Trojaner-Board - Auch "Windowssystem aus Sicherheitsgründen blockiert"

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Auch "Windowssystem aus Sicherheitsgründen blockiert" (https://www.trojaner-board.de/108300-windowssystem-sicherheitsgruenden-blockiert.html)

Auch "Windowssystem aus Sicherheitsgründen blockiert"

Hallo,

wie schon etliche vor mir habe ich mir wohl auch den Schädling eingefangen, der das "Windowssystem aus Sicherheitsgründen blockiert". Ein Komplettscan mit McAfee hat nichts gefunden.

Kann es da reichen, wenn ich das System von einem sauberen Backup wiederherstelle? Oder befällt der Trojaner (?) auch die Windowssicherung und -wiederherstellung und übersteht das?

Ansonsten wär ich sehr dankbar für jede Hilfe. Hab mir schon einige andere Threads zum Thema angeguckt, aber da ist wohl individuelle Hilfe nötig.

Gruß
tissi

schaun wir mal.
pc neustarten, f8 drücken abgesicherter modus mit netzwerk wählen.
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die
OTL.exe
.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die http://larusso.trojaner-board.de/Images/otlfix.jpg
Textbox.

Code:

activex

netsvcs

msconfig

%SYSTEMDRIVE%\*.

%PROGRAMFILES%\*.exe

%LOCALAPPDATA%\*.exe

%systemroot%\*. /mp /s

/md5start

userinit.exe

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

ws2ifsl.sys

sceclt.dll

ntelogon.dll

winlogon.exe

logevent.dll

user32.DLL

explorer.exe

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

/md5stop

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\system32\*.dll /lockedfiles

%USERPROFILE%\*.*

%USERPROFILE%\Local Settings\Temp\*.exe

%USERPROFILE%\Local Settings\Temp\*.dll

%USERPROFILE%\Application Data\*.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere
nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Erstmal vielen Dank für die schnelle Hilfe, bin echt begeistert.

Und hier die Logs:

OTL.Txt:

Code:

OTL logfile created on: 19.01.2012 14:11:20 - Run 2

OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\***\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

5,92 Gb Total Physical Memory | 4,93 Gb Available Physical Memory | 83,27% Memory free

11,83 Gb Paging File | 10,97 Gb Available in Paging File | 92,73% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 581,42 Gb Total Space | 440,25 Gb Free Space | 75,72% Space Free | Partition Type: NTFS

Drive E: | 488,95 Mb Total Space | 441,96 Mb Free Space | 90,39% Space Free | Partition Type: FAT

 

Computer Name: NOTEBOOKC | User Name: *** | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.01.19 13:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV:64bit: - [2011.10.18 14:32:28 | 000,161,168 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)

SRV:64bit: - [2011.10.18 14:23:24 | 000,208,536 | ---- | M] () [Unknown | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)

SRV:64bit: - [2011.10.18 14:23:06 | 000,199,272 | ---- | M] () [Unknown | Stopped] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)

SRV:64bit: - [2011.06.23 14:23:52 | 000,501,768 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\VirusScan\mcods.exe -- (McODS)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McProxy)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNASvc)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNaiAnn)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (mcmscsvc)

SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc)

SRV:64bit: - [2010.11.29 21:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)

SRV:64bit: - [2010.09.23 00:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV - [2012.01.03 05:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2011.11.19 17:54:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)

SRV - [2011.07.08 21:32:14 | 000,666,696 | ---- | M] (Juniper Networks) [Auto | Stopped] -- C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService)

SRV - [2011.03.25 22:26:46 | 000,334,448 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)

SRV - [2011.03.25 22:26:28 | 000,404,080 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)

SRV - [2011.03.25 22:26:16 | 000,113,264 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)

SRV - [2011.03.25 21:27:40 | 000,539,248 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)

SRV - [2010.12.21 00:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)

SRV - [2010.12.21 00:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)

SRV - [2010.12.17 20:41:32 | 001,515,792 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)

SRV - [2010.12.17 20:28:46 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)

SRV - [2010.12.17 20:26:50 | 000,836,880 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)

SRV - [2010.11.03 18:01:20 | 001,298,496 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)

SRV - [2010.11.03 17:53:28 | 000,897,088 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)

SRV - [2010.10.29 19:20:58 | 000,236,016 | ---- | M] (CyberLink) [Auto | Stopped] -- c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)

SRV - [2010.09.04 07:15:22 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)

SRV - [2010.09.04 07:14:26 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)

SRV - [2010.08.30 20:42:00 | 000,220,528 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- c:\Programme\mcafee\msc\McAWFwk.exe -- (McAWFwk)

SRV - [2010.08.26 02:28:54 | 002,823,000 | ---- | M] (Dell, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe -- (NOBU)

SRV - [2010.08.19 12:57:14 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.11.18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)

SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2011.12.09 19:45:00 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)

DRV:64bit: - [2011.11.19 17:54:00 | 000,249,152 | ---- | M] (NVIDIA Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\nvkflt.sys -- (nvkflt)

DRV:64bit: - [2011.11.19 17:54:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)

DRV:64bit: - [2011.11.15 01:13:00 | 000,327,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)

DRV:64bit: - [2011.10.15 13:16:16 | 000,647,080 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)

DRV:64bit: - [2011.10.15 13:16:16 | 000,481,768 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)

DRV:64bit: - [2011.10.15 13:16:16 | 000,284,648 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)

DRV:64bit: - [2011.10.15 13:16:16 | 000,229,528 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)

DRV:64bit: - [2011.10.15 13:16:16 | 000,160,280 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)

DRV:64bit: - [2011.10.15 13:16:16 | 000,100,912 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)

DRV:64bit: - [2011.10.15 13:16:16 | 000,075,808 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mfenlfk.sys -- (mfenlfk)

DRV:64bit: - [2011.10.15 13:16:16 | 000,065,264 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)

DRV:64bit: - [2011.06.10 05:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2011.03.25 22:27:36 | 000,068,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)

DRV:64bit: - [2011.03.25 22:27:34 | 000,081,008 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)

DRV:64bit: - [2011.03.25 22:25:46 | 000,031,856 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)

DRV:64bit: - [2011.03.25 22:25:34 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)

DRV:64bit: - [2011.03.25 21:27:36 | 000,038,512 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)

DRV:64bit: - [2011.03.25 19:05:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb)

DRV:64bit: - [2011.03.25 19:04:58 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)

DRV:64bit: - [2011.03.25 19:04:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)

DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011.01.31 16:24:46 | 000,121,960 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)

DRV:64bit: - [2011.01.07 16:02:28 | 000,045,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)

DRV:64bit: - [2010.12.23 18:44:20 | 012,260,000 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2010.12.22 18:08:48 | 008,505,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel(R)

DRV:64bit: - [2010.12.13 18:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)

DRV:64bit: - [2010.11.29 21:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)

DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010.11.20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)

DRV:64bit: - [2010.11.19 19:34:26 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)

DRV:64bit: - [2010.11.19 19:34:26 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)

DRV:64bit: - [2010.11.12 13:40:50 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)

DRV:64bit: - [2010.11.11 02:32:20 | 000,172,632 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)

DRV:64bit: - [2010.11.04 11:07:06 | 000,058,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)

DRV:64bit: - [2010.10.20 01:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)

DRV:64bit: - [2010.10.15 09:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)

DRV:64bit: - [2010.09.24 02:44:48 | 001,394,224 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)

DRV:64bit: - [2010.09.03 17:42:40 | 000,167,920 | ---- | M] (Sonic Solutions) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\C2SCSI64.SYS -- (c2scsi64)

DRV:64bit: - [2010.08.20 11:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)

DRV:64bit: - [2010.08.12 16:51:30 | 000,175,168 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)

DRV:64bit: - [2010.07.13 03:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)

DRV:64bit: - [2010.03.19 09:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2010.02.27 00:32:12 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)

DRV:64bit: - [2009.12.09 14:10:40 | 000,032,768 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dsNcAdpt.sys -- (dsNcAdpt)

DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2008.04.08 14:41:08 | 000,170,016 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USB_0064.sys -- (DVBUSB_0064_Sevice)

DRV:64bit: - [2006.11.01 18:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)

DRV - [2010.08.19 12:56:38 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60)

DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll ()

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2011.12.24 11:56:48 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.12.21 14:42:55 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

 

[2011.05.03 19:59:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions

[2011.07.13 22:27:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2011.07.13 22:27:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

[2011.12.24 11:56:48 | 000,000,000 | ---D | M] (McAfee ScriptScan for Firefox) -- C:\PROGRAM FILES (X86)\COMMON FILES\MCAFEE\SYSTEMCORE

[2011.12.21 14:42:54 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2011.04.14 13:01:38 | 000,024,376 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\mozilla firefox\components\Scriptff.dll

[2011.12.21 14:42:52 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011.12.21 14:42:52 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2011.12.21 14:42:52 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2011.12.21 14:42:52 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2011.12.21 14:42:52 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2011.12.21 14:42:52 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2012.01.14 18:15:01 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found

O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Programme\Common Files\mcafee\systemcore\ScriptSn.20111224115439.dll (McAfee, Inc.)

