OTL.txt Code:
OTL logfile created on: 22.12.2011 22:13:29 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Dell\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 70,69% Memory free
5,99 Gb Paging File | 4,91 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,59 Gb Total Space | 249,10 Gb Free Space | 54,68% Space Free | Partition Type: NTFS
Drive D: | 232,88 Gb Total Space | 186,31 Gb Free Space | 80,00% Space Free | Partition Type: NTFS
Drive E: | 10,00 Gb Total Space | 2,78 Gb Free Space | 27,76% Space Free | Partition Type: NTFS
Computer Name: DELL-STUDIO | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011.12.22 22:12:30 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
PRC - [2011.12.21 08:42:28 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2011.08.01 14:56:42 | 001,821,576 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliPoint\ipoint.exe
PRC - [2011.08.01 14:56:42 | 000,412,552 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliPoint\dpupdchk.exe
PRC - [2011.07.17 13:01:18 | 002,090,016 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\vsserv.exe
PRC - [2011.07.17 13:01:04 | 001,451,928 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\bdagent.exe
PRC - [2011.06.18 10:16:04 | 000,064,048 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\pchooklaunch32.exe
PRC - [2011.06.18 10:12:23 | 000,043,936 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\updatesrv.exe
PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.03.30 18:49:44 | 000,671,552 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
PRC - [2011.03.30 18:48:00 | 001,523,008 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
PRC - [2011.03.04 10:39:14 | 000,584,488 | ---- | M] (Nero AG) -- C:\Programme\Nero\Update\NASvc.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 13:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 13:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.08.18 02:36:36 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2009.03.05 15:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe
========== Modules (No Company Name) ==========
MOD - [2011.12.21 08:42:28 | 002,124,760 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2011.07.17 13:01:05 | 000,185,040 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\framework.dll
MOD - [2011.06.18 10:14:24 | 000,109,344 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\connector.dll
MOD - [2011.06.18 10:14:05 | 000,189,184 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\txmlutil.dll
MOD - [2011.05.22 18:21:36 | 000,093,696 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll
MOD - [2010.03.15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
========== Win32 Services (SafeList) ==========
SRV - [2011.12.10 12:23:11 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.07.17 13:01:18 | 002,090,016 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe -- (VSSERV)
SRV - [2011.07.05 10:28:46 | 002,428,968 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- C:\Programme\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc)
SRV - [2011.06.18 10:12:23 | 000,043,936 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe -- (Updatesrv)
SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.03.30 18:48:00 | 001,523,008 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.03.30 18:45:32 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2011.03.04 10:39:14 | 000,584,488 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011.02.22 21:25:17 | 000,307,544 | ---- | M] (BitDefender) [On_Demand | Stopped] -- C:\Programme\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Update Server)
SRV - [2010.12.08 13:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.01.15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009.11.02 12:48:12 | 000,099,728 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009.07.14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.01.26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
SRV - [2005.11.17 14:18:52 | 001,527,900 | ---- | M] (MAGIX®) [Disabled | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
========== Driver Services (SafeList) ==========
DRV - [2011.12.02 18:38:08 | 000,199,528 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService)
DRV - [2011.09.08 09:23:34 | 000,211,984 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2011.08.01 14:56:42 | 000,045,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB)
DRV - [2011.06.30 18:18:56 | 000,122,552 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\Programme\BitDefender\BitDefender 2011\bdselfpr.sys -- (bdselfpr)
DRV - [2011.06.25 17:18:22 | 000,010,454 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\parldr2k.sys -- (PARLDR2K)
DRV - [2011.06.25 16:28:29 | 000,033,402 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsvcom.sys -- (FLSVCOM)
DRV - [2011.06.25 16:28:29 | 000,008,344 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsser.sys -- (FLSSER)
DRV - [2011.06.25 16:28:28 | 000,033,404 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\fle5wnnt.sys -- (FLE5WNNT)
DRV - [2011.06.25 16:28:28 | 000,016,314 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flspar.sys -- (FLSPAR)
DRV - [2011.06.25 16:28:28 | 000,013,440 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsiface.sys -- (FLSIFACE)
DRV - [2011.06.18 09:12:52 | 000,306,320 | ---- | M] (BitDefender S.R.L.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\trufos.sys -- (Trufos)
DRV - [2011.04.09 09:16:10 | 000,353,096 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\bdfsfltr.sys -- (bdfsfltr)
DRV - [2011.03.25 03:57:58 | 000,020,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbohci.sys -- (usbohci)
DRV - [2011.02.10 10:22:58 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.02.03 20:52:56 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avmaudio.sys -- (avmaudio)
DRV - [2010.12.02 11:13:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.12.02 11:13:22 | 000,018,304 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.12.02 09:36:42 | 000,137,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2010.12.02 09:36:42 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2010.12.01 20:06:29 | 000,108,104 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2010.11.20 13:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 13:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 13:30:15 | 000,028,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 13:30:14 | 000,160,128 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vhdmp.sys -- (vhdmp)
