27 . 2011-05-18 12:49 54784 ------w- c:\windows\system32\drivers\GeneStor.sys
2013-02-25 16:27 . 2008-02-04 14:43 172097 ----a-w- c:\windows\system32\NoMSGuninstall.exe
2013-02-25 15:47 . 2004-04-18 22:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\ctor.dll
2013-02-25 15:47 . 2004-04-18 22:39 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iscript.dll
2013-02-25 15:47 . 2004-04-18 22:39 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iuser.dll
2013-02-25 15:47 . 2004-04-18 22:39 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\DotNetInstaller.exe
2013-02-25 15:47 . 2013-02-25 15:47 303236 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\setup.dll
2013-02-25 15:47 . 2013-02-25 15:47 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iGdi.dll
2013-02-25 15:47 . 2004-04-18 22:42 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iKernel.dll
2013-02-25 15:47 . 2013-02-25 15:47 -------- d-----w- C:\Drivers
2013-02-25 15:24 . 2013-02-25 15:29 -------- d-----w- c:\program files\Qualcomm Atheros
2013-02-25 15:24 . 2012-11-08 18:59 3078656 ----a-w- c:\windows\system32\drivers\athr.sys
2013-02-25 15:16 . 2013-03-05 06:10 -------- d-----w- c:\program files\KeyDownload-Addon
2013-02-25 15:11 . 2013-02-25 15:25 -------- d-----w- c:\programdata\Qualcomm Atheros
2013-02-24 19:24 . 2008-08-12 12:33 61440 ----a-w- c:\windows\system32\drivers\RTSTOR.sys
2013-02-24 19:24 . 2008-05-06 16:41 6416928 ----a-w- c:\windows\system\DriveIcon.dll
2013-02-24 19:23 . 2013-02-24 19:23 -------- d-----w- C:\Dell
2013-02-24 19:12 . 2013-02-24 19:12 -------- d-----w- c:\program files\Innovative Solutions
2013-02-24 18:53 . 2013-02-24 18:54 -------- d-----w- C:\HP_LaserJet_Enterprise_500_color_M551
2013-02-24 18:17 . 2013-02-24 18:17 -------- d-----w- c:\windows\system32\RTCOM
2013-02-24 13:38 . 2012-11-19 11:10 526392 ----a-w- c:\windows\system32\drivers\iaStorA.sys
2013-02-24 13:38 . 2012-11-19 11:10 25656 ----a-w- c:\windows\system32\drivers\iaStorF.sys
2013-02-24 13:29 . 2012-08-03 16:55 9888400 ----a-w- c:\windows\system32\RtsPStorIcon.dll
2013-02-24 12:28 . 2013-02-24 12:28 -------- d-----w- c:\windows\system32\drivers\MFDLL
2013-02-24 12:28 . 2008-01-04 12:34 11832 ------w- c:\windows\system32\drivers\AsInsHelp64.sys
2013-02-24 12:28 . 2008-01-04 12:34 10216 ------w- c:\windows\system32\drivers\AsInsHelp32.sys
2013-02-24 12:24 . 2013-02-24 12:25 -------- d-----w- c:\program files\DVDVideoSoft
2013-02-24 12:24 . 2013-02-24 12:25 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2013-02-24 12:20 . 2013-02-24 12:25 -------- d-----w- c:\users\Info\AppData\Roaming\DVDVideoSoft
2013-02-24 10:47 . 2012-12-27 00:26 80488 ----a-w- c:\windows\system32\RtNicProp32.dll
2013-02-24 10:47 . 2012-12-27 00:26 614624 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2013-02-24 10:43 . 2013-02-24 10:43 -------- d-----w- c:\program files\Easeware
2013-02-24 10:00 . 2012-06-21 16:13 15168 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2013-02-24 09:59 . 2013-02-24 09:59 -------- d-----w- c:\program files\Common Files\postureAgent
2013-02-24 09:59 . 2012-07-02 14:16 55104 ----a-w- c:\windows\system32\drivers\HECI.sys
2013-02-24 09:59 . 2013-02-24 09:59 -------- d-----w- C:\Driver_allOS
2013-02-23 17:48 . 2013-03-03 11:56 -------- d-----w- c:\programdata\DriverGenius
2013-02-23 10:35 . 2013-02-23 10:35 -------- d-----w- c:\programdata\Innovative Solutions
2013-02-22 20:20 . 2013-02-22 20:21 -------- d-----w- c:\users\Info\AppData\Roaming\GetRightToGo
2013-02-21 18:07 . 2013-02-21 18:08 -------- d-----w- c:\users\Info\AppData\Roaming\GoforFiles
2013-02-21 15:28 . 2013-02-21 15:28 -------- d-----w- c:\users\Info\AppData\Local\Innovative Solutions
2013-02-21 14:56 . 2013-02-21 14:56 -------- d-----w- c:\programdata\SoftSafe
