| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: tmz.exe lässt eigene Dateien verschwindenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
18.04.2011, 19:12
| #1 |
 |  tmz.exe lässt eigene Dateien verschwinden Hallo, Mein Freund hat einen Virus der heißt tmz.exe in C:/Users/Benutzername/AppData/Lokal/Temp/tmz. Eigene Dateien sind verschwunden aber noch auf der festplatte. Auf C:/ steht dieser Ordner ist leer aber es sind 160GB belegter Speicher Auf dem Datenträger. Kann man den PC noch retten? Und wie? LG ordinary |
|
18.04.2011, 19:14
| #2 |
| /// Malware-holic   | tmz.exe lässt eigene Dateien verschwinden Systemscan mit OTL
__________________download otl: http://filepony.de/download-otl/ Doppelklick auf die OTL.exe (user von Windows 7 und Vista: Rechtsklick als Administrator ausführen) 1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output 2. Hake an "scan all users" 3. Unter "Extra Registry wähle: "Use Safelist" "LOP Check" "Purity Check" 4. Kopiere in die Textbox: netsvcs msconfig safebootminimal safebootnetwork activex drivers32 %ALLUSERSPROFILE%\Application Data\*. %ALLUSERSPROFILE%\Application Data\*.exe /s %APPDATA%\*. %APPDATA%\*.exe /s %SYSTEMDRIVE%\*.exe /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL explorer.exe iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles CREATERESTOREPOINT 5. Klicke "Scan" 6. 2 reporte werden erstellt: OTL.Txt Extras.Txt beide posten
__________________ |
|
18.04.2011, 20:01
| #3 |
| | tmz.exe lässt eigene Dateien verschwinden 1.OTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 18.04.2011 20:47:26 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\David\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 77,00% Memory free 16,00 Gb Paging File | 14,00 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 931,41 Gb Total Space | 786,94 Gb Free Space | 84,49% Space Free | Partition Type: NTFS Drive H: | 3,62 Gb Total Space | 3,62 Gb Free Space | 99,98% Space Free | Partition Type: FAT32 Computer Name: DAVID-PC | User Name: David | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\David\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Users\David\AppData\Local\Temp\Tmz.exe (PC Tools) PRC - C:\Windows\Tnoqaa.exe (PC Tools) PRC - C:\Windows\SysWOW64\PnkBstrA.exe () PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Avira GmbH) PRC - C:\program files (x86)\avira\antivir desktop\avcenter.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Windows\KMService.exe () PRC - C:\Windows\SysWOW64\srvany.exe () PRC - C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe (TuneUp Software) PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) PRC - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe (Gigabyte Technology CO., LTD.) PRC - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe (Gigabyte Technology CO., LTD.) PRC - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe () PRC - C:\Program Files (x86)\RocketDock\RocketDock.exe () ========== Modules (SafeList) ========== MOD - C:\Users\David\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software) SRV:64bit: - (AppleChargerSrv) -- C:\Windows\SysNative\AppleChargerSrv.exe () SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (KMService) -- C:\Windows\SysWOW64\srvany.exe () SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software) SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) SRV - (Smart TimeLock) -- C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe (Gigabyte Technology CO., LTD.) SRV - (DES2 Service) -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe () SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys () DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation) DRV:64bit: - (MEIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions) DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation) DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation) DRV:64bit: - (AppleCharger) -- C:\Windows\SysNative\drivers\AppleCharger.sys () DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) Server 2003 DDK provider) DRV - (GVTDrv64) -- C:\Windows\GVTDrv64.sys () DRV - (etdrv) -- C:\Windows\etdrv.sys (Windows (R) Server 2003 DDK provider) DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys (TuneUp Software) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3330391774-2578689632-2771703340-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6 FF - prefs.js..extensions.enabledItems: {01A8CA0A-4C96-465b-A49B-65C46FAD54F9}:6.0 FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {E907A6FB-9C7F-4FC8-BD54-4D24BAE4C4B0}:1.9.1 FF - HKLM\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011.04.16 15:35:03 | 000,000,000 | -H-D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011.04.16 17:27:25 | 000,000,000 | -H-D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011.04.16 17:27:26 | 000,000,000 | -H-D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.04.15 23:31:41 | 000,000,000 | -H-D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.04.18 01:27:40 | 000,000,000 | -H-D | M] [2011.04.15 23:54:06 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\David\AppData\Roaming\mozilla\Extensions [2011.04.18 13:42:50 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\David\AppData\Roaming\mozilla\Firefox\Profiles\sp68ntrl.default\extensions [2011.04.16 00:13:52 | 000,000,000 | -H-D | M] (Adblock Plus) -- C:\Users\David\AppData\Roaming\mozilla\Firefox\Profiles\sp68ntrl.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011.04.16 00:06:54 | 000,000,000 | -H-D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011.04.16 15:35:03 | 000,000,000 | -H-D | M] (Adobe Contribute Toolbar) -- C:\PROGRAM FILES (X86)\ADOBE\ADOBE CONTRIBUTE CS5\PLUGINS\FIREFOXPLUGIN\{01A8CA0A-4C96-465B-A49B-65C46FAD54F9} [2011.04.16 17:27:25 | 000,000,000 | -H-D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\HTML5VIDEO [2011.04.16 17:27:26 | 000,000,000 | -H-D | M] (DivX HiQ) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\WPA [2011.04.18 13:24:34 | 000,000,000 | -H-D | M] (XULRunner) -- C:\USERS\DAVID\APPDATA\LOCAL\{E907A6FB-9C7F-4FC8-BD54-4D24BAE4C4B0} [2010.03.27 18:06:04 | 000,067,032 | -H-- | M] (Adobe Systems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npContribute.dll [2010.04.01 18:54:38 | 000,001,392 | -H-- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.04.01 18:54:38 | 000,002,344 | -H-- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.04.01 18:54:38 | 000,006,805 | -H-- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2010.04.01 18:54:38 | 000,001,178 | -H-- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.04.01 18:54:38 | 000,001,105 | -H-- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKU\.DEFAULT..\Run: [94CCCDB3307A9707] C:\sdfsdfsfdsf\sdfsdfsfdsf.exe (ds SOFTWIN Fas) O4 - HKU\S-1-5-18..\Run: [94CCCDB3307A9707] C:\sdfsdfsfdsf\sdfsdfsfdsf.exe (ds SOFTWIN Fas) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3330391774-2578689632-2771703340-1000..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe () O4:64bit: - HKLM..\RunOnce: [RPMKickstart] C:\Programme\GIGABYTE\SMART6\Recovery\RPMKickstart.exe (Gigabyte Technology CO., LTD.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1 O7 - HKU\S-1-5-21-3330391774-2578689632-2771703340-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1 O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.186.97 192.168.0.1 O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:64bit: UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software) NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpReg: 0ESKOMO9JO - hkey= - key= - C:\Users\David\AppData\Local\Temp\Tmz.exe (PC Tools) MsConfig:64bit - StartUpReg: BCSSync - hkey= - key= - C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) MsConfig:64bit - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) MsConfig:64bit - StartUpReg: DivXUpdate - hkey= - key= - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () MsConfig:64bit - StartUpReg: Gxohohomatum - hkey= - key= - C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) MsConfig:64bit - StartUpReg: ICQ - hkey= - key= - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.) MsConfig:64bit - StartUpReg: PFmPbJoHGuT - hkey= - key= - C:\ProgramData\PFmPbJoHGuT.exe (BitSprx) MsConfig:64bit - StartUpReg: Steam - hkey= - key= - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) MsConfig:64bit - StartUpReg: SwitchBoard - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: Xseqozuzeq - hkey= - key= - C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) MsConfig:64bit - State: "startup" - Reg Error: Key error. SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:64bit: Base - Driver Group SafeBootMin:64bit: Boot Bus Extender - Driver Group SafeBootMin:64bit: Boot file system - Driver Group SafeBootMin:64bit: File system - Driver Group SafeBootMin:64bit: Filter - Driver Group SafeBootMin:64bit: HelpSvc - Service SafeBootMin:64bit: PCI Configuration - Driver Group SafeBootMin:64bit: PNP Filter - Driver Group SafeBootMin:64bit: Primary disk - Driver Group SafeBootMin:64bit: sacsvr - Service SafeBootMin:64bit: SCSI Class - Driver Group SafeBootMin:64bit: System Bus Extender - Driver Group SafeBootMin:64bit: vmms - Service SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:64bit: Base - Driver Group SafeBootNet:64bit: Boot Bus Extender - Driver Group SafeBootNet:64bit: Boot file system - Driver Group SafeBootNet:64bit: File system - Driver Group SafeBootNet:64bit: Filter - Driver Group SafeBootNet:64bit: HelpSvc - Service SafeBootNet:64bit: Messenger - Service SafeBootNet:64bit: NDIS Wrapper - Driver Group SafeBootNet:64bit: NetBIOSGroup - Driver Group SafeBootNet:64bit: NetDDEGroup - Driver Group SafeBootNet:64bit: Network - Driver Group SafeBootNet:64bit: NetworkProvider - Driver Group SafeBootNet:64bit: PCI Configuration - Driver Group SafeBootNet:64bit: PNP Filter - Driver Group SafeBootNet:64bit: PNP_TDI - Driver Group SafeBootNet:64bit: Primary disk - Driver Group SafeBootNet:64bit: rdsessmgr - Service SafeBootNet:64bit: sacsvr - Service SafeBootNet:64bit: SCSI Class - Driver Group SafeBootNet:64bit: Streams Drivers - Driver Group SafeBootNet:64bit: System Bus Extender - Driver Group SafeBootNet:64bit: TDI - Driver Group SafeBootNet:64bit: vmms - Service SafeBootNet:64bit: WudfUsbccidDriver - Driver SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.) Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.) CREATERESTOREPOINT Error creating restore point. ========== Files/Folders - Created Within 30 Days ========== [2011.04.18 20:45:31 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\David\Desktop\OTL.exe [2011.04.18 18:48:05 | 000,168,279 | ---- | C] (Gene6, SARL ) -- C:\Windows\SysWow64\null0.12269730080142949.exe [2011.04.18 18:19:49 | 000,168,279 | -H-- | C] (Gene6, SARL ) -- C:\Windows\SysWow64\null0.6774071707305193.exe [2011.04.18 18:18:47 | 000,168,279 | -H-- | C] (Gene6, SARL ) -- C:\Windows\SysWow64\null0.6623902581643172.exe [2011.04.18 16:46:39 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Convar [2011.04.18 16:32:02 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Avira [2011.04.18 13:36:10 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\CrashRpt [2011.04.18 13:28:44 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll [2011.04.18 13:28:44 | 002,106,216 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll [2011.04.18 13:28:44 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll [2011.04.18 13:28:44 | 001,868,128 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll [2011.04.18 13:28:44 | 000,527,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll [2011.04.18 13:28:44 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll [2011.04.18 13:28:44 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll [2011.04.18 13:28:44 | 000,248,672 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll [2011.04.18 13:28:44 | 000,239,960 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll [2011.04.18 13:28:44 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll [2011.04.18 13:28:44 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll [2011.04.18 13:28:44 | 000,074,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll [2011.04.18 13:28:43 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll [2011.04.18 13:28:43 | 001,998,168 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll [2011.04.18 13:28:43 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2011.04.18 13:28:43 | 000,528,216 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2011.04.18 13:28:43 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll [2011.04.18 13:28:43 | 000,470,880 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll [2011.04.18 13:28:43 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2011.04.18 13:28:43 | 000,074,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2011.04.18 13:28:42 | 000,238,936 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2011.04.18 13:28:42 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2011.04.18 13:28:41 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2011.04.18 13:28:41 | 000,022,360 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2011.04.18 13:28:12 | 000,000,000 | -H-D | C] -- C:\Windows\SysWow64\directx [2011.04.18 13:27:24 | 000,000,000 | -H-D | C] -- C:\Windows\Sun [2011.04.18 13:24:34 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\{E907A6FB-9C7F-4FC8-BD54-4D24BAE4C4B0} [2011.04.18 13:23:11 | 000,124,416 | -H-- | C] (PC Tools) -- C:\Windows\Tnoqaa.exe [2011.04.18 13:23:01 | 000,569,344 | -H-- | C] (BitSprx) -- C:\ProgramData\PFmPbJoHGuT.exe [2011.04.18 01:31:30 | 000,000,000 | -H-D | C] -- C:\ProgramData\regid.1986-12.com.adobe [2011.04.18 01:24:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\McAfee [2011.04.18 01:21:13 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Scan2PDF [2011.04.18 01:21:12 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Scan2PDF [2011.04.18 01:21:12 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Scan2PDF [2011.04.18 01:19:32 | 000,000,000 | -H-D | C] -- C:\ProgramData\Hewlett-Packard [2011.04.18 01:19:27 | 000,000,000 | -H-D | C] -- C:\ProgramData\HP [2011.04.18 01:19:17 | 000,671,816 | -H-- | C] (HP) -- C:\Windows\SysWow64\hpcdmc32.dll [2011.04.18 01:19:17 | 000,233,472 | -H-- | C] (Hewlett Packard Corporation) -- C:\Windows\SysWow64\hpzc35ha.dll [2011.04.18 01:19:17 | 000,131,072 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\hpz3l5ha.dll [2011.04.18 00:24:29 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2011.04.17 23:48:59 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Extractor [2011.04.17 23:48:57 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Universal Extractor [2011.04.17 23:23:52 | 000,000,000 | -H-D | C] -- C:\Users\David\Documents\My Games [2011.04.17 23:23:46 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\InstallShield Installation Information [2011.04.17 23:23:42 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Tournament 3 (LG) [2011.04.17 23:21:07 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Unreal Tournament 3 (LG) [2011.04.17 23:20:57 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2011.04.17 12:38:43 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\PunkBuster [2011.04.17 12:38:42 | 000,000,000 | -H-D | C] -- C:\Users\David\Documents\BFBC2 [2011.04.17 12:38:35 | 000,000,000 | RH-D | C] -- C:\Users\David\AppData\Roaming\SecuROM [2011.04.17 12:29:38 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\TS3Client [2011.04.17 01:38:55 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\WinRAR [2011.04.16 22:50:20 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2011.04.16 22:50:20 | 000,515,416 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2011.04.16 22:50:20 | 000,238,936 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2011.04.16 22:50:20 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2011.04.16 22:50:17 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2011.04.16 22:50:17 | 004,178,264 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2011.04.16 22:50:17 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2011.04.16 22:50:17 | 001,846,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2011.04.16 22:50:17 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2011.04.16 22:50:17 | 000,453,456 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2011.04.16 22:50:16 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2011.04.16 22:50:16 | 000,517,448 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2011.04.16 22:50:16 | 000,235,352 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2011.04.16 22:50:16 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2011.04.16 22:50:16 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2011.04.16 22:50:16 | 000,069,464 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2011.04.16 22:50:16 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2011.04.16 22:50:16 | 000,022,360 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2011.04.16 22:50:15 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2011.04.16 22:50:15 | 002,036,576 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2011.04.16 22:50:15 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2011.04.16 22:50:15 | 000,452,440 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2011.04.16 22:50:14 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2011.04.16 22:50:14 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2011.04.16 22:50:14 | 000,514,384 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2011.04.16 22:50:14 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2011.04.16 22:50:14 | 000,070,992 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2011.04.16 22:50:13 | 000,235,856 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2011.04.16 22:50:13 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2011.04.16 22:50:13 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2011.04.16 22:50:13 | 000,023,376 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2011.04.16 22:50:12 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2011.04.16 22:50:12 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2011.04.16 22:50:11 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2011.04.16 22:50:11 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2011.04.16 22:50:11 | 000,238,088 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2011.04.16 22:50:11 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2011.04.16 22:50:10 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2011.04.16 22:50:10 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2011.04.16 22:50:10 | 000,507,400 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2011.04.16 22:50:10 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2011.04.16 22:50:10 | 000,065,032 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2011.04.16 22:50:09 | 000,238,088 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2011.04.16 22:50:09 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2011.04.16 22:50:09 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2011.04.16 22:50:09 | 000,025,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2011.04.16 22:50:08 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2011.04.16 22:50:08 | 003,850,760 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2011.04.16 22:50:08 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2011.04.16 22:50:08 | 001,491,992 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2011.04.16 22:50:08 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2011.04.16 22:50:08 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2011.04.16 22:50:08 | 000,479,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2011.04.16 22:50:08 | 000,467,984 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2011.04.16 22:50:08 | 000,238,088 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2011.04.16 22:50:08 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2011.04.16 22:50:08 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2011.04.16 22:50:08 | 000,025,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2011.04.16 22:50:07 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2011.04.16 22:50:07 | 003,786,760 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2011.04.16 22:50:07 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2011.04.16 22:50:07 | 001,420,824 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2011.04.16 22:50:07 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2011.04.16 22:50:07 | 000,462,864 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2011.04.16 22:50:07 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2011.04.16 22:50:07 | 000,267,272 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2011.04.16 22:50:06 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2011.04.16 22:50:06 | 003,734,536 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2011.04.16 22:50:06 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2011.04.16 22:50:06 | 001,374,232 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2011.04.16 22:50:06 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2011.04.16 22:50:06 | 000,444,776 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2011.04.16 22:50:05 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2011.04.16 22:50:05 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2011.04.16 22:50:05 | 001,358,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2011.04.16 22:50:05 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2011.04.16 22:50:05 | 000,444,776 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2011.04.16 22:50:05 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2011.04.16 22:50:05 | 000,267,112 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2011.04.16 22:50:04 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2011.04.16 22:50:04 | 001,124,720 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2011.04.16 22:50:04 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2011.04.16 22:50:04 | 000,443,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2011.04.16 22:50:04 