Code:
OTL logfile created on: 1/13/2013 9:44:07 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files
Drive C: | 69.52 Gb Total Space | 67.88 Gb Free Space | 97.65% Space Free | Partition Type: NTFS
Drive D: | 69.77 Gb Total Space | 9.86 Gb Free Space | 14.14% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand] -- -- (TFDQZCJT)
SRV - File not found [On_Demand] -- -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - File not found [On_Demand] -- -- (QYMHBM)
SRV - File not found [Auto] -- -- (Nero BackItUp Scheduler 4.0)
SRV - [2012/12/23 11:27:49 | 000,199,544 | ---- | M] (Корпорация Майкрософт) [Auto] -- D:\Users\miKkii\wgsdgsdgdsgsd.exe -- (Winmgmt)
SRV - [2012/12/12 05:18:16 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- D:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/11/29 14:31:04 | 000,038,608 | ---- | M] () [Auto] -- D:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2012/11/28 16:27:16 | 000,711,112 | ---- | M] () [Auto] -- D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0)
SRV - [2012/09/29 13:54:26 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto] -- D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/09/29 13:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto] -- D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/08/12 21:24:48 | 005,167,736 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- D:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/07/27 15:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto] -- D:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/02/13 21:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- D:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2012/01/18 07:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand] -- D:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011/02/28 12:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand] -- D:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 04:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2009/07/13 16:18:12 | 000,071,096 | ---- | M] () [Auto] -- D:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2008/01/20 21:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/12/10 03:23:02 | 000,024,576 | ---- | M] () [Auto] -- D:\Acer\Empowering Technology\eSettings\Service\capuserv.exe -- (eSettingsService)
SRV - [2007/09/10 08:28:18 | 000,057,344 | ---- | M] (Acer Inc.) [Auto] -- D:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe -- (eRecoveryService)
SRV - [2007/06/05 06:20:32 | 000,177,704 | ---- | M] () [Auto] -- D:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
SRV - [2007/05/22 08:00:02 | 000,135,168 | ---- | M] (Acer Inc.) [Auto] -- D:\Acer\Empowering Technology\eNet\eNet Service.exe -- (eNet Service)
SRV - [2007/05/16 15:15:22 | 000,163,840 | ---- | M] (acer) [Auto] -- D:\Acer\Empowering Technology\ePower\ePowerSvc.exe -- (WMIService)
SRV - [2007/04/25 09:34:30 | 000,457,512 | ---- | M] (HiTRSUT) [Auto] -- D:\Acer\Empowering Technology\eDataSecurity\eDSService.exe -- (eDataSecurity Service)
SRV - [2007/03/14 03:52:30 | 000,024,576 | ---- | M] (Acer Inc.) [Auto] -- D:\Acer\Empowering Technology\eLock\Service\eLockServ.exe -- (eLockService)
SRV - [2006/11/24 05:57:54 | 000,107,008 | ---- | M] () [Auto] -- D:\Acer\Mobility Center\MobilityService.exe -- (MobilityService)
SRV - [2006/10/04 22:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto] -- D:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2005/07/29 08:07:10 | 001,314,816 | ---- | M] (Avocent Inc.) [Auto] -- D:\Acer\Empowering Technology\admServ.exe -- (AWService)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (USBModem)
DRV - File not found [Kernel | On_Demand] -- -- (UsbDiag)
DRV - File not found [Kernel | On_Demand] -- -- (usbbus)
DRV - File not found [Kernel | Boot] -- -- (TfSysMon)
DRV - File not found [Kernel | On_Demand] -- -- (TfNetMon)
DRV - File not found [Kernel | Boot] -- -- (TfFsMon)
DRV - File not found [Kernel | On_Demand] -- -- (pctplsg)
DRV - File not found [Kernel | On_Demand] -- -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand] -- -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand] -- -- (IpInIp)
DRV - File not found [Kernel | On_Demand] -- -- (catchme)