DRV - [2010.11.20 13:30:12 | 000,053,120 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\termdd.sys -- (TermDD)
DRV - [2010.11.20 13:30:10 | 000,085,376 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\sbp2port.sys -- (sbp2port)
DRV - [2010.11.20 13:30:05 | 000,233,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\msiscsi.sys -- (iScsiPrt)
DRV - [2010.11.20 13:30:04 | 000,116,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\msdsm.sys -- (msdsm)
DRV - [2010.11.20 13:30:01 | 000,130,432 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\mpio.sys -- (mpio)
DRV - [2010.11.20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:01:12 | 000,164,864 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\1394ohci.sys -- (1394ohci)
DRV - [2010.11.20 11:00:24 | 000,039,936 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\umbus.sys -- (umbus)
DRV - [2010.11.20 11:00:21 | 000,304,128 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\HdAudio.sys -- (HdAudAddService)
DRV - [2010.11.20 11:00:21 | 000,146,432 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\usbvideo.sys -- (usbvideo) USB-Videogerät (WDM)
DRV - [2010.11.20 10:59:46 | 000,027,648 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbser.sys -- (usbser)
DRV - [2010.11.20 10:59:44 | 000,080,768 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbaudio.sys -- (usbaudio) USB-Audiotreiber (WDM)
DRV - [2010.11.20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 10:50:21 | 000,031,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\CompositeBus.sys -- (CompositeBus)
DRV - [2010.11.20 10:50:10 | 000,028,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\kbdhid.sys -- (kbdhid)
DRV - [2010.11.20 10:19:15 | 000,065,536 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\IPMIDrv.sys -- (IPMIDRV)
DRV - [2010.11.20 10:14:45 | 000,017,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 10:14:41 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.11.20 09:54:02 | 000,084,992 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\sdbus.sys -- (sdbus)
DRV - [2010.11.20 09:47:55 | 000,010,240 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\acpipmi.sys -- (AcpiPmi)
DRV - [2010.08.20 17:41:54 | 000,088,144 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Programme\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys -- (bdfwfpf)
DRV - [2010.08.20 14:41:58 | 000,072,784 | ---- | M] (BitDefender) [Kernel | System | Running] -- c:\Programme\Common Files\BitDefender\BitDefender Firewall\bdfndisf6.sys -- (Bdfndisf)
DRV - [2010.07.30 13:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.07.30 13:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.06.28 11:55:42 | 000,970,320 | ---- | M] (BitDefender) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\avckf.sys -- (avckf)
DRV - [2010.06.28 11:55:36 | 000,633,424 | ---- | M] (BitDefender) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\avc3.sys -- (avc3)
DRV - [2010.05.28 12:24:56 | 000,040,560 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\hotcore3.sys -- (hotcore3)
DRV - [2010.05.13 15:52:04 | 000,152,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bdfm.sys -- (BDFM)
DRV - [2010.02.25 16:51:02 | 000,025,216 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2010.01.19 18:32:40 | 000,085,128 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Windows\System32\drivers\bdvedisk.sys -- (Bdvedisk)
DRV - [2009.11.02 12:45:44 | 000,014,808 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\TurboB.sys -- (TurboB)
DRV - [2009.08.18 03:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.14 02:26:15 | 000,053,312 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\agp440.sys -- (agp440)
DRV - [2009.07.14 02:26:15 | 000,014,912 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\amdide.sys -- (amdide)
DRV - [2009.07.14 02:20:45 | 000,012,368 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\pciide.sys -- (pciide)
DRV - [2009.07.14 02:20:44 | 000,105,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\nv_agp.sys -- (nv_agp)
DRV - [2009.07.14 02:20:44 | 000,028,240 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\mssmbios.sys -- (mssmbios)
DRV - [2009.07.14 02:20:36 | 000,046,656 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\isapnp.sys -- (isapnp)
DRV - [2009.07.14 02:20:36 | 000,042,576 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\kbdclass.sys -- (kbdclass)
DRV - [2009.07.14 02:20:36 | 000,015,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\intelide.sys -- (intelide)
DRV - [2009.07.14 02:20:28 | 000,057,936 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\gagp30kx.sys -- (gagp30kx)
DRV - [2009.07.14 02:20:28 | 000,022,096 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\system32\DRIVERS\crcdisk.sys -- (crcdisk)
DRV - [2009.07.14 02:19:11 | 000,057,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\uliagpkx.sys -- (uliagpkx)
DRV - [2009.07.14 02:19:11 | 000,019,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\wd.sys -- (Wd)
DRV - [2009.07.14 02:19:10 | 000,055,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\uagp35.sys -- (uagp35)
DRV - [2009.07.14 02:19:10 | 000,053,328 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\viaagp.sys -- (viaagp)
DRV - [2009.07.14 02:19:10 | 000,012,240 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\swenum.sys -- (swenum)
DRV - [2009.07.14 02:19:03 | 000,180,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\pcmcia.sys -- (pcmcia)
DRV - [2009.07.14 00:51:35 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\umpass.sys -- (UmPass)
DRV - [2009.07.14 00:51:34 | 000,056,320 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\bthmodem.sys -- (BTHMODEM)
DRV - [2009.07.14 00:51:33 | 000,091,136 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\hidbth.sys -- (HidBth)
DRV - [2009.07.14 00:51:29 | 000,062,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\ohci1394.sys -- (ohci1394) OHCI-konformer 1394-Hostcontroller (alt)
DRV - [2009.07.14 00:51:18 | 000,086,016 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbcir.sys -- (usbcir) eHome-Infrarotempfänger (USBCIR)
DRV - [2009.07.14 00:51:17 | 000,037,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\circlass.sys -- (circlass)
DRV - [2009.07.14 00:51:05 | 000,037,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\hidir.sys -- (HidIr)
