Crazyiwan@gmx.de | 31.01.2012 21:27 | OTL Logfile: Code:
OTL logfile created on: 1/31/2012 10:03:08 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Windows 7 Home Premium (Version = 6.1.7600) - Type = System
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\windows | %ProgramFiles% = D:\Program Files
Drive C: | 100.00 Mb Total Space | 75.74 Mb Free Space | 75.75% Space Free | Partition Type: NTFS
Drive D: | 141.49 Gb Total Space | 13.40 Gb Free Space | 9.47% Space Free | Partition Type: NTFS
Drive E: | 141.50 Gb Total Space | 139.37 Gb Free Space | 98.49% Space Free | Partition Type: NTFS
Drive F: | 1011.61 Mb Total Space | 204.25 Mb Free Space | 20.19% Space Free | Partition Type: FAT
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
========== Win32 Services (SafeList) ==========
SRV - [2011/04/27 06:38:00 | 000,085,976 | ---- | M] () [Auto] -- D:\Program Files\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe -- (SENADB)
SRV - [2011/04/15 04:43:20 | 002,280,312 | ---- | M] (TeamViewer GmbH) [Auto] -- D:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/10/01 06:27:22 | 000,632,792 | ---- | M] (PC Tools) [Auto] -- D:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/05/24 04:39:30 | 000,435,016 | ---- | M] (TuneUp Software) [On_Demand] -- D:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010/05/07 09:38:14 | 001,051,976 | ---- | M] (TuneUp Software) [Auto] -- D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010/05/07 09:34:32 | 000,030,024 | ---- | M] (TuneUp Software) [Auto] -- D:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009/07/21 06:34:28 | 000,185,089 | ---- | M] (Avira GmbH) [Auto] -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009/07/13 20:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 20:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/05/13 08:48:18 | 000,108,289 | ---- | M] (Avira GmbH) [Auto] -- D:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
========== Driver Services (SafeList) ==========
DRV - [2010/02/25 04:18:08 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand] -- D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009/11/25 04:19:02 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto] -- D:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/11/06 15:53:58 | 001,227,776 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009/09/28 04:22:00 | 000,315,392 | ---- | M] () [Kernel | On_Demand] -- D:\Windows\System32\drivers\yk62x86.sys -- (yukonw7)
DRV - [2009/07/13 18:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/10 08:44:52 | 000,122,880 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R)
DRV - [2009/05/11 02:12:20 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/05/01 09:41:06 | 000,384,896 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\CryptOSD.sys -- (CryptOSD)
DRV - [2009/03/30 02:33:03 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2009/02/13 04:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=wbst&s={searchTerms}&f=4
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Dominique_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
IE - HKU\Dominique_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/
IE - HKU\Dominique_ON_D\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\Dominique_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Dominique_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: D:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: D:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
[2011/03/29 13:50:01 | 000,002,047 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
O1 HOSTS File: ([2009/06/10 16:39:37 | 000,000,824 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - D:\Program Files\facemoods.com\facemoods\1.4.17.4\bh\facemoods.dll (facemoods.com BHO)
O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - D:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoodsTlbr.dll (facemoods.com)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [APLangApp] D:\Program Files\AnyPC Client\APLangApp.exe (DoctorSoft)
O4 - HKLM..\Run: [APSDaemon] D:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CLMLServer] D:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DivXUpdate] D:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [DocuPrint M1400 RUN] D:\Program Files\EPSON_P2B\Printer Software\Status Monitor\seksmRun.exe ()
O4 - HKLM..\Run: [facemoods] D:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoodssrv.exe (facemoods.com)
O4 - HKLM..\Run: [LauncherM1400] File not found
O4 - HKLM..\Run: [PDVD8LanguageShortcut] D:\Program Files\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl8] D:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SSDMonitor] D:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools)
O4 - HKLM..\Run: [StatusAutoRunM1400] File not found
O4 - HKLM..\Run: [UpdateLBPShortCut] D:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] D:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDRShortCut] D:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePPShortCut] D:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] D:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKU\Dominique_ON_D..\Run: [ICQ] D:\Program Files\ICQ7.0\ICQ.exe (ICQ, LLC.)