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Programme\mcafee\msk\mskapbho.dll ()

O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20111224115439.dll (McAfee, Inc.)

O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)

O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)

O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)

O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [QuickSet] c:\Programme\Dell\QuickSet\quickset.exe (Dell Inc.)

O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)

O4 - HKLM..\Run: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe (Dell, Inc.)

O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()

O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)

O4 - HKLM..\Run: [PDVD9LanguageShortcut] c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)

O4 - HKLM..\Run: [RemoteControl9] c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)

O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)

O4 - HKLM..\Run: [VMware hqtray] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.)

O4 - HKCU..\Run: [{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}] C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe (TrueCrypt Foundation)

O4 - HKCU..\Run: [NetLimiter] C:\Program Files\NetLimiter 3\NLClientApp.exe /tray File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found

O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found

O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found

O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.)

O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{37A2E693-68C7-4C41-AD0A-C700B7C90D43}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D91BEF26-4787-4BAE-BB9C-F2AFD4FB2C70}: NameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)

O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)

O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)

O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)

O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) -C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings

ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework

ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig

ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

 

MsConfig:64bit - StartUpReg: Dell DataSafe Online - hkey= - key= - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.)

MsConfig:64bit - StartUpReg: Dell Webcam Central - hkey= - key= - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)

MsConfig:64bit - State: "startup" - Reg Error: Key error.

MsConfig:64bit - State: "services" - Reg Error: Key error.

 

CREATERESTOREPOINT

Error creating restore point.

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.01.19 13:51:26 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

[2012.01.19 13:29:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

[2012.01.16 14:21:40 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{F5E49959-780D-4AF1-AEA8-316FE8D3EC8F}

[2012.01.16 14:21:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5395C7DE-ED9D-4E36-8202-A4060F1FCA3A}

[2012.01.16 09:13:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BB13469D-6288-4D21-9CCD-5504158D04AD}

[2012.01.15 16:07:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{11AA8A5B-D667-465F-AA1E-95DB0C28E7BE}

[2012.01.15 16:07:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0FDD9D70-3042-4C2C-B148-A415B4335A40}

[2012.01.15 13:15:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{62979A56-2C94-4058-A862-C4150F520C33}

[2012.01.14 12:41:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3A202188-F656-47CF-B7EE-C0F794531340}

[2012.01.14 12:41:42 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{63A7C9EA-4DE1-4FA8-8527-FD7744358A0C}

[2012.01.13 22:10:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{079C89EE-5CD9-4AD3-86BB-2F8CDE14D64F}

[2012.01.13 22:09:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{69CFE995-2C67-4B3F-80CA-70B319D76936}

[2012.01.13 09:55:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

[2012.01.13 09:54:43 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA GPU Computing Toolkit

[2012.01.13 09:42:43 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll

[2012.01.13 09:42:43 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll

[2012.01.13 09:39:49 | 000,000,000 | ---D | C] -- C:\NVIDIA

[2012.01.13 09:01:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{908A21C4-F77A-4B96-A775-C516608982AF}

[2012.01.13 09:01:14 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8368E417-56A5-45C5-9CAC-80830BD07042}

[2012.01.12 22:12:03 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C009C50F-D146-4764-9F0A-A7A5FE609791}

[2012.01.12 17:19:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{82E1F997-35C4-406D-BA11-A421D14AFAF1}

[2012.01.12 14:28:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{13BA3195-80EE-4834-907F-2950C47269A8}

[2012.01.12 14:23:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{999E6D61-FE5C-4585-BAED-012649D60AA5}

[2012.01.12 09:01:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DFE6DED4-622E-4179-AD7D-4E18F99DD933}

[2012.01.11 09:39:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{96AB6259-26BB-457A-B9DD-FC26B1C13B41}

[2012.01.11 09:38:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{83751B27-F6EB-4458-87FF-F846E96BDEE2}

[2012.01.10 17:56:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7C0AFBF6-748D-4BFD-BE7D-F865DAAE4732}

[2012.01.10 17:56:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A49618AD-CF91-4E99-9D2C-F02B055E4F77}

[2012.01.09 17:18:14 | 000,000,000 | ---D | C] -- C:\Users\***\.ssh

[2012.01.09 14:08:34 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DB0CEA02-82E3-40B9-802C-2957210092D7}

[2012.01.09 14:08:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7288F2A2-C9BB-48EC-9890-FF5FB8B607E6}

[2012.01.09 09:18:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7D87BF4E-437F-4502-B069-56E409ADCB7D}

[2012.01.08 17:02:09 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C10A7703-70DC-4E05-BB39-A437FC5A2F59}

[2012.01.08 17:01:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FF4D416C-D7AA-4A97-B26D-3FA8E8238D7C}

[2012.01.08 13:43:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B32B0963-0793-4838-8AE5-43F2480E11B8}

[2012.01.07 21:37:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C5E99881-E284-4334-9069-E610D4D004C6}

[2012.01.07 21:37:21 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{237A82B1-DDA0-48AE-8268-7C98E295440E}

[2012.01.07 15:35:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ANNO 1602

[2012.01.07 10:45:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BCBFCF43-C1ED-47FF-8555-6F22227027DA}

[2012.01.07 10:45:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3B407DCC-C0A1-4E56-A258-609896913565}

[2012.01.06 11:56:35 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{ED72B535-0050-476D-8C22-F0085857D2E7}

[2012.01.06 11:06:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2ECF5C5B-2569-4A43-94D9-3B557CCDBE6F}

[2012.01.06 11:06:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8EB08F8E-A919-4021-8DC0-0EDE401D2E01}

[2012.01.05 08:17:14 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3CBC80B6-1D3C-4202-9358-C4799113E543}

[2012.01.05 08:17:03 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{ACB167BA-8C23-400C-833E-6DEEA4D97457}

[2012.01.04 11:05:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4F3A287C-A4C4-4FF4-879D-BF886C606A7A}

[2012.01.04 11:05:00 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{9C871109-6636-43A2-9189-19C4A09541AE}

[2012.01.04 10:09:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{65DAF0A5-33F0-4F20-99DF-FEFA9A043AFA}

[2012.01.04 09:55:37 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{547E83CE-50BB-49B3-A7CD-44CDE6EFC7C6}

[2012.01.03 14:53:04 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{83EB7081-F6C2-4A63-BE39-0686976CA5B6}

[2012.01.03 14:52:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0441681F-1E60-48E6-B5A9-6EEB2148466D}

[2012.01.03 13:11:37 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{55503357-364C-49C2-858B-205C76C5C123}

[2012.01.03 11:18:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8938EC12-F280-4DD3-9D70-FAE4D33A1410}

[2012.01.02 17:42:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7DB47592-8CD7-40FB-BD88-6B2A83642F80}

[2012.01.02 17:42:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2902E46A-D8DE-4FE5-90FC-186A51BD7B25}

[2012.01.02 10:22:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{432FC88B-296B-45A4-A173-404882BAB606}

[2012.01.02 10:22:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{784248E9-E5C2-439A-9143-8CFC664FB6F1}

[2012.01.02 00:30:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1926FC3F-4034-484B-8962-0397C09F92B0}

[2012.01.01 21:51:47 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{631134C0-E052-49D4-8AE1-6661964D3F9C}

[2012.01.01 21:51:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8008940C-EA93-43E7-8AA9-C0F1AA5A21E7}

[2012.01.01 19:52:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{728C4FA8-CF44-4B2C-B6A8-2D2CA8498EC8}

[2012.01.01 12:54:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BAEDB6AA-7DE9-4AE7-B186-D7D179085F5F}

[2012.01.01 12:54:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{38D6569F-1DF6-4113-9EF3-7916ABB7DEF8}

[2011.12.31 15:27:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{81BD2A98-96FF-46B1-9E9B-E9BF7A12352C}

[2011.12.31 15:27:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5569259B-0F04-40B2-B1AD-DDF0A721E5DC}

[2011.12.30 15:13:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1F968AF9-F931-4B36-884D-E9027FD4925E}

[2011.12.30 15:12:56 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2D7055AE-1EFE-4277-A488-E996DF39A950}

[2011.12.30 10:59:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BDB98F43-CCE7-4328-95EA-F1D6A08BF427}

[2011.12.29 15:42:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3C17CAEE-8C3F-48A9-BA6E-CFBF48073654}

[2011.12.29 15:42:47 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{43E54ED1-7ECD-4703-B6A7-2D38CEF21ECD}

[2011.12.29 13:23:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C33DCB05-5A26-4DB3-AFC1-AF9F45A51E57}

[2011.12.28 23:13:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7385C042-44A0-42D8-B690-FC3E96393994}

[2011.12.28 10:46:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{351497D7-A61E-408D-A9C7-A2F6613FE12C}

[2011.12.28 10:46:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C5C8D459-0028-4461-95A5-56E1BDCA24E6}

[2011.12.28 01:11:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1394A59D-8236-489B-8BAF-4228E27D36D5}

[2011.12.28 01:11:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1A3EC290-7225-4D40-BA81-5FC0C7445CFA}

[2011.12.28 00:21:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{774DB3B6-4F92-419C-A159-2D4BE0A19A88}

[2011.12.27 10:53:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1179B0F7-ADA9-47AA-A1A6-06CD75D3A2CA}