DRV - [2009.07.14 00:46:55 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MTConfig.sys -- (MTConfig)
DRV - [2009.07.14 00:46:53 | 000,021,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\wacompen.sys -- (WacomPen)
DRV - [2009.07.14 00:45:52 | 000,013,824 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sfloppy.sys -- (sfloppy)
DRV - [2009.07.14 00:45:52 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\sffp_mmc.sys -- (sffp_mmc)
DRV - [2009.07.14 00:45:45 | 000,025,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\fdc.sys -- (fdc)
DRV - [2009.07.14 00:45:45 | 000,019,968 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\flpydisk.sys -- (flpydisk)
DRV - [2009.07.14 00:45:35 | 000,079,360 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\parport.sys -- (Parport)
DRV - [2009.07.14 00:45:33 | 000,083,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serial.sys -- (Serial)
DRV - [2009.07.14 00:45:29 | 000,008,704 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\system32\DRIVERS\parvdm.sys -- (Parvdm)
DRV - [2009.07.14 00:45:28 | 000,017,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serenum.sys -- (Serenum)
DRV - [2009.07.14 00:45:08 | 000,019,968 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sermouse.sys -- (sermouse)
DRV - [2009.07.14 00:19:21 | 000,021,504 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HidBatt.sys -- (HidBatt)
DRV - [2009.07.14 00:19:19 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\errdev.sys -- (ErrDev)
DRV - [2009.07.14 00:19:17 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\wmiacpi.sys -- (WmiAcpi)
DRV - [2009.07.14 00:11:24 | 000,080,896 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\i8042prt.sys -- (i8042prt)
DRV - [2009.07.14 00:11:04 | 000,055,296 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdk8.sys -- (AmdK8)
DRV - [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\viac7.sys -- (ViaC7)
DRV - [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdppm.sys -- (AmdPPM)
DRV - [2009.07.14 00:11:04 | 000,052,224 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\processr.sys -- (Processor)
DRV - [2009.07.13 23:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Intel(R)
DRV - [2009.07.13 23:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink (TM)
DRV - [2008.08.26 08:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.03.14 07:04:29 | 000,046,652 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2007.06.29 13:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2006.11.14 17:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005.11.22 11:12:32 | 000,042,624 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\dk2drv.sys -- (dk2drv)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 00 30 B8 89 93 F0 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Facemoods Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/||hxxp://www.facebook.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ [2011.10.11 18:02:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.03.11 23:37:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.03.11 23:37:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.22 18:05:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.09.19 14:54:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ [2011.10.11 18:02:35 | 000,000,000 | ---D | M]
[2011.02.02 21:12:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dell\AppData\Roaming\mozilla\Extensions
[2011.12.20 16:50:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions
[2011.02.03 18:42:09 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.11.12 18:25:33 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.12.20 16:50:37 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\foxyproxy@eric.h.jung
[2011.12.22 18:05:09 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\DELL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\N7WZ0213.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011.12.21 08:42:29 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.12.21 06:08:50 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.12.21 06:02:40 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.12.21 06:08:50 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.12.21 06:08:50 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.12.21 06:08:50 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.12.21 06:08:50 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2011.12.22 20:50:11 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (Bitdefender Toolbar) - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Programme\BitDefender\BitDefender 2011\ietoolbar.dll (BitDefender S.R.L.)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Dell\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BD2B9DE0-579C-4040-BD43-B6F0EAC6852D}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C9423DBA-B676-4608-91BA-8ECDD0E96D9D}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011.12.22 22:11:09 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2011.12.22 20:51:41 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011.12.22 20:51:38 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011.12.22 20:51:38 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\temp
[2011.12.22 20:39:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.12.22 20:39:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.12.22 20:39:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.12.22 20:39:25 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.12.22 20:36:14 | 004,348,814 | R--- | C] (Swearware) -- C:\ComboFix.exe
[2011.12.22 20:30:07 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.12.20 22:03:35 | 003,296,600 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEP32H.dll
[2011.12.20 22:03:35 | 000,357,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32H.dll
[2011.12.20 22:03:35 | 000,345,944 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EED32H.dll
[2011.12.20 22:03:35 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RH3DHT32.dll
[2011.12.20 22:03:35 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RH3DAA32.dll
[2011.12.20 22:03:35 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32H.dll
[2011.12.20 22:03:35 | 000,103,256 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEL32H.dll
[2011.12.20 22:03:35 | 000,088,408 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEA32H.dll
