Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: System wird langsam zugemüllt - Systemlast immer bei 50%

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 10.11.2010, 10:37   #1
ltkrogoth
 
System wird langsam zugemüllt - Systemlast immer bei 50% - Frage

System wird langsam zugemüllt - Systemlast immer bei 50%



Hallo,

ich bin neu hier und verzweifle langsam mit meinem Problem.
Ich hoffe hier kann mir geholfen werden.

Seit einigen Tagen war mein System im Leerlauf ständig bei 50-60%
Auslastung (alle 4 Kerne). Dazu kam das meine Systemplatte von Tag
zu Tag voller wurde, obwohl keine Programme installiert wurden, keine
Wiederherstellungspunkte gesetzt wurden... Temp Ordner sind geleert. Systembereinigung hat keine Erfolge erzielt.

Was wurde bereits getan?
- Habe dann eScan durchlaufen lassen, der hatte Funde.
- danach AntiVir im abgesicherten Modus Systemcheck machen lassen,
der hatte 3 Funde welche in Quarantäne geschoben wurden.
- Seit dem ist die Systemlast wieder normal.
- Festplattenprüfung: Keine Fehler
- eScan: Immer noch mehrere Funde (unter anderem gif´s und png´s?), Log File ist dabei.
- HijackThis laufen lassen: Log File ist dabei.
- Malwarebytes laufen lassen: 1 Fund, Log File ist dabei.

Nachdem die Systemlast wieder normal ist hoffe ich das der Schädling entfernt wurde, die Funde machen mir aber trotzdem Sorgen. Außerdem hätte ich gerne meine Systemplatte wieder "bereinigt".

Hoffe die Logs helfen weiter
Logs liegen entweder in der Zip im Anhang
oder direkt im web:

Hijack This: hxxp://dl.dropbox.com/u/6617922/hijackthis.txt
eScan: hxxp://dl.dropbox.com/u/6617922/MWAV.txt
Malwarebytes: hxxp://dl.dropbox.com/u/6617922/mbam-log-2010-11-10%20%2811-14-25%29.txt

Mit besten Grüßen,
Markus

Habe noch OTL laufen lassen,
hier die Logs:

OTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 10.11.2010 11:42:43 - Run 1
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\XXXXX\Downloads
64bit- Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 69,00% Memory free
16,00 Gb Paging File | 13,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 17,34 Gb Free Space | 31,07% Space Free | Partition Type: NTFS
Drive D: | 297,99 Gb Total Space | 216,93 Gb Free Space | 72,80% Space Free | Partition Type: NTFS
 
Computer Name: BLACK | User Name: XXXXX | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{3DDACE1F-3B1E-D6AB-CD3D-B6E987511945}" = ATI Catalyst Install Manager
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{503640E5-B2ED-3173-D109-D4D03153471A}" = AMD Drag and Drop Transcoding
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{AC76BA86-1033-0000-0064-0003D0000004}" = Adobe Acrobat 9 Pro Extended 64-bit Add-On
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FD53298A-4734-AFCB-B733-4C07776E589E}" = ccc-utility64
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = RemoteCapture 2.7.5
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{179C91E9-D9ED-D5CC-F0D8-9579DBDED8D6}" = CCC Help English
"{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}" = Adobe Creative Suite 5 Master Collection
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback 10
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{28526951-55EF-4901-A0CA-B9AC966D1DD1}" = Split/Second
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51D460F0-E302-44D5-A174-BAD2ADF17689}" = Canon Camera TWAIN Driver
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C8B53B9-41EE-AD83-007A-55EE64DE6932}" = Catalyst Control Center Graphics Previews Common
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{71B6A593-6596-4300-825E-315895018771}" = Canon Camera WIA Driver
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial 
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{AC76BA86-1033-F400-7761-000000000004}" = Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
"{AC76BA86-1033-F400-7761-000000000004}{AC76BA86-1033-F400-7761-000000000004}" = Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
"{B4F3A360-E1E2-479D-ADE7-9BE3B07F4539}" = NVIDIA PhysX
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CF5DE1DD-F7E6-694D-1E82-84C7C9C9ABDB}" = Catalyst Control Center Graphics Previews Vista
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{DDA34038-89BD-4804-B0B8-DC48D5DFB463}" = Catalyst Control Center - Branding
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F71E7762-8A64-AECC-0917-DA51677041CF}" = Catalyst Control Center InstallProxy
"{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}" = 325 USB PC Camera
"{F9D65BA1-84C5-B4CB-91FE-D68F07ECBA24}" = ccc-core-static
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ArcaniA" = ArcaniA - Gothic 4
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BSW" = BrettspielWelt
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"FileZilla Client" = FileZilla Client 3.2.7.1
"HD Tune Pro_is1" = HD Tune Pro 4.60
"InstallShield_{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = Canon Utilities RemoteCapture 2.7
"InstallShield_{51D460F0-E302-44D5-A174-BAD2ADF17689}" = Canon Camera TWAIN Driver 6.2
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{71B6A593-6596-4300-825E-315895018771}" = Canon Camera WIA Driver 6.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"Mozilla Thunderbird (3.1.4)" = Mozilla Thunderbird (3.1.4)
"PowerISO" = PowerISO
"Revo Uninstaller" = Revo Uninstaller 1.89
"StarCraft II" = StarCraft II
"SUPER ©" = SUPER © Version 2010.bld.42 (Nov 7, 2010)
"Totalcmd" = Total Commander (Remove or Repair)
"Trillian" = Trillian
"Tunnelier" = Bitvise Tunnelier 4.37 (remove only)
"VLC media player" = VLC media player 1.1.4
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Mozilla Thunderbird (3.1.6)" = Mozilla Thunderbird (3.1.6)
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 31.10.2010 08:02:32 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm vlc.exe, Version 1.1.4.0 kann nicht mehr unter Windows ausgeführt
 werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: fe8    Startzeit: 
01cb78ef819f2672    Endzeit: 27    Anwendungspfad: D:\Programme\VLC\vlc.exe    Berichts-ID: 
aa672473-e4e6-11df-97bb-6cf04957cd4d  
 
Error - 31.10.2010 09:03:49 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm vlc.exe, Version 1.1.4.0 kann nicht mehr unter Windows ausgeführt
 werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: e54    Startzeit: 
01cb78f3821f895b    Endzeit: 25    Anwendungspfad: D:\Programme\VLC\vlc.exe    Berichts-ID: 
39845733-e4ee-11df-97bb-6cf04957cd4d  
 