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2011.04.16 22:50:04 | 000,266,088 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2011.04.16 22:50:04 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2011.04.16 22:50:04 | 000,017,928 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2011.04.16 22:50:02 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2011.04.16 22:50:01 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll [2011.04.16 22:50:01 | 003,495,784 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll [2011.04.16 22:50:01 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll [2011.04.16 22:50:01 | 001,123,696 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll [2011.04.16 22:50:01 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll [2011.04.16 22:50:01 | 000,443,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll [2011.04.16 22:50:01 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll [2011.04.16 22:50:01 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll [2011.04.16 22:50:01 | 000,261,480 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll [2011.04.16 22:50:01 | 000,255,848 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll [2011.04.16 22:50:00 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2011.04.16 22:50:00 | 003,426,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2011.04.16 22:50:00 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll [2011.04.16 22:50:00 | 000,440,080 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll [2011.04.16 22:50:00 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll [2011.04.16 22:50:00 | 000,251,672 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll [2011.04.16 22:49:59 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll [2011.04.16 22:49:59 | 002,414,360 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll [2011.04.16 22:49:59 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll [2011.04.16 22:49:59 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll [2011.04.16 22:49:59 | 000,237,848 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll [2011.04.16 22:49:59 | 000,236,824 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll [2011.04.16 22:49:59 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll [2011.04.16 22:49:59 | 000,062,744 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll [2011.04.16 22:49:59 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll [2011.04.16 22:49:59 | 000,015,128 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll [2011.04.16 22:49:58 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll [2011.04.16 22:49:58 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll [2011.04.16 22:49:58 | 000,230,168 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll [2011.04.16 22:49:58 | 000,229,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll [2011.04.16 22:49:58 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll [2011.04.16 22:49:58 | 000,062,672 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll [2011.04.16 22:49:54 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll [2011.04.16 22:49:53 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll [2011.04.16 22:49:53 | 002,332,368 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll [2011.04.16 22:49:53 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll [2011.04.16 22:49:53 | 000,230,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll [2011.04.16 22:49:53 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll [2011.04.16 22:49:53 | 000,014,032 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll [2011.04.16 22:49:52 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll [2011.04.16 22:49:52 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll [2011.04.16 22:49:52 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll [2011.04.16 22:49:52 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll [2011.04.16 22:49:52 | 002,337,488 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll [2011.04.16 22:49:52 | 002,323,664 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2011.04.16 22:49:52 | 002,319,568 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll [2011.04.16 22:49:52 | 002,297,552 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll [2011.04.16 22:49:51 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll [2011.04.16 22:49:51 | 002,222,800 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll [2011.04.16 21:32:55 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam [2011.04.16 21:32:55 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Steam [2011.04.16 21:32:55 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\Steam [2011.04.16 20:38:29 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\LolClient [2011.04.16 17:17:35 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\DivX [2011.04.16 17:17:29 | 000,000,000 | -H-D | C] -- C:\ProgramData\Google [2011.04.16 17:17:28 | 000,000,000 | -H-D | C] -- C:\Programme\DivX [2011.04.16 17:17:26 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Google [2011.04.16 17:17:25 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Google [2011.04.16 17:17:25 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus [2011.04.16 17:17:21 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\DivX Shared [2011.04.16 17:17:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\DivX [2011.04.16 17:16:30 | 000,000,000 | -H-D | C] -- C:\ProgramData\DivX [2011.04.16 16:48:02 | 000,034,624 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe [2011.04.16 16:47:56 | 000,036,160 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll [2011.04.16 16:47:56 | 000,029,504 | -H-- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll [2011.04.16 16:47:56 | 000,025,920 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll [2011.04.16 16:47:56 | 000,021,312 | -H-- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll [2011.04.16 16:47:55 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011 [2011.04.16 16:47:44 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\TuneUp Software [2011.04.16 16:47:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\TuneUp Utilities 2011 [2011.04.16 16:47:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\TuneUp Software [2011.04.16 16:47:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2011.04.16 16:43:38 | 000,000,000 | -H-D | C] -- C:\Riot Games [2011.04.16 16:43:38 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games [2011.04.16 16:11:33 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2011.04.16 16:11:33 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2011.04.16 16:11:33 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2011.04.16 16:11:33 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2011.04.16 16:11:33 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2011.04.16 16:11:33 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2011.04.16 16:11:33 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2011.04.16 16:11:33 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2011.04.16 16:11:18 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2011.04.16 15:55:00 | 003,851,784 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2011.04.16 15:55:00 | 001,493,528 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2011.04.16 15:55:00 | 000,509,448 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2011.04.16 15:55:00 | 000,467,984 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2011.04.16 15:55:00 | 000,068,616 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2011.04.16 15:43:37 | 000,000,000 | -H-D | C] -- C:\ProgramData\ALM [2011.04.16 15:40:09 | 000,000,000 | -H-D | C] -- C:\Users\David\Adobe Flash Builder 4 [2011.04.16 15:37:26 | 000,000,000 | -H-D | C] -- C:\Users\Public\Documents\Adobe [2011.04.16 15:35:09 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2011.04.16 15:35:09 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll [2011.04.16 15:35:09 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2011.04.16 15:35:09 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll [2011.04.16 15:35:08 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll [2011.04.16 15:35:08 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll [2011.04.16 15:35:08 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2011.04.16 15:35:08 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2011.04.16 15:35:02 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2011.04.16 15:35:02 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2011.04.16 15:34:58 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2011.04.16 15:34:52 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2011.04.16 15:34:52 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2011.04.16 15:34:52 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2011.04.16 15:34:52 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2011.04.16 15:34:52 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2011.04.16 15:34:52 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2011.04.16 15:34:52 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe [2011.04.16 15:34:52 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe [2011.04.16 15:34:44 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2011.04.16 15:34:42 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2011.04.16 15:34:42 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2011.04.16 15:34:42 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2011.04.16 15:34:42 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2011.04.16 15:34:41 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2011.04.16 15:34:41 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2011.04.16 15:34:41 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2011.04.16 15:34:41 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2011.04.16 15:34:41 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2011.04.16 15:34:41 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2011.04.16 15:34:41 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2011.04.16 15:34:41 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2011.04.16 15:34:41 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2011.04.16 15:34:41 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2011.04.16 15:34:41 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2011.04.16 15:34:40 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2011.04.16 15:34:19 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2011.04.16 15:34:19 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2011.04.16 15:34:18 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2011.04.16 15:34:18 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2011.04.16 15:34:18 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2011.04.16 15:33:56 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2011.04.16 15:33:56 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2011.04.16 15:33:46 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2011.04.16 15:33:44 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011.04.16 