[2011.12.20 22:03:35 | 000,076,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32H.dll
[2011.12.20 22:03:35 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32H.dll
[2011.12.20 22:03:35 | 000,061,272 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEG32H.dll
[2011.12.20 21:53:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\newfolder3
[2011.12.20 20:51:55 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.12.20 20:51:53 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011.12.20 17:44:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011.12.13 10:50:57 | 000,000,000 | ---D | C] -- C:\Users\Dell\Desktop\Zubehör
[2011.12.11 11:52:26 | 000,000,000 | -HSD | C] -- C:\Users\Dell\Phone Browser
[2011.12.10 14:42:11 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\Chromium
[2011.12.08 15:46:25 | 000,000,000 | ---D | C] -- C:\Users\Dell\Desktop\sh3u56f
[2011.12.08 15:20:42 | 000,000,000 | ---D | C] -- C:\Users\Dell\Documents\Stronghold 3
[2011.11.27 16:12:00 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Roaming\SWiSH Max4
[2011.11.27 16:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWiSH Max4
[2011.11.27 16:07:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LameACM
[2011.11.27 16:07:24 | 000,000,000 | ---D | C] -- C:\Program Files\LameACM
[2011.11.27 16:06:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWiSHzone.com
[2011.11.27 16:06:57 | 000,000,000 | ---D | C] -- C:\Program Files\SWiSH Max4
[2011.11.27 15:53:32 | 056,654,648 | ---- | C] (SWiSHzone.com) -- C:\Users\Dell\Desktop\SetupSwishmax4.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.12.22 22:12:30 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2011.12.22 21:39:16 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.12.22 21:01:42 | 000,014,832 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.12.22 21:01:42 | 000,014,832 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.12.22 20:59:25 | 000,705,096 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.12.22 20:59:25 | 000,660,374 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.12.22 20:59:25 | 000,151,424 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.12.22 20:59:25 | 000,124,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.12.22 20:54:21 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.12.22 20:53:55 | 000,000,434 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Dell.job
[2011.12.22 20:53:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.12.22 20:53:41 | 2411,900,928 | -HS- | M] () -- C:\hiberfil.sys
[2011.12.22 20:50:11 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011.12.22 20:27:12 | 004,348,814 | R--- | M] (Swearware) -- C:\ComboFix.exe
[2011.12.22 18:05:16 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.12.20 17:44:17 | 000,002,172 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011.12.15 14:23:25 | 000,387,392 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.12.13 11:03:24 | 001,328,721 | ---- | M] () -- C:\Users\Dell\Desktop\iw3mp_17.rar
[2011.12.13 10:50:52 | 002,399,568 | ---- | M] () -- C:\Users\Dell\Desktop\Zubehoer.rar
[2011.12.10 17:45:23 | 000,641,127 | ---- | M] () -- C:\Users\Dell\Desktop\PeZBOT_002p_-_World_at_War.zip
[2011.12.10 13:54:44 | 000,363,580 | ---- | M] () -- C:\Users\Dell\Desktop\loc.v
[2011.12.08 15:46:22 | 001,204,704 | ---- | M] () -- C:\Users\Dell\Desktop\sh3u56f.rar
[2011.12.06 20:23:34 | 005,615,808 | ---- | M] () -- C:\Users\Dell\Desktop\Taio_Cruz_ft._Flo_Rida_-_Hangover_Hardwell_Extende....mp3
[2011.11.27 16:07:26 | 000,000,982 | ---- | M] () -- C:\Users\Public\Desktop\SWiSH Max4.lnk
[2011.11.27 16:06:37 | 056,654,648 | ---- | M] (SWiSHzone.com) -- C:\Users\Dell\Desktop\SetupSwishmax4.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.12.22 20:39:30 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011.12.22 20:39:30 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.12.22 20:39:30 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.12.22 20:39:30 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.12.22 20:39:30 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.12.20 17:44:17 | 000,002,172 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011.12.13 11:03:50 | 003,330,048 | ---- | C] () -- C:\Users\Dell\Desktop\iw3mp.exe
[2011.12.13 11:03:12 | 001,328,721 | ---- | C] () -- C:\Users\Dell\Desktop\iw3mp_17.rar
[2011.12.13 10:50:29 | 002,399,568 | ---- | C] () -- C:\Users\Dell\Desktop\Zubehoer.rar
[2011.12.11 11:52:50 | 003,515,964 | ---- | C] () -- C:\Users\Dell\Desktop\Rihanna feat. Calvin Harris - We Found Love.mp3
[2011.12.10 17:45:20 | 000,641,127 | ---- | C] () -- C:\Users\Dell\Desktop\PeZBOT_002p_-_World_at_War.zip
[2011.12.10 15:03:05 | 000,363,580 | ---- | C] () -- C:\Users\Dell\Desktop\loc.v
[2011.12.08 15:46:10 | 001,204,704 | ---- | C] () -- C:\Users\Dell\Desktop\sh3u56f.rar
[2011.12.06 20:17:23 | 005,615,808 | ---- | C] () -- C:\Users\Dell\Desktop\Taio_Cruz_ft._Flo_Rida_-_Hangover_Hardwell_Extende....mp3
[2011.11.27 16:07:26 | 000,000,982 | ---- | C] () -- C:\Users\Public\Desktop\SWiSH Max4.lnk
[2011.09.27 17:51:24 | 000,007,615 | ---- | C] () -- C:\Users\Dell\AppData\Local\Resmon.ResmonCfg
[2011.07.28 16:49:12 | 000,053,760 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2011.06.25 16:28:34 | 000,000,064 | ---- | C] () -- C:\Windows\FLS1.INI
[2011.06.25 16:28:29 | 000,081,920 | ---- | C] () -- C:\Windows\System32\FLSDEVCP.EXE
[2011.06.25 16:28:27 | 001,695,744 | ---- | C] () -- C:\Windows\System32\flsinst.dll
[2011.06.25 16:28:27 | 000,004,122 | ---- | C] () -- C:\Windows\System32\flsinst.ini
[2011.06.23 20:20:14 | 000,233,344 | ---- | C] () -- C:\Windows\System32\drivers\msiscsi.sys
[2011.06.23 20:19:54 | 000,164,864 | ---- | C] () -- C:\Windows\System32\drivers\1394ohci.sys
[2011.06.23 20:19:52 | 000,116,096 | ---- | C] () -- C:\Windows\System32\drivers\msdsm.sys
[2011.06.23 20:19:49 | 000,053,120 | ---- | C] () -- C:\Windows\System32\drivers\termdd.sys
[2011.06.23 20:19:47 | 000,085,376 | ---- | C] () -- C:\Windows\System32\drivers\sbp2port.sys
[2011.06.23 20:19:45 | 000,160,128 | ---- | C] () -- C:\Windows\System32\drivers\vhdmp.sys
[2011.06.23 20:19:39 | 000,146,432 | ---- | C] () -- C:\Windows\System32\drivers\usbvideo.sys
[2011.06.23 20:19:39 | 000,130,432 | ---- | C] () -- C:\Windows\System32\drivers\mpio.sys
[2011.06.23 20:19:37 | 000,028,032 | ---- | C] () -- C:\Windows\System32\drivers\storvsc.sys
[2011.06.23 20:19:27 | 000,084,992 | ---- | C] () -- C:\Windows\System32\drivers\sdbus.sys