O4 - HKU\Dominique_ON_D..\Run: [lXqWHCv751wPGeH] D:\Users\Dominique\AppData\Roaming\ahy54u5rt.exe ()
O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: D:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ()
O4 - Startup: D:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - D:\Program Files\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - D:\Program Files\ICQ7.0\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - D:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKU\Dominique_ON_D Winlogon: Shell - (C:\Users\Dominique\AppData\Roaming\ahy54u5rt.exe) - D:\Users\Dominique\AppData\Roaming\ahy54u5rt.exe ()
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: UxTuneUp - D:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
========== Files/Folders - Created Within 30 Days ==========
[2012/01/29 15:57:43 | 000,134,144 | ---- | C] (Корпорация Майкрософт) -- D:\Users\Dominique\AppData\Roaming\dwlGina3.dll
[2012/01/18 02:47:03 | 001,037,312 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\lsasrv.dll
[2012/01/18 02:47:02 | 000,314,368 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\webio.dll
[2012/01/18 02:47:02 | 000,015,360 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\sspisrv.dll
[2012/01/16 13:56:53 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Roaming\OpenOffice.org
[2012/01/16 13:56:28 | 000,000,000 | --SD | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2012/01/16 13:55:19 | 000,000,000 | ---D | C] -- D:\Program Files\OpenOffice.org 3
[2012/01/16 13:54:50 | 000,000,000 | ---D | C] -- D:\ProgramData\Sun
[2012/01/16 13:54:49 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Java
[2012/01/16 13:54:34 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- D:\windows\System32\deployJava1.dll
[2012/01/16 13:54:34 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- D:\windows\System32\javaws.exe
[2012/01/16 13:54:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- D:\windows\System32\javaw.exe
[2012/01/16 13:54:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- D:\windows\System32\java.exe
[2012/01/16 13:54:17 | 000,000,000 | ---D | C] -- D:\Program Files\Java
[2012/01/16 13:52:26 | 000,000,000 | ---D | C] -- D:\Users\Dominique\Documents\OpenOffice.org 3.3 (de) Installation Files
[2012/01/11 11:48:50 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{1F1CAFDB-97BE-462F-AC7A-C94B3463EA97}
[2012/01/11 11:48:29 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{8B6C5452-5673-4D58-88BD-878E72B03160}
[2012/01/11 11:42:10 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{154894CF-67B4-42C8-B140-8D3D2BABE480}
[2012/01/11 11:41:57 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{27476A01-EA3E-44B1-AA9E-7242778140FE}
[2012/01/11 02:24:41 | 000,716,800 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\jscript.dll
[2012/01/11 02:24:39 | 000,067,072 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\packager.dll
[2012/01/11 02:24:38 | 001,328,640 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\quartz.dll
[2012/01/11 02:24:38 | 000,514,560 | ---- | C] (Microsoft Corporation) -- D:\windows\System32\qdvd.dll
[2012/01/10 16:27:33 | 000,000,000 | ---D | C] -- D:\Users\Dominique\Desktop\VORLAGEN BEWERBUNG
[2012/01/10 06:16:01 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{5F3A77B6-2D8A-4ACE-AB82-652139B82308}
