sinconoc | 14.08.2011 15:02 | OTL Logfile: Code:
OTL logfile created on: 8/14/2011 2:48:12 PM - Run 2
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\******\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: yyyy-MM-dd
3.86 Gb Total Physical Memory | 1.91 Gb Available Physical Memory | 49.56% Memory free
7.71 Gb Paging File | 5.41 Gb Available in Paging File | 70.15% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 290.54 Gb Total Space | 196.00 Gb Free Space | 67.46% Space Free | Partition Type: NTFS
Drive D: | 290.54 Gb Total Space | 177.83 Gb Free Space | 61.21% Space Free | Partition Type: NTFS
Drive X: | 929.44 Gb Total Space | 447.97 Gb Free Space | 48.20% Space Free | Partition Type: NTFS
Drive Y: | 929.44 Gb Total Space | 447.97 Gb Free Space | 48.20% Space Free | Partition Type: NTFS
Computer Name: MFJ2 | User Name: ****** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\******\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Ninja\Ninja\Ninja.exe (Global IP Telecommunications Ltd.)
PRC - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
PRC - C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG)
PRC - C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG)
PRC - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG)
PRC - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG)
PRC - C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH)
PRC - C:\Program Files (x86)\PDF Suite 2011\ConversionService.exe (Interactive Brands Inc.)
PRC - C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (G Data Software AG)
PRC - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe (Uniblue Systems Limited)
PRC - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanionInfo.exe ()
PRC - C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
PRC - C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (SEC)
PRC - C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (SAMSUNG Electronics)
PRC - C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)
PRC - C:\Windows\SysWOW64\Rezip.exe ()
PRC - C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
PRC - C:\Program Files (x86)\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe ()
========== Modules (SafeList) ==========
MOD - C:\Users\******\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe (Logitech, Inc.)
SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (Akamai) -- c:\program files (x86)\common files\akamai\netsession_win_2da1ebd.dll ()
SRV - (Sony Ericsson PCCompanion) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software)
SRV - (GDFwSvc) -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (G Data Software AG)
SRV - (AVKWCtl) -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe (G Data Software AG)
SRV - (AVKProxy) -- C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG)
SRV - (GDScan) -- C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG)
SRV - (StarMoney 7.0 OnlineUpdate) -- C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH)
SRV - (PDF Suite 2011 Service) -- C:\Program Files (x86)\PDF Suite 2011\ConversionService.exe (Interactive Brands Inc.)
SRV - (AVKService) -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (G Data Software AG)
SRV - (TeamViewer6) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Virtual Router) -- C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe (Chris Pietschmann (hxxp://pietschsoft.com))
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (Rezip) -- C:\Windows\SysWOW64\Rezip.exe ()
SRV - (AAV UpdateService) -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
========== Driver Services (SafeList) ==========
DRV:64bit: - (HookCentre) -- C:\Windows\SysNative\drivers\HookCentre.sys (G Data Software AG)
DRV:64bit: - (GDMnIcpt) -- C:\Windows\SysNative\drivers\MiniIcpt.sys (G Data Software AG)
DRV:64bit: - (GDBehave) -- C:\Windows\SysNative\drivers\GDBehave.sys (G Data Software AG)
DRV:64bit: - (gdwfpcd) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys (G Data Software AG)
DRV:64bit: - (GdNetMon) -- C:\Windows\SysNative\drivers\GdNetMon64.sys (G Data Software AG)
DRV:64bit: - (GDPkIcpt) -- C:\Windows\SysNative\drivers\PktIcpt.sys (G Data Software AG)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (RMCAST) -- C:\Windows\SysNative\drivers\rmcast.sys (Microsoft Corporation)
DRV:64bit: - (tap0901) -- C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidEqd) -- C:\Windows\SysNative\drivers\LHidEqd.sys (Logitech, Inc.)
DRV:64bit: - (LEqdUsb) -- C:\Windows\SysNative\drivers\LEqdUsb.sys (Logitech, Inc.)
DRV:64bit: - (ewusbnet) -- C:\Windows\SysNative\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (hwdatacard) -- C:\Windows\SysNative\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (hwusbdev) -- C:\Windows\SysNative\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (Impcd) -- C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys ()
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys ()
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) -- C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (WSDScan) -- C:\Windows\SysNative\drivers\WSDScan.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (grmnusb) -- C:\Windows\SysNative\drivers\grmnusb.sys (GARMIN Corp.)