[2011.06.23 20:19:23 | 000,080,768 | ---- | C] () -- C:\Windows\System32\drivers\USBAUDIO.sys
[2011.06.23 20:19:18 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.06.23 20:19:17 | 000,031,232 | ---- | C] () -- C:\Windows\System32\drivers\CompositeBus.sys
[2011.06.23 20:19:15 | 000,017,920 | ---- | C] () -- C:\Windows\System32\drivers\VMBusHID.sys
[2011.06.23 20:19:15 | 000,010,240 | ---- | C] () -- C:\Windows\System32\drivers\acpipmi.sys
[2011.06.23 20:19:14 | 000,065,536 | ---- | C] () -- C:\Windows\System32\drivers\IPMIDrv.sys
[2011.06.23 20:19:14 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\kbdhid.sys
[2011.06.23 20:19:14 | 000,027,648 | ---- | C] () -- C:\Windows\System32\drivers\usbser.sys
[2011.06.23 20:19:13 | 000,304,128 | ---- | C] () -- C:\Windows\System32\drivers\HdAudio.sys
[2011.06.23 20:19:13 | 000,108,544 | ---- | C] () -- C:\Windows\System32\drivers\hdaudbus.sys
[2011.06.23 20:19:13 | 000,039,936 | ---- | C] () -- C:\Windows\System32\drivers\umbus.sys
[2011.06.23 20:19:11 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\vms3cap.sys
[2011.05.11 14:05:49 | 000,020,480 | ---- | C] () -- C:\Windows\System32\drivers\usbohci.sys
[2011.04.27 21:23:36 | 000,143,744 | ---- | C] () -- C:\Windows\System32\drivers\nvstor.sys
[2011.04.27 21:23:36 | 000,117,120 | ---- | C] () -- C:\Windows\System32\drivers\nvraid.sys
[2011.04.27 21:23:36 | 000,080,256 | ---- | C] () -- C:\Windows\System32\drivers\amdsata.sys
[2011.04.27 21:23:35 | 000,332,160 | ---- | C] () -- C:\Windows\System32\drivers\iaStorV.sys
[2011.04.15 20:21:54 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2011.04.15 20:21:34 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2011.04.14 20:17:29 | 000,000,259 | ---- | C] () -- C:\Windows\WinInit.Ini
[2011.03.13 20:37:56 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.02.02 23:08:15 | 000,000,016 | ---- | C] () -- C:\Windows\System32\asdict.dat
[2011.02.02 22:44:14 | 000,063,007 | ---- | C] () -- C:\ProgramData\bdinstall.bin
[2011.02.02 21:22:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.02.02 21:12:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.02.02 21:06:22 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011.02.02 13:30:31 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.08 09:37:14 | 000,101,544 | ---- | C] () -- C:\Program Files\Common Files\LinkInstaller.exe
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009.11.02 12:45:44 | 000,014,808 | ---- | C] () -- C:\Windows\System32\drivers\TurboB.sys
[2009.07.14 10:00:12 | 000,705,096 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.07.14 10:00:12 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.07.14 10:00:12 | 000,151,424 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.07.14 10:00:12 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 000,387,392 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,660,374 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,124,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:59:16 | 000,013,568 | ---- | C] () -- C:\Windows\System32\drivers\BrFiltLo.sys
[2009.07.14 01:59:02 | 000,062,336 | ---- | C] () -- C:\Windows\System32\drivers\BrSerWdm.sys
[2009.07.14 01:58:59 | 000,005,248 | ---- | C] () -- C:\Windows\System32\drivers\BrFiltUp.sys
[2009.07.14 01:58:35 | 000,011,904 | ---- | C] () -- C:\Windows\System32\drivers\BrUsbSer.sys
[2009.07.14 01:58:27 | 000,012,160 | ---- | C] () -- C:\Windows\System32\drivers\BrUsbMdm.sys
[2009.07.14 01:57:25 | 000,272,128 | ---- | C] () -- C:\Windows\System32\drivers\BrSerId.sys
[2009.07.14 01:55:09 | 001,332,736 | ---- | C] () -- C:\Windows\System32\hpotiop1.dll
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:51:35 | 000,008,192 | ---- | C] () -- C:\Windows\System32\drivers\umpass.sys
[2009.07.14 00:51:34 | 000,056,320 | ---- | C] () -- C:\Windows\System32\drivers\bthmodem.sys
[2009.07.14 00:51:33 | 000,091,136 | ---- | C] () -- C:\Windows\System32\drivers\hidbth.sys
[2009.07.14 00:51:29 | 000,062,464 | ---- | C] () -- C:\Windows\System32\drivers\ohci1394.sys
[2009.07.14 00:51:18 | 000,086,016 | ---- | C] () -- C:\Windows\System32\drivers\usbcir.sys
[2009.07.14 00:51:17 | 000,037,888 | ---- | C] () -- C:\Windows\System32\drivers\circlass.sys
[2009.07.14 00:51:05 | 000,037,888 | ---- | C] () -- C:\Windows\System32\drivers\hidir.sys
[2009.07.14 00:46:55 | 000,012,288 | ---- | C] () -- C:\Windows\System32\drivers\MTConfig.sys
[2009.07.14 00:46:53 | 000,021,632 | ---- | C] () -- C:\Windows\System32\drivers\wacompen.sys
[2009.07.14 00:46:05 | 000,022,096 | ---- | C] () -- C:\Windows\System32\drivers\crcdisk.sys
[2009.07.14 00:45:52 | 000,013,824 | ---- | C] () -- C:\Windows\System32\drivers\sfloppy.sys
[2009.07.14 00:45:52 | 000,012,288 | ---- | C] () -- C:\Windows\System32\drivers\sffp_mmc.sys
[2009.07.14 00:45:45 | 000,025,088 | ---- | C] () -- C:\Windows\System32\drivers\fdc.sys
[2009.07.14 00:45:45 | 000,019,968 | ---- | C] () -- C:\Windows\System32\drivers\flpydisk.sys
[2009.07.14 00:45:35 | 000,079,360 | ---- | C] () -- C:\Windows\System32\drivers\parport.sys
[2009.07.14 00:45:33 | 000,083,456 | ---- | C] () -- C:\Windows\System32\drivers\serial.sys
[2009.07.14 00:45:29 | 000,008,704 | ---- | C] () -- C:\Windows\System32\drivers\parvdm.sys
[2009.07.14 00:45:28 | 000,017,920 | ---- | C] () -- C:\Windows\System32\drivers\serenum.sys
[2009.07.14 00:45:08 | 000,019,968 | ---- | C] () -- C:\Windows\System32\drivers\sermouse.sys
[2009.07.14 00:45:08 | 000,012,240 | ---- | C] () -- C:\Windows\System32\drivers\swenum.sys
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.07.14 00:25:51 | 000,105,024 | ---- | C] () -- C:\Windows\System32\drivers\NV_AGP.SYS
[2009.07.14 00:25:48 | 000,057,424 | ---- | C] () -- C:\Windows\System32\drivers\ULIAGPKX.SYS
[2009.07.14 00:25:42 | 000,057,936 | ---- | C] () -- C:\Windows\System32\drivers\GAGP30KX.SYS
[2009.07.14 00:25:41 | 000,055,888 | ---- | C] () -- C:\Windows\System32\drivers\UAGP35.SYS
[2009.07.14 00:25:40 | 000,053,328 | ---- | C] () -- C:\Windows\System32\drivers\VIAAGP.SYS
[2009.07.14 00:25:37 | 000,053,312 | ---- | C] () -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 00:25:36 | 000,053,312 | ---- | C] () -- C:\Windows\System32\drivers\AMDAGP.SYS
[2009.07.14 00:25:36 | 000,052,304 | ---- | C] () -- C:\Windows\System32\drivers\SISAGP.SYS
[2009.07.14 00:19:30 | 000,180,288 | ---- | C] () -- C:\Windows\System32\drivers\pcmcia.sys
[2009.07.14 00:19:29 | 000,046,656 | ---- | C] () -- C:\Windows\System32\drivers\isapnp.sys