2013-02-21 14:33 . 2013-02-21 14:33 189 ----a-w- c:\windows\DeleteOnReboot.bat
2013-02-19 13:41 . 2013-02-19 13:41 -------- d-----r- C:\Sandbox
2013-02-18 20:05 . 2013-01-08 04:57 6991832 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{56C844B3-F39D-4279-8A41-CBB5DB9AD805}\mpengine.dll
2013-02-18 19:56 . 2009-01-25 11:14 15224 ----a-w- c:\windows\system32\sdnclean.exe
2013-02-18 16:43 . 2013-02-19 13:37 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-02-16 19:42 . 2013-02-16 19:42 -------- d-----w- c:\users\Info\AppData\Local\bdch
2013-02-16 19:42 . 2013-02-16 19:42 -------- d-----w- c:\programdata\bdch
2013-02-16 15:36 . 2013-02-16 15:36 -------- d-----w- c:\program files\7-Zip
2013-02-15 21:29 . 2013-02-16 15:29 -------- d-----w- c:\program files\BrowseToSave
2013-02-15 21:29 . 2013-02-16 15:29 -------- d-----w- c:\program files\EasyLife
2013-02-15 11:43 . 2013-02-15 11:43 -------- d-----w- C:\toolbarImages
2013-02-14 13:54 . 2013-02-18 19:56 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2013-02-12 21:00 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-12 21:00 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-02-12 21:00 . 2013-01-04 03:00 2347008 ----a-w- c:\windows\system32\win32k.sys
2013-02-12 21:00 . 2013-01-03 05:05 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-12 21:00 . 2013-01-03 05:04 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-12 21:00 . 2013-01-04 04:50 169984 ----a-w- c:\windows\system32\winsrv.dll
2013-02-12 15:54 . 2013-02-13 10:48 -------- d-----w- c:\program files\Enigma Software Group
2013-02-12 15:53 . 2013-02-12 20:28 -------- d-----w- c:\windows\D8167CA8236B4334B77DF388F494EE18.TMP
2013-02-12 15:53 . 2013-02-12 15:53 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2013-02-12 15:49 . 2013-02-12 15:49 -------- d-----w- c:\windows\system32\desktop
2013-02-12 14:13 . 2013-02-12 14:13 -------- d-----w- c:\programdata\Common Toolkit Suite
2013-02-12 14:12 . 2013-02-12 22:04 -------- d-----w- c:\programdata\Fighters
2013-02-10 19:04 . 2012-12-17 05:43 33616 ------w- c:\windows\system32\drivers\gfiark.sys
2013-02-10 17:58 . 2013-02-10 17:58 -------- d-----w- c:\users\Info\AppData\Roaming\LavasoftStatistics
2013-02-10 16:44 . 2013-02-12 20:50 -------- d-----w- c:\users\Info\AppData\Local\Downloaded Installations
2013-02-10 16:44 . 2013-02-10 16:44 13560 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-02-10 16:36 . 2013-02-10 16:36 -------- d-----w- c:\users\Info\AppData\Local\adawarebp
2013-02-10 16:36 . 2013-02-10 16:36 -------- d-----w- c:\program files\Toolbar Cleaner
2013-02-08 18:04 . 2013-02-08 18:04 285080 ----a-w- c:\program files\Internet Explorer\msdbg2.dll
2013-02-08 18:04 . 2013-02-08 18:04 392080 ----a-w- c:\program files\Internet Explorer\pdm.dll
2013-02-08 18:04 . 2013-02-08 18:04 70568 ----a-w- c:\program files\Internet Explorer\pdmproxy100.dll
2013-02-05 20:07 . 2013-02-27 17:40 -------- d-----w- c:\program files\1und1Softwareaktualisierung
2013-02-05 13:27 . 2013-01-28 13:19 29984 ----a-w- c:\windows\system32\uxtuneup.dll
2013-02-05 13:13 . 2013-01-28 13:19 32032 ----a-w- c:\windows\system32\TURegOpt.exe
2013-02-05 13:13 . 2013-01-28 13:19 21792 ----a-w- c:\windows\system32\authuitu.dll
2013-02-05 13:12 . 2013-02-12 14:29 -------- d-----w- c:\program files\TuneUp Utilities 2013
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-04 12:59 . 2012-12-01 12:59 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-03-04 12:59 . 2012-12-01 12:59 861088 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-02-27 16:06 . 2012-10-03 16:01 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-27 16:06 . 2012-10-03 16:01 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-02-27 14:36 . 2012-12-18 15:07 277640 ----a-w- c:\windows\system32\IntelCpHeciSvc.exe