Error - 31.10.2010 09:39:21 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: trillian.exe, Version: 5.0.0.26, 
Zeitstempel: 0x4c97a9a0  Name des fehlerhaften Moduls: oscar.dll, Version: 5.0.0.26,
 Zeitstempel: 0x4c97a59d  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00034de4  ID des fehlerhaften
 Prozesses: 0xb7c  Startzeit der fehlerhaften Anwendung: 0x01cb78e23f487521  Pfad der
 fehlerhaften Anwendung: D:\Programme\Trillian\trillian.exe  Pfad des fehlerhaften
 Moduls: D:\Programme\Trillian\plugins\oscar.dll  Berichtskennung: 43e557a2-e4f4-11df-97bb-6cf04957cd4d
 
Error - 31.10.2010 11:04:58 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: vlc.exe, Version: 1.1.4.0, Zeitstempel:
 0x4c76f9fe  Name des fehlerhaften Moduls: vlc.exe, Version: 1.1.4.0, Zeitstempel:
 0x4c76f9fe  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000016e8  ID des fehlerhaften Prozesses:
 0xe14  Startzeit der fehlerhaften Anwendung: 0x01cb790cf70461a6  Pfad der fehlerhaften
 Anwendung: D:\Programme\VLC\vlc.exe  Pfad des fehlerhaften Moduls: D:\Programme\VLC\vlc.exe
Berichtskennung:
 398fda21-e500-11df-97bb-6cf04957cd4d
 
Error - 01.11.2010 05:08:11 | Computer Name = black | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 01.11.2010 15:36:55 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm vlc.exe, Version 1.1.4.0 kann nicht mehr unter Windows ausgeführt
 werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 14f0    Startzeit:
 01cb79f293abc4a2    Endzeit: 271    Anwendungspfad: D:\Programme\VLC\vlc.exe    Berichts-ID:
 6013b65d-e5ef-11df-8de5-6cf04957cd4d  
 
Error - 02.11.2010 05:36:20 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Adobe Premiere Pro.exe, Version: 
5.0.0.0, Zeitstempel: 0x4bb568b7  Name des fehlerhaften Moduls: VideoFrame.dll, Version:
 5.0.0.0, Zeitstempel: 0x4bb529f2  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00000000000104a7
ID
 des fehlerhaften Prozesses: 0xa00  Startzeit der fehlerhaften Anwendung: 0x01cb7a70ee98b0f7
Pfad
 der fehlerhaften Anwendung: C:\Program Files\Adobe Premiere Pro CS5\Adobe Premiere
 Pro.exe  Pfad des fehlerhaften Moduls: C:\Program Files\Adobe Premiere Pro CS5\VideoFrame.dll
Berichtskennung:
 a5cdc2ff-e664-11df-b53a-6cf04957cd4d
 
Error - 04.11.2010 11:38:21 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm CryptLoad.exe, Version 1.1.8.0 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: c18    Startzeit: 
01cb7c35f439588f    Endzeit: 7    Anwendungspfad: D:\CryptLoad_1.1.8\CryptLoad.exe    Berichts-ID:
 8b8b69b2-e829-11df-8e9a-6cf04957cd4d  
 
Error - 04.11.2010 15:36:48 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: plugin-container.exe, Version: 1.9.2.3951,
 Zeitstempel: 0x4cc7add9  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16559,
 Zeitstempel: 0x4ba9b29c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00022262  ID des fehlerhaften
 Prozesses: 0x998  Startzeit der fehlerhaften Anwendung: 0x01cb7c414af613bf  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad
 des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll  Berichtskennung: dcbeb727-e84a-11df-a65d-6cf04957cd4d
 
Error - 05.11.2010 04:02:50 | Computer Name = black | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
[ System Events ]
Error - 09.11.2010 07:19:05 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 07:20:50 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 08:34:02 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 09:23:23 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 09:40:52 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 09:41:02 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 10:58:53 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 11:19:54 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 14:00:30 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
Error - 09.11.2010 16:09:32 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
 lautet: 10.
 
 
< End of report >
         
--- --- ---


OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 10.11.2010 11:42:43 - Run 1
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\XXXXX\Downloads
64bit- Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 69,00% Memory free
16,00 Gb Paging File | 13,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 17,34 Gb Free Space | 31,07% Space Free | Partition Type: NTFS
Drive D: | 297,99 Gb Total Space | 216,93 Gb Free Space | 72,80% Space Free | Partition Type: NTFS
 
Computer Name: BLACK | User Name: XXXXX | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\XXXXX\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - D:\Programme\Thunderbird\thunderbird.exe (Mozilla Messaging)
PRC - D:\Programme\Trillian\trillian.exe (Cerulean Studios)
PRC - D:\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - D:\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
PRC - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Users\XXXXX\AppData\Roaming\Dropbox\bin\Dropbox.exe ()
PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Windows\FixCamera.exe ()
PRC - C:\Windows\tsnp325.exe ()
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\XXXXX\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\guard32.dll (COMODO)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (cmdAgent) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (AntiVirSchedulerService) -- D:\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- D:\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (cmderd) -- C:\Windows\SysNative\drivers\cmderd.sys (COMODO)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (ATI Technologies, Inc.)
DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (61883) -- C:\Windows\SysNative\drivers\61883.sys (Microsoft Corporation)
DRV:64bit: - (Avc) -- C:\Windows\SysNative\drivers\avc.sys (Microsoft Corporation)
DRV:64bit: - (MSDV) -- C:\Windows\SysNative\drivers\msdv.sys (Microsoft Corporation)
DRV:64bit: - (AVCSTRM) -- C:\Windows\SysNative\drivers\avcstrm.sys (Microsoft Corporation)
DRV:64bit: - (MSTAPE) -- C:\Windows\SysNative\drivers\mstape.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (AtiPcie) AMD PCI Express (3GIO) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = h**p://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 90 D6 68 EF F6 6A CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "h**p://www.google.com/ig"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.87
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.10.28 22:54:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.11.08 17:19:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: D:\Programme\Thunderbird\components [2010.10.28 22:53:32 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: D:\Programme\Thunderbird\plugins
 