[2009.07.14 00:19:26 | 000,028,240 | ---- | C] () -- C:\Windows\System32\drivers\mssmbios.sys
[2009.07.14 00:19:21 | 000,021,504 | ---- | C] () -- C:\Windows\System32\drivers\hidbatt.sys
[2009.07.14 00:19:19 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\errdev.sys
[2009.07.14 00:19:17 | 000,011,264 | ---- | C] () -- C:\Windows\System32\drivers\wmiacpi.sys
[2009.07.14 00:11:31 | 000,019,024 | ---- | C] () -- C:\Windows\System32\drivers\wd.sys
[2009.07.14 00:11:24 | 000,080,896 | ---- | C] () -- C:\Windows\System32\drivers\i8042prt.sys
[2009.07.14 00:11:20 | 000,016,976 | ---- | C] () -- C:\Windows\System32\drivers\viaide.sys
[2009.07.14 00:11:20 | 000,012,368 | ---- | C] () -- C:\Windows\System32\drivers\pciide.sys
[2009.07.14 00:11:19 | 000,015,424 | ---- | C] () -- C:\Windows\System32\drivers\intelide.sys
[2009.07.14 00:11:19 | 000,014,912 | ---- | C] () -- C:\Windows\System32\drivers\amdide.sys
[2009.07.14 00:11:18 | 000,015,952 | ---- | C] () -- C:\Windows\System32\drivers\cmdide.sys
[2009.07.14 00:11:17 | 000,014,400 | ---- | C] () -- C:\Windows\System32\drivers\aliide.sys
[2009.07.14 00:11:15 | 000,042,576 | ---- | C] () -- C:\Windows\System32\drivers\kbdclass.sys
[2009.07.14 00:11:04 | 000,055,296 | ---- | C] () -- C:\Windows\System32\drivers\amdk8.sys
[2009.07.14 00:11:04 | 000,052,736 | ---- | C] () -- C:\Windows\System32\drivers\viac7.sys
[2009.07.14 00:11:04 | 000,052,736 | ---- | C] () -- C:\Windows\System32\drivers\amdppm.sys
[2009.07.14 00:11:04 | 000,052,224 | ---- | C] () -- C:\Windows\System32\drivers\processr.sys
[2009.07.13 23:54:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\drivers\hcw85cir.sys
[2009.07.13 23:09:19 | 000,095,824 | ---- | C] () -- C:\Windows\System32\drivers\lsi_fc.sys
[2009.07.13 23:09:18 | 000,106,064 | ---- | C] () -- C:\Windows\System32\drivers\ql40xx.sys
[2009.07.13 23:09:18 | 000,096,848 | ---- | C] () -- C:\Windows\System32\drivers\lsi_scsi.sys
[2009.07.13 23:09:18 | 000,089,168 | ---- | C] () -- C:\Windows\System32\drivers\lsi_sas.sys
[2009.07.13 23:09:18 | 000,077,888 | ---- | C] () -- C:\Windows\System32\drivers\sisraid4.sys
[2009.07.13 23:09:18 | 000,054,864 | ---- | C] () -- C:\Windows\System32\drivers\lsi_sas2.sys
[2009.07.13 23:09:18 | 000,021,072 | ---- | C] () -- C:\Windows\System32\drivers\stexstor.sys
[2009.07.13 23:09:17 | 000,235,584 | ---- | C] () -- C:\Windows\System32\drivers\MegaSR.sys
[2009.07.13 23:09:17 | 000,086,608 | ---- | C] () -- C:\Windows\System32\drivers\arcsas.sys
[2009.07.13 23:09:17 | 000,076,368 | ---- | C] () -- C:\Windows\System32\drivers\arc.sys
[2009.07.13 23:09:17 | 000,067,152 | ---- | C] () -- C:\Windows\System32\drivers\HpSAMD.sys
[2009.07.13 23:09:17 | 000,044,624 | ---- | C] () -- C:\Windows\System32\drivers\nfrd960.sys
[2009.07.13 23:09:17 | 000,041,040 | ---- | C] () -- C:\Windows\System32\drivers\iirsp.sys
[2009.07.13 23:09:16 | 000,297,552 | ---- | C] () -- C:\Windows\System32\drivers\adpahci.sys
[2009.07.13 23:09:16 | 000,146,512 | ---- | C] () -- C:\Windows\System32\drivers\adpu320.sys
[2009.06.18 19:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2009.06.10 22:20:26 | 000,070,720 | ---- | C] () -- C:\Windows\System32\drivers\djsvs.sys
[2009.06.10 22:20:24 | 000,141,904 | ---- | C] () -- C:\Windows\System32\drivers\vsmraid.sys
[2009.06.10 22:20:08 | 000,040,016 | ---- | C] () -- C:\Windows\System32\drivers\sisraid2.sys
[2009.06.10 22:20:06 | 001,383,488 | ---- | C] () -- C:\Windows\System32\drivers\ql2300.sys
[2009.06.10 22:20:03 | 000,159,312 | ---- | C] () -- C:\Windows\System32\drivers\amdsbs.sys
[2009.06.10 22:19:35 | 000,030,800 | ---- | C] () -- C:\Windows\System32\drivers\megasas.sys
[2009.06.10 22:19:19 | 000,453,712 | ---- | C] () -- C:\Windows\System32\drivers\elxstor.sys
[2009.06.10 22:19:05 | 000,422,976 | ---- | C] () -- C:\Windows\System32\drivers\adp94xx.sys
[2009.06.10 22:17:55 | 003,100,160 | ---- | C] () -- C:\Windows\System32\drivers\evbdx.sys
[2009.06.10 22:17:52 | 000,430,080 | ---- | C] () -- C:\Windows\System32\drivers\bxvbdx.sys
[2009.02.18 17:55:22 | 000,294,912 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2009.02.03 20:52:04 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2007.01.31 13:50:32 | 000,913,408 | ---- | C] () -- C:\Windows\System32\xreglib.dll
[2005.05.06 19:06:00 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2001.08.29 13:11:40 | 000,398,848 | R--- | C] () -- C:\Windows\System32\dk2win32.dll
========== LOP Check ==========
[2009.07.14 05:53:46 | 000,028,348 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2011.12.22 20:51:41 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2009.06.04 11:26:16 | 000,000,000 | ---D | M] -- C:\ATI
[2011.07.31 22:02:38 | 000,000,000 | ---D | M] -- C:\Boot
[2011.12.20 17:44:40 | 000,000,000 | ---D | M] -- C:\Config.Msi
[2011.03.02 22:07:34 | 000,000,000 | ---D | M] -- C:\DELL
[2008.08.05 13:36:12 | 000,000,000 | ---D | M] -- C:\doctemp
[2009.07.14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2008.12.04 20:49:57 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.10.07 15:01:11 | 000,000,000 | ---D | M] -- C:\Download
[2009.12.05 21:22:34 | 000,000,000 | ---D | M] -- C:\Downloads
[2008.09.05 07:19:14 | 000,000,000 | ---D | M] -- C:\Drivers
[2011.01.01 19:05:48 | 000,000,000 | ---D | M] -- C:\Fraps
[2011.01.13 11:07:19 | 000,000,000 | ---D | M] -- C:\MeinBackup
[2009.07.26 19:40:38 | 000,000,000 | R--D | M] -- C:\MSOCache
[2010.02.13 19:54:36 | 000,000,000 | ---D | M] -- C:\Nokia
[2010.12.26 11:48:39 | 000,000,000 | ---D | M] -- C:\OutputFolder
[2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.12.20 20:51:55 | 000,000,000 | R--D | M] -- C:\Program Files
[2011.09.08 09:52:50 | 000,000,000 | ---D | M] -- C:\ProgramData
[2008.12.04 20:49:57 | 000,000,000 | -HSD | M] -- C:\Programme
[2009.11.13 22:21:58 | 000,000,000 | ---D | M] -- C:\PSFonts
[2011.12.22 20:51:39 | 000,000,000 | ---D | M] -- C:\Qoobox
[2011.02.02 13:51:20 | 000,000,000 | ---D | M] -- C:\Recovery
[2011.12.22 22:28:43 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2010.08.15 14:26:41 | 000,000,000 | ---D | M] -- C:\totalcmd
[2011.07.21 17:46:04 | 000,000,000 | R--D | M] -- C:\Users
[2011.12.22 20:51:38 | 000,000,000 | ---D | M] -- C:\Windows
[2011.04.25 08:46:22 | 000,000,000 | ---D | M] -- C:\Windows.old
< %PROGRAMFILES%\*.exe >
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< MD5 for: AGP440.SYS >