[2011.12.27 10:52:35 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{AA3BB59A-737F-4B68-9BC7-FD11168DE800}

[2011.12.26 23:18:18 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2790D2D6-C157-4004-ACA6-D0B7FB9EB723}

[2011.12.26 18:02:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1313F1C9-7CA4-45E6-AAB3-A1608848A0B4}

[2011.12.26 10:26:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5BB666DD-B05B-4772-9D7E-FCD57311C770}

[2011.12.25 17:56:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FF0088EB-1390-4459-B391-4D2FE951F165}

[2011.12.25 17:56:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{15CDA084-806B-4AAD-B536-434CC07E7567}

[2011.12.25 12:09:56 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{65860843-269C-4238-8391-571C827B91A0}

[2011.12.25 12:09:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0BF61365-0F43-4AFB-8321-241E008AA00E}

[2011.12.24 10:42:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5B71B9E3-F366-4A90-BF96-5CD15C774611}

[2011.12.23 10:45:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3A9BEFB7-C8C0-4421-9EE0-433D03654B6B}

[2011.12.23 10:45:18 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A75C0FC1-BF43-46B9-A7B4-431DDBF2EA0E}

[2011.12.22 20:01:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{70150D8C-5B26-408D-BE5B-A07AF22C1F9C}

[2011.12.22 19:58:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4782F48D-0BC5-48A8-8D89-5194D8F700C5}

[2011.12.22 09:11:34 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{03B31392-FBD2-4ED9-B9FE-838AB2DE9849}

[2011.12.22 09:11:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1869E4E1-1E28-4DBE-BCAE-55DC302998F2}

[2011.12.21 13:49:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git

[2011.12.21 13:48:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Git

[2011.12.21 10:11:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{AA62CBC9-B103-461E-AF26-3628B2AEA0C0}

[2011.12.21 10:11:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C1A4717A-3E2C-4BAB-A975-963B603CE55B}

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.01.19 13:55:03 | 001,506,624 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.01.19 13:55:03 | 000,656,660 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.01.19 13:55:03 | 000,618,542 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.01.19 13:55:03 | 000,131,058 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.01.19 13:55:03 | 000,107,448 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.01.19 13:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

[2012.01.19 13:29:26 | 000,001,830 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Center.lnk

[2012.01.19 13:22:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.01.19 13:22:26 | 469,372,927 | -HS- | M] () -- C:\hiberfil.sys

[2012.01.19 11:42:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.01.19 11:42:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.01.12 14:42:05 | 000,000,378 | ---- | M] () -- C:\Users\***\.bash_history

[2012.01.11 15:03:44 | 000,000,937 | -H-- | M] () -- C:\Users\***\.gitk

[2012.01.09 17:20:02 | 000,000,081 | ---- | M] () -- C:\Users\***\.gitconfig

 
 ========== Files Created - No Company Name ==========

 

[2012.01.11 15:01:00 | 000,000,937 | -H-- | C] () -- C:\Users\***\.gitk

[2012.01.09 17:27:10 | 000,000,378 | ---- | C] () -- C:\Users\***\.bash_history

[2012.01.09 17:20:02 | 000,000,081 | ---- | C] () -- C:\Users\***\.gitconfig

[2011.12.26 10:50:05 | 000,001,830 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Center.lnk

[2011.05.25 19:03:06 | 000,005,120 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.05.24 10:45:34 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2011.05.21 14:27:33 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI

[2011.03.26 16:59:07 | 000,007,600 | ---- | C] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg

[2011.03.14 22:50:52 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin

[2011.03.14 22:50:50 | 000,207,376 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin

[2011.03.14 22:50:48 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin

[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat

[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT

[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat

[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin

[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll

[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

[1997.06.14 09:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll

 
 ========== LOP Check ==========

 

[2011.07.29 11:41:24 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FOG Downloader

[2011.10.18 20:34:49 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo

[2011.05.18 15:52:25 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0

[2012.01.18 22:30:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ICQ

[2011.10.23 14:23:21 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Juniper Networks

[2011.03.22 17:16:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech

[2011.03.23 22:47:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\mp3DirectCut

[2011.03.22 18:04:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Opera

[2011.04.21 17:30:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Subversion

[2011.03.23 10:45:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TerraTec

[2011.09.12 18:14:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TS3Client

[2011.03.23 11:20:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer

[2011.10.18 20:49:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Zylom

[2012.01.19 13:13:03 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 

 
 < %SYSTEMDRIVE%\*. >

[2011.03.22 17:15:44 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN

[2011.03.22 20:56:43 | 000,000,000 | ---D | M] -- C:\3fc56901d71852fea37f6c313746d1af

[2011.04.20 16:46:31 | 000,000,000 | -H-D | M] -- C:\CanoScan

[2011.03.22 17:35:17 | 000,000,000 | ---D | M] -- C:\dell

[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings

[2011.03.22 17:12:39 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen

[2011.03.24 14:00:11 | 000,000,000 | ---D | M] -- C:\Drivers

[2011.03.22 18:24:16 | 000,000,000 | ---D | M] -- C:\Intel

[2011.03.23 10:11:28 | 000,000,000 | RH-D | M] -- C:\MSOCache

[2012.01.13 09:39:49 | 000,000,000 | ---D | M] -- C:\NVIDIA

[2011.10.19 13:27:09 | 000,000,000 | ---D | M] -- C:\opt

[2012.01.13 09:54:43 | 000,000,000 | R--D | M] -- C:\Program Files

[2011.12.21 13:48:52 | 000,000,000 | R--D | M] -- C:\Program Files (x86)

[2011.10.18 20:48:56 | 000,000,000 | -H-D | M] -- C:\ProgramData

[2011.03.22 17:12:39 | 000,000,000 | -HSD | M] -- C:\Programme

[2011.03.23 11:37:48 | 000,000,000 | ---D | M] -- C:\Programmierung

[2012.01.07 15:35:53 | 000,000,000 | ---D | M] -- C:\Spiele

[2011.03.22 17:17:59 | 000,000,000 | -HSD | M] -- C:\System Recovery

[2012.01.13 09:54:23 | 000,000,000 | -HSD | M] -- C:\System Volume Information

[2011.03.24 14:00:11 | 000,000,000 | ---D | M] -- C:\Temp

[2011.03.22 17:12:54 | 000,000,000 | R--D | M] -- C:\Users

[2012.01.19 13:22:26 | 000,000,000 | ---D | M] -- C:\Windows

 
 < %PROGRAMFILES%\*.exe >

 
 < %LOCALAPPDATA%\*.exe >

 
 < %systemroot%\*. /mp /s >

 

 
 < MD5 for: AGP440.SYS  >

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

 
 < MD5 for: ATAPI.SYS  >

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.20575_none_39c1885e54505643\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

 
 < MD5 for: CNGAUDIT.DLL  >

[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll

[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll

[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

 
 < MD5 for: EXPLORER.EXE  >

[2011.03.14 23:03:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe

[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe

[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe

[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe

[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe

[2011.03.14 23:03:58 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe

[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe

[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe

[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe

[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe

[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe

[2011.03.14 23:03:51 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe

[2011.03.14 23:03:54 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe

[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe

[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe

[2011.03.14 23:03:58 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe

[2011.03.14 23:03:54 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe

[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

[2011.03.14 23:03:58 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe

[2011.03.14 23:03:54 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe

[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe

[2011.03.14 23:03:58 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe

[2011.03.14 23:03:51 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe

[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe

[2011.03.14 23:03:54 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

[2011.03.14 23:03:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe

 
 < MD5 for: IASTORV.SYS  >

[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys

[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys

[2011.03.14 23:04:21 | 000,410,504 | ---- | M] (Intel Corporation) MD5=513DC087CFED7D2BB82F005385D3531F -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_0af87721a183cb70\iaStorV.sys

[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys

[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys

[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys

[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys

[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys

[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys

[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

[2011.03.14 23:04:21 | 000,410,496 | ---- | M] (Intel Corporation) MD5=E353CF970C5D4D6A092911E15FB78C07 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_0bd89532ba6088d9\iaStorV.sys

 
 < MD5 for: NETLOGON.DLL  >

[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll

[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll

[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll

[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll

[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

 
 < MD5 for: NVSTOR.SYS  >

[2011.03.14 23:04:21 | 000,166,280 | ---- | M] (NVIDIA Corporation) MD5=0AF7B8136794E23E87BE138992880E64 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvstor.sys

[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys

[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys

[2011.03.14 23:04:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=CE76755AF933E728CEBA6C7A970838A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvstor.sys

[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys

[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys

[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys

[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys

[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys

[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

 
 < MD5 for: SCECLI.DLL  >

[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll

[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll

[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll

[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll

[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll

[2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll

[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll

[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll

[2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll

[2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe

[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe

[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe

[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe

[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe

[2011.03.14 23:03:58 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe

[2011.03.14 23:03:58 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys

[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

 
 < %systemroot%\system32\*.dll /lockedfiles >

 
 < %USERPROFILE%\*.* >

[2012.01.12 14:42:05 | 000,000,378 | ---- | M] () -- C:\Users\***\.bash_history

[2012.01.09 17:20:02 | 000,000,081 | ---- | M] () -- C:\Users\***\.gitconfig

[2012.01.11 15:03:44 | 000,000,937 | -H-- | M] () -- C:\Users\***\.gitk

[2011.05.18 15:52:25 | 000,001,457 | ---- | M] () -- C:\Users\***\.recently-used.xbel