DRV:64bit: - (ggsemc) -- C:\Windows\SysNative\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (ggflt) -- C:\Windows\SysNative\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV - (GRD) -- C:\Windows\SysWOW64\drivers\GRD.sys (G Data Software)
DRV - ({FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}) -- C:\Program Files (x86)\CyberLink\PowerDVD8\000.fcl (CyberLink Corp.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.teneriffa-forum.net/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 192.168.2.1:80
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "hxxp://www.teneriffa-forum.net/gott/index.php"
FF - prefs.js..keyword.URL: "hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=827316&p="
FF - prefs.js..network.proxy.http: "193.174.155.27"
FF - prefs.js..network.proxy.http_port: 3124
FF - prefs.js..network.proxy.socks_version: 4
FF - prefs.js..network.proxy.type: 0
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFPDFConverter@ib.com: C:\Program Files (x86)\PDF Suite 2011\firefoxextension [2011/04/27 19:39:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/24 16:14:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2011/04/05 20:18:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\******\AppData\Roaming\mozilla\Extensions
[2011/06/08 13:39:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\******\AppData\Roaming\mozilla\Firefox\Profiles\jtw6ppav.default\extensions
[2011/08/14 10:07:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011/08/08 10:49:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}
[2011/06/26 08:29:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) --
() (No name found) -- C:\USERS\******\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\JTW6PPAV.DEFAULT\EXTENSIONS\PROXYSELECTOR@MOZILLA.ORG.XPI
[2011/06/24 16:14:00 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/01/01 09:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010/01/01 09:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010/01/01 09:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010/01/01 09:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010/01/01 09:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010/01/01 09:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O2 - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\WebFilter\AvkWebIE.dll (G Data Software AG)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (PDF Suite Helper) - {1AD61D5B-58A3-4592-9B34-DC84688FF805} - C:\Program Files (x86)\PDF Suite 2011\PDFIEHelper.dll (Interactive Brands Inc.)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (BHO) - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - C:\Program Files (x86)\Common Files\G Data\AVKProxy\BanksafeBHO.dll (G Data Software AG)
O3:64bit: - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\WebFilter\AvkWebIE.dll (G Data Software AG)
O3 - HKLM\..\Toolbar: (PDF Suite Toolbar) - {261F6A8B-7AAF-4BF5-8552-6610F4D67819} - C:\Program Files (x86)\PDF Suite 2011\PDFIEPlugin.dll (Interactive Brands Inc.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\IEPro\IEProRecorder.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\IEPro\IEProRecorder.dll ()
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG)
O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl8] C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [NINJA.EXE] C:\Program Files (x86)\Ninja\Ninja\Ninja.exe (Global IP Telecommunications Ltd.)
O4 - HKCU..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
O4 - HKCU..\Run: [updateMgr] C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: solbank.com ([www] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: teneriffa-forum.net ([www] http in Vertrauenswürdige Sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0f3303cb-82f3-11e0-9833-001e101f9843}\Shell - "" = AutoRun
O33 - MountPoints2\{0f3303cb-82f3-11e0-9833-001e101f9843}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{40e07d7b-852c-11e0-99c2-00245488d101}\Shell - "" = AutoRun
O33 - MountPoints2\{40e07d7b-852c-11e0-99c2-00245488d101}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{d1eb4b20-7fa0-11e0-bbe0-00245488d101}\Shell - "" = AutoRun