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\ERDNT\cache\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\ERDNT\cache\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
< MD5 for: EVENTLOG.DLL >
[2011.02.22 21:18:51 | 000,008,376 | ---- | M] () MD5=68F9AD291B0C16F6B4AAEBFC26960EFA -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\lib\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\ERDNT\cache\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: IASTORV.SYS >
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 06:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011.03.11 06:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2011.03.11 06:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\ERDNT\cache\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 06:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011.03.11 06:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011.03.11 06:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\nvstor.sys
< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\ERDNT\cache\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
< MD5 for: USER32.DLL >
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\ERDNT\cache\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\ERDNT\cache\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\ERDNT\cache\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.11.20 11:01:12 | 000,164,864 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\1394ohci.sys
[2010.11.20 09:47:55 | 000,010,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\acpipmi.sys
[2009.07.14 02:26:15 | 000,422,976 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adp94xx.sys
[2009.07.14 02:26:17 | 000,297,552 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adpahci.sys
[2009.07.14 02:26:15 | 000,146,512 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adpu320.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\AGP440.sys
[2009.07.14 02:26:15 | 000,014,400 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\aliide.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\AMDAGP.SYS
[2009.07.14 02:26:15 | 000,014,912 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdide.sys
[2009.07.14 00:11:04 | 000,055,296 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdk8.sys
[2009.07.14 00:11:04 | 000,052,736 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdppm.sys
[2011.03.11 06:38:37 | 000,080,256 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdsata.sys
[2009.07.14 02:26:15 | 000,159,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdsbs.sys
[2009.07.14 02:26:15 | 000,076,368 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\arc.sys
[2009.07.14 02:26:15 | 000,086,608 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\arcsas.sys
[2010.05.13 15:52:04 | 000,152,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) Unable to obtain MD5 -- C:\Windows\system32\drivers\bdfm.sys
[2011.04.09 09:16:10 | 000,353,096 | ---- | M] (BitDefender) Unable to obtain MD5 -- C:\Windows\system32\drivers\bdfsfltr.sys
[2009.07.13 23:53:28 | 000,013,568 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrFiltLo.sys
[2009.07.13 23:53:28 | 000,005,248 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrFiltUp.sys
[2009.07.14 01:57:25 | 000,272,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrSerId.sys
[2009.07.13 23:53:32 | 000,062,336 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrSerWdm.sys
[2009.07.13 23:53:33 | 000,012,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrUsbMdm.sys
[2009.07.13 23:53:33 | 000,011,904 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrUsbSer.sys
[2009.07.14 00:51:34 | 000,056,320 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\bthmodem.sys
[2009.07.13 23:02:48 | 000,430,080 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\bxvbdx.sys
[2009.07.14 00:51:17 | 000,037,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\circlass.sys
[2009.07.14 02:26:21 | 000,015,952 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\cmdide.sys
[2010.11.20 10:50:21 | 000,031,232 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\CompositeBus.sys
[2009.07.14 02:20:28 | 000,022,096 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\crcdisk.sys
[2009.07.14 02:20:28 | 000,070,720 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\djsvs.sys
[2009.07.14 02:20:28 | 000,453,712 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\elxstor.sys
[2009.07.14 00:19:19 | 000,007,168 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\errdev.sys
[2009.07.13 23:02:48 | 003,100,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\evbdx.sys
[2009.07.14 00:45:45 | 000,025,088 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\fdc.sys
[2009.07.14 00:45:45 | 000,019,968 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\flpydisk.sys
[2009.07.14 02:20:28 | 000,057,936 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\GAGP30KX.SYS
[2009.07.13 23:54:14 | 000,026,624 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hcw85cir.sys
[2010.11.20 10:59:29 | 000,108,544 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hdaudbus.sys
[2010.11.20 11:00:21 | 000,304,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\HdAudio.sys
[2009.07.14 00:19:21 | 000,021,504 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidbatt.sys
[2009.07.14 00:51:33 | 000,091,136 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidbth.sys
[2009.07.14 00:51:05 | 000,037,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidir.sys
[2009.07.14 02:20:28 | 000,067,152 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\HpSAMD.sys
[2009.07.14 00:11:24 | 000,080,896 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\i8042prt.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\iaStorV.sys
[2009.07.14 02:20:36 | 000,041,040 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\iirsp.sys
[2009.07.14 02:20:36 | 000,015,424 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\intelide.sys
[2010.11.20 10:19:15 | 000,065,536 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\IPMIDrv.sys
[2009.07.14 02:20:36 | 000,046,656 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\isapnp.sys
[2009.07.14 02:20:36 | 000,042,576 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\kbdclass.sys
[2010.11.20 10:50:10 | 000,028,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\kbdhid.sys
[2009.07.14 02:20:36 | 000,095,824 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_fc.sys