[2012/01/10 06:15:47 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{FD3D29B9-14CA-4C09-8B7F-1C11A1204F1D}
[2012/01/09 07:04:02 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2012/01/09 07:03:39 | 000,682,496 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\windows\System32\sehr4aCL.DLL
[2012/01/09 07:03:39 | 000,244,224 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\windows\System32\sehr4aFM.DLL
[2012/01/09 07:03:20 | 000,000,000 | ---D | C] -- D:\Program Files\EPSON_P2B
[2012/01/09 07:02:53 | 000,000,000 | -H-D | C] -- D:\GrandeDevice
[2012/01/09 07:01:21 | 000,215,552 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\windows\System32\sehr4ausb.dll
[2012/01/04 07:10:20 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{D676847F-EF54-436F-AB4C-E8B4AEC599BF}
[2012/01/04 07:10:08 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{55668B85-4992-4364-A766-9F4805EE2FFB}
[2012/01/03 18:26:03 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{C92759E9-13A6-48F6-856C-8774CEA2BC97}
[2012/01/03 18:25:15 | 000,000,000 | ---D | C] -- D:\Users\Dominique\AppData\Local\{01AB72FE-4001-41AF-8398-0029756E6B32}
[2010/08/25 12:59:08 | 000,004,096 | ---- | C] ( ) -- D:\windows\System32\IGFXDEVLib.dll
========== Files - Modified Within 30 Days ==========
[2012/01/30 06:03:19 | 000,067,584 | --S- | M] () -- D:\windows\bootstat.dat
[2012/01/30 06:03:15 | 000,014,512 | -H-- | M] () -- D:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/30 06:03:15 | 000,014,512 | -H-- | M] () -- D:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/30 06:00:11 | 000,001,100 | ---- | M] () -- D:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/01/30 05:59:53 | 2384,941,056 | -HS- | M] () -- D:\hiberfil.sys
[2012/01/29 15:57:43 | 000,134,144 | ---- | M] (Корпорация Майкрософт) -- D:\Users\Dominique\AppData\Roaming\dwlGina3.dll
[2012/01/29 15:53:46 | 000,651,264 | ---- | M] () -- D:\Users\Dominique\AppData\Roaming\ahy54u5rt.exe
[2012/01/29 15:06:14 | 000,001,104 | ---- | M] () -- D:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/01/29 14:16:16 | 000,000,262 | ---- | M] () -- D:\windows\tasks\RMSchedule.job
[2012/01/29 11:18:49 | 000,654,166 | ---- | M] () -- D:\windows\System32\perfh007.dat
[2012/01/29 11:18:49 | 000,616,008 | ---- | M] () -- D:\windows\System32\perfh009.dat
[2012/01/29 11:18:49 | 000,130,006 | ---- | M] () -- D:\windows\System32\perfc007.dat
[2012/01/29 11:18:49 | 000,106,388 | ---- | M] () -- D:\windows\System32\perfc009.dat
[2012/01/29 08:52:43 | 000,000,444 | -H-- | M] () -- D:\windows\tasks\Norton Security Scan for Dominique.job
[2012/01/17 02:57:12 | 000,370,608 | ---- | M] () -- D:\windows\System32\FNTCACHE.DAT
[2012/01/16 13:57:46 | 000,001,197 | ---- | M] () -- D:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
[2012/01/16 13:56:43 | 000,000,000 | --SD | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2012/01/16 13:56:28 | 000,001,082 | ---- | M] () -- D:\Users\Dominique\Documents\OpenOffice.org 3.3.lnk
[2012/01/16 13:54:19 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- D:\windows\System32\deployJava1.dll
[2012/01/16 13:54:19 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- D:\windows\System32\javaws.exe