2013-02-27 14:36 . 2012-12-18 15:07 272008 ----a-w- c:\windows\system32\igfxsrvc.exe
2013-02-27 14:36 . 2012-12-18 15:07 146056 ----a-w- c:\windows\system32\igfxtray.exe
2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrtrk.lrc
2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrsve.lrc
2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrslv.lrc
2013-02-27 14:36 . 2012-12-12 15:41 435200 ----a-w- c:\windows\system32\igfxrtha.lrc
2013-02-27 14:36 . 2012-12-12 15:41 437248 ----a-w- c:\windows\system32\igfxrrus.lrc
2013-02-27 14:36 . 2012-12-12 15:41 437248 ----a-w- c:\windows\system32\igfxrrom.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrsky.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrptg.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrplk.lrc
2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrptb.lrc
2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrnor.lrc
2013-02-27 14:36 . 2012-12-12 15:40 286720 ----a-w- c:\windows\system32\igfxTMM.dll
2013-02-27 14:36 . 2012-12-12 15:38 519680 ----a-w- c:\windows\system32\iglhsip32.dll
2013-02-27 14:36 . 2012-12-12 15:38 180224 ----a-w- c:\windows\system32\iglhcp32.dll
2013-02-27 14:36 . 2012-01-10 12:15 59904 ----a-w- c:\windows\system32\igfxsrvc.dll
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrnld.lrc
2013-02-27 14:36 . 2012-12-12 15:41 430080 ----a-w- c:\windows\system32\igfxrjpn.lrc
2013-02-27 14:36 . 2012-12-12 15:41 429056 ----a-w- c:\windows\system32\igfxrkor.lrc
2013-02-27 14:36 . 2012-12-12 15:41 438272 ----a-w- c:\windows\system32\igfxrell.lrc
2013-02-27 14:36 . 2012-12-12 15:41 437760 ----a-w- c:\windows\system32\igfxrfra.lrc
2013-02-27 14:36 . 2012-12-12 15:41 437760 ----a-w- c:\windows\system32\igfxresn.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrita.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrhrv.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrdeu.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436224 ----a-w- c:\windows\system32\igfxrhun.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436224 ----a-w- c:\windows\system32\igfxrfin.lrc
2013-02-27 14:36 . 2012-12-12 15:41 435200 ----a-w- c:\windows\system32\igfxrdan.lrc
2013-02-27 14:36 . 2012-12-12 15:41 433664 ----a-w- c:\windows\system32\igfxrheb.lrc
2013-02-27 14:36 . 2012-12-12 15:41 436224 ----a-w- c:\windows\system32\igfxrcsy.lrc
2013-02-27 14:36 . 2012-12-12 15:41 427008 ----a-w- c:\windows\system32\igfxrcht.lrc
2013-02-27 14:36 . 2012-12-12 15:39 284160 ----a-w- c:\windows\system32\igfxrenu.lrc
2013-02-27 14:36 . 2012-01-10 12:14 9023488 ------w- c:\windows\system32\igfxress.dll
2013-02-27 14:36 . 2012-12-18 15:07 199304 ----a-w- c:\windows\system32\igfxext.exe
2013-02-27 14:36 . 2012-12-18 15:07 190088 ----a-w- c:\windows\system32\igfxpers.exe
2013-02-27 14:36 . 2012-12-12 15:41 433664 ----a-w- c:\windows\system32\igfxrara.lrc
2013-02-27 14:36 . 2012-12-12 15:41 426496 ----a-w- c:\windows\system32\igfxrchs.lrc
2013-02-27 14:36 . 2012-12-12 15:40 25088 ----a-w- c:\windows\system32\igfxexps.dll
2013-02-27 14:36 . 2012-12-12 15:40 120320 ----a-w- c:\windows\system32\igfxcpl.cpl
2013-02-27 14:36 . 2012-12-12 15:40 130048 ----a-w- c:\windows\system32\igfxdo.dll
2013-02-27 14:36 . 2012-12-12 15:40 9728 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2013-02-27 14:36 . 2012-12-12 15:40 330752 ------w- c:\windows\system32\igfxdev.dll
2013-02-27 14:36 . 2012-12-12 15:38 640512 ----a-w- c:\windows\system32\igfxcmrt32.dll
2013-02-27 14:36 . 2012-12-12 15:38 3121152 ----a-w- c:\windows\system32\igfxcmjit32.dll
2013-02-27 14:36 . 2012-01-10 13:18 11049472 ----a-w- c:\windows\system32\igdumd32.dll
2013-02-27 14:36 . 2012-01-10 12:15 313344 ----a-w- c:\windows\system32\igfxpph.dll
2013-02-27 14:36 . 2012-12-12 15:41 3759616 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2013-02-27 14:36 . 2012-12-12 15:41 64512 ----a-w- c:\windows\system32\igdde32.dll