[2012.01.19 14:13:09 | 002,359,296 | -HS- | M] () -- C:\Users\***\NTUSER.DAT

[2012.01.19 14:13:09 | 000,262,144 | -HS- | M] () -- C:\Users\***\ntuser.dat.LOG1

[2011.03.22 17:12:54 | 000,000,000 | -HS- | M] () -- C:\Users\***\ntuser.dat.LOG2

[2011.03.22 17:33:52 | 000,065,536 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf

[2011.03.22 17:33:52 | 000,524,288 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms

[2011.03.22 17:33:52 | 000,524,288 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms

[2011.03.22 17:12:54 | 000,000,020 | -HS- | M] () -- C:\Users\***\ntuser.ini

[2012.01.18 09:11:01 | 000,053,853 | ---- | M] () -- C:\Users\***\UnionInvestment.xlsx

 
 < %USERPROFILE%\Local Settings\Temp\*.exe >

 
 < %USERPROFILE%\Local Settings\Temp\*.dll >

 
 < %USERPROFILE%\Application Data\*.exe >

 
 < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 

< End of report >

Extras.Txt:

Code:

OTL Extras logfile created on: 19.01.2012 13:55:08 - Run 1

OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\***\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 

5,92 Gb Total Physical Memory | 5,16 Gb Available Physical Memory | 87,25% Memory free

11,83 Gb Paging File | 11,09 Gb Available in Paging File | 93,72% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]
 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 581,42 Gb Total Space | 440,27 Gb Free Space | 75,72% Space Free | Partition Type: NTFS

Drive E: | 488,95 Mb Total Space | 441,96 Mb Free Space | 90,39% Space Free | Partition Type: FAT
 

Computer Name: NOTEBOOKC | User Name: *** | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
 ========== Extra Registry (SafeList) ==========
 
 
 ========== File Associations ==========
 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
 
 ========== Shell Spawning ==========
 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 
 ========== Authorized Applications List ==========

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center

"{0ABFCCD6-DB8E-4DAB-869E-68C908AABD0D}" = NVIDIA CUDA Toolkit v4.1 (64 bit)

"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector

"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant

"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)

"{290D4DB2-F1B4-4B8E-918D-D71EF29A001B}" = Intel(R) PROSet/Wireless WiFi-Software

"{2BF35D84-6377-4F70-9F39-97CF67E67FFF}" = Microsoft IntelliPoint 8.0

"{45EF12B0-F531-4A2C-A1C0-6B1495698E30}" = TortoiseSVN 1.6.15.21042 (64 bit)

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup

"{64A3A4F4-B792-11D6-A78A-00B0D0160260}" = Java(TM) SE Development Kit 6 Update 26 (64-bit)

"{64A3A4F4-B792-11D6-A78A-00B0D0160270}" = Java(TM) SE Development Kit 6 Update 27 (64-bit)

"{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570

"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64

"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer

"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010

"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst

"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.86

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.86

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.5.20

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.1.13.1

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components

"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Überwachungstool für die Intel® Turbo-Boost-Technik 2.0

"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources

"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources

"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter

"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client

"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit

"Dell Support Center" = Dell Support Center

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"ProInst" = Intel PROSet Wireless

"SynTPDeinstKey" = Synaptics Pointing Device Driver

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"WinRAR archiver" = WinRAR 4.00 (64-Bit)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup

"{184A26D9-6561-49A9-A571-4D9BD93394C8}" = QtSpim

"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26

"{2A0F2CC5-3065-492C-8380-B03AA7106B1A}" = Dell Product Registration

"{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress

"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery

"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack

"{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}" = TerraTec Home Cinema

"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components

"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4

"{73E0D3A0-9C30-4F59-ABBF-6233686FB396}_is1" = ConTEXT v0.98.6

"{746F49C9-3789-4F8E-AF3A-3A4B42ACFAF8}" = Spellforce 2 Gold

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{7E8242F8-BD2A-44D7-BCED-9B231A02B367}" = SpellForce 2 Patch

"{7EC66A95-AC2D-4127-940B-0445A526AB2F}" = Dell DataSafe Online

"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform

"{84F7CAD9-2316-4701-B5CA-E90FD60029E9}" = ANNO 1602

"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer

"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010

"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010

"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010

"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010

"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010

"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010

"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010

"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010

"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010

"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010

"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-002A-0407-1000-0000000FF1CE}_Office14.SingleImage_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010

"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010

"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010

"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010

"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)

"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker

"{9569E6BC-326A-432F-97AB-35263A327BF1}" = Roxio Burn

"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail

"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module

"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic

"{A53A11EA-0095-493F-86FA-A15E8A86A405}" = VMware Player

"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer

"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer

"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.2) MUI

"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh

"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime

"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie

"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail

"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common

"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64

"{D102611A-6466-4101-A51D-51069303AC65}" = tools-linux

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker

"{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter

"{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center

"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Advanced Audio FX Engine" = Advanced Audio FX Engine

"Age of Empires 2.0" = Microsoft Age of Empires II

"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion

"Blobby Volley 2.0 Version 0.9b_is1" = Blobby Volley 2.0 Version 0.9b

"Cinergy S USB" = Cinergy S USB V1.04.02.04

"Dell Webcam Central" = Dell Webcam Central

"Git_is1" = Git version 1.7.8-preview20111206

"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6

"Juniper Network Connect 6.5.0" = Juniper Networks Network Connect 6.5.0

"Juniper Network Connect 7.0.0" = Juniper Networks Network Connect 7.0.0

"Juniper_Setup_Client Activex Control" = Juniper Networks Setup Client Activex Control

"LANconfig" = ELSA LANconfig

"LANmonitor" = ELSA LANmonitor

"MiKTeX 2.9" = MiKTeX 2.9

"Mozilla Firefox 7.0.1 (x86 de)" = Mozilla Firefox 7.0.1 (x86 de)

"MSC" = McAfee SecurityCenter

"Office14.SingleImage" = Microsoft Office Home and Student 2010

"Opera 11.60.1185" = Opera 11.60

"Revo Uninstaller" = Revo Uninstaller 1.91

"S2TNG" = Die Siedler II - Die nächste Generation

"StarCraft II" = StarCraft II

"TeXnicCenter_is1" = TeXnicCenter Version 1.0 Stable RC1

"VMware_Player" = VMware Player

"WinGimp-2.0_is1" = GIMP 2.6.11

"WinLiveSuite" = Windows Live Essentials

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Juniper_Setup_Client" = Juniper Networks Setup Client

"ScrollDemo" = ScrollDemo

 
 ========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 18.10.2011 17:43:48 | Computer Name = NotebookC | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\***\Downloads\SoftonicDownloader_fuer_monopoly-3.exe".

 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche

 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.

In

 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

 

Error - 18.10.2011 18:57:26 | Computer Name = NotebookC | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "c:\Users\***\downloads\softonicdownloader_fuer_monopoly-3.exe".

 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche

 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.

In

 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

 

Error - 19.10.2011 16:44:47 | Computer Name = NotebookC | Source = Application Hang | ID = 1002

Description = Programm Client.exe, Version 4.0.3.2451 kann nicht mehr unter Windows

 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,

 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 508    Startzeit: 

01cc8e9789b7e134    Endzeit: 260    Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe    Berichts-ID:

 2c5d0c03-fa93-11e0-a30f-14feb59a632f  

 

Error - 20.10.2011 02:59:44 | Computer Name = NotebookC | Source = ESENT | ID = 484

Description = wlmail (4724) WindowsLiveMail0: Versuch, Ordner "C:\Users\***\AppData\Local\Microsoft\Windows

 Live Mail\Backup\old" zu entfernen, ist mit Systemfehler 145 (0x00000091): "Das

 Verzeichnis ist nicht leer. " fehlgeschlagen. Fehler -1022 (0xfffffc02) beim Entfernen

 von Ordnern.

 

Error - 20.10.2011 02:59:44 | Computer Name = NotebookC | Source = ESENT | ID = 215

Description = wlmail (4724) WindowsLiveMail0: Die Sicherung wurde abgebrochen, weil

 sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen

 wurde.

 

Error - 25.10.2011 02:45:53 | Computer Name = NotebookC | Source = ESENT | ID = 484

Description = wlmail (5500) WindowsLiveMail0: Versuch, Ordner "C:\Users\***\AppData\Local\Microsoft\Windows

 Live Mail\Backup\old" zu entfernen, ist mit Systemfehler 145 (0x00000091): "Das

 Verzeichnis ist nicht leer. " fehlgeschlagen. Fehler -1022 (0xfffffc02) beim Entfernen

 von Ordnern.

 

Error - 25.10.2011 02:45:53 | Computer Name = NotebookC | Source = ESENT | ID = 215

Description = wlmail (5500) WindowsLiveMail0: Die Sicherung wurde abgebrochen, weil

 sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen

 wurde.