15:33:44 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011.04.16 15:33:44 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2011.04.16 15:33:39 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll [2011.04.16 15:33:39 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll [2011.04.16 15:33:36 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll [2011.04.16 15:33:35 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll [2011.04.16 15:33:35 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll [2011.04.16 15:33:35 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll [2011.04.16 15:33:35 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2011.04.16 15:33:35 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll [2011.04.16 15:33:24 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2011.04.16 15:33:21 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2011.04.16 15:33:21 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2011.04.16 15:33:20 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2011.04.16 15:33:12 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll [2011.04.16 15:33:12 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll [2011.04.16 15:33:12 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll [2011.04.16 15:33:12 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll [2011.04.16 15:33:04 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2011.04.16 15:33:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2011.04.16 15:33:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2011.04.16 15:33:04 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2011.04.16 15:33:04 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2011.04.16 15:33:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2011.04.16 15:33:00 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2011.04.16 15:33:00 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll [2011.04.16 15:32:46 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll [2011.04.16 15:32:45 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll [2011.04.16 15:32:42 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2011.04.16 15:32:42 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2011.04.16 15:32:42 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2011.04.16 15:32:42 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2011.04.16 15:32:42 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2011.04.16 15:32:42 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2011.04.16 15:32:31 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011.04.16 15:32:30 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011.04.16 15:32:30 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011.04.16 15:32:30 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011.04.16 15:32:30 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011.04.16 15:32:29 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011.04.16 15:32:28 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011.04.16 15:32:28 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011.04.16 15:32:28 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2011.04.16 15:32:28 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2011.04.16 15:32:28 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011.04.16 15:32:28 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011.04.16 15:32:28 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011.04.16 15:32:28 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011.04.16 15:31:52 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2011.04.16 15:31:50 | 004,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2011.04.16 15:31:50 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2011.04.16 15:31:50 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2011.04.16 15:31:50 | 001,540,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2011.04.16 15:31:50 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll [2011.04.16 15:31:50 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2011.04.16 15:31:50 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll [2011.04.16 15:31:49 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2011.04.16 15:31:49 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll [2011.04.16 15:31:49 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2011.04.16 15:31:49 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll [2011.04.16 15:31:49 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll [2011.04.16 15:31:48 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll [2011.04.16 15:31:48 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011.04.16 15:31:48 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2011.04.16 15:31:48 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll [2011.04.16 15:31:48 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll [2011.04.16 15:31:48 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2011.04.16 15:31:48 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll [2011.04.16 15:31:48 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2011.04.16 15:31:48 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1.dll [2011.04.16 15:31:48 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011.04.16 15:31:48 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll [2011.04.16 15:31:26 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2011.04.16 15:31:26 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2011.04.16 15:31:25 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2011.04.16 15:31:23 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll [2011.04.16 15:31:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe [2011.04.16 15:31:22 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe [2011.04.16 15:31:06 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2011.04.16 15:31:06 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2011.04.16 15:31:05 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2011.04.16 15:31:04 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2011.04.16 15:31:04 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2011.04.16 15:31:04 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2011.04.16 15:30:55 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011.04.16 15:30:54 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011.04.16 15:30:54 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011.04.16 15:30:54 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2011.04.16 15:30:54 | 000,000,000 | -H-D | C] -- C:\sdfsdfsfdsf [2011.04.16 15:30:42 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2011.04.16 15:30:38 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2011.04.16 15:30:29 | 000,640,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2011.04.16 15:30:29 | 000,603,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2011.04.16 15:30:29 | 000,556,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2011.04.16 15:30:29 | 000,518,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe [2011.04.16 15:30:29 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll [2011.04.16 15:30:29 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll [2011.04.16 15:30:29 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll [2011.04.16 15:30:26 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2011.04.16 15:30:26 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2011.04.16 15:30:20 | 003,138,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll [2011.04.16 15:30:20 | 002,690,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll [2011.04.16 15:30:20 | 001,097,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe [2011.04.16 15:30:20 | 001,034,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe [2011.04.16 15:30:18 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2011.04.16 15:30:17 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2011.04.16 15:30:16 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2011.04.16 15:30:16 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2011.04.16 15:30:16 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe [2011.04.16 15:30:14 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2011.04.16 15:30:12 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Adobe Media Player [2011.04.16 15:30:12 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe [2011.04.16 15:30:09 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll [2011.04.16 15:30:09 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll [2011.04.16 15:29:58 | 000,055,856 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\PxHlpa64.sys [2011.04.16 15:29:58 | 000,010,224 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdralw2k.sys [2011.04.16 15:29:58 | 000,010,224 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdr4_xp.sys [2011.04.16 15:29:58 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\Sonic Shared [2011.04.16 15:29:58 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine [2011.04.16 15:27:22 | 000,000,000 | -H-D | C] -- C:\Programme\Common Files\Adobe [2011.04.16 15:27:17 | 000,000,000 | -H-D | C] -- C:\Programme\Adobe [2011.04.16 15:26:35 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS5 [2011.04.16 15:26:10 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2011.04.16 15:26:06 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Adobe [2011.04.16 15:23:08 | 000,000,000 | -H-D | C] -- C:\ProgramData\Adobe [2011.04.16 15:19:43 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\Adobe [2011.04.16 15:18:27 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2011.04.16 15:14:49 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Adobe [2011.04.16 01:41:17 | 000,000,000 | -H-D | C] -- C:\Users\David\Documents\Schule [2011.04.16 01:41:16 | 000,000,000 | -H-D | C] -- C:\Users\David\Documents\KLJB [2011.04.16 01:35:05 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\PMB Files [2011.04.16 01:35:03 | 000,000,000 | -H-D | C] -- C:\ProgramData\PMB Files [2011.04.16 01:34:57 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Pando Networks [2011.04.16 01:20:20 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Electronic Arts [2011.04.16 01:20:19 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2011.04.16 01:20:19 | 005,501,792 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2011.04.16 01:20:19 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2011.04.16 01:20:18 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2011.04.16 01:20:18 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2011.04.16 01:20:18 | 000,453,456 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2011.04.16 01:20:18 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2011.04.16 01:20:18 | 000,235,344 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2011.04.16 01:20:17 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll [2011.04.16 01:20:17 | 000,081,768 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll [2011.04.16 00:15:27 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4 [2011.04.16 00:15:14 