| blutwurst | 20.06.2011 16:02 |
OTL -TextOTL Logfile: Code:
OTL logfile created on: 20.06.2011 16:31:48 - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Users\Luffy\Downloads
Windows Vista Home Basic Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18904)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
893,56 Mb Total Physical Memory | 486,90 Mb Available Physical Memory | 54,49% Memory free
2,13 Gb Paging File | 1,86 Gb Available in Paging File | 87,13% Paging File free
Paging file location(s): C:\pagefile.sys 1339 1339 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 37,26 Gb Total Space | 7,96 Gb Free Space | 21,37% Space Free | Partition Type: NTFS
Computer Name: WIHTEBIRT | User Name: Luffy | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Luffy\Downloads\OTL(3).exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Users\Luffy\Downloads\OTL(3).exe (OldTimer Tools)
MOD - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchrome10browserrecordhelper.dll (RealNetworks, Inc.)
MOD - C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.5570_none_509463cabcb6ef2a\msvcr90.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.5570_none_509463cabcb6ef2a\msvcp90.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (ScanQuery Service) -- C:\ProgramData\ScanQuery\scanquery141.exe ()
SRV - (avg9wd) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9emc) -- C:\Program Files\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
SRV - (Boonty Games) -- C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (BOONTY)
SRV - (TuneUp.ProgramStatisticsSvc) -- C:\Windows\System32\TUProgSt.exe (TuneUp Software)
SRV - (TuneUp.Defrag) -- C:\Windows\System32\TuneUpDefragService.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (OMSI download service) -- C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AvgTdiX) -- C:\Windows\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) -- C:\Windows\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgLdx86) -- C:\Windows\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) -- C:\Windows\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (VIAHdAudAddService) -- C:\Windows\System32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (HdAudAddService) -- C:\Windows\System32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (SIS163u) -- C:\Windows\System32\drivers\sis163u.sys (Silicon Integrated Systems Corp.)
DRV - (FETND6V) -- C:\Windows\System32\drivers\fetnd6v.sys (VIA Technologies, Inc. )
DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)
DRV - (KMWDFILTER) -- C:\Windows\System32\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) -- C:\Windows\System32\drivers\s0016unic.sys (MCCI Corporation)
DRV - (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) -- C:\Windows\System32\drivers\s0016nd5.sys (MCCI Corporation)
DRV - (s0016mdfl) -- C:\Windows\System32\drivers\s0016mdfl.sys (MCCI Corporation)
DRV - (s0016mdm) -- C:\Windows\System32\drivers\s0016mdm.sys (MCCI Corporation)
DRV - (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s0016mgmt.sys (MCCI Corporation)
DRV - (s0016obex) -- C:\Windows\System32\drivers\s0016obex.sys (MCCI Corporation)
DRV - (s0016bus) Sony Ericsson Device 0016 driver (WDM) -- C:\Windows\System32\drivers\s0016bus.sys (MCCI Corporation)
DRV - (SNPSTD3) USB PC Camera (SNPSTD3) -- C:\Windows\System32\drivers\snpstd3.sys (Sonix Co. Ltd.)
DRV - (S3G700) -- C:\Windows\System32\drivers\VTGKModeDX32.sys (S3 Graphics Co., Ltd.)
DRV - (winusb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (vsdatant) -- C:\Windows\System32\vsdatant.sys (Zone Labs, LLC)
DRV - (OVT511Plus) -- C:\Windows\System32\drivers\omcamvid.sys (OmniVision Technologies, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ddr&s={searchTerms}&f=4
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKLM\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Programme\DVDVideoSoft\tbDVDV.dll (Conduit Ltd.)