 

Error - 28.10.2011 15:53:08 | Computer Name = NotebookC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: svchost.exe_FontCache, Version: 6.1.7600.16385,

 Zeitstempel: 0x4a5bc3c1  Name des fehlerhaften Moduls: fntcache.dll, Version: 6.1.7601.17563,

 Zeitstempel: 0x4d5faf0d  Ausnahmecode: 0x40000015  Fehleroffset: 0x000000000003d6fa

ID

 des fehlerhaften Prozesses: 0x1158  Startzeit der fehlerhaften Anwendung: 0x01cc95a3f796dda4

Pfad

 der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe  Pfad des fehlerhaften

 Moduls: c:\windows\system32\fntcache.dll  Berichtskennung: 74c8d0f2-019e-11e1-974c-14feb59a632f

 

Error - 06.11.2011 16:55:56 | Computer Name = NotebookC | Source = Application Hang | ID = 1002

Description = Programm Client.exe, Version 4.0.4.2456 kann nicht mehr unter Windows

 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,

 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 1b64    Startzeit:

 01cc9cbe54a92698    Endzeit: 127    Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe
 

Berichts-ID:

 b76c8294-08b9-11e1-b42b-8d174f822f32  

 

Error - 17.11.2011 14:33:15 | Computer Name = NotebookC | Source = Application Hang | ID = 1002

Description = Programm Client.exe, Version 4.0.4.2462 kann nicht mehr unter Windows

 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,

 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 13e0    Startzeit:

 01cca544d06adcd1    Endzeit: 212    Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe
 

Berichts-ID:

 9b2a3d01-114a-11e1-beda-f5c620c5ee2d  

 

[ Dell Events ]

Error - 22.03.2011 13:47:09 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 14:06:28 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 14:06:28 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:15:55 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:15:55 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:17:50 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:17:50 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:18:39 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:18:39 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

Error - 22.03.2011 17:19:31 | Computer Name = NotebookC | Source = DataSafe | ID = 17

Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.

 

[ Media Center Events ]

Error - 11.04.2011 02:47:23 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 08:47:21 - Fehler beim Herstellen der Internetverbindung.  08:47:21 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 16.04.2011 03:12:30 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 09:12:29 - Fehler beim Herstellen der Internetverbindung.  09:12:29 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 21.04.2011 03:46:13 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 09:46:12 - Fehler beim Herstellen der Internetverbindung.  09:46:12 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 25.04.2011 22:18:25 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 04:18:24 - Fehler beim Herstellen der Internetverbindung.  04:18:24 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 30.04.2011 22:14:20 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 04:14:20 - Fehler beim Herstellen der Internetverbindung.  04:14:20 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 05.05.2011 22:52:00 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 04:51:59 - Fehler beim Herstellen der Internetverbindung.  04:51:59 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 10.05.2011 22:04:16 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 04:04:15 - Fehler beim Herstellen der Internetverbindung.  04:04:15 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 16.05.2011 02:50:15 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 08:50:14 - Fehler beim Herstellen der Internetverbindung.  08:50:14 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 20.05.2011 22:46:08 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 04:46:07 - Fehler beim Herstellen der Internetverbindung.  04:46:07 

-     Serververbindung konnte nicht hergestellt werden..  

 

Error - 25.05.2011 22:47:24 | Computer Name = NotebookC | Source = MCUpdate | ID = 0

Description = 04:47:23 - Fehler beim Herstellen der Internetverbindung.  04:47:23 

-     Serververbindung konnte nicht hergestellt werden..  

 

[ System Events ]

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der

 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068

 

 

< End of report >

hi

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.

• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

Code:

:OTL

O4 - HKCU..\Run: [{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}] C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe (TrueCrypt Foundation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

 :Files

C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe

:Commands

[purity]

[EMPTYFLASH] 

[emptytemp]

[Reboot]

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + E Taste.

Öffne dein Systemlaufwerk ( meistens C: )
Suche nun
folgenden Ordner: _OTL und öffne diesen.
Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
Dies wird eine Movedfiles.zip Datei in _OTL erstellen
Lade diese bitte in unseren Uploadchannel
hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus :)

Hallo,

hier der Inhalt der Text-Datei:

Code:

All processes killed

========== OTL ==========

Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}\ not found.

File C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.

========== COMMANDS ==========

 

[EMPTYFLASH]

 

User: All Users

 

User: ***

->Flash cache emptied: 200880 bytes

 

User: Default

 

User: Default User

 

User: Public

 

User: UpdatusUser

 

Total Flash Files Cleaned = 0,00 mb

 

 

[EMPTYTEMP]

 

User: All Users

 

User: ***

->Temp folder emptied: 65822663 bytes

->Temporary Internet Files folder emptied: 135997783 bytes

->Java cache emptied: 7202799 bytes

->FireFox cache emptied: 133190890 bytes

->Opera cache emptied: 14051537 bytes

->Flash cache emptied: 0 bytes

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Public

 

User: UpdatusUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 132750723 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 53569 bytes

%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 734 bytes

RecycleBin emptied: 174 bytes

 

Total Files Cleaned = 466,00 mb

 

 

OTL by OldTimer - Version 3.2.31.0 log created on 01192012_154130
 

Files\Folders moved on Reboot...

C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
 

Registry entries deleted on Reboot...

Der Upload des zip-Archivs hat auch geklappt.

Gruß
tissi

du musst das script und den upload noch mal machen, und diesmal natürlich *** durch nutzernamen ersetzen sonst funktionierts nicht richtig :-)

oh, ja, natürlich. hatte gar nicht gesehen, dass da so ein Pfad drinsteht.

Code:

All processes killed

========== OTL ==========

Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}\ not found.

C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.

========== COMMANDS ==========

 

[EMPTYFLASH]

 

User: All Users

 

User: ***

->Flash cache emptied: 0 bytes

 

User: Default

 

User: Default User

 

User: Public

 

User: UpdatusUser

 

Total Flash Files Cleaned = 0,00 mb

 

 

[EMPTYTEMP]

 

User: All Users

 

User: ***

->Temp folder emptied: 1534 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 0 bytes

->Opera cache emptied: 665169 bytes

->Flash cache emptied: 0 bytes

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Public

 

User: UpdatusUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 7775 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes

%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes

RecycleBin emptied: 4700 bytes

 

Total Files Cleaned = 1,00 mb

 

 

OTL by OldTimer - Version 3.2.31.0 log created on 01192012_163721
 

Files\Folders moved on Reboot...

C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
 

Registry entries deleted on Reboot...

der Upload hat auch wieder geklappt.

und ich hatte die *** nicht beachtet :-)
aber so was passiert, danke für den upload erst mal.

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.

Besuche folgende Seite für Downloadlinks und Anweisungen für dieses
Tool

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Hinweis:
Gehe sicher das all deine Anti Virus und Anti Malware Programme abgeschalten sind, damit diese Combofix nicht bei der Arbeit stören.
Poste bitte die C:\Combofix.txt in deiner nächsten Antwort.

So, ComboFix ist fertig, aber es traten ein paar Komplikationen auf:

1. Zu Beginn mehrfach, dann bei jeder Stufe des Scans und auch noch mehrfach beim Erstellen des Berichts erschien die Fehlermeldung: 'Die Datei "NIRKMD" konnte nicht gefunden werden. Überprüfen Sie die Schreibweise und wiederholen Sie den Vorgang.'

2. Nach dem Scan der Stufen wurde noch ein tieferer Scan durchgeführt, der nicht im Tutorial erwähnt war. Danach startete sich der Computer neu.

Anbei noch das Log:

Code:

ComboFix 12-01-19.01 - *** 19.01.2012  17:14:32.1.8 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6058.4582 [GMT 1:00]

ausgeführt von:: c:\users\***\Desktop\ComboFix.exe

AV: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

FW: McAfee  Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

SP: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files\Realtek\Audio\HDA\AERTSr64.exe

c:\program files\Realtek\Audio\HDA\RAVBg64.exe

c:\programdata\Roaming

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RtlUpd64.exe

c:\windows\system32\fxsst.dll . . . . Nicht in der Lage zu löschen

c:\windows\system32\java.exe

c:\windows\SysWow64\odbcad32.exe

.