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\ICQ7.4 [2011.04.16 00:14:15 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Macromedia [2011.04.16 00:14:15 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Adobe [2011.04.16 00:14:00 | 000,000,000 | -H-D | C] -- C:\Windows\SysWow64\Macromed [2011.04.16 00:10:09 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2011.04.16 00:07:13 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader [2011.04.16 00:07:08 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\JDownloader [2011.04.16 00:06:54 | 000,411,368 | -H-- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deploytk.dll [2011.04.16 00:06:54 | 000,149,280 | -H-- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011.04.16 00:06:54 | 000,145,184 | -H-- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011.04.16 00:06:54 | 000,145,184 | -H-- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011.04.16 00:06:46 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Java [2011.04.16 00:05:44 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\ICQ [2011.04.16 00:05:43 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\AOL [2011.04.16 00:05:42 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\ICQ7.1 [2011.04.16 00:02:23 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock [2011.04.16 00:02:21 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\RocketDock [2011.04.16 00:01:44 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2011.04.16 00:01:44 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2011.04.16 00:01:43 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2011.04.16 00:01:43 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2011.04.16 00:01:39 | 000,000,000 | -H-D | C] -- C:\ProgramData\NVIDIA [2011.04.16 00:01:32 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2011.04.16 00:01:00 | 000,000,000 | -H-D | C] -- C:\ProgramData\NVIDIA Corporation [2011.04.16 00:00:49 | 001,614,440 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco642090.dll [2011.04.16 00:00:49 | 001,359,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco64hda.dll [2011.04.16 00:00:49 | 001,359,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642040.dll [2011.04.16 00:00:49 | 000,155,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys [2011.04.16 00:00:49 | 000,029,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll [2011.04.16 00:00:42 | 000,000,000 | -H-D | C] -- C:\Programme\NVIDIA Corporation [2011.04.16 00:00:26 | 000,000,000 | -H-D | C] -- C:\NVIDIA [2011.04.15 23:54:01 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Mozilla [2011.04.15 23:54:01 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Mozilla [2011.04.15 23:47:27 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2011.04.15 23:47:20 | 000,000,000 | -H-D | C] -- C:\Programme\Common Files\DESIGNER [2011.04.15 23:47:05 | 000,000,000 | -H-D | C] -- C:\Programme\Microsoft Synchronization Services [2011.04.15 23:47:00 | 000,000,000 | -H-D | C] -- C:\Windows\PCHEALTH [2011.04.15 23:47:00 | 000,000,000 | -H-D | C] -- C:\Programme\Microsoft SQL Server Compact Edition [2011.04.15 23:46:16 | 000,000,000 | -H-D | C] -- C:\Programme\Microsoft Analysis Services [2011.04.15 23:46:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Microsoft Analysis Services [2011.04.15 23:45:57 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Microsoft Help [2011.04.15 23:45:56 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Microsoft Office [2011.04.15 23:45:55 | 000,000,000 | -H-D | C] -- C:\Programme\Microsoft Office [2011.04.15 23:45:55 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft Help [2011.04.15 23:45:42 | 000,000,000 | RH-D | C] -- C:\MSOCache [2011.04.15 23:43:42 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2011.04.15 23:43:42 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2011.04.15 23:43:41 | 000,000,000 | -H-D | C] -- C:\Programme\WinRAR [2011.04.15 23:40:44 | 000,000,000 | -H-D | C] -- C:\Programme\TeamSpeak 3 Client [2011.04.15 23:40:44 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client [2011.04.15 23:36:45 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Microsoft.NET [2011.04.15 23:36:21 | 001,974,616 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2011.04.15 23:36:04 | 001,892,184 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2011.04.15 23:35:49 | 004,379,984 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2011.04.15 23:35:32 | 003,727,720 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2011.04.15 23:35:17 | 003,497,832 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2011.04.15 23:35:02 | 002,388,176 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2011.04.15 23:31:41 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox [2011.04.15 23:31:40 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Mozilla Firefox [2011.04.15 23:29:34 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2011.04.15 23:29:23 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2011.04.15 23:29:02 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\DAEMON Tools Lite [2011.04.15 23:29:00 | 000,000,000 | -H-D | C] -- C:\ProgramData\DAEMON Tools Lite [2011.04.15 23:27:42 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2011.04.15 23:27:18 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2011.04.15 23:27:18 | 000,083,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2011.04.15 23:27:18 | 000,051,992 | -H-- | C] (AVIRA GmbH) -- C:\Windows\SysWow64\drivers\avgntdd.sys [2011.04.15 23:27:18 | 000,017,016 | -H-- | C] (AVIRA GmbH) -- C:\Windows\SysWow64\drivers\avgntmgr.sys [2011.04.15 23:27:18 | 000,000,000 | -H-D | C] -- C:\ProgramData\Avira [2011.04.15 23:27:18 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Avira [2011.04.15 23:22:16 | 000,025,640 | ---- | C] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2011.04.15 23:19:55 | 000,025,640 | -H-- | C] (Windows (R) Server 2003 DDK provider) -- C:\Windows\etdrv.sys [2011.04.15 23:18:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2011.04.15 23:17:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\DeviceVM [2011.04.15 23:16:20 | 000,000,000 | RH-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel [2011.04.15 23:16:15 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\postureAgent [2011.04.15 23:16:08 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys [2011.04.15 23:16:07 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\InstallShield [2011.04.15 23:15:57 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics [2011.04.15 23:15:56 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Renesas Electronics [2011.04.15 23:15:15 | 000,349,800 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys [2011.04.15 23:15:15 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll [2011.04.15 23:14:35 | 000,053,248 | -H-- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll [2011.04.15 23:14:35 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Intel [2011.04.15 23:14:33 | 000,000,000 | -H-D | C] -- C:\Intel [2011.04.15 23:14:30 | 000,000,000 | -H-D | C] -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3} [2011.04.15 23:14:29 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\DeviceVm [2011.04.15 23:12:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\InstallShield [2011.04.15 23:11:52 | 000,073,728 | -H-- | C] (InstallShield Software Corporation) -- C:\Windows\SysWow64\ISUSPM.cpl [2011.04.15 23:11:52 | 000,000,000 | -H-D | C] -- C:\Programme\GIGABYTE [2011.04.15 23:11:12 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE [2011.04.15 23:11:02 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\GIGABYTE [2011.04.15 23:11:02 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\AMD [2011.04.15 23:10:49 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2011.04.15 23:09:52 | 000,000,000 | -H-D | C] -- C:\Windows\SysWow64\RTCOM [2011.04.15 23:09:52 | 000,000,000 | -H-D | C] -- C:\Programme\Realtek [2011.04.15 23:09:45 | 002,620,008 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2011.04.15 23:09:45 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2011.04.15 23:09:45 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll [2011.04.15 23:09:45 | 002,045,032 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2011.04.15 23:09:45 | 001,756,160 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2011.04.15 23:09:45 | 001,325,328 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2011.04.15 23:09:45 | 001,215,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2011.04.15 23:09:45 | 001,178,384 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2011.04.15 23:09:45 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2011.04.15 23:09:45 | 001,110,800 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2011.04.15 23:09:45 | 000,534,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2011.04.15 23:09:45 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2011.04.15 23:09:45 | 000,489,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2011.04.15 23:09:45 | 000,474,896 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2011.04.15 23:09:45 | 000,396,288 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2011.04.15 23:09:45 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2011.04.15 23:09:45 | 000,338,336 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2011.04.15 23:09:45 | 000,334,848 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2011.04.15 23:09:45 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2011.04.15 23:09:45 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2011.04.15 23:09:45 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2011.04.15 23:09:45 | 000,315,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2011.04.15 23:09:45 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2011.04.15 23:09:45 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2011.04.15 23:09:45 | 000,268,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2011.04.15 23:09:45 | 000,265,488 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2011.04.15 23:09:45 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll [2011.04.15 23:09:45 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2011.04.15 23:09:45 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2011.04.15 23:09:45 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2011.04.15 23:09:45 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2011.04.15 23:09:45 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2011.04.15 23:09:45 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2011.04.15 23:09:45 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2011.04.15 23:09:45 | 000,123,104 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2011.04.15 23:09:45 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2011.04.15 23:09:45 | 000,098,704 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2011.04.15 23:09:45 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll [2011.04.15 23:09:45 | 000,081,000 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2011.04.15 23:09:45 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll [2011.04.15 23:09:45 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2011.04.15 23:09:45 | 000,074,064 | -H-- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll [2011.04.15 23:09:44 | 000,504,592 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2011.04.15 23:09:44 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2011.04.15 23:09:44 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2011.04.15 23:09:44 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Realtek [2011.04.15 23:09:44 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2011.04.15 23:09:18 | 001,251,944 | -H-- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2011.04.15 23:09:18 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2011.04.15 23:09:17 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2011.04.15 21:53:54 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2011.04.15 21:53:51 | 000,000,000 | ---D | C] -- C:\Windows\CSC [2011.04.15 15:56:27 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Diagnostics [2011.04.15 15:54:32 | 000,000,000 | RH-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2011.04.15 15:54:32 | 000,000,000 | RH-D | C] -- C:\Users\David\Searches [2011.04.15 15:54:32 | 000,000,000 | RH-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2011.04.15 15:54:24 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Identities [2011.04.15 15:54:23 | 000,000,000 | RH-D | C] -- C:\Users\David\Contacts [2011.04.15 15:54:20 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\VirtualStore [2011.04.15 15:54:11 | 000,000,000 | --SD | C] -- C:\Users\David\AppData\Roaming\Microsoft [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Videos [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Saved Games [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Pictures [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Music [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Links [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Favorites [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Downloads [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Documents [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\Desktop [2011.04.15 15:54:11 | 000,000,000 | RH-D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Vorlagen [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Verlauf [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Temporary Internet Files [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Startmenü [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\SendTo [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Recent [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Netzwerkumgebung [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Lokale Einstellungen [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\Eigene Videos [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\Eigene Musik [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Eigene Dateien [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\Eigene Bilder [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Druckumgebung [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Cookies [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Anwendungsdaten [2011.04.15 15:54:11 | 000,000,000 | -HSD | C] -- C:\Users\David\Anwendungsdaten [2011.04.15 15:54:11 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Temp [2011.04.15 15:54:11 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Local\Microsoft [2011.04.15 15:54:11 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData\Roaming\Media Center Programs [2011.04.15 15:54:11 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Recovery [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Programme [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop [2011.04.15 15:52:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2011.04.15 15:52:49 | 000,000,000 | -H-D | C] -- C:\Windows\SoftwareDistribution [2011.04.06 11:06:20 | 000,000,000 | -H-D | C] -- C:\Users\David\Documents\Bewerbungen [2009.07.14 01:24:58 | 000,375,296 | -H-- | C] (Salt Int'l Coporation) -- C:\Users\David\AppData\Local\okebowinewun.dll [2009.07.14 01:24:58 | 000,097,280 | -H-- | C] (FileZilla Project) -- C:\Users\David\AppData\Local\KBDa02.dll [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.04.18 20:46:54 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.04.18 20:46:54 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.04.18 20:46:54 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.04.18 20:46:54 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.04.18 20:46:54 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.04.18 20:43:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\David\Desktop\OTL.exe [2011.04.18 20:36:02 | 000,000,246 | -H-- | M] () -- C:\Windows\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job [2011.04.18 20:10:01 | 000,000,286 | -H-- | M] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job [2011.04.18 20:06:34 | 000,000,310 | -HS- | M] () -- C:\Windows\tasks\fixxhju.job [2011.04.18 20:06:28 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2011.04.18 20:06:26 | 000,000,306 | -HS- | M] () -- C:\Windows\tasks\Rquxmovv.job [2011.04.18 20:06:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.04.18 20:06:16 | 2134,446,079 | -HS- | M] () -- C:\hiberfil.sys [2011.04.18 20:05:41 | 000,013,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.04.18 20:05:41 | 000,013,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.04.18 18:48:05 | 000,168,279 | ---- | M] (Gene6, SARL ) -- C:\Windows\SysWow64\null0.12269730080142949.exe [2011.04.18 18:19:49 | 000,168,279 | -H-- | M] (Gene6, SARL ) -- C:\Windows\SysWow64\null0.6774071707305193.exe [2011.04.18 18:18:47 | 000,168,279 | -H-- | M] (Gene6, SARL ) -- C:\Windows\SysWow64\null0.6623902581643172.exe [2011.04.18 16:29:59 | 000,000,120 | -H-- | M] () -- C:\Users\David\AppData\Local\Wnoyanuveruq.dat [2011.04.18 16:27:37 | 000,003,544 | -H-- | M] () -- C:\bootsqm.dat [2011.04.18 13:24:35 | 000,000,000 | -H-- | M] () -- C:\Users\David\AppData\Local\Iwafequfiraw.bin [2011.04.18 13:23:09 | 000,254,464 | RHS- | M] () -- C:\Windows\SysWow64\d3d10warp3.dll [2011.04.18 13:23:04 | 000,124,416 | -H-- | M] (PC Tools) -- C:\Windows\Tnoqaa.exe [2011.04.18 13:23:01 | 000,569,344 | -H-- | M] (BitSprx) -- C:\ProgramData\PFmPbJoHGuT.exe [2011.04.18 10:37:35 | 000,266,400 | -H-- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2011.04.18 10:37:35 | 000,266,400 | -H-- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011.04.18 10:36:20 | 000,215,128 | -H-- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2011.04.17 12:47:21 | 000,075,136 | -H-- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011.04.17 12:02:40 | 002,434,856 | -H-- | M] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2011.04.16 16:33:24 | 004,903,096 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.04.16 00:06:47 | 000,411,368 | -H-- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deploytk.dll [2011.04.16 00:06:47 | 000,149,280 | -H-- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011.04.16 00:06:47 | 000,145,184 | -H-- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011.04.16 00:06:47 | 000,145,184 | -H-- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011.04.16 00:04:59 | 000,083,120 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2011.04.15 23:49:53 | 000,077,824 | -H-- | M] () -- C:\Windows\KMService.exe [2011.04.15 23:49:53 | 000,008,192 | -H-- | M] () -- C:\Windows\SysWow64\srvany.exe [2011.04.15 23:29:33 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2011.04.15 23:22:42 | 000,030,528 | -H-- | M] () -- C:\Windows\GVTDrv64.sys [2011.04.15 23:20:15 | 000,000,034 | -H-- | M] () -- C:\Windows\GSetup.ini [2011.04.15 23:19:55 | 000,025,640 | -H-- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\etdrv.sys [2011.04.15 21:55:34 | 000,057,050 | -H-- | M] () -- C:\Windows\SysWow64\license.rtf [2011.04.15 21:55:34 | 000,057,050 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2011.04.15 21:54:27 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2011.03.30 19:50:16 | 000,034,624 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe [2011.03.30 19:45:44 | 000,025,920 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll [2011.03.30 19:45:40 | 000,021,312 | -H-- | M] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll [2011.03.30 19:45:38 | 000,036,160 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll [2011.03.30 19:45:32 | 000,029,504 | -H-- | M] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.04.18 16:27:37 | 000,003,544 | -H-- | C] () -- C:\bootsqm.dat [2011.04.18 13:24:35 | 000,000,120 | -H-- | C] () -- C:\Users\David\AppData\Local\Wnoyanuveruq.dat [2011.04.18 13:24:35 | 000,000,000 | -H-- | C] () -- C:\Users\David\AppData\Local\Iwafequfiraw.bin [2011.04.18 13:23:09 | 000,254,464 | RHS- | C] () -- C:\Windows\SysWow64\d3d10warp3.dll [2011.04.18 13:23:09 | 000,000,310 | -HS- | C] () -- C:\Windows\tasks\fixxhju.job [2011.04.18 13:23:09 | 000,000,306 | -HS- | C] () -- C:\Windows\tasks\Rquxmovv.job [2011.04.18 13:23:07 | 000,000,286 | -H-- | C] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job [2011.04.18 13:23:05 | 000,000,246 | -H-- | C] () -- C:\Windows\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job [2011.04.18 01:27:42 | 000,002,441 | -H-- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011.04.17 12:38:47 | 000,266,400 | -H-- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2011.04.16 22:56:08 | 000,266,400 | -H-- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011.04.16 22:56:08 | 000,215,128 | -H-- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2011.04.16 22:56:07 | 002,434,856 | -H-- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2011.04.16 22:56:07 | 000,075,136 | -H-- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011.04.16 16:47:55 | 000,002,205 | -H-- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011.lnk [2011.04.16 15:26:18 | 000,000,997 | -H-- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk [2011.04.16 00:00:49 | 000,007,621 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb [2011.04.15 23:50:04 | 000,077,824 | -H-- | C] () -- C:\Windows\KMService.exe [2011.04.15 23:50:04 | 000,008,192 | -H-- | C] () -- C:\Windows\SysWow64\srvany.exe [2011.04.15 23:29:33 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2011.04.15 23:19:40 | 000,030,528 | -H-- | C] () -- C:\Windows\GVTDrv64.sys [2011.04.15 23:16:22 | 000,031,272 | ---- | C] () -- C:\Windows\SysNative\AppleChargerSrv.exe [2011.04.15 23:16:22 | 000,021,544 | ---- | C] () -- C:\Windows\SysNative\drivers\AppleCharger.sys [2011.04.15 23:16:19 | 000,008,192 | -H-- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll [2011.04.15 23:16:19 | 000,008,192 | ---- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll [2011.04.15 23:15:15 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll [2011.04.15 23:13:47 | 000,207,400 | -H-- | C] () -- C:\Windows\GSetup.exe [2011.04.15 23:13:47 | 000,000,034 | -H-- | C] () -- C:\Windows\GSetup.ini [2011.04.15 21:54:27 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2011.04.15 21:53:32 | 2134,446,079 | -HS- | C] () -- C:\hiberfil.sys [2011.04.15 15:54:37 | 000,001,409 | -H-- | C] () -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk [2011.04.15 15:54:33 | 000,001,443 | -H-- | C] () -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 04:35:51 | 000,000,741 | -H-- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 04:34:42 | 000,215,943 | -H-- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat ========== LOP Check ========== [2011.04.15 23:44:21 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\DAEMON Tools Lite [2011.04.15 23:18:11 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\DeviceVm [2011.04.18 18:45:19 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\ICQ [2011.04.16 20:38:29 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\LolClient [2011.04.18 01:23:30 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Scan2PDF [2011.04.17 12:31:57 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\TS3Client [2011.04.16 16:47:44 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\TuneUp Software [2011.04.18 20:06:34 | 000,000,310 | -HS- | M] () -- C:\Windows\Tasks\fixxhju.job [2011.04.18 20:06:26 | 000,000,306 | -HS- | M] () -- C:\Windows\Tasks\Rquxmovv.job [2009.07.14 07:08:49 | 000,009,198 | -H-- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011.04.18 20:10:01 | 000,000,286 | -H-- | M] () -- C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job [2011.04.18 20:36:02 | 000,000,246 | -H-- | M] () -- C:\Windows\Tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2011.04.18 13:22:47 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Adobe [2011.04.18 16:32:02 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Avira [2011.04.15 23:44:21 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\DAEMON Tools Lite [2011.04.15 23:18:11 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\DeviceVm [2011.04.18 13:26:41 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\DivX [2011.04.18 18:45:19 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\ICQ [2011.04.15 15:54:24 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Identities [2011.04.15 23:16:07 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\InstallShield [2011.04.17 23:23:46 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\InstallShield Installation Information [2011.04.16 20:38:29 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\LolClient [2011.04.16 00:14:15 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Macromedia [2009.07.14 20:18:19 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Media Center Programs [2011.04.18 01:28:59 | 000,000,000 | --SD | M] -- C:\Users\David\AppData\Roaming\Microsoft [2011.04.15 23:54:06 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Mozilla [2011.04.18 01:23:30 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\Scan2PDF [2011.04.17 12:38:35 | 000,000,000 | RH-D | M] -- C:\Users\David\AppData\Roaming\SecuROM [2011.04.17 12:31:57 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\TS3Client [2011.04.16 16:47:44 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\TuneUp Software [2011.04.18 01:00:39 | 000,000,000 | -H-D | M] -- C:\Users\David\AppData\Roaming\WinRAR < %APPDATA%\*.exe /s > [2011.04.17 23:18:13 | 000,331,776 | -H-- | M] () -- C:\Users\David\AppData\Roaming\InstallShield Installation Information\{FDBBAF14-5ED8-49B7-A5BE-1C35668B074D}\SetupUT3.exe [2011.04.16 15:30:00 | 000,010,134 | RH-- | M] () -- C:\Users\David\AppData\Roaming\Microsoft\Installer\{024521CF-C07E-4F8E-8481-0D75695E03AF}\ARPPRODUCTICON.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll < MD5 for: EXPLORER.EXE > [2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe [2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe [2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe < MD5 for: IASTORV.SYS > [2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\drivers\iaStorV.sys [2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys [2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\SysNative\netlogon.dll [2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll [2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll [2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll < MD5 for: NVSTOR.SYS > [2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\drivers\nvstor.sys [2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys [2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll [2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll [2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll [2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\SysNative\user32.dll [2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll [2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll [2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll < MD5 for: USERINIT.EXE > [2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe [2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe [2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe < MD5 for: WINLOGON.EXE > [2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe [2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys [2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2011.04.18 13:23:09 | 000,254,464 | RHS- | M] () Unable to obtain MD5 -- C:\Windows\SysWOW64\d3d10warp3.dll [2009.07.14 03:15:12 | 000,074,752 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\dot3gpclnt.dll [2009.07.14 03:15:12 | 000,265,728 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\dot3gpui.dll < End of report > |
|
18.04.2011, 20:03
| #4 |
| | tmz.exe lässt eigene Dateien verschwinden 2.OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 18.04.2011 20:47:26 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\David\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 77,00% Memory free
16,00 Gb Paging File | 14,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,41 Gb Total Space | 786,94 Gb Free Space | 84,49% Space Free | Partition Type: NTFS
Drive H: | 3,62 Gb Total Space | 3,62 Gb Free Space | 99,98% Space Free | Partition Type: FAT32
Computer Name: DAVID-PC | User Name: David | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-3330391774-2578689632-2771703340-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0407-1000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0016-0407-1000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0018-0407-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0019-0407-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-001A-0407-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001B-0407-1000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0410-1000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-002C-0407-1000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0407-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (German) 2010
"{90140000-0044-0407-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-006E-0407-1000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-00A1-0407-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00BA-0407-1000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 266.58
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 266.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 266.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.1.13.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR archiver
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{288DB08D-0708-4A94-B055-55B99E39EB62}" = Adobe Creative Suite 5 Master Collection
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3B35725F-C623-4A1E-B5CC-99C0868679E3}" = Smart 6 B10.1023.1
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B10.0427.1
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.1024.1
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{5D4C60AA-84E6-4E1A-8A68-69970D387BE1}" = TuneUp Utilities Language Pack (de-DE)
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{675F86A8-E093-4002-87D5-915CC2C45571}" = DES 2.0
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BC41C09D-FAA9-4346-9FE6-1E0017BC551A}" = Adobe Flash Player 10 Plugin
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FDBBAF14-5ED8-49B7-A5BE-1C35668B074D}" = Unreal Tournament 3 (LG)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DivX Setup.divx.com" = DivX-Setup
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.1024.1
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"JDownloader" = JDownloader
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PunkBusterSvc" = PunkBuster Services
"RocketDock_is1" = RocketDock 1.3.5
"Scan2PDF_is1" = Scan2PDF 1.6
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Steam App 240" = Counter-Strike: Source
"TuneUp Utilities 2011" = TuneUp Utilities 2011
"Universal Extractor_is1" = Universal Extractor 1.6.1
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3330391774-2578689632-2771703340-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"InstallShield_{FDBBAF14-5ED8-49B7-A5BE-1C35668B074D}" = Unreal Tournament 3 (LG)
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 16.04.2011 17:13:45 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:50 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:50 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:53 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:54 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:54 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:54 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:56 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:56 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 16.04.2011 17:13:56 | Computer Name = David-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
[ System Events ]
Error - 16.04.2011 11:06:15 | Computer Name = David-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework 4 Client Profile für
Windows 7 x64-basierte Systeme (KB982670)
Error - 16.04.2011 11:06:16 | Computer Name = David-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework 4 Client Profile für
Windows 7 x64-basierte Systeme (KB982670)
Error - 16.04.2011 11:06:16 | Computer Name = David-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework 4 Client Profile für
Windows 7 x64-basierte Systeme (KB982670)
Error - 16.04.2011 11:06:16 | Computer Name = David-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework 4 Client Profile für
Windows 7 x64-basierte Systeme (KB982670)
Error - 16.04.2011 11:06:16 | Computer Name = David-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework 4 Client Profile für
Windows 7 x64-basierte Systeme (KB982670)
Error - 16.04.2011 11:08:08 | Computer Name = David-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error - 16.04.2011 14:34:39 | Computer Name = David-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error - 16.04.2011 15:30:13 | Computer Name = David-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error - 16.04.2011 15:35:32 | Computer Name = David-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
Steam Client Service erreicht.