[2010.10.13 18:32:27 | 000,000,000 | ---D | M] -- C:\Users\XXXXX\AppData\Roaming\mozilla\Extensions
[2010.10.13 18:32:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXXXX\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.11.09 23:36:49 | 000,000,000 | ---D | M] -- C:\Users\XXXXX\AppData\Roaming\mozilla\Firefox\Profiles\eour9tl1.default\extensions
[2010.10.13 18:50:37 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\XXXXX\AppData\Roaming\mozilla\Firefox\Profiles\eour9tl1.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010.11.08 17:19:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.10.18 16:06:50 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.11.08 17:19:56 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010.11.08 17:19:50 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.09.14 22:32:39 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.09.14 22:32:39 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.09.14 22:32:39 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.09.14 22:32:39 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.09.14 22:32:39 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2010.10.18 18:35:29 | 000,001,380 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com:443
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com 
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Chew7Hale] C:\Windows\SysNative\hale.exe File not found
O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe ()
O4 - HKLM..\Run: [ Malwarebytes Anti-Malware  (reboot)] D:\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NBAgent] D:\Programme\Nero\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [tsnp325] C:\Windows\tsnp325.exe ()
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] D:\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\XXXXX\AppData\Roaming\Dropbox\bin\Dropbox.exe ()
O4 - Startup: C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk = D:\Programme\Trillian\trillian.exe (Cerulean Studios)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O8:64bit: - Extra context menu item: An vorhandenes PDF anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: An vorhandenes PDF anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} h**p://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} h**p://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} h**p://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (acaptuser64.dll) - C:\Windows\SysNative\acaptuser64.dll (Adobe Systems, Inc.)
O20 - AppInit_DLLs: (acaptuser32.dll) - C:\Windows\SysWow64\acaptuser32.dll (Adobe Systems, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.11.10 11:00:56 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\GHISLER
[2010.11.10 10:52:28 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Malwarebytes
[2010.11.10 10:52:22 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.11.10 10:52:20 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.11.10 10:52:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.11.10 10:25:00 | 000,000,000 | ---D | C] -- C:\Windows\rundll16.exe
[2010.11.10 10:25:00 | 000,000,000 | ---D | C] -- C:\Windows\logo1_.exe
[2010.11.10 09:59:10 | 000,000,000 | ---D | C] -- C:\Hijack This
[2010.11.10 09:13:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Avira
[2010.11.10 01:21:14 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2010.11.10 01:21:14 | 000,081,584 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2010.11.10 01:21:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\VDLL.DLL
[2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\runouce.exe
[2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\RUNDL132.EXE
[2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\logo_1.exe
[2010.11.10 01:06:32 | 000,632,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr80.dll
[2010.11.10 01:06:31 | 000,554,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp80.dll
[2010.11.10 01:06:30 | 000,034,048 | ---- | C] (MicroWorld Technologies Inc.) -- C:\Windows\SysWow64\eEmpty.exe
[2010.11.10 01:06:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\MicroWorld
[2010.11.10 01:06:25 | 000,000,000 | ---D | C] -- C:\ProgramData\MicroWorld
[2010.11.09 21:53:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eRightSoft
[2010.11.08 17:21:02 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\BSW
[2010.11.08 17:20:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010.11.08 17:20:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010.11.08 17:19:55 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2010.11.08 17:19:55 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010.11.08 17:19:55 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010.11.08 17:19:55 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010.11.08 17:19:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010.11.04 21:46:43 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\ArcaniA - Gothic 4
[2010.11.04 21:43:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2010.11.04 21:42:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010.11.04 21:42:25 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2010.11.04 21:42:20 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2010.11.04 21:42:20 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2010.11.04 21:42:19 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2010.11.04 21:42:19 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2010.11.04 21:42:15 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2010.11.04 21:42:15 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2010.11.04 21:42:10 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2010.11.04 21:42:10 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2010.11.04 21:42:02 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2010.11.04 21:42:02 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2010.11.04 21:42:02 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2010.11.04 21:42:02 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2010.11.04 21:41:57 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2010.11.04 21:41:57 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2010.11.04 21:41:57 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2010.11.04 21:41:57 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2010.11.04 21:41:57 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2010.11.04 21:41:57 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2010.11.04 21:41:52 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2010.11.04 21:41:52 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2010.11.04 21:41:52 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2010.11.04 21:41:52 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2010.11.04 21:41:43 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2010.11.04 21:41:43 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2010.11.04 21:41:39 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2010.11.04 21:41:39 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2010.11.04 21:41:35 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2010.11.04 21:41:35 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2010.11.04 21:41:34 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2010.11.04 21:41:34 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2010.11.04 21:41:34 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2010.11.04 21:41:34 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2010.11.04 21:41:27 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2010.11.04 21:41:27 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2010.11.04 21:41:20 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2010.11.04 21:41:20 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2010.11.04 21:41:20 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2010.11.04 21:41:20 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2010.11.04 21:41:16 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2010.11.04 21:41:16 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2010.11.04 21:41:15 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2010.11.04 21:41:15 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2010.11.04 21:41:11 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2010.11.04 21:41:11 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2010.11.04 21:41:11 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2010.11.04 21:41:11 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2010.11.04 21:41:06 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2010.11.04 21:41:06 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2010.11.04 21:41:02 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2010.11.04 21:41:02 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2010.11.04 21:40:57 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2010.11.04 21:40:57 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2010.11.04 21:40:57 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2010.11.04 21:40:57 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2010.11.04 21:40:53 