[2012/01/16 13:54:19 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- D:\windows\System32\javaw.exe
[2012/01/16 13:54:19 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- D:\windows\System32\java.exe
[2012/01/16 13:32:04 | 168,166,968 | ---- | M] () -- D:\Users\Dominique\Documents\OOo_3.3.0_Win_x86_install-wJRE_de.exe
[2012/01/09 07:04:02 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
========== Files Created - No Company Name ==========
[2012/01/29 15:54:10 | 000,651,264 | ---- | C] () -- D:\Users\Dominique\AppData\Roaming\ahy54u5rt.exe
[2012/01/16 13:57:46 | 000,001,197 | ---- | C] () -- D:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
[2012/01/16 13:56:28 | 000,001,082 | ---- | C] () -- D:\Users\Dominique\Documents\OpenOffice.org 3.3.lnk
[2012/01/16 13:32:00 | 168,166,968 | ---- | C] () -- D:\Users\Dominique\Documents\OOo_3.3.0_Win_x86_install-wJRE_de.exe
[2012/01/09 07:01:21 | 000,019,456 | ---- | C] () -- D:\windows\System32\sehr4aLM.DLL
[2011/08/24 12:04:24 | 000,000,000 | ---- | C] () -- D:\Users\Dominique\AppData\Local\{8D626ADD-3039-45C4-9D24-BFD2CE707DAD}
[2011/06/20 05:36:36 | 000,037,336 | ---- | C] () -- D:\windows\System32\CleanMFT32.exe
[2011/02/16 02:24:38 | 000,001,520 | ---- | C] () -- D:\windows\System32\CommonSetting.ini
[2010/08/25 13:30:02 | 000,439,308 | ---- | C] () -- D:\windows\System32\igcompkrng500.bin
[2010/08/25 13:30:00 | 000,982,240 | ---- | C] () -- D:\windows\System32\igkrng500.bin
[2010/08/25 13:30:00 | 000,092,356 | ---- | C] () -- D:\windows\System32\igfcg500m.bin
[2010/08/25 12:57:00 | 000,000,151 | ---- | C] () -- D:\windows\System32\GfxUI.exe.config
[2010/08/25 12:52:00 | 000,208,896 | ---- | C] () -- D:\windows\System32\iglhsip32.dll
[2010/08/25 12:52:00 | 000,143,360 | ---- | C] () -- D:\windows\System32\iglhcp32.dll
[2010/03/13 11:51:07 | 000,000,002 | ---- | C] () -- D:\windows\HotFixList.ini
[2010/03/13 11:36:47 | 000,131,368 | ---- | C] () -- D:\ProgramData\FullRemove.exe
[2010/03/13 04:15:54 | 000,000,812 | ---- | C] () -- D:\windows\System32\drivers\scdskr01.dat
[2010/03/13 04:15:54 | 000,000,541 | ---- | C] () -- D:\windows\System32\drivers\scdhkr01.dat
[2010/03/13 04:15:54 | 000,000,500 | ---- | C] () -- D:\windows\System32\drivers\RSTable.dat
[2010/03/13 04:15:54 | 000,000,036 | ---- | C] () -- D:\windows\System32\drivers\scdstr01.dat
[2009/12/05 15:22:03 | 000,654,166 | ---- | C] () -- D:\windows\System32\perfh007.dat
[2009/12/05 15:22:03 | 000,295,922 | ---- | C] () -- D:\windows\System32\perfi007.dat
[2009/12/05 15:22:03 | 000,130,006 | ---- | C] () -- D:\windows\System32\perfc007.dat
[2009/12/05 15:22:03 | 000,038,104 | ---- | C] () -- D:\windows\System32\perfd007.dat
[2009/12/05 15:01:49 | 000,004,608 | ---- | C] () -- D:\windows\System32\HdmiCoin.dll
[2009/12/05 15:01:47 | 000,134,592 | ---- | C] () -- D:\windows\System32\igfcg500.bin
[2009/12/04 22:17:31 | 000,307,200 | ---- | C] () -- D:\windows\SetDisplayResolution.exe
[2009/07/13 23:57:37 | 000,067,584 | --S- | C] () -- D:\windows\bootstat.dat
[2009/07/13 23:33:53 | 000,370,608 | ---- | C] () -- D:\windows\System32\FNTCACHE.DAT
[2009/07/13 21:05:48 | 000,616,008 | ---- | C] () -- D:\windows\System32\perfh009.dat
[2009/07/13 21:05:48 | 000,291,294 | ---- | C] () -- D:\windows\System32\perfi009.dat