DRV - [2012/11/28 16:27:18 | 000,026,984 | ---- | M] (AVG Technologies) [Kernel | System] -- D:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012/09/29 13:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- D:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/09/19 04:02:06 | 000,083,168 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV - [2012/08/24 09:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- D:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/07/25 21:21:30 | 000,237,408 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- D:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/04/18 21:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot] -- D:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/01/30 21:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- D:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2012/01/02 07:53:23 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2012/01/02 07:53:23 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ggflt.sys -- (ggflt)
DRV - [2011/12/23 06:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System] -- D:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/12/23 06:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand] -- D:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011/12/23 06:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand] -- D:\Windows\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011/12/23 06:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand] -- D:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2008/04/18 19:29:00 | 000,894,976 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\athrusb.sys -- (athrusb)
DRV - [2007/11/30 08:51:34 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto] -- D:\Windows\System32\drivers\int15.sys -- (int15)
DRV - [2007/11/06 15:22:06 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand] -- D:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2007/10/01 08:21:08 | 001,129,344 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand] -- D:\Windows\System32\drivers\HCW85BDA.sys -- (HCW85BDA)
DRV - [2007/07/30 15:13:10 | 000,743,424 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2007/03/09 00:56:04 | 001,163,616 | ---- | M] (Agere Systems) [Kernel | On_Demand] -- D:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005/07/19 07:15:14 | 000,011,978 | ---- | M] (OSA Technologies) [Kernel | System] -- D:\Windows\System32\drivers\OsaFsLoc.sys -- (OsaFsLoc)
DRV - [2005/06/30 09:58:24 | 000,007,296 | ---- | M] (OSA Technologies, An Avocent Company) [Kernel | Auto] -- D:\Windows\System32\drivers\osaio.sys -- (osaio)
DRV - [2005/05/02 05:13:42 | 000,009,600 | ---- | M] () [Kernel | On_Demand] -- D:\Windows\System32\drivers\NETMNT.sys -- (NETMNT)
DRV - [2005/01/14 08:57:16 | 000,004,010 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto] -- D:\Windows\System32\drivers\osanbm.sys -- (osanbm)
DRV - [2004/06/07 11:32:34 | 000,005,035 | ---- | M] (OSA Technologies) [Kernel | On_Demand] -- D:\Windows\System32\drivers\NdisFilt.sys -- (NdisFilt)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.thebflix.com
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\miKkii_ON_D\Software\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\miKkii\MUSIK
IE - HKU\miKkii_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.live.com [binary data]
IE - HKU\miKkii_ON_D\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\miKkii_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\miKkii_ON_D\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\miKkii_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\miKkii_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\NetworkService_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\Windows\System32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: D:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: D:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: D:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: D:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: D:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: D:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: D:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: D:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/12/22 18:45:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/11/03 02:33:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2012/12/23 10:49:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/12/05 12:35:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/12/23 10:48:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
[2012/03/29 15:23:49 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions
[2009/06/18 15:42:43 | 000,000,000 | ---D | M] ("searchme") -- D:\Program Files\Mozilla Firefox\extensions\searchme@searchme.com