[2009.07.14 02:20:37 | 000,089,168 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_sas.sys
[2009.07.14 02:20:36 | 000,054,864 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_sas2.sys
[2009.07.14 02:20:36 | 000,096,848 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_scsi.sys
[2009.07.14 02:20:36 | 000,030,800 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\megasas.sys
[2009.07.14 02:20:36 | 000,235,584 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\MegaSR.sys
[2010.11.20 13:30:01 | 000,130,432 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\mpio.sys
[2010.11.20 13:30:04 | 000,116,096 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\msdsm.sys
[2010.11.20 13:30:05 | 000,233,344 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\msiscsi.sys
[2009.07.14 02:20:44 | 000,028,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\mssmbios.sys
[2009.07.14 00:46:55 | 000,012,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\MTConfig.sys
[2009.07.14 02:20:44 | 000,044,624 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nfrd960.sys
[2011.03.11 06:39:00 | 000,117,120 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nvraid.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nvstor.sys
[2009.07.14 02:20:44 | 000,105,024 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\NV_AGP.SYS
[2009.07.14 00:51:29 | 000,062,464 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ohci1394.sys
[2009.07.14 00:45:35 | 000,079,360 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\parport.sys
[2009.07.14 00:45:29 | 000,008,704 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\parvdm.sys
[2009.07.14 02:20:45 | 000,012,368 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\pciide.sys
[2009.07.14 02:19:03 | 000,180,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\pcmcia.sys
[2009.07.14 00:11:04 | 000,052,224 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\processr.sys
[2009.07.14 02:19:04 | 001,383,488 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ql2300.sys
[2009.07.14 02:19:04 | 000,106,064 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ql40xx.sys
[2010.11.20 13:30:10 | 000,085,376 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sbp2port.sys
[2010.11.20 09:54:02 | 000,084,992 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sdbus.sys
[2009.07.14 00:45:28 | 000,017,920 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\serenum.sys
[2009.07.14 00:45:33 | 000,083,456 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\serial.sys
[2009.07.14 00:45:08 | 000,019,968 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sermouse.sys
[2009.07.14 00:45:52 | 000,012,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sffp_mmc.sys
[2009.07.14 00:45:52 | 000,013,824 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sfloppy.sys
[2009.07.14 02:19:03 | 000,052,304 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\SISAGP.SYS
[2009.07.14 02:19:04 | 000,040,016 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sisraid2.sys
[2009.07.14 02:19:04 | 000,077,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sisraid4.sys
[2009.07.14 02:19:04 | 000,021,072 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\stexstor.sys
[2010.11.20 13:30:15 | 000,028,032 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\storvsc.sys
[2009.07.14 02:19:10 | 000,012,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\swenum.sys
[2010.11.20 13:30:12 | 000,053,120 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\termdd.sys
[2009.07.14 02:19:10 | 000,055,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\UAGP35.SYS
[2009.07.14 02:19:11 | 000,057,424 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ULIAGPKX.SYS
[2010.11.20 11:00:24 | 000,039,936 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\umbus.sys
[2009.07.14 00:51:35 | 000,008,192 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\umpass.sys
[2010.11.20 10:59:44 | 000,080,768 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\USBAUDIO.sys
[2009.07.14 00:51:18 | 000,086,016 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbcir.sys
[2011.03.25 03:57:58 | 000,020,480 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbohci.sys
[2010.11.20 10:59:46 | 000,027,648 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbser.sys
[2010.11.20 11:00:21 | 000,146,432 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbvideo.sys
[2010.11.20 13:30:14 | 000,160,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vhdmp.sys
[2009.07.14 02:19:10 | 000,053,328 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\VIAAGP.SYS
[2009.07.14 00:11:04 | 000,052,736 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\viac7.sys
[2009.07.14 02:19:10 | 000,016,976 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\viaide.sys
[2010.11.20 10:14:45 | 000,017,920 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\VMBusHID.sys
[2010.11.20 10:14:41 | 000,005,632 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vms3cap.sys
[2009.07.14 02:19:11 | 000,141,904 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vsmraid.sys
[2009.07.14 00:46:53 | 000,021,632 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wacompen.sys
[2009.07.14 02:19:11 | 000,019,024 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wd.sys
[2009.07.14 00:19:17 | 000,011,264 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wmiacpi.sys
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
< %USERPROFILE%\*.* >
[2011.10.30 14:01:22 | 000,001,452 | ---- | M] () -- C:\Users\Dell\.recently-used.xbel
[2011.12.22 22:52:16 | 008,912,896 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT
[2011.12.22 22:52:16 | 000,262,144 | -HS- | M] () -- C:\Users\Dell\ntuser.dat.LOG1
[2011.02.02 13:51:30 | 000,000,000 | -HS- | M] () -- C:\Users\Dell\ntuser.dat.LOG2
[2011.02.02 13:52:32 | 000,065,536 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2011.02.02 13:52:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2011.02.02 13:52:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2011.02.02 13:51:31 | 000,000,020 | -HS- | M] () -- C:\Users\Dell\ntuser.ini
< %USERPROFILE%\Local Settings\Temp\*.exe >
< %USERPROFILE%\Local Settings\Temp\*.dll >
< %USERPROFILE%\Application Data\*.exe >
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
< >
========== Alternate Data Streams ==========
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:96D0C06F
< End of report > |