[2009/07/13 21:05:48 | 000,106,388 | ---- | C] () -- D:\windows\System32\perfc009.dat
[2009/07/13 21:05:48 | 000,031,548 | ---- | C] () -- D:\windows\System32\perfd009.dat
[2009/07/13 21:05:05 | 000,000,741 | ---- | C] () -- D:\windows\System32\NOISE.DAT
[2009/07/13 21:04:11 | 000,215,943 | ---- | C] () -- D:\windows\System32\dssec.dat
[2009/07/13 19:02:54 | 000,245,248 | ---- | C] () -- D:\windows\System32\DShowRdpFilter.dll
[2009/07/13 18:55:01 | 000,043,131 | ---- | C] () -- D:\windows\mib.bin
[2009/07/13 18:51:43 | 000,073,728 | ---- | C] () -- D:\windows\System32\BthpanContextHandler.dll
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- D:\windows\System32\BWContextHandler.dll
[2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- D:\windows\System32\mlang.dat
[2009/05/01 10:24:14 | 000,000,184 | ---- | C] () -- D:\windows\System32\drivers\osdauth.dat
[2009/05/01 09:41:06 | 000,000,020 | ---- | C] () -- D:\windows\System32\drivers\OSDSig.dat
========== LOP Check ==========
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2010/03/12 16:40:07 | 000,000,000 | ---D | M] -- D:\ProgramData\ICQ
[2010/03/13 03:22:26 | 000,000,000 | ---D | M] -- D:\ProgramData\Partner
[2010/05/24 04:29:33 | 000,000,000 | ---D | M] -- D:\ProgramData\PlayFirst
[2009/12/04 22:18:15 | 000,000,000 | ---D | M] -- D:\ProgramData\SAMSUNG
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2012/01/29 14:36:02 | 000,000,000 | ---D | M] -- D:\ProgramData\Temp
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2010/05/24 04:39:17 | 000,000,000 | ---D | M] -- D:\ProgramData\TuneUp Software
[2010/03/13 21:10:47 | 000,000,000 | ---D | M] -- D:\ProgramData\WinClon
[2010/04/15 13:35:46 | 000,000,000 | ---D | M] -- D:\ProgramData\WinZip
[2010/11/29 14:12:46 | 000,000,000 | ---D | M] -- D:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/05/24 04:39:02 | 000,000,000 | -HSD | M] -- D:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2012/01/29 14:16:16 | 000,000,262 | ---- | M] () -- D:\windows\Tasks\RMSchedule.job
[2011/12/08 14:03:08 | 000,032,640 | ---- | M] () -- D:\windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%. >
< %PROGRAMFILES%.exe >
Invalid Environment Variable: %LOCALAPPDATA%.exe
< %systemroot%. mp s >
< md5start >
< userinit.exe >
< eventlog.dll >
< scecli.dll >
< netlogon.dll >
< cngaudit.dll >
< ws2ifsl.sys >
< sceclt.dll >
< ntelogon.dll >
< winlogon.exe >
< logevent.dll >
< user32.DLL >
< explorer.exe >
< iaStor.sys >
< nvstor.sys >
< atapi.sys >
< IdeChnDr.sys >
< viasraid.sys >
< AGP440.sys >
< vaxscsi.sys >
< nvatabus.sys >
< viamraid.sys >
< nvata.sys >
< nvgts.sys >
< iastorv.sys >
< ViPrt.sys >
< eNetHook.dll >
< ahcix86.sys >
< KR10N.sys >
< nvstor32.sys >
< ahcix86s.sys >
< md5stop >
< %systemroot%system32drivers.sys lockedfiles >
< %systemroot%System32config.sav >
< %systemroot%system32.dll lockedfiles >
Invalid Environment Variable: %USERPROFILE%.
Invalid Environment Variable: %USERPROFILE%Local SettingsTemp.exe
Invalid Environment Variable: %USERPROFILE%Local SettingsTemp.dll
Invalid Environment Variable: %USERPROFILE%Application Data.exe
========== Alternate Data Streams ==========
@Alternate Data Stream - 130 bytes -> D:\ProgramData\Temp:ABE89FFE
@Alternate Data Stream - 107 bytes -> D:\ProgramData\Temp:D1B5B4F1
< End of report > --- --- --- |