[2012/03/12 23:38:06 | 000,097,208 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/02/20 05:25:21 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/12/23 10:48:29 | 000,124,056 | ---- | M] (RealPlayer) -- D:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2012/03/13 00:23:34 | 000,001,392 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/03/13 00:06:36 | 000,002,252 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/03/13 00:23:34 | 000,001,153 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012/03/13 00:23:34 | 000,006,805 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2009/03/13 04:39:56 | 000,002,494 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\searchme.xml
[2012/03/13 00:23:34 | 000,001,178 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/03/13 00:23:34 | 000,001,105 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2012/12/04 13:53:49 | 000,000,027 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - D:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - D:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - D:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - D:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\miKkii_ON_D\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - D:\Windows\System32\eDStoolbar.dll (HiTRUST)
O4 - HKLM..\Run: [APSDaemon] D:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AutoEJCD_0ACE20FF] D:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE ()
O4 - HKLM..\Run: [AVG_TRAY] D:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] D:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [eDataSecurity Loader] D:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe (HiTRUST)
O4 - HKLM..\Run: [HF_G_Jul] File not found
O4 - HKLM..\Run: [NeroFilterCheck] D:\Windows\System32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [TkBellExe] D:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Ulead AutoDetector v2] D:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)
O4 - HKLM..\Run: [vProt] File not found
O4 - HKU\miKkii_ON_D..\Run: [Sony PC Companion] D:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Sony)
O4 - HKU\miKkii_ON_D..\Run: [WindowsWelcomeCenter] D:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: Error locating startup folders.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\miKkii_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - D:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab (CeWe Color AG & Co. OHG Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab (Zylom Games Player)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldde-at.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: Microsoft XML Parser for Java file:///C:/Windows/Java/classes/xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.186.211.21 195.34.133.21
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - AppInit_DLLs: (C:\Windows\System32\eNetHook.dll) - D:\Windows\System32\eNetHook.dll (acer)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) - D:\Program Files\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/12/23 10:50:40 | 000,000,000 | ---D | C] -- D:\Users\miKkii\AppData\Roaming\RealNetworks
[2012/12/23 10:49:18 | 000,000,000 | ---D | C] -- D:\Program Files\RealNetworks
[2012/12/23 10:49:15 | 000,000,000 | ---D | C] -- D:\ProgramData\RealNetworks
[2012/12/23 10:49:01 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\xing shared
[2012/12/23 10:48:48 | 000,201,424 | ---- | C] (RealNetworks, Inc.) -- D:\Windows\System32\rmoc3260.dll
[2012/12/23 10:48:22 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- D:\Windows\System32\pndx5016.dll
[2012/12/23 10:48:22 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- D:\Windows\System32\pndx5032.dll
[2012/12/23 10:48:21 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2012/12/23 10:48:19 | 000,272,896 | ---- | C] (Progressive Networks) -- D:\Windows\System32\pncrt.dll
[2012/12/23 10:45:46 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/12/23 10:44:39 | 000,000,000 | ---D | C] -- D:\Program Files\Google
[2012/12/22 05:05:20 | 000,293,376 | ---- | C] (Adobe Systems Incorporated) -- D:\Windows\System32\atmfd.dll
[2012/12/22 05:05:20 | 000,034,304 | ---- | C] (Adobe Systems) -- D:\Windows\System32\atmlib.dll
[2012/12/21 04:21:18 | 000,176,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
[2012/12/21 04:21:17 | 000,065,024 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jsproxy.dll