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Hamstersoft Search Start
IE - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = Facemoods Search
IE - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.sweetim.com/search.asp?src=2&q="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.2.1
FF - prefs.js..extensions.enabledItems: {DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}:1.0
FF - prefs.js..extensions.enabledItems: ClickPotatoLite@ClickPotatoLite.com:10.0.668.0
FF - prefs.js..keyword.URL: "hxxp://www.hamsterstart.com/s/?src=FF-Address&site=Yahoo!&cfg=2-475-0-0&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Google"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://berlin.pennergame.de/"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010.11.24 21:09:28 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010.02.06 18:31:33 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.06.13 14:20:13 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\ClickPotatoLite@ClickPotatoLite.com: C:\Program Files\ClickPotatoLite\bin\10.0.668.0\firefox\extensions [2011.04.14 07:16:42 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.06.16 09:28:54 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.06.16 09:28:54 | 000,000,000 | -H-D | M]
[2009.02.18 13:20:26 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Luffy\AppData\Roaming\mozilla\Extensions
[2011.06.20 16:06:59 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions
[2010.08.27 11:53:46 | 000,000,000 | -H-D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.06.18 01:43:20 | 000,000,000 | -H-D | M] (Google Toolbar for Firefox) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010.02.10 19:33:51 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}(32)
[2011.04.04 22:03:59 | 000,000,000 | -H-D | M] ("ICQ Toolbar") -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2009.05.10 14:28:14 | 000,000,000 | -H-D | M] (Softonic Deutsch Toolbar) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}
[2011.06.13 15:14:00 | 000,000,000 | -H-D | M] (Greasemonkey) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.02.21 12:43:12 | 000,000,000 | -H-D | M] (DVDVideoSoft Toolbar) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}
[2010.12.18 21:56:44 | 000,000,000 | -H-D | M] (SweetIM Toolbar for Firefox) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2010.05.24 07:23:40 | 000,000,000 | -H-D | M] (SweetIM Toolbar for Firefox) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}(40)
[2011.03.19 09:38:51 | 000,000,000 | -H-D | M] (Facemoods) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\ffxtlbr@Facemoods.com
[2011.06.18 01:43:20 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Luffy\AppData\Roaming\mozilla\Firefox\Profiles\li06tyiv.default\extensions\staged-xpis
[2011.06.19 21:25:26 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-1.xml
[2010.08.26 16:21:41 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-10.xml
[2010.08.31 06:49:05 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-11.xml
[2011.05.08 11:06:23 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-12.xml
[2011.06.12 17:30:21 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-13.xml
[2011.06.13 15:11:50 | 000,000,656 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-14.xml
[2011.06.16 20:33:56 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-15.xml
[2009.04.01 19:05:14 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-2.xml
[2009.04.06 19:17:00 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-3.xml
[2009.05.05 19:24:45 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-4.xml
[2009.06.16 00:21:13 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-5.xml
[2009.10.05 07:36:57 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-6.xml
[2009.10.11 17:09:14 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-7.xml
[2010.01.03 20:25:38 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-8.xml
[2010.01.20 15:27:48 | 000,000,950 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin-9.xml
[2010.04.22 14:33:22 | 000,000,945 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\icqplugin.xml
[2010.12.18 21:56:27 | 000,003,915 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\sweetim.xml
[2011.06.10 08:05:33 | 000,001,061 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\Mozilla\Firefox\Profiles\li06tyiv.default\searchplugins\yahoo-zugo.xml
[2011.06.19 21:25:23 | 000,000,000 | -H-D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010.11.02 20:37:01 | 000,000,000 | -H-D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.02.11 22:14:36 | 000,000,000 | -H-D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(11)
[2010.03.02 08:31:31 | 000,000,000 | -H-D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(17)
[2010.03.02 09:00:33 | 000,000,000 | -H-D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(18)
[2010.05.24 14:28:21 | 000,000,000 | -H-D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.22 21:20:45 | 000,000,000 | -H-D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.11.03 14:25:27 | 000,000,000 | -H-D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.06.10 15:02:03 | 000,000,000 | -H-D | M] (ScanQuery) -- C:\Programme\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}