O33 - MountPoints2\{d1eb4b20-7fa0-11e0-bbe0-00245488d101}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{d1eb4b67-7fa0-11e0-bbe0-00245488d101}\Shell - "" = AutoRun
O33 - MountPoints2\{d1eb4b67-7fa0-11e0-bbe0-00245488d101}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/08/14 12:51:34 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Users\******\Desktop\OTL.exe
[2011/08/12 12:30:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2011/08/12 12:30:28 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/08/08 10:53:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Speedbit
[2011/08/08 10:49:11 | 001,941,512 | ---- | C] (G Data Software AG) -- C:\windows\SysWow64\GdScrSv.scr
[2011/08/08 10:49:06 | 000,031,448 | ---- | C] (G Data Software AG) -- C:\windows\SysNative\drivers\GdNetMon64.sys
[2011/08/08 10:25:55 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Speedbit
[2011/08/03 16:55:40 | 000,000,000 | ---D | C] -- C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2011/08/03 16:55:40 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2011/08/02 12:54:04 | 000,000,000 | ---D | C] -- C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hugin
[2011/08/02 12:53:43 | 000,000,000 | ---D | C] -- C:\Program Files\Hugin
[2011/08/02 12:40:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Siemens
[2011/08/02 12:34:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver
[2011/08/01 11:42:58 | 000,211,968 | ---- | C] (Global IP Telecommunications Ltd.) -- C:\windows\SysNative\giptsp64.tsp
[2011/08/01 11:42:58 | 000,178,688 | ---- | C] (Global IP Telecommunications Ltd.) -- C:\windows\SysWow64\giptsp64.tsp
[2011/07/25 14:30:08 | 000,000,000 | -HSD | C] -- C:\Users\******\AppData\Roaming\Cyberduck Updater AU
[2011/07/25 14:25:02 | 000,000,000 | -HSD | C] -- C:\Users\******\wc
[2011/07/25 14:24:58 | 000,000,000 | -HSD | C] -- C:\Users\******\AppData\Roaming\wyUpdate AU
[2011/07/25 14:24:53 | 000,000,000 | ---D | C] -- C:\Users\******\AppData\Roaming\Cyberduck
[2011/07/25 14:23:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberduck
[2011/07/25 14:12:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cyberduck
[2011/07/24 08:57:02 | 000,000,000 | ---D | C] -- C:\Users\******\Documents\RegDB_Sicherungen
[2011/07/22 06:24:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2011/07/21 07:53:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011/07/21 07:53:43 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/07/18 22:22:53 | 000,000,000 | ---D | C] -- C:\Users\******\Documents\CyberLink
[2011/07/18 19:03:21 | 000,000,000 | ---D | C] -- C:\Users\******\AppData\Local\AAV
[2011/07/18 17:47:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuertipps
[2011/07/18 17:45:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
[2011/07/18 17:43:36 | 000,000,000 | ---D | C] -- C:\ProgramData\AAV
[2010/12/19 10:32:55 | 002,211,840 | ---- | C] (Garmin International) -- C:\Program Files (x86)\UnlockWizard.exe
[2010/12/19 10:32:51 | 000,618,496 | ---- | C] (Garmin International) -- C:\Program Files (x86)\UnlockWizard_Lang.dll
[2010/12/19 10:30:26 | 000,475,136 | ---- | C] (Garmin International) -- C:\Program Files (x86)\MapSource_Lang.dll
[2010/12/19 10:30:22 | 000,122,880 | ---- | C] (Palm, Inc.) -- C:\Program Files (x86)\condmgr.dll
[2010/10/14 09:44:54 | 001,750,888 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceTRK.dll
[2010/10/14 09:44:52 | 001,749,864 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceSVE.dll
[2010/10/14 09:44:50 | 001,758,568 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceSLV.dll
[2010/10/14 09:44:48 | 001,764,200 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceSKY.dll
[2010/10/14 09:44:46 | 001,765,224 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceRUS.dll
[2010/10/14 09:44:44 | 001,772,392 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourcePTG.dll
[2010/10/14 09:44:42 | 001,764,200 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourcePLK.dll
[2010/10/14 09:44:42 | 001,763,688 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourcePTB.dll
[2010/10/14 09:44:40 | 001,748,840 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceNOR.dll