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2010.11.04 21:40:53 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2010.11.04 21:40:52 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2010.11.04 21:40:52 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2010.11.04 21:40:33 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2010.11.04 21:40:33 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2010.11.04 21:40:30 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2010.11.04 21:40:30 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2010.11.04 21:40:30 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2010.11.04 21:40:30 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2010.11.04 21:40:29 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2010.11.04 21:40:29 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2010.11.04 21:40:21 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2010.11.04 21:40:21 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2010.11.04 21:40:16 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2010.11.04 21:40:16 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2010.11.04 21:40:11 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2010.11.04 21:40:11 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2010.11.04 21:40:10 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2010.11.04 21:40:10 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2010.11.04 21:40:06 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2010.11.04 21:40:06 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2010.11.02 22:35:15 | 000,186,880 | RHS- | C] (RadLight) -- C:\Windows\SysWow64\RLOgg.ax
[2010.11.02 22:35:15 | 000,161,792 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\RealMediaDX.ax
[2010.11.02 22:35:15 | 000,092,672 | RHS- | C] (RadLight) -- C:\Windows\SysWow64\RLVorbisDec.ax
[2010.11.02 22:35:15 | 000,090,112 | RHS- | C] (-) -- C:\Windows\SysWow64\TTADSSplitter.ax
[2010.11.02 22:35:15 | 000,090,112 | RHS- | C] (-) -- C:\Windows\SysWow64\TTADSDecoder.ax
[2010.11.02 22:35:15 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\Windows\SysWow64\RLTheoraDec.ax
[2010.11.02 22:35:14 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\Windows\SysWow64\nbDX.dll
[2010.11.02 22:35:14 | 000,179,200 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\DiracSplitter.ax
[2010.11.02 22:35:14 | 000,169,472 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\MatroskaDX.ax
[2010.11.02 22:35:14 | 000,163,328 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\flvDX.dll
[2010.11.02 22:35:14 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\Windows\SysWow64\AVCDX.ax
[2010.11.02 22:35:14 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\Windows\SysWow64\msfDX.dll
[2010.11.01 19:16:56 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\Windows\SysWow64\devil.dll
[2010.11.01 19:16:56 | 000,369,152 | ---- | C] (The Public) -- C:\Windows\SysWow64\avisynth.dll
[2010.11.01 19:16:56 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll
[2010.11.01 19:16:56 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\i420vfw.dll
[2010.11.01 19:16:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AviSynth 2.5
[2010.11.01 19:16:03 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\SysWow64\pncrt.dll
[2010.10.27 21:40:16 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\amcap.exe
[2010.10.27 21:40:15 | 000,147,456 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp325.dll
[2010.10.27 21:40:15 | 000,057,344 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnp325.dll
[2010.10.27 21:40:15 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\csnp325.dll
[2010.10.27 21:40:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\snp325
[2010.10.27 21:40:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\InstallShield
[2010.10.26 18:36:54 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.10.26 18:35:32 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\PACE Anti-Piracy
[2010.10.26 18:35:32 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\PACE Anti-Piracy
[2010.10.26 18:35:32 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy
[2010.10.26 18:35:31 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\Adobe
[2010.10.25 18:12:30 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\Disney Interactive Studios
[2010.10.25 17:47:17 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2010.10.25 17:47:17 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2010.10.25 17:47:17 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2010.10.25 17:47:17 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2010.10.25 17:47:15 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2010.10.25 17:47:15 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2010.10.20 22:25:22 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\StarCraft II
[2010.10.20 22:25:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2010.10.20 22:25:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2010.10.20 22:07:17 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\COMODO
[2010.10.20 20:20:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon
[2010.10.19 12:51:26 | 000,000,000 | -H-D | C] -- C:\VritualRoot
[2010.10.19 12:49:11 | 000,000,000 | ---D | C] -- C:\Programme\COMODO
[2010.10.19 12:48:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo
[2010.10.19 12:43:32 | 000,000,000 | ---D | C] -- C:\Windows\Internet Logs
[2010.10.19 12:42:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Application Data
[2010.10.19 12:41:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group
[2010.10.18 20:21:20 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\FileZilla
[2010.10.18 19:48:28 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Dropbox
[2010.10.18 19:07:58 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2010.10.18 19:07:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2010.10.18 19:07:28 | 000,024,416 | R--- | C] (Adobe Systems Inc.) -- C:\Windows\SysNative\AdobePDFUI.dll
[2010.10.18 18:39:11 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Thunderbird
[2010.10.18 16:08:15 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\skypePM
[2010.10.18 16:06:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010.10.18 16:06:43 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2010.10.18 16:06:43 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Skype
[2010.10.18 16:06:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010.10.18 15:59:42 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Trillian
[2010.10.18 15:56:12 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Apple Computer
[2010.10.18 15:32:05 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2010.10.18 15:22:35 | 000,000,000 | ---D | C] -- C:\Programme\Adobe Photoshop CS5 (64 Bit)
[2010.10.18 15:22:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Photoshop CS5
[2010.10.18 15:21:49 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM
[2010.10.18 15:21:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Illustrator CS5
[2010.10.18 15:21:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Fireworks CS5
[2010.10.18 15:20:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Dreamweaver CS5
[2010.10.18 15:20:12 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Adobe
[2010.10.18 15:19:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Encore CS5
[2010.10.18 15:19:30 | 000,000,000 | ---D | C] -- C:\Programme\Adobe Premiere Pro CS5
[2010.10.18 15:19:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Soundbooth CS5
[2010.10.18 15:19:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Premiere Pro CS4
[2010.10.18 15:19:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe OnLocation CS5
[2010.10.18 15:19:01 | 000,000,000 | ---D | C] -- C:\Programme\Adobe After Effects CS5
[2010.10.18 15:18:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Flash CS5
[2010.10.18 15:18:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Bridge CS5
[2010.10.18 15:18:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Device Central CS5
[2010.10.18 15:17:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Media Player
[2010.10.18 15:17:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe InDesign CS5
[2010.10.18 15:16:51 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Adobe
[2010.10.18 15:16:50 | 000,000,000 | ---D | C] -- C:\Programme\Adobe
[2010.10.18 15:16:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Extension Manager CS5
[2010.10.18 15:16:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2010.10.18 15:16:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2010.10.18 15:15:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010.10.18 15:15:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010.10.18 15:11:26 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Adobe
[2010.10.18 14:48:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\NeroVision
[2010.10.18 14:46:39 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Nero_AG
[2010.10.18 14:46:30 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Nero
[2010.10.18 14:46:19 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Nero