[2010.11.24 21:09:28 | 000,000,000 | -H-D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG9\FIREFOX
[2011.04.14 07:16:42 | 000,000,000 | -H-D | M] (ClickPotatoLite Component) -- C:\PROGRAM FILES\CLICKPOTATOLITE\BIN\10.0.668.0\FIREFOX\EXTENSIONS
[2009.04.10 15:51:23 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009.08.29 07:01:01 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
[2009.12.01 19:22:59 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
[2010.05.24 14:28:21 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.22 21:20:45 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.11.03 14:25:27 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.06.10 15:02:03 | 000,000,000 | -H-D | M] (ScanQuery) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}
[2011.06.13 14:20:13 | 000,000,000 | -H-D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[2010.09.15 05:50:38 | 000,472,808 | -H-- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2011.06.16 09:28:41 | 000,001,392 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2011.06.16 09:28:41 | 000,002,344 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2011.03.19 09:39:05 | 000,002,046 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\fcmdSrchddr.xml
[2011.06.16 09:28:42 | 000,006,805 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2011.06.16 09:28:42 | 000,001,178 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2011.06.16 09:28:42 | 000,001,105 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | -H-- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (ShoppingReport2) - {258C9770-1713-4021-8D7E-1F184A2BD754} - C:\Programme\ShoppingReport2\Bin\2.7.34\ShoppingReport.dll (SmartShopper Networks)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Programme\facemoods.com\facemoods\1.4.17.5\bh\facemoods.dll (facemoods.com BHO)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Programme\Google\GoogleToolbar1.dll (Google Germany GmbH)
O2 - BHO: (DVDVideoSoft Toolbar) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Programme\DVDVideoSoft\tbDVDV.dll (Conduit Ltd.)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Programme\facemoods.com\facemoods\1.4.17.5\facemoodsTlbr.dll (facemoods.com)
O3 - HKLM\..\Toolbar: (DVDVideoSoft Toolbar) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Programme\DVDVideoSoft\tbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\..\Toolbar\WebBrowser: (DVDVideoSoft Toolbar) - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - C:\Programme\DVDVideoSoft\tbDVDV.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ClickPotatoLiteSA] C:\Program Files\ClickPotatoLite\bin\10.0.668.0\ClickPotatoLiteSA.exe (Pinball Corporation.)
O4 - HKLM..\Run: [facemoods] C:\Program Files\facemoods.com\facemoods\1.4.17.5\facemoodssrv.exe (facemoods.com)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Programme\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [SMSERIAL] C:\Programme\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [snpstd3] C:\Windows\vsnpstd3.exe ()
O4 - HKLM..\Run: [SweetIM] C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000..\Run: [BitTorrent DNA] C:\Users\Luffy\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000..\Run: [fVsVFGfVFkPeQTy] C:\ProgramData\fVsVFGfVFkPeQTy.exe (Sysinternals)
O4 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000..\Run: [GMX SMS-Manager] C:\Programme\GMX\GMX SMS-Manager\SMSMngr.exe (1&1 Internet AG)
O4 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe (Sony Ericsson Mobile Communications AB)
O4 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-2527848741-3311900059-3240881507-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Programme\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Programme\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: ClickPotato - {B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} - C:\Programme\ClickPotatoLite\bin\10.0.668.0\ClickPotatoLiteSABHO.dll (Pinball Corporation)
O9 - Extra Button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Programme\ShoppingReport2\Bin\2.7.34\ShoppingReport.dll (SmartShopper Networks)
O9 - Extra Button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Programme\ShoppingReport2\Bin\2.7.34\ShoppingReport.dll (SmartShopper Networks)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - AppInit_DLLs: (avgrsstx.dll) - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Luffy\Desktop\Neuer Ordner\symbole_files\(03)_Hak.JPG
O24 - Desktop BackupWallPaper: C:\Users\Luffy\Desktop\Neuer Ordner\symbole_files\(03)_Hak.JPG
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | -H-- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{69018abc-f15a-11de-8180-00a0d1c4b279}\Shell - "" = AutoRun
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {23325F73-AF59-1597-8F0F-C604055ABA54} - .NET Framework
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0.3
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0.3
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} - Microsoft .NET Framework 1.1 Security Update (KB953297)
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: wave1 - C:\Windows\System32\serwvdrv.dll (Microsoft Corporation)
CREATERESTOREPOINT
Error creating restore point.