[2012/12/21 04:21:16 | 000,607,744 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
[2012/12/20 07:22:28 | 002,382,848 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtml.tlb
[2012/12/20 07:22:27 | 000,420,864 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
[2012/12/20 07:22:26 | 000,142,848 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
[2012/12/20 07:22:25 | 000,717,824 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
[2012/12/20 07:22:24 | 001,800,704 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
[2012/12/20 07:22:24 | 000,231,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\url.dll
[2012/12/20 07:22:22 | 001,427,968 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
[2012/12/20 07:18:03 | 000,009,728 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\Wdfres.dll
[2012/12/20 07:17:49 | 000,016,896 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\winusb.dll
[2012/12/20 07:17:48 | 000,172,032 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFPlatform.dll
[2012/12/20 07:17:44 | 000,047,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\drivers\WdfLdr.sys
[2012/12/20 07:17:41 | 000,613,888 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFx.dll
[2012/12/20 07:17:41 | 000,038,912 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFCoinstaller.dll
[2009/06/24 06:32:45 | 000,047,360 | ---- | C] (VSO Software) -- D:\Users\miKkii\AppData\Roaming\pcouffin.sys
[2009/06/16 07:03:56 | 000,126,976 | ---- | C] ( ) -- D:\Windows\System32\Interop.SHDocVw.dll
[2009/04/06 05:25:09 | 000,016,384 | ---- | C] ( ) -- D:\Windows\System32\ClearEvent.exe
========== Files - Modified Within 30 Days ==========
[2013/01/13 15:09:10 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat
[2013/01/13 15:07:31 | 000,004,320 | ---- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/01/13 15:07:28 | 000,004,320 | ---- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/01/13 15:07:19 | 000,001,094 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/13 15:06:59 | 095,023,320 | ---- | M] () -- D:\ProgramData\dsgsdgdsgdsgw.pad
[2012/12/23 11:28:14 | 000,002,915 | ---- | M] () -- D:\ProgramData\dsgsdgdsgdsgw.js
[2012/12/23 11:28:14 | 000,000,886 | ---- | M] () -- D:\Users\miKkii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk
[2012/12/23 11:18:00 | 000,000,884 | ---- | M] () -- D:\Windows\tasks\Adobe Flash Player Updater.job
[2012/12/23 11:05:09 | 104,095,949 | ---- | M] () -- D:\Windows\System32\drivers\AVG\incavi.avm
[2012/12/23 10:57:37 | 000,001,098 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/12/23 10:57:34 | 000,001,971 | ---- | M] () -- D:\Users\Public\Desktop\Google Chrome.lnk
[2012/12/23 10:49:30 | 000,000,937 | ---- | M] () -- D:\Users\Public\Desktop\RealPlayer.lnk
[2012/12/23 10:49:21 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2012/12/23 10:48:48 | 000,201,424 | ---- | M] (RealNetworks, Inc.) -- D:\Windows\System32\rmoc3260.dll
[2012/12/23 10:48:23 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- D:\Windows\System32\pndx5032.dll
[2012/12/23 10:48:22 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- D:\Windows\System32\pndx5016.dll
[2012/12/23 10:48:19 | 000,272,896 | ---- | M] (Progressive Networks) -- D:\Windows\System32\pncrt.dll
[2012/12/23 10:45:47 | 000,001,955 | ---- | M] () -- D:\Users\miKkii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/12/23 10:45:46 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/12/22 14:13:40 | 000,000,560 | -H-- | M] () -- D:\Windows\tasks\Norton Security Scan for miKkii.job
[2012/12/22 12:39:52 | 000,175,092 | ---- | M] () -- D:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/12/22 05:35:42 | 001,478,888 | ---- | M] () -- D:\Windows\System32\FNTCACHE.DAT
[2012/12/20 07:12:27 | 000,727,908 | ---- | M] () -- D:\Windows\System32\perfh007.dat
[2012/12/20 07:12:27 | 000,640,436 | ---- | M] () -- D:\Windows\System32\perfh009.dat
[2012/12/20 07:12:27 | 000,190,710 | ---- | M] () -- D:\Windows\System32\perfc007.dat
[2012/12/20 07:12:27 | 000,132,062 | ---- | M] () -- D:\Windows\System32\perfc009.dat
[2012/12/16 08:12:54 | 000,034,304 | ---- | M] (Adobe Systems) -- D:\Windows\System32\atmlib.dll
[2012/12/16 05:50:29 | 000,293,376 | ---- | M] (Adobe Systems Incorporated) -- D:\Windows\System32\atmfd.dll
========== Files Created - No Company Name ==========
[2012/12/23 11:28:14 | 000,002,915 | ---- | C] () -- D:\ProgramData\dsgsdgdsgdsgw.js