[2010/10/14 09:44:38 | 001,764,200 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceNLD.dll
[2010/10/14 09:44:36 | 001,682,280 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceJPN.dll
[2010/10/14 09:44:36 | 001,678,696 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceKOR.dll
[2010/10/14 09:44:34 | 001,776,488 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceITA.dll
[2010/10/14 09:44:32 | 001,767,784 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceHUN.dll
[2010/10/14 09:44:30 | 001,761,640 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceHRV.dll
[2010/10/14 09:44:28 | 001,777,512 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceFRA.dll
[2010/10/14 09:44:26 | 001,755,496 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceFIN.dll
[2010/10/14 09:44:24 | 001,771,880 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceESN.dll
[2010/10/14 09:44:20 | 001,781,096 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceELL.dll
[2010/10/14 09:44:18 | 001,777,512 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceDEU.dll
[2010/10/14 09:44:14 | 001,750,888 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceDAN.dll
[2010/10/14 09:44:04 | 001,758,056 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceCSY.dll
[2010/10/14 09:44:00 | 001,660,264 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceCHT.dll
[2010/10/14 09:43:54 | 001,658,728 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSourceCHS.dll
[2010/10/14 09:43:46 | 017,148,264 | ---- | C] (GARMIN Corp.) -- C:\Program Files (x86)\MapSource.exe
[2002/08/29 02:08:20 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Program Files (x86)\devcon.exe
========== Files - Modified Within 30 Days ==========
[2011/08/14 14:37:34 | 000,014,144 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/14 14:37:34 | 000,014,144 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/14 14:35:46 | 000,050,477 | ---- | M] () -- C:\Users\******\Desktop\Defogger.exe
[2011/08/14 14:32:15 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/14 14:18:41 | 000,001,978 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2011/08/14 12:51:12 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\******\Desktop\OTL.exe
[2011/08/14 11:24:09 | 000,379,533 | ---- | M] () -- C:\windows\SysWow64\sig.bin
[2011/08/14 11:24:09 | 000,031,872 | ---- | M] () -- C:\windows\SysWow64\nmp.map
[2011/08/14 10:20:55 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/14 10:20:43 | 000,000,346 | ---- | M] () -- C:\windows\tasks\RegistryBooster.job
[2011/08/14 10:19:55 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2011/08/14 10:19:49 | 4141,481,984 | -HS- | M] () -- C:\hiberfil.sys
[2011/08/14 09:23:40 | 001,655,724 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2011/08/14 09:23:40 | 000,713,678 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
[2011/08/14 09:23:40 | 000,663,612 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2011/08/14 09:23:40 | 000,156,646 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
[2011/08/14 09:23:40 | 000,126,932 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2011/08/11 09:20:48 | 001,675,408 | ---- | M] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2011/08/08 10:49:40 | 000,051,576 | ---- | M] (G Data Software AG) -- C:\windows\SysNative\drivers\HookCentre.sys
[2011/08/08 10:49:13 | 000,110,456 | ---- | M] (G Data Software AG) -- C:\windows\SysNative\drivers\MiniIcpt.sys
[2011/08/08 10:49:13 | 000,050,040 | ---- | M] (G Data Software AG) -- C:\windows\SysNative\drivers\GDBehave.sys
[2011/08/08 10:49:11 | 000,063,864 | ---- | M] (G Data Software AG) -- C:\windows\SysNative\drivers\gdwfpcd64.sys
[2011/08/08 10:49:06 | 000,031,448 | ---- | M] (G Data Software AG) -- C:\windows\SysNative\drivers\GdNetMon64.sys
[2011/08/08 10:24:35 | 000,027,698 | ---- | M] () -- C:\Users\******\Desktop\www.videoaccelerator.com.htm
[2011/08/07 19:53:05 | 000,000,161 | ---- | M] () -- C:\Users\******\Desktop\Youtube Tricks.url
[2011/08/07 18:04:10 | 000,106,224 | ---- | M] (G Data Software) -- C:\windows\SysWow64\drivers\GRD.sys
[2011/08/02 13:05:36 | 000,000,317 | ---- | M] () -- C:\Users\******\AppData\Roaming\.ptbt1