========== Files/Folders - Created Within 30 Days ==========
[2011.06.20 13:54:40 | 000,000,000 | -H-D | C] -- C:\Users\Luffy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Vista Repair
[2011.06.20 13:53:48 | 000,364,544 | -H-- | C] (Sysinternals) -- C:\ProgramData\29089552.exe
[2011.06.20 13:44:28 | 000,452,608 | -H-- | C] (Sysinternals) -- C:\ProgramData\fVsVFGfVFkPeQTy.exe
[2011.06.16 00:53:13 | 000,000,000 | -H-D | C] -- C:\6b149aa75bb92c904a121bb2
[2011.06.10 08:06:01 | 000,000,000 | -H-D | C] -- C:\Users\Luffy\AppData\Roaming\HamsterSoft
[2011.06.10 08:05:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hamster Soft
[2011.06.10 08:05:41 | 000,000,000 | -H-D | C] -- C:\Programme\Hamster Soft
[2011.06.10 08:03:04 | 000,314,808 | -H-- | C] (HamsterSoft, Inc.) -- C:\Users\Luffy\Desktop\hamsterfreevideoconverter.exe
[2011.06.08 11:55:30 | 000,000,000 | -H-D | C] -- C:\Users\Luffy\Desktop\dragons
[2011.06.07 11:56:05 | 000,000,000 | -H-D | C] -- C:\Programme\Common Files\xing shared
[2011.06.07 11:55:50 | 000,198,848 | -H-- | C] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll
[2011.06.07 11:55:35 | 000,006,656 | -H-- | C] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll
[2011.06.07 11:55:35 | 000,005,632 | -H-- | C] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll
[2011.06.07 11:55:33 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real
[2011.05.27 01:33:24 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2010.07.05 20:28:50 | 000,148,736 | -H-- | C] (Avanquest Software) -- C:\ProgramData\hpe5275.dll
[2007.03.12 12:41:52 | 000,061,440 | -H-- | C] ( ) -- C:\Windows\System32\vsnpstd3.dll
[2005.11.23 13:55:32 | 000,053,248 | -H-- | C] ( ) -- C:\Windows\System32\csnpstd3.dll
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.06.20 16:23:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.20 16:03:18 | 000,000,522 | -H-- | M] () -- C:\Windows\tasks\1-Klick-Wartung.job
[2011.06.20 16:01:54 | 000,003,552 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.20 16:01:54 | 000,003,552 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.20 16:01:54 | 000,001,094 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.06.20 15:37:15 | 000,229,672 | -H-- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.06.20 15:33:55 | 000,000,286 | -H-- | M] () -- C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-2527848741-3311900059-3240881507-1000.job
[2011.06.20 14:24:01 | 000,001,098 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.06.20 13:55:19 | 000,000,224 | -H-- | M] () -- C:\ProgramData\~29089552
[2011.06.20 13:55:18 | 000,000,152 | -H-- | M] () -- C:\ProgramData\~29089552r
[2011.06.20 13:54:41 | 000,000,591 | -H-- | M] () -- C:\Users\Luffy\Desktop\Windows Vista Repair.lnk
[2011.06.20 13:54:20 | 000,000,336 | -H-- | M] () -- C:\ProgramData\29089552
[2011.06.20 13:53:48 | 000,364,544 | -H-- | M] (Sysinternals) -- C:\ProgramData\29089552.exe
[2011.06.20 13:44:26 | 000,452,608 | -H-- | M] (Sysinternals) -- C:\ProgramData\fVsVFGfVFkPeQTy.exe
[2011.06.20 10:25:05 | 078,264,409 | -H-- | M] () -- C:\Windows\System32\drivers\Avg\incavi.avm
[2011.06.20 10:18:42 | 000,000,436 | -H-- | M] () -- C:\Windows\System32\drivers\etc\hosts.ics
[2011.06.10 08:05:50 | 000,001,108 | -H-- | M] () -- C:\Users\Luffy\Desktop\Hamster Free Video Converter.lnk
[2011.06.10 08:03:06 | 000,314,808 | -H-- | M] (HamsterSoft, Inc.) -- C:\Users\Luffy\Desktop\hamsterfreevideoconverter.exe
[2011.06.08 11:58:43 | 000,001,637 | -H-- | M] () -- C:\Users\Luffy\Desktop\Paint.lnk
[2011.06.07 11:55:50 | 000,198,848 | -H-- | M] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll
[2011.06.07 11:55:35 | 000,006,656 | -H-- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll
[2011.06.07 11:55:35 | 000,005,632 | -H-- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll
[2011.06.07 11:55:33 | 000,272,896 | -H-- | M] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2011.06.02 11:34:39 | 004,045,158 | -H-- | M] () -- C:\Windows\System32\perfh007.dat
[2011.06.02 11:34:39 | 001,665,680 | -H-- | M] () -- C:\Windows\System32\perfh009.dat
[2011.06.02 11:34:39 | 001,234,642 | -H-- | M] () -- C:\Windows\System32\perfc007.dat
[2011.06.02 11:34:39 | 001,112,968 | -H-- | M] () -- C:\Windows\System32\perfc009.dat
[2011.06.02 11:34:02 | 000,000,069 | -H-- | M] () -- C:\Windows\NeroDigital.ini
[2011.06.02 11:33:59 | 000,127,488 | -H-- | M] () -- C:\Users\Luffy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.06.20 15:33:55 | 000,000,286 | -H-- | C] () -- C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-2527848741-3311900059-3240881507-1000.job
[2011.06.20 13:55:18 | 000,000,224 | -H-- | C] () -- C:\ProgramData\~29089552