----- Datei Replikatoren -----

.

c:\drivers\Audio\Vista64\AERTSr64.exe

c:\drivers\Audio\Vista64\FMAPP.exe

c:\drivers\Audio\Vista64\RAVBg64.exe

c:\drivers\Audio\Vista64\RAVCpl64.exe

c:\drivers\Audio\Vista64\RtlUpd64.exe

c:\program files (x86)\Git\libexec\git-core\git-add.exe

c:\program files (x86)\Git\libexec\git-core\git-annotate.exe

c:\program files (x86)\Git\libexec\git-core\git-apply.exe

c:\program files (x86)\Git\libexec\git-core\git-archive.exe

c:\program files (x86)\Git\libexec\git-core\git-bisect--helper.exe

c:\program files (x86)\Git\libexec\git-core\git-blame.exe

c:\program files (x86)\Git\libexec\git-core\git-branch.exe

c:\program files (x86)\Git\libexec\git-core\git-bundle.exe

c:\program files (x86)\Git\libexec\git-core\git-cat-file.exe

c:\program files (x86)\Git\libexec\git-core\git-check-attr.exe

c:\program files (x86)\Git\libexec\git-core\git-check-ref-format.exe

c:\program files (x86)\Git\libexec\git-core\git-checkout-index.exe

c:\program files (x86)\Git\libexec\git-core\git-checkout.exe

c:\program files (x86)\Git\libexec\git-core\git-cherry-pick.exe

c:\program files (x86)\Git\libexec\git-core\git-cherry.exe

c:\program files (x86)\Git\libexec\git-core\git-clean.exe

c:\program files (x86)\Git\libexec\git-core\git-clone.exe

c:\program files (x86)\Git\libexec\git-core\git-commit-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-commit.exe

c:\program files (x86)\Git\libexec\git-core\git-config.exe

c:\program files (x86)\Git\libexec\git-core\git-count-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-describe.exe

c:\program files (x86)\Git\libexec\git-core\git-diff-files.exe

c:\program files (x86)\Git\libexec\git-core\git-diff-index.exe

c:\program files (x86)\Git\libexec\git-core\git-diff-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-diff.exe

c:\program files (x86)\Git\libexec\git-core\git-fast-export.exe

c:\program files (x86)\Git\libexec\git-core\git-fetch-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-fetch.exe

c:\program files (x86)\Git\libexec\git-core\git-fmt-merge-msg.exe

c:\program files (x86)\Git\libexec\git-core\git-for-each-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-format-patch.exe

c:\program files (x86)\Git\libexec\git-core\git-fsck-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-fsck.exe

c:\program files (x86)\Git\libexec\git-core\git-gc.exe

c:\program files (x86)\Git\libexec\git-core\git-get-tar-commit-id.exe

c:\program files (x86)\Git\libexec\git-core\git-grep.exe

c:\program files (x86)\Git\libexec\git-core\git-hash-object.exe

c:\program files (x86)\Git\libexec\git-core\git-help.exe

c:\program files (x86)\Git\libexec\git-core\git-index-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-init-db.exe

c:\program files (x86)\Git\libexec\git-core\git-init.exe

c:\program files (x86)\Git\libexec\git-core\git-log.exe

c:\program files (x86)\Git\libexec\git-core\git-ls-files.exe

c:\program files (x86)\Git\libexec\git-core\git-ls-remote.exe

c:\program files (x86)\Git\libexec\git-core\git-ls-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-mailinfo.exe

c:\program files (x86)\Git\libexec\git-core\git-mailsplit.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-base.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-file.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-index.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-ours.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-recursive.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-subtree.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-merge.exe

c:\program files (x86)\Git\libexec\git-core\git-mktag.exe

c:\program files (x86)\Git\libexec\git-core\git-mktree.exe

c:\program files (x86)\Git\libexec\git-core\git-mv.exe

c:\program files (x86)\Git\libexec\git-core\git-name-rev.exe

c:\program files (x86)\Git\libexec\git-core\git-notes.exe

c:\program files (x86)\Git\libexec\git-core\git-pack-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-pack-redundant.exe

c:\program files (x86)\Git\libexec\git-core\git-pack-refs.exe

c:\program files (x86)\Git\libexec\git-core\git-patch-id.exe

c:\program files (x86)\Git\libexec\git-core\git-peek-remote.exe

c:\program files (x86)\Git\libexec\git-core\git-prune-packed.exe

c:\program files (x86)\Git\libexec\git-core\git-prune.exe

c:\program files (x86)\Git\libexec\git-core\git-push.exe

c:\program files (x86)\Git\libexec\git-core\git-read-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-receive-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-reflog.exe

c:\program files (x86)\Git\libexec\git-core\git-remote-ext.exe

c:\program files (x86)\Git\libexec\git-core\git-remote-fd.exe

c:\program files (x86)\Git\libexec\git-core\git-remote.exe

c:\program files (x86)\Git\libexec\git-core\git-replace.exe

c:\program files (x86)\Git\libexec\git-core\git-repo-config.exe

c:\program files (x86)\Git\libexec\git-core\git-rerere.exe

c:\program files (x86)\Git\libexec\git-core\git-reset.exe

c:\program files (x86)\Git\libexec\git-core\git-rev-list.exe

c:\program files (x86)\Git\libexec\git-core\git-rev-parse.exe

c:\program files (x86)\Git\libexec\git-core\git-revert.exe

c:\program files (x86)\Git\libexec\git-core\git-rm.exe

c:\program files (x86)\Git\libexec\git-core\git-send-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-shortlog.exe

c:\program files (x86)\Git\libexec\git-core\git-show-branch.exe

c:\program files (x86)\Git\libexec\git-core\git-show-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-show.exe

c:\program files (x86)\Git\libexec\git-core\git-stage.exe

c:\program files (x86)\Git\libexec\git-core\git-status.exe

c:\program files (x86)\Git\libexec\git-core\git-stripspace.exe

c:\program files (x86)\Git\libexec\git-core\git-symbolic-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-tag.exe

c:\program files (x86)\Git\libexec\git-core\git-tar-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-unpack-file.exe

c:\program files (x86)\Git\libexec\git-core\git-unpack-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-update-index.exe

c:\program files (x86)\Git\libexec\git-core\git-update-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-update-server-info.exe

c:\program files (x86)\Git\libexec\git-core\git-upload-archive.exe

c:\program files (x86)\Git\libexec\git-core\git-var.exe

c:\program files (x86)\Git\libexec\git-core\git-verify-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-verify-tag.exe

c:\program files (x86)\Git\libexec\git-core\git-whatchanged.exe

c:\program files (x86)\Git\libexec\git-core\git-write-tree.exe

c:\program files (x86)\Git\libexec\git-core\git.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\afm2afm.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\arlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\authorindex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\autoinst.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\bdftops.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\bib2xhtml.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\bibhtml.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html1.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html2.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html3.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\birm.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\bundledoc.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\cmap2enc.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\csvtools.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dblatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\dumphint.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\eps2eps.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\escontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\eslatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\esmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\estex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\estexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\esxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\esxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\etexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\exceltex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\feynmf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\fig4latex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\findhyph.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\font2afm.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\font2c.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\fullref.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsbj.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsdj.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsdj500.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gslj.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gslp.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsnd.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsndt.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gssetgs.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gst.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\gstt.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ht.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\htcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\htlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\htmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\httex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\httexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\htxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\htxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ibyhyph.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\internal\runbat.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\internal\runperl.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1context.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1latex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1mex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1tex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1texi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1xelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1xetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jscontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jslatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jstex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jstexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-fast.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-so.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-vc.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexmk.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexrevise.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\lp386.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\lp386r2.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\lpgs.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\lpr2.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\lualatexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\luatexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\makeglossaries.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\makejmlrbook.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mk4ht.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mkt1font.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mptopdf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mztex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mztexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\oocontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\oolatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\oomex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ootex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ootexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ooxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ooxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\orderrefs.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ot2kpx.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdf2dsc.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdf2ps.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfatfi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfcrop.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdflatexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfopt.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdftexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pedigree.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\perltex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pf2afm.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pfbtopfa.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pfm2kpx.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pftogsf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pkfix.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pn2pdf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ascii.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2epsi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf12.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf13.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf14.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdfxx.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ps.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ps2.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps4pdf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\pst2pdf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\rcsinfo.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\showglyphs.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\splitindex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\sty2dtx.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\svn-multi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teicontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teilatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teitex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teitexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teixelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\teixetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\texcount.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdiff.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdirflatten.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\thumbpdf.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\urlbst.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\vpl2ovp.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\vpl2vpl.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wmakebat.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\wxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xdv2pdf_mergemarks.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xelatexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xetexdef.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmcontext.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmlatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmmex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmxetex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhtex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhtexi.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhxelatex.exe

c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhxetex.exe

c:\program files\Realtek\Audio\HDA\AERTSr64.exe

c:\program files\Realtek\Audio\HDA\FMAPP.exe

c:\program files\Realtek\Audio\HDA\RAVBg64.exe

c:\program files\Realtek\Audio\HDA\RAVCpl64.exe

c:\program files\Realtek\Audio\HDA\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\FMAPP.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RtlUpd64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\AERTSr64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVBg64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVCpl64.exe

c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RtlUpd64.exe

.

.

(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Service_AERTFilters

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-12-19 bis 2012-01-19  ))))))))))))))))))))))))))))))

.

.