[2012/12/23 11:28:14 | 000,000,886 | ---- | C] () -- D:\Users\miKkii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk
[2012/12/23 11:27:55 | 095,023,320 | ---- | C] () -- D:\ProgramData\dsgsdgdsgdsgw.pad
[2012/12/23 10:49:30 | 000,000,937 | ---- | C] () -- D:\Users\Public\Desktop\RealPlayer.lnk
[2012/12/23 10:45:47 | 000,001,971 | ---- | C] () -- D:\Users\Public\Desktop\Google Chrome.lnk
[2012/12/23 10:45:47 | 000,001,955 | ---- | C] () -- D:\Users\miKkii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/12/23 10:45:12 | 000,001,098 | ---- | C] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/12/23 10:45:09 | 000,001,094 | ---- | C] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/12/20 07:18:21 | 000,000,003 | ---- | C] () -- D:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012/12/20 07:18:21 | 000,000,003 | ---- | C] () -- D:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012/12/04 13:39:04 | 000,256,000 | ---- | C] () -- D:\Windows\PEV.exe
[2012/12/04 13:39:04 | 000,208,896 | ---- | C] () -- D:\Windows\MBR.exe
[2012/12/04 13:39:04 | 000,098,816 | ---- | C] () -- D:\Windows\sed.exe
[2012/12/04 13:39:04 | 000,080,412 | ---- | C] () -- D:\Windows\grep.exe
[2012/12/04 13:39:04 | 000,068,096 | ---- | C] () -- D:\Windows\zip.exe
[2011/11/27 14:51:25 | 000,044,544 | ---- | C] () -- D:\Windows\System32\Gif89.dll
[2010/08/29 09:49:15 | 000,002,560 | ---- | C] () -- D:\Windows\_MSRSTRT.EXE
[2010/03/12 12:55:35 | 000,819,200 | ---- | C] () -- D:\Windows\System32\xvidcore.dll
[2010/03/12 12:55:35 | 000,180,224 | ---- | C] () -- D:\Windows\System32\xvidvfw.dll
[2009/11/01 06:29:17 | 000,149,504 | ---- | C] () -- D:\Windows\System32\UNWISE.EXE
[2009/11/01 06:28:31 | 000,065,536 | ---- | C] () -- D:\Windows\System32\dmcrypto.dll
[2009/11/01 06:26:10 | 000,000,135 | ---- | C] () -- D:\Windows\ODBC.INI
[2009/11/01 06:26:09 | 000,000,209 | ---- | C] () -- D:\Windows\ODBCINST.INI
[2009/11/01 06:26:06 | 000,163,840 | ---- | C] () -- D:\Windows\System32\hcwChDB.dll
[2009/11/01 06:25:06 | 000,006,568 | ---- | C] () -- D:\Windows\HCWPNP.INI
[2009/11/01 06:22:59 | 000,066,048 | ---- | C] () -- D:\Windows\System32\hcwxds.dll
[2009/10/25 13:57:46 | 000,107,612 | ---- | C] () -- D:\Windows\System32\StructuredQuerySchema.bin
[2009/10/25 13:57:45 | 000,117,248 | ---- | C] () -- D:\Windows\System32\EhStorAuthn.dll
[2009/07/23 08:08:32 | 000,000,039 | ---- | C] () -- D:\Windows\Irremote.ini
[2009/06/26 14:38:17 | 000,027,648 | ---- | C] () -- D:\Windows\System32\AVSredirect.dll
[2009/06/24 06:32:45 | 000,007,887 | ---- | C] () -- D:\Users\miKkii\AppData\Roaming\pcouffin.cat
[2009/06/24 06:32:45 | 000,001,144 | ---- | C] () -- D:\Users\miKkii\AppData\Roaming\pcouffin.inf
[2009/06/16 07:03:58 | 000,053,248 | ---- | C] () -- D:\Windows\System32\dossec.dll
[2009/06/09 04:25:37 | 000,001,024 | RH-- | C] () -- D:\Windows\System32\NTIMPEG2.dll
[2009/06/09 04:25:37 | 000,001,024 | RH-- | C] () -- D:\Windows\System32\NTIMP3.dll
[2009/06/09 04:25:37 | 000,001,024 | RH-- | C] () -- D:\Windows\System32\NTICDMK7.dll
[2009/05/15 10:58:33 | 000,000,000 | ---- | C] () -- D:\Windows\nsreg.dat
[2009/05/04 11:06:12 | 000,006,550 | ---- | C] () -- D:\Windows\jautoexp.dat
[2009/05/03 10:55:21 | 000,000,501 | ---- | C] () -- D:\Windows\ulead32.ini
[2009/04/06 12:12:47 | 000,018,904 | ---- | C] () -- D:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/04/06 05:38:47 | 000,015,656 | ---- | C] () -- D:\Windows\System32\drivers\int15_64.sys
[2009/04/06 05:30:41 | 000,065,536 | ---- | C] () -- D:\Windows\System32\NATTraversal.dll
[2009/04/06 05:25:09 | 000,016,384 | ---- | C] () -- D:\Windows\System32\LauncheRyAgentUser.exe
[2009/04/03 13:07:12 | 000,024,576 | ---- | C] () -- D:\Windows\System32\PressCancel.exe
[2009/04/02 13:12:14 | 000,000,552 | ---- | C] () -- D:\Users\miKkii\AppData\Local\d3d8caps.dat
[2009/04/02 13:09:12 | 000,094,720 | ---- | C] () -- D:\Users\miKkii\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/04/02 13:03:28 | 000,001,356 | ---- | C] () -- D:\Users\miKkii\AppData\Local\d3d9caps.dat
[2008/06/25 10:34:00 | 001,953,696 | ---- | C] () -- D:\Windows\System32\igklg400.dll
[2008/06/25 10:34:00 | 001,533,360 | ---- | C] () -- D:\Windows\System32\igklg450.dll
[2008/06/25 10:34:00 | 000,147,456 | ---- | C] () -- D:\Windows\System32\igfxCoIn_v1409.dll
[2008/06/25 10:34:00 | 000,104,636 | ---- | C] () -- D:\Windows\System32\igmedcompkrn.dll
[2008/01/21 02:15:58 | 000,727,908 | ---- | C] () -- D:\Windows\System32\perfh007.dat