[2011/08/02 12:54:04 | 000,000,858 | ---- | M] () -- C:\Users\******\Desktop\Hugin.lnk
[2011/08/02 12:40:13 | 000,001,220 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Gigaset WLAN Adapter Monitor.lnk
[2011/08/02 12:40:13 | 000,001,202 | ---- | M] () -- C:\Users\Public\Desktop\Gigaset WLAN Adapter Monitor.lnk
[2011/08/02 12:37:53 | 000,225,276 | ---- | M] () -- C:\windows\SysWow64\setup.inx
[2011/07/23 21:59:42 | 000,135,516 | -H-- | M] () -- C:\windows\SysWow64\mlfcache.dat
[2011/07/19 08:56:06 | 000,002,264 | ---- | M] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2011/07/18 20:43:02 | 000,018,811 | ---- | M] () -- C:\Users\******\Elster_Zert_MFJ.pfx
[2011/07/16 09:57:06 | 524,402,253 | ---- | M] () -- C:\windows\MEMORY.DMP
========== Files Created - No Company Name ==========
[2011/08/14 14:35:55 | 000,050,477 | ---- | C] () -- C:\Users\******\Desktop\Defogger.exe
[2011/08/14 14:18:41 | 000,001,990 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011/08/14 14:18:41 | 000,001,978 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2011/08/08 13:34:06 | 000,379,533 | ---- | C] () -- C:\windows\SysWow64\sig.bin
[2011/08/08 13:34:06 | 000,031,872 | ---- | C] () -- C:\windows\SysWow64\nmp.map
[2011/08/08 10:24:34 | 000,027,698 | ---- | C] () -- C:\Users\******\Desktop\www.videoaccelerator.com.htm
[2011/08/07 19:52:48 | 000,000,161 | ---- | C] () -- C:\Users\******\Desktop\Youtube Tricks.url
[2011/08/02 13:05:36 | 000,000,317 | ---- | C] () -- C:\Users\******\AppData\Roaming\.ptbt1
[2011/08/02 12:54:04 | 000,000,858 | ---- | C] () -- C:\Users\******\Desktop\Hugin.lnk
[2011/08/02 12:40:28 | 000,225,276 | ---- | C] () -- C:\windows\SysWow64\setup.inx
[2011/08/02 12:40:13 | 000,001,220 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Gigaset WLAN Adapter Monitor.lnk
[2011/08/02 12:40:13 | 000,001,202 | ---- | C] () -- C:\Users\Public\Desktop\Gigaset WLAN Adapter Monitor.lnk
[2011/07/18 20:41:28 | 000,008,799 | ---- | C] () -- C:\Users\******\Elster_Zert_MFJ - Kopie.pfx
[2011/07/18 20:24:51 | 000,018,811 | ---- | C] () -- C:\Users\******\Elster_Zert_MFJ.pfx
[2011/03/28 17:20:16 | 000,000,082 | ---- | C] () -- C:\windows\MPLAYER.INI
[2011/03/28 17:18:20 | 000,341,504 | ---- | C] () -- C:\windows\SysWow64\lffpx7.dll
[2011/03/28 17:18:20 | 000,125,440 | ---- | C] () -- C:\windows\SysWow64\LFKODAK.DLL
[2011/02/20 10:33:27 | 000,003,584 | ---- | C] () -- C:\Users\******\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/31 21:23:12 | 000,000,137 | ---- | C] () -- C:\windows\KTEL.INI
[2011/01/14 00:27:06 | 000,000,000 | ---- | C] () -- C:\Users\******\AppData\Roaming\wklnhst.dat
[2011/01/12 11:25:53 | 000,000,056 | -H-- | C] () -- C:\windows\SysWow64\ezsidmv.dat
[2011/01/11 17:47:12 | 000,135,516 | -H-- | C] () -- C:\windows\SysWow64\mlfcache.dat
[2010/12/25 14:16:04 | 000,000,094 | ---- | C] () -- C:\Users\******\AppData\Local\fusioncache.dat
[2010/12/17 22:59:11 | 000,007,615 | ---- | C] () -- C:\Users\******\AppData\Local\resmon.resmoncfg
[2010/12/16 21:27:25 | 001,675,408 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2010/12/16 20:56:38 | 000,210,944 | ---- | C] () -- C:\windows\SysWow64\Msvcrt10.dll
[2010/12/16 18:06:53 | 000,000,400 | ---- | C] () -- C:\windows\ODBC.INI
[2010/12/16 13:20:29 | 000,036,864 | ---- | C] () -- C:\windows\SysWow64\Hooks.dll
[2010/10/13 15:22:24 | 000,011,560 | ---- | C] () -- C:\Program Files (x86)\LICENSE
[2010/04/07 10:24:37 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe
[2010/04/07 10:11:14 | 000,000,426 | ---- | C] () -- C:\windows\HotFixList.ini
[2010/04/07 09:41:39 | 000,311,296 | ---- | C] () -- C:\windows\SysWow64\Rezip.exe
[2009/07/14 06:38:36 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat
[2009/07/14 03:35:51 | 000,000,741 | ---- | C] () -- C:\windows\SysWow64\NOISE.DAT
[2009/07/14 03:34:42 | 000,215,943 | ---- | C] () -- C:\windows\SysWow64\dssec.dat
[2009/07/14 01:10:29 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\windows\SysWow64\BWContextHandler.dll
[2009/07/13 22:59:36 | 000,982,196 | ---- | C] () -- C:\windows\SysWow64\igkrng500.bin