2012-01-19 16:22 . 2012-01-19 16:22        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2012-01-19 16:22 . 2012-01-19 16:22        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-01-19 14:41 . 2012-01-19 15:30        --------        d-----w-        C:\_OTL

2012-01-13 08:54 . 2012-01-13 08:54        --------        d-----w-        c:\program files\NVIDIA GPU Computing Toolkit

2012-01-13 08:39 . 2012-01-13 08:39        --------        d-----w-        C:\NVIDIA

2012-01-11 19:17 . 2011-10-26 05:25        1572864        ----a-w-        c:\windows\system32\quartz.dll

2012-01-11 19:17 . 2011-10-26 04:32        514560        ----a-w-        c:\windows\SysWow64\qdvd.dll

2012-01-11 19:17 . 2011-10-26 04:32        1328128        ----a-w-        c:\windows\SysWow64\quartz.dll

2012-01-11 19:17 . 2011-10-26 05:25        366592        ----a-w-        c:\windows\system32\qdvd.dll

2012-01-11 19:17 . 2011-11-17 06:41        1731920        ----a-w-        c:\windows\system32\ntdll.dll

2012-01-11 19:17 . 2011-11-17 05:38        1292080        ----a-w-        c:\windows\SysWow64\ntdll.dll

2012-01-11 19:16 . 2011-11-19 14:58        77312        ----a-w-        c:\windows\system32\packager.dll

2012-01-11 19:16 . 2011-11-19 14:01        67072        ----a-w-        c:\windows\SysWow64\packager.dll

2012-01-09 16:18 . 2012-01-09 16:18        --------        d-----w-        c:\users\***\.ssh

2012-01-07 14:35 . 2012-01-07 14:35        163972        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll

2012-01-07 14:35 . 2002-12-05 13:12        692224        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll

2012-01-07 14:35 . 2002-12-05 13:10        155648        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll

2012-01-07 14:35 . 2002-12-02 14:22        5632        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe

2012-01-07 14:35 . 2002-12-02 12:33        57344        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll

2012-01-07 14:35 . 2002-12-02 12:33        237568        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll

2012-01-07 14:35 . 2012-01-07 14:35        282756        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll

2011-12-21 12:48 . 2011-12-21 12:49        --------        d-----w-        c:\program files (x86)\Git

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-12-09 18:45 . 2011-12-09 18:45        60416        ----a-w-        c:\windows\system32\drivers\iBtFltCoex.sys

2011-12-09 18:34 . 2011-12-09 18:34        47616        ----a-w-        c:\windows\system32\opphelper.dll

2011-11-24 04:52 . 2011-12-14 14:04        3145216        ----a-w-        c:\windows\system32\win32k.sys

2011-11-19 16:54 . 2011-03-14 21:51        860992        ----a-w-        c:\windows\system32\nvumdshimx.dll

2011-11-19 16:54 . 2011-03-14 21:51        241984        ----a-w-        c:\windows\system32\nvinitx.dll

2011-11-19 16:54 . 2011-03-14 21:51        203072        ----a-w-        c:\windows\SysWow64\nvinit.dll

2011-11-19 16:54 . 2011-03-14 21:51        1543488        ----a-w-        c:\windows\system32\nvdispco64.dll

2011-11-19 16:54 . 2011-03-14 21:51        1454912        ----a-w-        c:\windows\system32\nvgenco64.dll

2011-11-19 16:54 . 2011-03-14 21:51        2808640        ----a-w-        c:\windows\system32\nvapi64.dll

2011-11-19 16:54 . 2010-11-29 10:35        539456        ----a-w-        c:\windows\system32\nvhotkey.dll

2011-11-19 16:54 . 2010-11-29 10:35        222528        ----a-w-        c:\windows\system32\nvmctray.dll

2011-11-19 16:54 . 2010-11-29 10:35        1640768        ----a-w-        c:\windows\system32\nvvsvc.exe

2011-11-19 16:54 . 2010-11-29 10:35        55616        ----a-w-        c:\windows\system32\nv3dappshextr.dll

2011-11-19 16:54 . 2010-11-29 10:35        3074368        ----a-w-        c:\windows\system32\nvsvcr.dll

2011-11-19 16:54 . 2010-11-29 10:35        1349440        ----a-w-        c:\windows\system32\nv3dappshext.dll

2011-11-19 16:54 . 2010-11-29 10:35        837952        ----a-w-        c:\windows\system32\easyUpdatusAPIU64.dll

2011-11-19 16:54 . 2010-11-29 10:35        10406208        ----a-w-        c:\windows\system32\nvcpl.dll

2011-11-19 16:54 . 2010-11-29 10:34        5067584        ----a-w-        c:\windows\system32\nvsvc64.dll

2011-11-19 16:54 . 2010-11-29 04:35        2402867        ----a-w-        c:\windows\system32\nvcoproc.bin

2011-11-19 16:54 . 2010-11-29 04:35        137536        ----a-w-        c:\windows\system32\nvshext.dll

2011-11-15 00:13 . 2011-11-15 00:13        327168        ----a-w-        c:\windows\system32\drivers\btmhsf.sys

2011-11-14 08:40 . 2011-06-03 07:55        414368        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-11-05 05:32 . 2011-12-14 14:03        2048        ----a-w-        c:\windows\system32\tzres.dll

2011-11-05 04:26 . 2011-12-14 14:03        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2011-11-04 01:53 . 2011-12-14 14:07        2309120        ----a-w-        c:\windows\system32\jscript9.dll

2011-11-04 01:44 . 2011-12-14 14:07        1390080        ----a-w-        c:\windows\system32\wininet.dll

2011-11-04 01:44 . 2011-12-14 14:07        1493504        ----a-w-        c:\windows\system32\inetcpl.cpl

2011-11-04 01:34 . 2011-12-14 14:07        2382848        ----a-w-        c:\windows\system32\mshtml.tlb

2011-11-03 22:47 . 2011-12-14 14:07        1798144        ----a-w-        c:\windows\SysWow64\jscript9.dll

2011-11-03 22:40 . 2011-12-14 14:07        1427456        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2011-11-03 22:39 . 2011-12-14 14:07        1127424        ----a-w-        c:\windows\SysWow64\wininet.dll

2011-11-03 22:31 . 2011-12-14 14:07        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2011-10-26 05:21 . 2011-12-14 14:04        43520        ----a-w-        c:\windows\system32\csrsrv.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-01-03 35736]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1675160]

"Dell Registration"="c:\program files (x86)\System Registration\prodreg.exe" [2010-11-10 4144448]

"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]

"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]

"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2010-10-29 75048]

"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-09-04 240112]

"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-09-03 518640]

"VMware hqtray"="c:\program files (x86)\VMware\VMware Player\hqtray.exe" [2011-03-25 64112]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/03/14 15:00;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-29 236016]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-09-04 219632]

R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]

R3 DVBUSB_0064_Sevice;Cinergy S USB service;c:\windows\system32\DRIVERS\usb_0064.sys [x]

R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]

R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]

R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2010-08-30 220528]

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]

R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]

R3 NLNdisMP;NLNdisMP;c:\windows\system32\DRIVERS\nlndis.sys [x]

R3 NLNdisPT;NetLimiter Ndis Protocol Service;c:\windows\system32\DRIVERS\nlndis.sys [x]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]

R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-09-04 1116656]

R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]

R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]

R4 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]

S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x]

S1 c2scsi64;c2scsi64;c:\windows\system32\DRIVERS\c2scsi64.sys [x]

S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x]

S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]

S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]

S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]

S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-10-18 208536]

S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x]

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-19 2253120]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]

S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [x]

S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2011-03-25 539248]

S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x]

S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x]

S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x]

S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x]

S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]

S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x]

S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]

S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]

S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x]

S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]

S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x]

S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*Deregistered* - CLKMDRV10_9EC60124

*Deregistered* - mfeavfk01

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]

@="{C5994560-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]

@="{C5994561-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]

@="{C5994562-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]

@="{C5994563-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]

@="{C5994564-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]

@="{C5994565-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]

@="{C5994566-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]

@="{C5994567-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]

@="{C5994568-53D9-4125-87C9-F193FC689CB2}"

[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]

2010-03-21 06:55        99080        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-08 6560360]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-01-04 167960]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-01-04 391704]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-01-04 418328]

"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]

"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224]

"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]

"QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2011-01-25 4479648]

"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]

"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-01-07 2328944]

"combofix"="c:\combofix\CF17644.3XE" [2010-11-20 345088]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x1

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe

LSP: c:\program files (x86)\VMware\VMware Player\vsocklib.dll

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{D91BEF26-4787-4BAE-BB9C-F2AFD4FB2C70}: NameServer = 192.168.0.1

FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\y96uohb3.default\

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

Wow6432Node-HKCU-Run-NetLimiter - c:\program files\NetLimiter 3\NLClientApp.exe

Toolbar-Locked - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

HKLM-Run-RtHDVBg - c:\program files\Realtek\Audio\HDA\RAVBg64.exe

AddRemove-{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} - c:\program files\Realtek\Audio\HDA\RtlUpd64.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Juniper Networks\Common Files\dsNcService.exe

c:\windows\SysWOW64\vmnat.exe

c:\program files (x86)\VMware\VMware Player\vmware-authd.exe

c:\windows\SysWOW64\vmnetdhcp.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2012-01-19  17:28:56 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2012-01-19 16:28

.

Vor Suchlauf: 15 Verzeichnis(se), 474.160.631.808 Bytes frei

Nach Suchlauf: 20 Verzeichnis(se), 473.422.991.360 Bytes frei

.