[2010.10.18 14:45:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2010.10.18 14:43:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2010.10.18 14:42:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2010.10.18 14:40:16 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\vlc
[2010.10.18 14:18:03 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Apple Computer
[2010.10.18 13:57:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2010.10.18 13:57:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2010.10.18 13:57:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2010.10.18 13:57:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2010.10.18 13:57:24 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Apple
[2010.10.18 13:57:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2010.10.18 13:45:51 | 000,091,568 | ---- | C] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys
[2010.10.18 13:45:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PowerISO
[2010.10.18 13:18:50 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010.10.18 13:15:07 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\HD Tune Pro
[2010.10.18 13:14:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HD Tune Pro
[2010.10.17 20:24:39 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
[2010.10.17 20:24:39 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
[2010.10.17 20:24:39 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
[2010.10.17 20:24:39 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
[2010.10.17 20:24:38 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
[2010.10.17 20:24:38 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
[2010.10.17 20:24:38 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2010.10.17 20:24:38 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2010.10.17 20:24:38 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
[2010.10.17 20:24:38 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2010.10.17 20:24:38 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
[2010.10.17 20:24:38 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2010.10.17 20:24:38 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
[2010.10.17 20:24:38 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2010.10.17 20:24:38 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
[2010.10.17 20:24:38 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
[2010.10.17 20:24:37 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
[2010.10.17 20:24:37 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
[2010.10.17 20:24:37 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
[2010.10.17 20:24:37 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
[2010.10.17 20:24:37 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
[2010.10.17 20:24:37 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
[2010.10.17 20:24:37 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
[2010.10.17 20:24:37 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
[2010.10.17 20:24:37 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
[2010.10.17 20:24:37 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
[2010.10.17 20:24:37 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
[2010.10.17 20:24:37 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
[2010.10.17 20:24:37 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
[2010.10.17 20:24:37 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
[2010.10.17 20:24:36 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
[2010.10.17 20:24:36 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
[2010.10.17 20:24:36 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
[2010.10.17 20:24:36 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2010.10.17 20:24:36 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2010.10.17 20:24:36 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2010.10.17 20:24:36 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
[2010.10.17 20:24:36 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2010.10.17 20:24:36 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2010.10.17 20:24:36 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2010.10.17 20:24:36 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
[2010.10.17 20:24:36 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
[2010.10.17 20:24:35 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2010.10.17 20:24:35 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2010.10.17 20:24:35 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2010.10.17 20:24:35 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2010.10.17 20:24:35 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2010.10.17 20:24:35 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2010.10.17 20:24:35 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2010.10.17 20:24:35 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2010.10.17 20:24:35 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2010.10.17 20:24:35 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2010.10.17 20:24:34 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2010.10.17 20:24:34 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2010.10.17 20:24:34 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2010.10.17 20:24:34 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2010.10.17 20:24:34 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2010.10.17 20:24:34 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2010.10.17 20:24:34 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2010.10.17 20:24:34 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2010.10.17 20:24:34 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2010.10.17 20:24:34 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2010.10.17 20:24:33 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2010.10.17 20:24:33 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2010.10.17 20:24:33 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2010.10.17 20:24:33 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2010.10.17 20:24:33 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2010.10.17 20:24:33 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2010.10.17 20:24:33 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2010.10.17 20:24:33 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2010.10.17 20:24:33 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2010.10.17 20:24:33 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2010.10.17 20:24:33 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2010.10.17 20:24:33 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2010.10.17 20:24:33 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2010.10.17 20:24:33 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2010.10.17 20:24:32 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2010.10.17 20:24:32 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2010.10.17 20:24:32 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2010.10.17 20:24:32 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2010.10.17 20:24:32 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2010.10.17 20:24:32 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2010.10.17 20:24:32 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2010.10.17 20:24:32 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2010.10.17 20:24:32 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2010.10.17 20:24:32 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2010.10.17 20:24:32 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2010.10.17 20:24:32 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2010.10.17 20:24:31 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2010.10.17 20:24:31 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2010.10.17 20:24:31 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2010.10.17 20:24:31 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2010.10.17 20:24:31 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2010.10.17 20:24:31 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2010.10.17 20:24:31 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2010.10.17 20:24:31 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2010.10.17 20:24:31 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2010.10.17 20:24:31 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2010.10.17 20:24:31 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2010.10.17 20:19:24 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2010.10.13 20:50:44 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Macromedia
[2010.10.13 20:50:44 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Adobe
[2010.10.13 20:39:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2010.10.13 20:28:40 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\WinRAR
[2010.10.13 20:06:08 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR
[2010.10.13 18:32:24 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Thunderbird
[2010.10.13 18:27:42 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\ATI