[2011.06.20 13:55:18 | 000,000,152 | -H-- | C] () -- C:\ProgramData\~29089552r
[2011.06.20 13:54:41 | 000,000,591 | -H-- | C] () -- C:\Users\Luffy\Desktop\Windows Vista Repair.lnk
[2011.06.20 13:54:20 | 000,000,336 | -H-- | C] () -- C:\ProgramData\29089552
[2011.06.10 08:05:50 | 000,001,108 | -H-- | C] () -- C:\Users\Luffy\Desktop\Hamster Free Video Converter.lnk
[2011.06.08 11:58:43 | 000,001,637 | -H-- | C] () -- C:\Users\Luffy\Desktop\Paint.lnk
[2011.04.14 07:17:55 | 000,650,752 | -H-- | C] () -- C:\Windows\System32\xvidcore.dll
[2011.04.14 07:17:55 | 000,240,640 | -H-- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.05.30 11:53:58 | 000,000,151 | -H-- | C] () -- C:\Windows\PhotoSnapViewer.INI
[2010.02.06 20:57:47 | 000,000,618 | -H-- | C] () -- C:\Windows\eReg.dat
[2010.01.14 21:55:42 | 000,000,960 | -H-- | C] () -- C:\ProgramData\ss.ini
[2010.01.01 20:05:39 | 000,307,200 | -H-- | C] () -- C:\Windows\System32\AscSQLite.dll
[2009.10.12 22:32:09 | 000,000,069 | -H-- | C] () -- C:\Windows\NeroDigital.ini
[2009.10.12 22:20:29 | 000,000,039 | -H-- | C] () -- C:\Windows\Irremote.ini
[2009.06.02 20:05:18 | 000,000,088 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\koega.bat
[2009.06.02 15:16:48 | 000,321,462 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\gokui_nav.dat
[2009.06.02 15:16:48 | 000,000,643 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\gokui_navps.dat
[2009.05.27 19:39:20 | 000,000,090 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\ysgwyee.bat
[2009.05.27 08:02:16 | 000,000,088 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\ucgye.bat
[2009.05.19 20:12:35 | 000,000,090 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\sscqwuq.bat
[2009.05.19 12:29:36 | 000,000,090 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\eaqukcm.bat
[2009.05.13 19:16:58 | 000,000,088 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\uwqwe.bat
[2009.05.09 09:56:56 | 000,000,088 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\qyiym.bat
[2009.05.04 16:07:04 | 000,024,206 | -H-- | C] () -- C:\Users\Luffy\AppData\Roaming\UserTile.png
[2009.04.24 18:52:41 | 000,000,088 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\awwkm.bat
[2009.04.23 09:32:13 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.04.22 09:12:59 | 000,000,090 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\igemwmi.bat
[2009.04.21 09:43:42 | 000,000,090 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\smekscg.bat
[2009.04.21 08:47:36 | 000,000,031 | -H-- | C] () -- C:\Windows\warhead.ini
[2009.04.19 10:00:52 | 000,000,040 | -H-- | C] () -- C:\Windows\SIERRA.INI
[2009.04.18 12:01:37 | 000,069,632 | -H-- | C] () -- C:\Windows\System32\xmltok.dll
[2009.04.18 12:01:37 | 000,036,864 | -H-- | C] () -- C:\Windows\System32\xmlparse.dll
[2009.04.18 11:33:20 | 000,000,068 | -H-- | C] () -- C:\Windows\WININIT.INI
[2009.04.18 10:59:01 | 000,118,784 | -H-- | C] () -- C:\Windows\bwUnin-6.3.2.62-4476822L.exe
[2009.04.17 10:57:39 | 000,003,934 | -H-- | C] () -- C:\Windows\cdplayer.ini
[2009.04.17 09:55:54 | 000,127,488 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.03.12 04:42:36 | 000,000,090 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\oameg.bat
[2009.02.16 15:20:50 | 000,000,093 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\fusioncache.dat
[2008.10.13 01:15:24 | 000,290,748 | -H-- | C] () -- C:\Windows\System32\perfi007.dat
[2008.10.13 01:15:23 | 004,045,158 | -H-- | C] () -- C:\Windows\System32\perfh007.dat
[2008.10.13 01:15:23 | 001,234,642 | -H-- | C] () -- C:\Windows\System32\perfc007.dat
[2008.10.13 01:15:23 | 000,036,916 | -H-- | C] () -- C:\Windows\System32\perfd007.dat
[2008.10.12 15:28:35 | 000,000,680 | -H-- | C] () -- C:\Users\Luffy\AppData\Local\d3d9caps.dat
[2006.11.02 14:53:49 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:44:53 | 000,229,672 | -H-- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 12:33:01 | 001,665,680 | -H-- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 001,112,968 | -H-- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,287,440 | -H-- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,030,674 | -H-- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:23:21 | 000,215,943 | -H-- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | -H-- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | -H-- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | -H-- | C] () -- C:\Windows\System32\mlang.dat
[2006.11.02 09:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006.11.02 09:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2006.10.27 08:26:56 | 000,069,632 | -H-- | C] () -- C:\Windows\System32\vuins32.dll