[2009/07/13 22:59:36 | 000,139,824 | ---- | C] () -- C:\windows\SysWow64\igfcg500.bin
[2009/07/13 22:59:36 | 000,097,448 | ---- | C] () -- C:\windows\SysWow64\igfcg500m.bin
[2009/07/13 22:59:35 | 000,417,344 | ---- | C] () -- C:\windows\SysWow64\igcompkrng500.bin
[2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\windows\SysWow64\msjetoledb40.dll
[2009/06/10 22:26:10 | 000,673,088 | ---- | C] () -- C:\windows\SysWow64\mlang.dat
[2008/06/27 15:01:12 | 000,665,704 | ---- | C] () -- C:\Program Files (x86)\MapSource.chm
[2008/06/27 14:46:54 | 000,969,856 | ---- | C] () -- C:\Program Files (x86)\MapsourceManual.pdf
[2007/08/16 16:17:50 | 000,143,360 | ---- | C] () -- C:\windows\SysWow64\nsldap32v50.dll
[2006/10/08 20:33:54 | 000,000,000 | ---- | C] () -- C:\windows\R-series.ini
[2006/07/25 19:31:02 | 000,000,570 | ---- | C] () -- C:\Program Files (x86)\NOTICE
[2005/12/21 17:57:04 | 000,024,576 | ---- | C] () -- C:\windows\SysWow64\nsldappr32v50.dll
[2005/12/21 17:54:34 | 000,040,960 | ---- | C] () -- C:\windows\SysWow64\nsldapssl32v50.dll
[2005/02/16 14:02:50 | 008,771,797 | ---- | C] () -- C:\Program Files (x86)\setup_de.exe
[2004/05/19 13:27:18 | 000,000,218 | ---- | C] () -- C:\Program Files (x86)\TRIPWPT2.tdb
[2004/04/08 14:46:58 | 000,000,045 | ---- | C] () -- C:\Program Files (x86)\autorun.inf
[2004/03/18 13:44:34 | 000,028,672 | ---- | C] () -- C:\Program Files (x86)\newtest.exe
[2004/02/20 18:11:42 | 000,000,582 | ---- | C] () -- C:\Program Files (x86)\Install.ini
[2004/02/06 17:29:30 | 000,033,318 | ---- | C] () -- C:\Program Files (x86)\DT_LOGO2.bmp
[2004/02/06 17:25:38 | 000,005,038 | ---- | C] () -- C:\Program Files (x86)\DT_LOGO.bmp
[2003/12/11 15:53:02 | 010,145,792 | ---- | C] () -- C:\Program Files (x86)\TRIPWPT2.img
[2003/02/20 18:53:42 | 000,005,702 | ---- | C] () -- C:\windows\SysWow64\OUTLPERF.INI
[2002/04/15 01:59:02 | 000,007,584 | ---- | C] () -- C:\Program Files (x86)\KILLW16.EXE
========== LOP Check ==========
[2011/03/01 02:51:53 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\7-PDFMaker
[2011/05/13 16:10:44 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\ALL-INKL WebDisk
[2011/06/02 21:57:51 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Audacity
[2011/01/14 08:08:40 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Canon
[2011/07/26 15:47:05 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Cyberduck
[2011/07/25 14:30:08 | 000,000,000 | -HSD | M] -- C:\Users\******\AppData\Roaming\Cyberduck Updater AU
[2011/05/20 07:29:39 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\EurekaLog
[2010/12/19 20:46:34 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\GARMIN
[2011/03/01 16:07:17 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\GetRightToGo
[2010/12/28 14:16:55 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\GHISLER
[2010/12/29 17:19:46 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\GrabPro
[2011/05/25 08:37:28 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Jasc
[2011/07/06 14:48:06 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\klickTel
[2010/12/26 07:47:50 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Leadertech
[2011/01/02 02:37:33 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\MiniDm
[2010/12/17 14:01:12 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\NinjaOA
[2010/12/26 21:45:41 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Notepad++
[2011/06/07 11:47:27 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Opera
[2011/07/24 18:15:10 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\PDF Software
[2011/03/19 22:05:46 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\TeamViewer
[2011/01/14 00:28:14 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Template
[2010/12/31 20:50:46 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\Uniblue
[2011/03/06 17:22:43 | 000,000,000 | ---D | M] -- C:\Users\******\AppData\Roaming\uTorrent
[2011/07/25 14:24:58 | 000,000,000 | -HSD | M] -- C:\Users\******\AppData\Roaming\wyUpdate AU
[2011/08/14 10:20:43 | 000,000,346 | ---- | M] () -- C:\windows\Tasks\RegistryBooster.job
[2011/07/12 05:12:50 | 000,032,632 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report > --- --- --- |