[2010.10.13 18:27:42 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\ATI
[2010.10.13 18:27:42 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2010.10.13 18:26:09 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\ATI Technologies
[2010.10.13 18:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2010.10.13 18:26:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI
[2010.10.13 18:25:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2010.10.13 18:25:15 | 000,000,000 | ---D | C] -- C:\ATI
[2010.10.13 18:10:17 | 000,347,680 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2010.10.13 18:10:17 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2010.10.13 18:09:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Renesas Electronics
[2010.10.13 18:07:29 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2010.10.13 18:07:29 | 000,000,000 | ---D | C] -- C:\Programme\Realtek
[2010.10.13 18:07:22 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2010.10.13 18:07:22 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2010.10.13 18:07:22 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2010.10.13 18:07:22 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2010.10.13 18:07:22 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2010.10.13 18:07:21 | 002,618,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2010.10.13 18:07:21 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2010.10.13 18:07:21 | 002,032,232 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2010.10.13 18:07:21 | 001,213,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2010.10.13 18:07:21 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2010.10.13 18:07:21 | 000,607,832 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBAPO64.dll
[2010.10.13 18:07:21 | 000,531,032 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\MBAPO32.dll
[2010.10.13 18:07:21 | 000,476,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2010.10.13 18:07:21 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2010.10.13 18:07:21 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2010.10.13 18:07:21 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010.10.13 18:07:21 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2010.10.13 18:07:21 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2010.10.13 18:07:21 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2010.10.13 18:07:21 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2010.10.13 18:07:21 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2010.10.13 18:07:21 | 000,080,984 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBWrp64.dll
[2010.10.13 18:07:21 | 000,076,904 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2010.10.13 18:07:21 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2010.10.13 18:07:21 | 000,064,600 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBppld64.dll
[2010.10.13 18:07:21 | 000,060,504 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBPPCn64.dll
[2010.10.13 18:07:20 | 000,330,656 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2010.10.13 18:07:20 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2010.10.13 18:07:20 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2010.10.13 18:07:20 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010.10.13 18:07:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2010.10.13 18:07:17 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2010.10.13 18:07:17 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2010.10.13 18:07:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010.10.13 18:04:55 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies
[2010.10.13 18:04:53 | 000,000,000 | ---D | C] -- C:\Programme\ATI
[2010.10.13 18:04:35 | 000,067,128 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys
[2010.10.13 18:04:35 | 000,028,216 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys
[2010.10.13 18:04:35 | 000,016,440 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\drivers\AtiPcie.sys
[2010.10.13 17:56:18 | 000,046,592 | ---- | C] (Zone Labs Inc.) -- C:\Windows\SysWow64\vsutil_loc0407.dll
[2010.10.13 17:56:16 | 000,374,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2010.10.13 17:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint
[2010.10.13 17:53:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Mozilla
[2010.10.13 17:53:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Mozilla
[2010.10.13 17:52:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010.10.13 17:52:43 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010.10.13 17:51:22 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Searches
[2010.10.13 17:51:16 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Identities
[2010.10.13 17:51:15 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Contacts
[2010.10.13 17:51:14 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\VirtualStore
[2010.10.13 17:51:09 | 000,000,000 | --SD | C] -- C:\Users\XXXXX\AppData\Roaming\Microsoft
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Videos
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Saved Games
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Pictures
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Music
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Links
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Favorites
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Downloads
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Documents
[2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Desktop
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Vorlagen
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\AppData\Local\Verlauf
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\AppData\Local\Temporary Internet Files
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Startmenü
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\SendTo
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Recent
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Netzwerkumgebung
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Lokale Einstellungen
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Documents\Eigene Videos
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Documents\Eigene Musik
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Eigene Dateien
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Documents\Eigene Bilder
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Druckumgebung
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Cookies
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\AppData\Local\Anwendungsdaten
[2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Anwendungsdaten
[2010.10.13 17:51:09 | 000,000,000 | -H-D | C] -- C:\Users\XXXXX\AppData
[2010.10.13 17:51:09 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Temp
[2010.10.13 17:51:09 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Microsoft
[2010.10.13 17:51:09 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Media Center Programs
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Programme
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop
[2010.10.13 17:49:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2010.10.13 17:45:41 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010.10.13 17:45:40 | 000,000,000 | ---D | C] -- C:\Windows\CSC
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.11.10 11:00:58 | 000,000,570 | ---- | M] () -- C:\Users\Public\Desktop\Total Commander.lnk
[2010.11.10 10:52:24 | 000,000,558 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.10 10:51:43 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.11.10 10:51:43 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2010.11.10 10:51:43 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.11.10 10:51:43 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2010.11.10 10:51:43 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.11.10 10:46:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.11.10 10:46:24 | 2145,198,079 | -HS- | M] () -- C:\hiberfil.sys
[2010.11.10 10:46:23 | 001,474,832 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat
[2010.11.10 10:45:29 | 002,388,818 | ---- | M] () -- C:\Users\XXXXX\Documents\pinfect.zip
[2010.11.10 10:25:00 | 000,000,054 | ---- | M] () -- C:\Windows\Lic.xxx
[2010.11.10 10:15:27 | 000,012,448 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.11.10 10:15:27 | 000,012,448 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.11.10 09:59:56 | 000,002,965 | ---- | M] () -- C:\Users\XXXXX\Desktop\HiJackThis.lnk
[2010.11.10 09:46:41 | 000,003,544 | ---- | M] () -- C:\bootsqm.dat
[2010.11.10 01:21:17 | 000,000,749 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk
[2010.11.10 01:06:31 | 000,632,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr80.dll
[2010.11.10 01:06:30 | 000,554,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp80.dll
[2010.11.10 01:06:29 | 000,034,048 | ---- | M] (MicroWorld Technologies Inc.) -- C:\Windows\SysWow64\eEmpty.exe