[2006.09.19 10:07:28 | 000,827,392 | -H-- | C] () -- C:\Windows\vsnpstd3.exe
[2004.02.27 17:36:18 | 000,015,498 | -H-- | C] () -- C:\Windows\snpstd3.ini
[2001.09.18 13:00:00 | 000,065,536 | -H-- | C] () -- C:\Windows\System32\bmpproc.dll
[2001.09.18 13:00:00 | 000,032,528 | -H-- | C] () -- C:\Windows\amcap.exe
========== LOP Check ==========
[2009.05.10 21:13:21 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\AntsSoft
[2010.01.01 21:17:22 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Auslogics
[2011.04.14 07:16:42 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\ClickPotatoLite
[2011.05.15 21:08:07 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\com.johnwu.sparkboothhome
[2011.06.20 16:07:21 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\DNA
[2009.05.10 14:48:01 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\gtk-2.0
[2011.06.10 08:06:01 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\HamsterSoft
[2011.06.20 13:09:56 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\ICQ
[2009.05.21 13:01:33 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\IrfanView
[2009.05.22 22:54:40 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Opera
[2009.04.08 00:34:12 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\phonostar-Player
[2010.04.24 20:50:14 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Sony
[2010.05.24 14:28:24 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Sony Setup
[2009.02.16 15:17:36 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\T-Online
[2011.05.08 22:25:29 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\TS3Client
[2009.04.15 11:28:55 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\TuneUp Software
[2010.06.02 18:12:51 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Uniblue
[2011.06.12 12:21:45 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\UseNeXT
[2011.06.20 16:03:18 | 000,000,522 | -H-- | M] () -- C:\Windows\Tasks\1-Klick-Wartung.job
[2011.06.20 16:00:28 | 000,032,620 | -H-- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2011.05.15 21:05:08 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Adobe
[2010.07.17 11:21:30 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Ahead
[2009.05.10 21:13:21 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\AntsSoft
[2010.05.03 08:15:22 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Apple Computer
[2010.01.01 21:17:22 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Auslogics
[2011.04.14 07:16:42 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\ClickPotatoLite
[2011.05.15 21:08:07 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\com.johnwu.sparkboothhome
[2011.06.20 16:07:21 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\DNA
[2011.04.03 00:33:05 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\dvdcss
[2009.02.16 15:52:41 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Google
[2009.05.10 14:48:01 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\gtk-2.0
[2011.06.10 08:06:01 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\HamsterSoft
[2011.06.20 13:09:56 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\ICQ
[2008.10.12 15:28:41 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Identities
[2009.05.21 13:01:33 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\IrfanView
[2009.02.13 18:34:59 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Macromedia
[2010.10.25 13:26:24 | 000,000,000 | --SD | M] -- C:\Users\Luffy\AppData\Roaming\Microsoft
[2009.02.18 13:20:26 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Mozilla
[2009.10.12 22:29:36 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Nero
[2009.05.22 22:54:40 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Opera
[2009.04.08 00:34:12 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\phonostar-Player
[2011.06.07 11:56:39 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Real
[2010.04.24 20:50:14 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Sony
[2010.05.24 14:28:24 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Sony Setup
[2009.02.16 15:17:36 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\T-Online
[2011.05.15 21:29:31 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\teamspeak2
[2011.05.08 22:25:29 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\TS3Client
[2009.04.15 11:28:55 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\TuneUp Software
[2009.12.25 19:28:35 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\U3
[2010.06.02 18:12:51 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\Uniblue
[2011.06.12 12:21:45 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\UseNeXT