[2008/01/21 02:15:58 | 000,290,748 | ---- | C] () -- D:\Windows\System32\perfi007.dat
[2008/01/21 02:15:58 | 000,190,710 | ---- | C] () -- D:\Windows\System32\perfc007.dat
[2008/01/21 02:15:58 | 000,036,916 | ---- | C] () -- D:\Windows\System32\perfd007.dat
[2007/11/06 15:19:28 | 000,053,299 | ---- | C] () -- D:\Windows\System32\pthreadVC.dll
[2007/06/05 06:20:32 | 000,177,704 | ---- | C] () -- D:\Windows\System32\PSIService.exe
[2007/04/25 09:33:22 | 000,266,240 | ---- | C] () -- D:\Windows\System32\NotesExtmngr.dll
[2007/04/25 09:32:50 | 000,204,800 | ---- | C] () -- D:\Windows\System32\NotesActnMenu.dll
[2007/04/25 09:32:46 | 000,086,016 | ---- | C] () -- D:\Windows\System32\MSNSpook.dll
[2007/04/25 09:31:00 | 000,028,672 | ---- | C] () -- D:\Windows\System32\BatchCrypto.dll
[2007/04/25 09:30:52 | 000,073,728 | ---- | C] () -- D:\Windows\System32\APISlice.dll
[2007/04/25 09:30:44 | 000,063,488 | ---- | C] () -- D:\Windows\System32\ShowErrMsg.dll
[2006/12/25 08:44:48 | 000,022,016 | ---- | C] () -- D:\Windows\System32\MailFormat_U.dll
[2006/11/12 22:50:06 | 000,071,680 | ---- | C] () -- D:\Windows\System32\HTCA_SelfExtract.bin
[2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 001,478,888 | ---- | C] () -- D:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- D:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,640,436 | ---- | C] () -- D:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- D:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,132,062 | ---- | C] () -- D:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- D:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- D:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- D:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- D:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- D:\Windows\System32\mlang.dat
[2005/05/02 05:13:42 | 000,009,600 | ---- | C] () -- D:\Windows\System32\drivers\NETMNT.sys
[2001/12/26 08:12:30 | 000,065,536 | ---- | C] () -- D:\Windows\System32\multiplex_vcd.dll
[2001/09/03 15:46:38 | 000,110,592 | ---- | C] () -- D:\Windows\System32\Hmpg12.dll
[2001/07/30 08:33:56 | 000,118,784 | ---- | C] () -- D:\Windows\System32\HMPV2_ENC.dll
[2001/07/23 14:04:36 | 000,118,784 | ---- | C] () -- D:\Windows\System32\HMPV2_ENC_MMX.dll
========== LOP Check ==========
[2009/04/06 05:32:45 | 000,000,000 | ---D | M] -- D:\ProgramData\Acer
[2009/04/02 13:01:06 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2012/06/02 11:46:33 | 000,000,000 | ---D | M] -- D:\ProgramData\AVG2012
[2012/06/02 10:04:05 | 000,000,000 | ---D | M] -- D:\ProgramData\avg9
[2009/04/08 05:01:18 | 000,000,000 | ---D | M] -- D:\ProgramData\Azureus
[2009/08/24 12:41:58 | 000,000,000 | ---D | M] -- D:\ProgramData\Canneverbe Limited
[2011/03/14 14:13:24 | 000,000,000 | -H-D | M] -- D:\ProgramData\Common Files
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2009/04/02 13:01:06 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente
[2010/02/06 15:12:33 | 000,000,000 | ---D | M] -- D:\ProgramData\Electronic Arts
[2009/05/13 04:05:07 | 000,000,000 | ---D | M] -- D:\ProgramData\ESET
[2009/04/02 13:01:06 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2009/07/23 08:27:53 | 000,000,000 | ---D | M] -- D:\ProgramData\LightScribe
[2010/01/19 16:00:40 | 000,000,000 | ---D | M] -- D:\ProgramData\Messenger Plus!
[2012/12/26 05:01:17 | 000,000,000 | ---D | M] -- D:\ProgramData\MFAData
[2009/10/16 12:14:31 | 000,000,000 | ---D | M] -- D:\ProgramData\Novatel Wireless
[2009/05/08 15:13:03 | 000,000,000 | ---D | M] -- D:\ProgramData\PopCap Games
[2012/03/09 15:25:50 | 000,000,000 | ---D | M] -- D:\ProgramData\Sony
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2009/04/02 13:01:06 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü
[2012/06/02 09:54:39 | 000,000,000 | ---D | M] -- D:\ProgramData\TEMP
[2006/11/02 08:02:04 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2011/12/23 15:52:20 | 000,000,000 | ---D | M] -- D:\ProgramData\tmp
[2009/04/17 01:48:27 | 000,000,000 | ---D | M] -- D:\ProgramData\Ulead Systems
[2009/04/02 13:01:06 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen
[2010/01/22 08:23:37 | 000,000,000 | ---D | M] -- D:\ProgramData\WindowsSearch
[2009/09/11 07:30:47 | 000,000,000 | ---D | M] -- D:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013/01/13 15:09:03 | 000,032,578 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 167 bytes -> D:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 127 bytes -> D:\ProgramData\TEMP:1CA73D29
< End of report >
|