[2010.11.10 01:05:22 | 004,943,536 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.11.10 01:04:15 | 000,002,666 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2010.11.10 00:27:21 | 068,866,904 | ---- | M] () -- C:\Users\XXXXX\Desktop\mwav.exe
[2010.11.10 00:26:03 | 000,013,312 | ---- | M] () -- C:\Users\XXXXX\Desktop\find.bat
[2010.11.09 22:26:50 | 011,496,501 | ---- | M] () -- C:\Users\XXXXX\Desktop\angelmahr_XXXXX.MOV
[2010.11.09 21:54:02 | 000,001,988 | ---- | M] () -- C:\Users\Public\Desktop\SUPER ©.lnk
[2010.11.09 21:22:24 | 269,949,362 | ---- | M] () -- C:\Users\XXXXX\Desktop\whiteboard_animation.mpeg
[2010.11.08 17:21:03 | 000,000,531 | ---- | M] () -- C:\Users\XXXXX\Desktop\BrettspielWelt.lnk
[2010.11.08 17:19:50 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2010.11.08 17:19:50 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010.11.08 17:19:50 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010.11.08 17:19:50 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010.11.04 21:38:25 | 000,000,685 | ---- | M] () -- C:\Users\Public\Desktop\ArcaniA - Gothic 4 starten.lnk
[2010.11.01 17:25:17 | 000,006,554 | ---- | M] () -- C:\Windows\SysNative\cwlog.dtl
[2010.11.01 17:25:15 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppcommdlg.dll
[2010.11.01 17:25:14 | 000,419,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2010.11.01 17:25:13 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2010.11.01 17:25:12 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppwmi.dll
[2010.11.01 17:25:11 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2010.11.01 17:25:05 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2010.11.01 17:25:05 | 000,349,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2010.11.01 17:25:05 | 000,107,946 | ---- | M] () -- C:\Windows\SysNative\slmgr.vbs
[2010.11.01 17:25:05 | 000,002,048 | ---- | M] () -- C:\Windows\SysNative\winver.exe
[2010.10.28 17:27:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf
[2010.10.25 20:56:47 | 000,000,524 | ---- | M] () -- C:\Users\XXXXX\Desktop\Xpadder.lnk
[2010.10.25 17:45:39 | 000,000,637 | ---- | M] () -- C:\Users\Public\Desktop\Split Second.lnk
[2010.10.21 09:33:06 | 000,001,213 | ---- | M] () -- C:\Users\XXXXX\Desktop\Downloads.lnk
[2010.10.21 09:33:06 | 000,001,120 | ---- | M] () -- C:\Users\XXXXX\Desktop\Adobe After Effects CS5.lnk
[2010.10.20 22:46:04 | 000,000,620 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.10.20 17:24:32 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010.10.19 12:41:26 | 000,001,268 | ---- | M] () -- C:\Users\XXXXX\Desktop\Revo Uninstaller.lnk
[2010.10.18 19:58:44 | 000,000,368 | ---- | M] () -- C:\HochschuleAnhalt_Bitvise.tlp
[2010.10.18 19:54:25 | 000,001,244 | ---- | M] () -- C:\Users\Public\Desktop\Tunnelier.lnk
[2010.10.18 19:50:02 | 000,001,017 | ---- | M] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2010.10.18 16:08:22 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2010.10.18 16:06:44 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2010.10.18 15:59:42 | 000,000,746 | ---- | M] () -- C:\Users\XXXXX\Desktop\Trillian.lnk
[2010.10.18 15:59:42 | 000,000,662 | ---- | M] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
[2010.10.18 14:44:25 | 000,002,987 | ---- | M] () -- C:\Users\Public\Desktop\Nero Vision 10.lnk
[2010.10.18 14:43:20 | 000,002,937 | ---- | M] () -- C:\Users\Public\Desktop\Nero Burning ROM 10.lnk
[2010.10.18 14:40:13 | 000,000,610 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2010.10.18 13:45:52 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\PowerISO.lnk
[2010.10.18 13:42:49 | 000,000,000 | ---- | M] () -- C:\Windows\Bench32.INI
[2010.10.13 23:55:58 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.10.13 18:32:23 | 000,000,768 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2010.10.13 18:27:15 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2010.10.13 17:52:55 | 000,001,943 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010.10.13 17:49:21 | 000,000,751 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2010.10.13 17:49:21 | 000,000,751 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.11.10 11:34:27 | 000,035,965 | ---- | C] () -- C:\Users\XXXXX\Desktop\logs.zip
[2010.11.10 11:00:58 | 000,000,570 | ---- | C] () -- C:\Users\Public\Desktop\Total Commander.lnk
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2010.11.10 10:52:24 | 000,000,558 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.10 09:59:56 | 000,002,965 | ---- | C] () -- C:\Users\XXXXX\Desktop\HiJackThis.lnk
[2010.11.10 09:46:41 | 000,003,544 | ---- | C] () -- C:\bootsqm.dat
[2010.11.10 01:21:17 | 000,000,749 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk
[2010.11.10 01:17:48 | 002,388,818 | ---- | C] () -- C:\Users\XXXXX\Documents\pinfect.zip
[2010.11.10 01:06:44 | 000,000,054 | ---- | C] () -- C:\Windows\Lic.xxx
[2010.11.10 00:26:03 | 000,013,312 | ---- | C] () -- C:\Users\XXXXX\Desktop\find.bat
[2010.11.10 00:25:57 | 068,866,904 | ---- | C] () -- C:\Users\XXXXX\Desktop\mwav.exe
[2010.11.09 22:26:50 | 011,496,501 | ---- | C] () -- C:\Users\XXXXX\Desktop\angelmahr_XXXXX.MOV
[2010.11.09 21:12:10 | 269,949,362 | ---- | C] () -- C:\Users\XXXXX\Desktop\whiteboard_animation.mpeg
[2010.11.08 17:21:03 | 000,000,531 | ---- | C] () -- C:\Users\XXXXX\Desktop\BrettspielWelt.lnk
[2010.11.04 21:38:25 | 000,000,685 | ---- | C] () -- C:\Users\Public\Desktop\ArcaniA - Gothic 4 starten.lnk
[2010.11.02 22:35:15 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\RLMPCDec.ax
[2010.11.02 22:35:15 | 000,070,656 | RHS- | C] () -- C:\Windows\SysWow64\RLAPEDec.ax
[2010.11.02 22:35:15 | 000,051,712 | RHS- | C] () -- C:\Windows\SysWow64\RLSpeexDec.ax
[2010.11.02 22:35:15 | 000,001,988 | ---- | C] () -- C:\Users\Public\Desktop\SUPER ©.lnk
[2010.11.02 22:35:14 | 000,227,328 | RHS- | C] () -- C:\Windows\SysWow64\ac3DX.ax
[2010.11.02 22:35:14 | 000,175,104 | RHS- | C] () -- C:\Windows\SysWow64\CoreAAC.ax
[2010.11.02 22:35:14 | 000,120,832 | RHS- | C] () -- C:\Windows\SysWow64\MPCDx.ax
[2010.11.02 22:35:14 | 000,097,280 | RHS- | C] () -- C:\Windows\SysWow64\FLACDX.ax
[2010.11.02 22:35:14 | 000,081,920 | RHS- | C] () -- C:\Windows\SysWow64\aac_parser.ax
[2010.11.01 19:16:56 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2010.11.01 17:25:11 | 000,006,554 | ---- | C] () -- C:\Windows\SysNative\cwlog.dtl
[2010.10.28 17:27:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf
[2010.10.27 21:40:17 | 000,020,480 | ---- | C] () -- C:\Windows\FixCamera.exe
[2010.10.27 21:40:16 | 000,835,584 | ---- | C] () -- C:\Windows\vsnp325.exe
[2010.10.27 21:40:16 | 000,270,336 | ---- | C] () -- C:\Windows\tsnp325.exe
[2010.10.27 21:40:16 | 000,015,498 | ---- | C] () -- C:\Windows\snp325.ini
[2010.10.27 21:40:16 | 000,013,023 | ---- | C] () -- C:\Windows\snp325.src
[2010.10.25 20:56:47 | 000,000,524 | ---- | C] () -- C:\Users\XXXXX\Desktop\Xpadder.lnk
[2010.10.25 17:45:39 | 000,000,637 | ---- | C] () -- C:\Users\Public\Desktop\Split Second.lnk
[2010.10.20 22:25:22 | 000,000,620 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.10.20 17:24:32 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010.10.19 19:37:47 | 000,000,368 | ---- | C] () -- C:\HochschuleAnhalt_Bitvise.tlp
[2010.10.19 12:51:03 | 001,474,832 | ---- | C] () -- C:\Windows\SysNative\drivers\sfi.dat
[2010.10.19 12:41:26 | 000,001,268 | ---- | C] () -- C:\Users\XXXXX\Desktop\Revo Uninstaller.lnk
[2010.10.18 19:54:25 | 000,001,244 | ---- | C] () -- C:\Users\Public\Desktop\Tunnelier.lnk
[2010.10.18 19:50:02 | 000,001,017 | ---- | C] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2010.10.18 16:08:22 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.10.18 16:06:44 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2010.10.18 15:59:42 | 000,000,746 | ---- | C] () -- C:\Users\XXXXX\Desktop\Trillian.lnk
[2010.10.18 15:59:42 | 000,000,662 | ---- | C] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
[2010.10.18 15:34:55 | 000,001,120 | ---- | C] () -- C:\Users\XXXXX\Desktop\Adobe After Effects CS5.lnk
[2010.10.18 14:44:25 | 000,002,987 | ---- | C] () -- C:\Users\Public\Desktop\Nero Vision 10.lnk
[2010.10.18 14:43:20 | 000,002,937 | ---- | C] () -- C:\Users\Public\Desktop\Nero Burning ROM 10.lnk
[2010.10.18 14:40:13 | 000,000,610 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2010.10.18 13:45:52 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\PowerISO.lnk
[2010.10.18 13:42:49 | 000,000,000 | ---- | C] () -- C:\Windows\Bench32.INI
[2010.10.17 20:20:54 | 000,002,666 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2010.10.13 23:55:58 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.10.13 18:32:23 | 000,000,768 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2010.10.13 18:27:15 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.10.13 18:10:17 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2010.10.13 18:04:24 | 000,001,213 | ---- | C] () -- C:\Users\XXXXX\Desktop\Downloads.lnk
[2010.10.13 17:52:55 | 000,001,943 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010.10.13 17:45:23 | 2145,198,079 | -HS- | C] () -- C:\hiberfil.sys
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 1129 bytes -> C:\Users\XXXXX\AppData\Local\Temp:KlGCdpi7gBOzKzdw2fjtq
 