2013-02-27 14:36 . 2012-01-10 12:55 11174912 ----a-w- c:\windows\system32\igd10umd32.dll
2013-02-27 14:36 . 2012-12-12 15:39 10812416 ----a-w- c:\windows\system32\ig4icd32.dll
2013-02-27 14:36 . 2012-12-18 15:07 181384 ----a-w- c:\windows\system32\hkcmd.exe
2013-02-27 14:36 . 2012-12-18 15:07 6232200 ----a-w- c:\windows\system32\GfxUI.exe
2013-02-27 14:36 . 2012-01-10 12:14 96256 ----a-w- c:\windows\system32\hccutils.dll
2013-02-27 14:36 . 2012-12-12 15:40 175616 ----a-w- c:\windows\system32\gfxSrvc.dll
2013-02-27 14:36 . 2012-12-13 15:23 289792 ----a-w- c:\windows\system32\drivers\IntcDAud.sys
2013-02-27 14:36 . 2012-12-13 15:23 14848 ----a-w- c:\windows\system32\IntcDAuC.dll
2012-12-27 00:26 . 2012-11-17 15:39 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2012-12-16 14:13 . 2012-12-29 16:32 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-29 16:32 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-14 15:42 . 2012-10-10 15:24 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2012-12-14 15:42 . 2012-10-01 16:04 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2012-12-14 15:42 . 2012-10-01 16:04 1236816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-12-14 01:02 . 2012-12-14 01:02 102400 ----a-w- c:\windows\system32\igfxCoIn_v2932.dll
2012-12-14 01:02 . 2012-12-14 01:02 459264 ----a-w- c:\windows\system32\igfx11cmrt32.dll
2012-12-10 11:01 . 2013-01-06 15:07 18360 ----a-w- c:\windows\system32\roboot.exe
2012-12-05 17:06 . 2012-10-01 16:08 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2012-12-05 17:00 . 2012-10-08 12:05 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2012-12-05 16:57 . 2012-10-10 15:15 1236816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-02-16 00:34 . 2013-02-08 17:54 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-01-30 14:49 281760 ------w- c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2013-02-12 11325304]
"DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2013-02-12 11325304]
"Uniblue RegistryBooster 2009"="c:\program files\uniblue\registrybooster\StartRegistryBooster.exe" [2008-08-26 99624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"="c:\program files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI.exe" [2012-12-18 6106336]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-27 146056]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-27 181384]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"Bdagent"="c:\program files\Bitdefender\Bitdefender 2013\bdagent.exe" [2013-03-01 1614856]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"MailCheck IE Broker"="c:\program files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe" [2013-02-04 1513536]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *autocheck turegopt
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\01103601.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\40517705.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spybot-S&D Cleaning]
2012-11-13 13:07 3713032 ----a-w- c:\program files\Spybot - Search & Destroy 2\SDCleaner.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"Google Update"="c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"Uniblue RegistryBooster 2009"=c:\program files\uniblue\registrybooster\StartRegistryBooster.exe
"DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" -agent
"DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" -RESTART
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"ArcSoft Connection Service"=c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"SDTray"="c:\program files\Spybot - Search & Destroy 2\SDTray.exe"
"UMonit"=c:\windows\system32\UMonit.exe
"IAStorIcon"=c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
.