[2011.03.11 08:27:21 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\vlc
[2010.09.21 20:36:05 | 000,000,000 | -H-D | M] -- C:\Users\Luffy\AppData\Roaming\WinRAR
< %APPDATA%\*.exe /s >
[2010.04.24 20:47:55 | 000,010,134 | RH-- | M] () -- C:\Users\Luffy\AppData\Roaming\Microsoft\Installer\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}\ARPPRODUCTICON.exe
[2011.01.23 19:26:00 | 000,510,120 | -H-- | M] (RealNetworks, Inc.) -- C:\Users\Luffy\AppData\Roaming\Real\Update\setup3.13\setup.exe
[2010.04.24 20:40:13 | 033,850,672 | -H-- | M] (Apple Inc.) -- C:\Users\Luffy\AppData\Roaming\Sony Setup\9234765D-29DF-48d0-93FB-284B7B6009B9\QuickTimeInstaller.exe
[2007.10.23 10:27:20 | 000,110,592 | -H-- | M] () -- C:\Users\Luffy\AppData\Roaming\U3\temp\cleanup.exe
[2008.05.02 11:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\Luffy\AppData\Roaming\U3\temp\Launchpad Removal.exe
[2010.06.14 22:06:15 | 005,037,504 | -H-- | M] (Uniblue Systems Ltd ) -- C:\Users\Luffy\AppData\Roaming\Uniblue\RegistryBooster\_temp\ub.exe
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2006.11.02 11:49:52 | 000,053,864 | -H-- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: ATAPI.SYS >
[2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2009.02.14 14:51:17 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\drivers\atapi.sys
[2009.02.14 14:51:17 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2009.02.14 14:51:17 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2009.02.14 14:51:17 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2009.02.14 14:50:34 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\explorer.exe
[2009.02.14 14:50:34 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2009.02.14 14:50:33 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2009.02.14 14:50:32 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009.02.14 15:09:03 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2009.02.14 15:09:03 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2009.02.14 14:50:33 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006.11.02 11:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
< MD5 for: IASTORV.SYS >
[2006.11.02 11:51:25 | 000,232,040 | -H-- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2006.11.02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\System32\netlogon.dll
[2006.11.02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2006.11.02 11:50:13 | 000,040,040 | -H-- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
< MD5 for: SCECLI.DLL >
[2006.11.02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\System32\scecli.dll
[2006.11.02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
< MD5 for: USER32.DLL >
[2009.02.14 14:37:58 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=63B4F59D7C89B1BF5277F1FFEFD491CD -- C:\Windows\System32\user32.dll
[2009.02.14 14:37:58 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=63B4F59D7C89B1BF5277F1FFEFD491CD -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16438_none_cb39bc5b7047127e\user32.dll
[2009.02.14 14:37:58 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=9D9F061EDA75425FC67F0365E3467C86 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.20537_none_cbc258dc896598f1\user32.dll
[2006.11.02 11:46:13 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=E698A5437B89A285ACA3FF022356810A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16386_none_cb01aa4570716e5e\user32.dll
< MD5 for: USERINIT.EXE >
[2006.11.02 11:45:50 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 -- C:\Windows\System32\userinit.exe
[2006.11.02 11:45:50 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe
< MD5 for: WINLOGON.EXE >
[2006.11.02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\System32\winlogon.exe
[2006.11.02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2006.11.02 10:58:26 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=84620AECDCFD2A7A14E6263927D8C0ED -- C:\Windows\System32\drivers\ws2ifsl.sys
[2006.11.02 10:58:26 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=84620AECDCFD2A7A14E6263927D8C0ED -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6000.16386_none_4d4fded8cae2956d\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2006.11.02 12:34:05 | 000,008,192 | -H-- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006.11.02 12:34:05 | 000,020,480 | -H-- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006.11.02 12:34:05 | 000,008,192 | -H-- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 12:34:08 | 010,133,504 | -H-- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 12:34:08 | 001,826,816 | -H-- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< End of report >
--- --- --- |