< End of report >
         
--- --- ---

Alt 11.11.2010, 07:35   #2
kira
/// Helfer-Team
 
System wird langsam zugemüllt - Systemlast immer bei 50% - Standard

System wird langsam zugemüllt - Systemlast immer bei 50%



Hallo und Herzlich Willkommen!

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vB Code Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen

eScan:
Ich würde dem Programm nicht vertrauen, da meistens die angeblichen Funde nicht nachvollziehbar sind bzw oft Fehldiagnose ausgibt


Fund v. Malwarebytes:
in diesem Sinne kein Virus, sondern gehört nur Kategorie "Riskware" ..."unerwünschten Programm" (
Code:
ATTFilter
CryptLoad - router\FRITZ!Box - "not-a-virus:RemoteAdmin.Win32.NetCat"
         
Code:
ATTFilter
Potentiell gefährliche Anwendungen (Riskware): Solche Programme verfügen nicht über schädliche Funktionen, können aber unter bestimmten Umständen von Angreifern als Hilfskomponenten eines schädlichen Programms verwendet werden, weil sie Schwachstellen und Fehler enthalten. Unter bestimmten Umständen entsteht durch das Vorhandensein solcher Programme auf dem Computer ein Sicherheitsrisiko für Ihre Daten. Zu dieser Kategorie zählen beispielsweise bestimmte Dienstprogramme zur entfernten Administration, Programme zum automatischen Umschalten der Tastaturbelegung, IRC-Clients, FTP-Server, unterschiedliche Dienstprogramme zum Erstellen oder zum Verstecken von Prozessen.
         
1.
- Lade dir Random's System Information Tool (RSIT) von random/random herunter
- an einen Ort deiner Wahl und führe die rsit.exe aus
- wird "Hijackthis" auch von RSIT installiert und ausgeführt
- RSIT erstellt 2 Logfiles (C:\rsit\log.txt und C:\rsit\info.txt) mit erweiterten Infos von deinem System - diese beide bitte komplett hier posten
**Kannst Du das Log in Textdatei speichern und hier anhängen (auf "Erweitert" klicken)

2.
Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken:
System-Dateien und -Ordner unter XP und Vista sichtbar machen
Am Ende unserer Arbeit, kannst wieder rückgängig machen!

3.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - bei Win7 wähle Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool "Ccleaner" herunter
→ "Download"→ " Download from FileHippo.com"
→ "Download"→ " Download from FileHippo.com"
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
gruß
Coverflow
__________________


Antwort

Themen zu System wird langsam zugemüllt - Systemlast immer bei 50%
64-bit, abgesicherten, adobe after effects, alternate, anhang, antivir, avgntflt.sys, beste, besten, black, c:\windows\system32\rundll32.exe, direkt, entfernt, escan, festplatte, file, firefox.exe, hijack, hijackthis, ieframe.dll, indesign, install.exe, installiert, keine programme, langsam, load.exe, location, log, log file, malwarebytes, media center, modus, mozilla thunderbird, neu, ntdll.dll, oldtimer, ordner, otl.exe, plug-in, poweriso, programdata, programme, quarantäne, revo uninstaller, richtlinie, saver, sched.exe, schädling, searchplugins, shell32.dll, shortcut, start menu, super, system, system wird langsam, systemlast, syswow64, usb 3.0, vlc media player, web, webcheck, zugemüllt



Ähnliche Themen: System wird langsam zugemüllt - Systemlast immer bei 50%


  1. Windows 8.1 Viele Fehler. Unerwünschte Werbung, Pop Up, System wird immer langsamer
    Plagegeister aller Art und deren Bekämpfung - 04.04.2015 (17)
  2. Firefox lädt langsam,in bodenleiste wird immer web1security.net angezeigt
    Plagegeister aller Art und deren Bekämpfung - 12.01.2015 (5)
  3. Windows Vista: Festplatte wird zugemüllt, ist das ein Virus oder Systemfehler?
    Plagegeister aller Art und deren Bekämpfung - 14.12.2014 (15)
  4. Windows 8: System wird immer langsamer, speziell der Webbrowser.
    Log-Analyse und Auswertung - 13.07.2014 (17)
  5. Notebook wird immer langsam - etwas eingefangen?
    Plagegeister aller Art und deren Bekämpfung - 10.03.2014 (19)
  6. Taskmanager schließt sich sofort wieder und System wird immer langsamer
    Plagegeister aller Art und deren Bekämpfung - 27.12.2012 (4)
  7. Firewall (XP) wird deaktivert und System ist langsam
    Log-Analyse und Auswertung - 26.12.2012 (5)
  8. Trojaner/? Virus ? ...System wird immer langsamer .....was kann ich tun
    Plagegeister aller Art und deren Bekämpfung - 07.03.2012 (8)
  9. System wird langsam :(
    Log-Analyse und Auswertung - 26.12.2011 (1)
  10. Vermute Befall, weil System immer langsamer wird
    Log-Analyse und Auswertung - 25.07.2011 (11)
  11. PC unglaublich langsam, und es wird immer schlimmer
    Plagegeister aller Art und deren Bekämpfung - 25.08.2010 (33)
  12. PC sehr langsam - Zugemüllt
    Log-Analyse und Auswertung - 07.05.2010 (6)
  13. System wird immer langsamer logfile hier
    Mülltonne - 19.02.2010 (1)
  14. Werbefenster öffnen ungefragt, System wird sehr langsam
    Plagegeister aller Art und deren Bekämpfung - 29.11.2008 (1)
  15. !! Hilfe!!! Verzweiflung!! System wird immer wieder Infiziert
    Plagegeister aller Art und deren Bekämpfung - 15.10.2006 (5)
  16. Hilfe! Mein Computer wird zugemüllt!
    Plagegeister aller Art und deren Bekämpfung - 08.07.2005 (11)
  17. System win 98 wird immer langsamer
    Plagegeister aller Art und deren Bekämpfung - 15.11.2004 (1)

Zum Thema System wird langsam zugemüllt - Systemlast immer bei 50% - Hallo, ich bin neu hier und verzweifle langsam mit meinem Problem. Ich hoffe hier kann mir geholfen werden. Seit einigen Tagen war mein System im Leerlauf ständig bei 50-60% Auslastung - System wird langsam zugemüllt - Systemlast immer bei 50%...
Archiv
Du betrachtest: System wird langsam zugemüllt - Systemlast immer bei 50% auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.