R0 40517705;40517705;c:\windows\system32\drivers\04373023.sys [x]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [x]
R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]
R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 GeneStor;Genesys Logic Storage Driver;c:\windows\system32\DRIVERS\GeneStor.sys [x]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\C541.tmp [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [x]
R3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [x]
R3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys [x]
R3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSrv.exe [x]
R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]
R4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R4 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService.exe [x]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [x]
S2 HPWMISVC;HPWMISVC;c:\program files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 IconMan_R;IconMan_R;c:\program files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe [x]
S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys [x]
S3 ebinfiltr;SR Research Mouse Filter;c:\windows\system32\DRIVERS\ebinfiltr.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 68633480
*NewlyCreated* - MBAMPROTECTOR
*Deregistered* - 68633480
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-03-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-03 16:06]
.
2013-03-04 c:\windows\Tasks\DriverEasy Scheduled Scan.job
- c:\program files\Easeware\DriverEasy\DriverEasy.exe [2013-02-25 15:00]
.
2013-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-09 19:46]
.
2013-03-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-09 19:46]
.
2013-03-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
- c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-02 18:10]
.
2013-03-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
- c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-02 18:10]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local;<local>
uSearchAssistant = hxxp://www.google.com
IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.2.1
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll
FF - ProfilePath - c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.easylifeapp.com/?pid=724&abc=ff1&r=2013/02/15&hid=4095452143&lg=EN&cc=DE&l=1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - google.com
FF - ExtSQL: 2013-01-10 16:52; toolbar@web.de; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\toolbar@web.de.xpi
FF - ExtSQL: 2013-02-05 14:34; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-02-06 14:27; {99B98C2C-7274-45a3-A640-D9DF1A1C8460}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi
FF - ExtSQL: 2013-02-10 17:36; {87934c42-161d-45bc-8cef-ef18abe2a30c}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
FF - ExtSQL: 2013-02-10 17:36; jid1-yZwVFzbsyfMrqQ@jetpack; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
FF - user.js: nglayout.initialpaint.delay - 600
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - (no file)
WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file)
MSConfigStartUp-avgnt - c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\C541.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Internet Explorer\Approved Extensions]
@DACL=(02 0000)
"{C424171E-592A-415A-9EB1-DFD6D95D3530}"=hex:51,66,7a,6c,4c,1d,3b,1b,0e,0a,32,
de,1a,0b,3c,0d,80,b9,98,96,db,1b,75,2a
"{17166733-40EA-4432-A85C-AE672FF0E236}"=hex:51,66,7a,6c,4c,1d,3b,1b,23,7a,00,
0d,da,12,54,08,b6,54,e9,27,2d,b6,a2,2c
"{BF42D4A8-016E-4FCD-B1EB-837659FD77C6}"=hex:51,66,7a,6c,4c,1d,3b,1b,b8,c9,54,
a5,5e,53,ab,03,af,e3,c4,36,5b,bb,37,dc
"{4D2D3B0F-69BE-477A-90F5-FDDB05357975}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,26,3b,
57,8e,3b,1c,0b,8e,fd,ba,9b,07,73,39,6f
"{5018CFD2-804D-4C99-9F81-25EAEA2769DE}"=hex:51,66,7a,6c,4c,1d,3b,1b,c2,d2,0e,
4a,7d,d2,ff,00,81,89,62,aa,e8,61,29,c4
"{E87806B5-E908-45FD-AF5E-957D83E58E68}"=hex:51,66,7a,6c,4c,1d,3b,1b,a5,1b,6e,
f2,38,bb,9b,09,b1,56,d2,3d,81,a3,ce,72
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-03-05 07:13:54
ComboFix-quarantined-files.txt 2013-03-05 06:13
.
Vor Suchlauf: 20 Verzeichnis(se), 555.930.079.232 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 555.789.787.136 Bytes frei
.
- - End Of File - - 71FF44815639D8957D341A3735BC349D
|
|
| Themen zu Minianwendungen werden nicht mehr richtig angezeigt |
| angezeigt, gen, hallo zusammen, kleiner, kurzem, minianwendungen, möglicherweise, nicht mehr, richtig, schwarzer, virus, weißer, zusammen |
WARNUNG an die MITLESER: 