- - End Of File - - 56957F6B3752DE86161D555BBB515A0D

Gruß
tissi

hi

malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Und hier das Log von Malwarebytes:

Code:

Malwarebytes Anti-Malware 1.60.0.1800

www.malwarebytes.org
 

Datenbank Version: v2012.01.19.03
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

*** :: NOTEBOOKC [Administrator]
 

19.01.2012 17:49:00

mbam-log-2012-01-19 (17-49-00).txt
 

Art des Suchlaufs: Vollständiger Suchlauf

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 389548

Laufzeit: 42 Minute(n), 15 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 1

C:\Spiele\AgeOfEmpires2\Downloads\w7ddpatcher.exe (HackTool.Patch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

lade den CCleaner standard:
CCleaner Download - CCleaner 3.14.1616
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Bittesehr:

Code:

AccelerometerP11        STMicroelectronics        13.03.2011                2.00.11.22        unbekannt

Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        13.03.2011        6,00MB        10.1.102.64        notwendig

Adobe Flash Player 11 Plugin 64-bit        Adobe Systems Incorporated        13.11.2011        6,00MB        11.1.102.55        notwendig

Adobe Reader X (10.1.2) MUI        Adobe Systems Incorporated        11.01.2012        477MB        10.1.2        notwendig

Advanced Audio FX Engine        Creative Technology Ltd        13.03.2011                1.12.05        notwendig

ANNO 1602                06.01.2012                1.05        notwendig

Blobby Volley 2.0 Version 0.9b                01.10.2011        3,58MB        unnötig

CCleaner        Piriform        18.01.2012                3.14        notwendig

Cinergy S USB V1.04.02.04                21.03.2011                1.04.02.04        unötig

ConTEXT v0.98.6        ConTEXT Project Ltd        20.04.2011        notwendig

CyberLink PowerDVD 9.6        CyberLink Corp.        13.03.2011                9.6.1.3522        unnötig

Dell DataSafe Local Backup        Dell        13.03.2011                9.4.47        unnötig

Dell DataSafe Online        Dell        13.03.2011        6,46MB        2.1.19634        unnötig

Dell Product Registration        Dell Inc.        13.03.2011                1.0.6        unnötig

Dell Support Center        Dell Inc.        13.03.2011                3.0.5621.01        notwendig

Dell Webcam Central        Creative Technology Ltd        13.03.2011                2.00.35        notwendig

Die Siedler II - Die nächste Generation                15.12.2011        unötig

ELSA LANconfig                06.08.2011        unnötig

ELSA LANmonitor                06.08.2011        unnötig

GIMP 2.6.11        The GIMP Team        06.04.2011        107,7MB        2.6.11        notwendig

Git version 1.7.8-preview20111206                20.12.2011        69,5MB        1.7.8-preview20111206        notwendig

ICQ7.4        ICQ        21.03.2011                7.4        notwendig

Intel(R) Control Center        Intel Corporation        14.03.2011                1.2.1.1007        unbekannt

Intel(R) Management Engine Components        Intel Corporation        14.03.2011                7.0.0.1144        unbekannt

Intel(R) Processor Graphics        Intel Corporation        14.03.2011                8.15.10.2272        unbekannt

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology        Intel Corporation        13.03.2011        88,0MB        1.0.0.0454        notwendig

Intel(R) PROSet/Wireless WiFi-Software        Intel Corporation        13.03.2011        142,9MB        14.00.1000        unbekannt

Java(TM) 6 Update 26        Oracle        12.07.2011        97,1MB        6.0.260        notwendig

Java(TM) 6 Update 27 (64-bit)        Oracle        15.10.2011        91,6MB        6.0.270        notwendig

Java(TM) SE Development Kit 6 Update 26 (64-bit)        Oracle        12.07.2011        147,2MB        1.6.0.260        notwendig

Java(TM) SE Development Kit 6 Update 27 (64-bit)        Oracle        15.10.2011        147,4MB        1.6.0.270        notwendig

Juniper Networks Network Connect 6.5.0        Juniper Networks        28.03.2011                6.5.0.14951        unnötig

Juniper Networks Network Connect 7.0.0        Juniper Networks        22.10.2011                7.0.0.18809        notwendig

Juniper Networks Setup Client        Juniper Networks        22.10.2011        0,78MB        2.2.5.10685        unbekannt

Juniper Networks Setup Client Activex Control        Juniper Networks        28.03.2011                2.1.1.1        unbekannt

Malwarebytes Anti-Malware Version 1.60.0.1800        Malwarebytes Corporation        18.01.2012        18,6MB        1.60.0.1800        notwendig

McAfee SecurityCenter        McAfee, Inc.        23.12.2011                11.0.649        notwendig

Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        21.03.2011        38,8MB        4.0.30319        notwendig

Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        21.03.2011        2,94MB        4.0.30319        notwendig

Microsoft Age of Empires II                22.06.2011        unnötig

Microsoft Age of Empires II: The Conquerors Expansion                22.06.2011        unnötig

Microsoft IntelliPoint 8.0        Microsoft        21.03.2011        38,0MB        8.01.249.0        notwendig

Microsoft Office Home and Student 2010        Microsoft Corporation        01.07.2011                14.0.6029.1000        notwendig

Microsoft Silverlight        Microsoft Corporation        11.10.2011        140,1MB        4.0.60831.0        notwendig

Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        13.03.2011        1,70MB        3.1.0000        notwendig

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        21.03.2011        0,25MB        8.0.50727.4053        notwendig

Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        14.06.2011        0,29MB        8.0.61001        notwendig

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570        Microsoft Corporation        12.04.2011        0,77MB        9.0.30729.5570        notwendig

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        12.04.2011        0,58MB        9.0.30729.5570        notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17        Microsoft Corporation        01.09.2011        0,25MB        9.0.30729        notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148        Microsoft Corporation        22.03.2011        0,76MB        9.0.30729.4148        notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161        Microsoft Corporation        14.06.2011        0,77MB        9.0.30729.6161        notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        22.03.2011        0,57MB        9.0.30729.4148        notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        14.06.2011        0,59MB        9.0.30729.6161        notwendig

MiKTeX 2.9        MiKTeX.org        03.08.2011                2.9        notwendig

Mozilla Firefox 7.0.1 (x86 de)        Mozilla        20.12.2011        32,7MB        7.0.1        notwendig

MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        21.03.2011        1,28MB        4.20.9870.0        notwendig

MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        21.03.2011        1,33MB        4.20.9876.0        notwendig

NVIDIA CUDA Toolkit v4.1 (64 bit)        NVIDIA Corporation        12.01.2012        956MB        4.1.21.0        unnötig

NVIDIA Grafiktreiber 285.86        NVIDIA Corporation        12.01.2012                285.86        notwendig

NVIDIA HD-Audiotreiber 1.1.13.1        NVIDIA Corporation        17.12.2011                1.1.13.1        notwendig

Opera 11.60        Opera Software ASA        08.12.2011                11.60.1185        notwendig

QtSpim        Larus-Stone        22.05.2011        47,0MB        9.0.1        notwendig

Quickset64        Dell Inc.        13.03.2011                11.0.10        notwendig

Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        13.03.2011                6.0.1.6263        notwendig

Revo Uninstaller 1.91        VS Revo Group        21.03.2011                1.91        notwendig

Roxio Creator Starter        Roxio        13.03.2011        1.485MB        12.1.40.0        notwendig

Runes of Magic        Frogster Online Gaming GmbH        28.07.2011                4.0.0.2360        notwendig

ScrollDemo        The Java(tm) Tutorial        16.07.2011        unbekannt

Spellforce 2 Gold        JoWooD Productions Software AG        24.03.2011                1.00.0000        notwendig

StarCraft II        Blizzard Entertainment        06.01.2012                1.4.2.20141        notwendig

Synaptics Pointing Device Driver        Synaptics Incorporated        13.03.2011        46,4MB        15.1.15.0        notwendig

TeamSpeak 3 Client        TeamSpeak Systems GmbH        11.09.2011        unnötig

TerraTec Home Cinema                22.03.2011                6.15.11        unnötig

TeXnicCenter Version 1.0 Stable RC1        TeXnicCenter.org        03.08.2011                Version 1.0 Stable RC1        notwendig

TortoiseSVN 1.6.15.21042 (64 bit)        TortoiseSVN        20.04.2011        22,1MB        1.6.21042        notwendig

VMware Player        VMware, Inc        23.05.2011        391MB        3.1.4.16648        notwendig

Windows Live Essentials        Microsoft Corporation        14.09.2011                15.4.3538.0513        notwendig

Windows Live Mesh ActiveX control for remote connections        Microsoft Corporation        13.03.2011        5,58MB        15.4.5722.2        notwendig

WinRAR 4.00 (64-Bit)        win.rar GmbH        22.03.2011                4.00.0        notwendig

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0        Intel        13.03.2011                2.1.23.0        notwendig

Gruß
tissi

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
Blobby
Cinergy
CyberLink
Dell DataSafe Local
Dell DataSafe Online
Die Siedler
ELSA beide
Java alle
Download der kostenlosen Java-Software
downloade java jre instaliere es
firefox update:
Webbrowser Firefox auf Deutsch | Schneller, sicherer und anpassbar
aber ich würde auf ff verzichten und auf opera umsteigen. sag mir mal welchen browser du nutzt das müsste ich für folgende anleitungen wissen

deinstaliere:
ScrollDemo
TeamSpeak
TerraTec

öffne otl, klicke bereinigen, remover werden nach neustart gelöscht.
öffne ccleaner, analysieren bereinigen.
neustarten testen ob alles läuft wie gewünscht