Error - 16.04.2011 15:35:32 | Computer Name = David-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1053
< End of report >
|
|
18.04.2011, 20:15
| #5 |
| /// Malware-holic | tmz.exe lässt eigene Dateien verschwinden • Starte bitte die OTL.exe • Kopiere nun das Folgende in die Textbox. :OTL PRC - C:\Users\David\AppData\Local\Temp\Tmz.exe (PC Tools) PRC - C:\Windows\Tnoqaa.exe (PC Tools) :Files C:\Users\David\AppData\Local\Temp\Tmz.exe C:\Windows\Tnoqaa.exe C:\sdfsdfsfdsf C:\Windows\SysWow64\null0.12269730080142949.exe C:\Windows\SysWow64\null0.6774071707305193.exe C:\Windows\SysWow64\null0.6774071707305193.exe C:\Windows\SysWow64\null0.6623902581643172.exe C:\ProgramData\PFmPbJoHGuT.exe C:\Windows\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job C:\Windows\tasks\fixxhju.job C:\Windows\tasks\Rquxmovv.job C:\Windows\tasks\Rquxmovv.job C:\Windows\SysWow64\d3d10warp3.dll ipconfig /flushdns /c :Commands [purity] [EMPTYFLASH] [emptytemp] [Reboot] • Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren. öffne computer, öffne C: dann _OTL dort rechtsklick auf moved files wähle zu moved files.rar oder zip hinzufügen. das archiv nach anleitung hochladen: http://www.trojaner-board.de/54791-a...ner-board.html
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
18.04.2011, 20:28
| #6 |
| | tmz.exe lässt eigene Dateien verschwinden Ok, haben es hochgeladen Hier die neue Log-Datei: All processes killed ========== OTL ========== No active process named Tmz.exe was found! No active process named Tnoqaa.exe was found! ========== FILES ========== C:\Users\David\AppData\Local\Temp\Tmz.exe moved successfully. C:\Windows\Tnoqaa.exe moved successfully. C:\sdfsdfsfdsf folder moved successfully. C:\Windows\SysWow64\null0.12269730080142949.exe moved successfully. C:\Windows\SysWow64\null0.6774071707305193.exe moved successfully. File\Folder C:\Windows\SysWow64\null0.6774071707305193.exe not found. C:\Windows\SysWow64\null0.6623902581643172.exe moved successfully. C:\ProgramData\PFmPbJoHGuT.exe moved successfully. C:\Windows\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job moved successfully. C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job moved successfully. File\Folder C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job not found. File\Folder C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job not found. C:\Windows\tasks\fixxhju.job moved successfully. C:\Windows\tasks\Rquxmovv.job moved successfully. File\Folder C:\Windows\tasks\Rquxmovv.job not found. C:\Windows\SysWow64\d3d10warp3.dll moved successfully. < ipconfig /flushdns /c > Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. C:\Users\David\Desktop\cmd.bat deleted successfully. C:\Users\David\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: David ->Flash cache emptied: 4316 bytes User: Default ->Flash cache emptied: 41620 bytes User: Default User ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: David ->Temp folder emptied: 1865847663 bytes ->Temporary Internet Files folder emptied: 52495671 bytes ->Java cache emptied: 185516 bytes ->FireFox cache emptied: 98901645 bytes ->Flash cache emptied: 0 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 155648 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 17477488 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50434 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 1.941,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 04182011_211921 Files\Folders moved on Reboot... C:\Users\David\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot... |
|
18.04.2011, 20:33
| #7 |
| /// Malware-holic | tmz.exe lässt eigene Dateien verschwinden macht ihr onlinebanking oder einkäufe oder sonst was wichtiges mit dem system?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
18.04.2011, 20:38
| #8 |
| | tmz.exe lässt eigene Dateien verschwinden Ne eigentlich nicht... Er hat sich einmal bisher mit seinem Ebay-Account eingeloggt,aber den Virus hat er erst danach gladen |
|
18.04.2011, 20:43
| #9 |
| /// Malware-holic | tmz.exe lässt eigene Dateien verschwinden hatt er in zukunft wieder vor mit dem pc zu shoppen?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
18.04.2011, 20:44
| #10 |
| | tmz.exe lässt eigene Dateien verschwinden Er sagt ja  |
|
19.04.2011, 10:38
| #11 |
| /// Malware-holic | tmz.exe lässt eigene Dateien verschwinden ok dann machen wir noch die eigenen dateien sichtbar und setzen neu auf. er hat hier verschiedene passwort stealer auf dem pc, und wir können niemals garantieren das wir das system sauber bekommen, dies geht nur mit formatieren. danach erkläre ich euch wie das system richtig abzusichern ist. lade unhide: http://filepony.de/download-unhide/ doppelklicken, dann sollten dateien sichtbar werden. anfangen mit der daten sicherung, wenn ihr fertig seit, melden dann gehts weiter.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
29.04.2011, 15:01
| #12 |
| | tmz.exe lässt eigene Dateien verschwinden Also, seine eigenen Dateien wurden wieder sicher, nach dem FIX mit OTl..er hat sie dann gesichert und den PC neu aufgesetzt, jetzt ist alles wieder gut   Vielen Vielen vielen Dank! |
|
29.04.2011, 15:47
| #13 |
| /// Malware-holic | tmz.exe lässt eigene Dateien verschwinden wolltet ihr den pc absichern oder nicht?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
| Themen zu tmz.exe lässt eigene Dateien verschwinden |
| dateien, dateien verschwinden, daten, eigene dateien, freund, leer, ordner, retten, speicher, verschwinden, verschwunden, virus |
Linear-Darstellung
