Elephant | 10.05.2010 22:00 | Hier die OTL Logs: Code:
OTL Extras logfile created on: 10.05.2010 22:54:41 - Run 2
OTL by OldTimer - Version 3.2.4.1 Folder = D:\Dokumente und Einstellungen\Moritz\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.014,00 Mb Total Physical Memory | 308,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 68,00% Paging File free
Paging file location(s): D:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 35,24 Gb Total Space | 20,85 Gb Free Space | 59,18% Space Free | Partition Type: NTFS
Drive D: | 35,60 Gb Total Space | 11,30 Gb Free Space | 31,73% Space Free | Partition Type: NTFS
Unable to calculate disk information.
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: INSTALL000
Current User Name: Moritz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- D:\Programme\Opera\Opera.exe (Opera Software)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "D:\Programme\Opera\Opera.exe" (Opera Software)
https [open] -- "D:\Programme\Opera\Opera.exe" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1723:TCP" = 1723:TCP:*:Enabled:@xpsp2res.dll,-22015
"1701:UDP" = 1701:UDP:*:Enabled:@xpsp2res.dll,-22016
"500:UDP" = 500:UDP:*:Enabled:@xpsp2res.dll,-22017
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services
"8817:TCP" = 8817:TCP:*:Enabled:Services
"8818:TCP" = 8818:TCP:*:Enabled:Services
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"1723:TCP" = 1723:TCP:*:Enabled:@xpsp2res.dll,-22015
"1701:UDP" = 1701:UDP:*:Enabled:@xpsp2res.dll,-22016
"500:UDP" = 500:UDP:*:Enabled:@xpsp2res.dll,-22017
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services
"8817:TCP" = 8817:TCP:*:Enabled:Services
"8818:TCP" = 8818:TCP:*:Enabled:Services
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Programme\Windows Live\Messenger\livecall.exe" = D:\Programme\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Miranda\miranda32.exe" = C:\Miranda\miranda32.exe:*:Enabled:Miranda IM -- ( )
"C:\Programme\Miranda IM\miranda32.exe" = C:\Programme\Miranda IM\miranda32.exe:*:Enabled:Miranda IM -- ( )
"D:\Programme\Windows Live\Messenger\livecall.exe" = D:\Programme\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) -- (Microsoft Corporation)
"D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\german\setup.exe" = D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\german\setup.exe:*:Enabled:Installationsprogramm für Kaspersky Internet Security 2009 -- (Kaspersky Lab)
"D:\Programme\alaplaya\S4League\S4Client.exe" = D:\Programme\alaplaya\S4League\S4Client.exe:*:Enabled:Project S4 Client.exe -- File not found
"D:\Programme\Miranda IM\miranda32.exe" = D:\Programme\Miranda IM\miranda32.exe:*:Enabled:Miranda IM -- ( )
"D:\Programme\Tale of Tales\The Endless Forest 3\ForestViewer.exe" = D:\Programme\Tale of Tales\The Endless Forest 3\ForestViewer.exe:*:Enabled:ForestViewer -- ()
"D:\WINDOWS\system32\The Endless Forest 3.scr" = D:\WINDOWS\system32\The Endless Forest 3.scr:*:Enabled:The Endless Forest 3 -- ()
"D:\Programme\Opera\opera.exe" = D:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"D:\Programme\bomberclone\bomberclone.exe" = D:\Programme\bomberclone\bomberclone.exe:*:Enabled:bomberclone -- File not found
"C:\Age Of Empires I + Rise Of Rome Expansion By James(TM) www.THEREBELS.biz\EMPIRESX.EXE" = C:\Age Of Empires I + Rise Of Rome Expansion By James(TM) www.THEREBELS.biz\EMPIRESX.EXE:*:Enabled:Age of Empires, the Rise of Rome -- (Microsoft Corporation)
"D:\Programme\bmoworld\BomberMan.exe" = D:\Programme\bmoworld\BomberMan.exe:*:Enabled:BomberMan.exe -- File not found
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}" = Opera 10.53
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16
"{2B091530-69AA-442E-AB09-39ED06B58220}" = Windows Live Messenger
"{2F29D6D2-824E-4FEF-8AED-7013F39F642A}" = OpenOffice.org 2.3
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{5BDAEFB5-1FF6-45DA-AD07-910CD7F4B5EF}" = Microsoft DirectX SDK (April 2007)
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{8A3D6A5C-5606-4ACA-A5B5-3F7B3224BD86}_is1" = The Path 1.01
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4D7B764-4140-11D4-88EB-0050DA3579C0}" = Nero - Burning Rom
"{AC76BA86-7AD7-1031-7B44-A81200000003}" = Adobe Reader 8.1.2 - Deutsch
"{AC76BA86-7AD7-5760-0000-800000000003}" = Japanese Fonts Support For Adobe Reader 8
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B4C88CF0-B617-4658-8F84-C4E847FBC9F7}" = Microsoft Managed DirectX (1126)
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D050D7362D214723AD585B541FFB6C11}" = DivX Content Uploader
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{E0F252A6-DE85-4E93-A93B-DFC3537B3965}" = NETGEAR WG111v2 wireless USB 2.0 adapter
"{E12BD798-72C3-4955-AF46-75A19B279CBA}" = Brother HL-2030
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner
"CDex" = CDex extraction audio
"Cole2k Media - Codec Pack" = Cole2k Media - Codec Pack (Advanced)
"Doomsday Engine_is1" = Doomsday Engine 1.9.0-beta5
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Heretic" = Heretic game (remove only)
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InCD!UninstallKey" = InCD (Ahead Software)
"InstallShield_{E0F252A6-DE85-4E93-A93B-DFC3537B3965}" = NETGEAR WG111v2 wireless USB 2.0 adapter
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MAXQDA2007" = MAXQDA2007 (R030609)
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Miranda IM" = Miranda IM 0.8.20
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"pdfsam" = pdfsam
"RPGAdvocates_RTP_1.0" = Common RTP 1.0
"RTP for RM2K (Png, Wav, Midi, Fonts)" = RTP for RM2K (Png, Wav, Midi, Fonts)
"SystemRequirementsLab" = System Requirements Lab
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"The Endless Forest_is1" = The Endless Forest
"Windows Lemmings" = Lemmings for Windows 95
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.4.7
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
========== Last 10 Event Log Errors ==========
[ System Events ]
Error - 05.05.2010 08:34:41 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
AFD avgio avipbb Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss ssmdrv Tcpip
Error - 05.05.2010 11:08:07 | Computer Name = INSTALL000 | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 05.05.2010 14:28:50 | Computer Name = INSTALL000 | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 05.05.2010 14:29:51 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "DHCP-Client" ist vom Dienst "NetBios über TCP/IP" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 05.05.2010 14:29:51 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "DNS-Client" ist vom Dienst "TCP/IP-Protokolltreiber" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 05.05.2010 14:29:51 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "TCP/IP-NetBIOS-Hilfsprogramm" ist vom Dienst "AFD" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 05.05.2010 14:29:51 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "NLA (Network Location Awareness)" ist vom Dienst "AFD"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 05.05.2010 14:29:51 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "IPSEC-Dienste" ist vom Dienst "IPSEC-Treiber" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 05.05.2010 14:29:51 | Computer Name = INSTALL000 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
AFD avgio avipbb Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SASDIFSV SASKUTIL ssmdrv
Tcpip
Error - 05.05.2010 15:40:17 | Computer Name = INSTALL000 | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
< End of report > Code:
OTL logfile created on: 10.05.2010 22:54:41 - Run 2
OTL by OldTimer - Version 3.2.4.1 Folder = D:\Dokumente und Einstellungen\Moritz\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.014,00 Mb Total Physical Memory | 308,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 68,00% Paging File free
Paging file location(s): D:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 35,24 Gb Total Space | 20,85 Gb Free Space | 59,18% Space Free | Partition Type: NTFS
Drive D: | 35,60 Gb Total Space | 11,30 Gb Free Space | 31,73% Space Free | Partition Type: NTFS
Unable to calculate disk information.
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: INSTALL000
Current User Name: Moritz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - D:\Programme\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
PRC - D:\Dokumente und Einstellungen\Moritz\Desktop\OTL.exe (OldTimer Tools)
PRC - D:\Programme\Opera\opera.exe (Opera Software)
PRC - D:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - D:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - D:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - D:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - D:\Programme\Java\jre6\bin\java.exe (Sun Microsystems, Inc.)
PRC - D:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - D:\Programme\OpenOffice.org 2.3\program\soffice.bin (OpenOffice.org)
PRC - D:\Programme\OpenOffice.org 2.3\program\soffice.exe (OpenOffice.org)
PRC - D:\Programme\NETGEAR\WG111v2\WG111v2.exe ()
PRC - D:\Programme\ahead\InCD\InCD.exe (Copyright (C) ahead software gmbh and its licensors)
========== Modules (SafeList) ==========
MOD - D:\Dokumente und Einstellungen\Moritz\Desktop\OTL.exe (OldTimer Tools)
MOD - D:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AntiVirService) -- D:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- D:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (usnjsvc) -- D:\Programme\Windows Live\Messenger\usnsvc.exe (Microsoft Corporation)
SRV - (IDriverT) -- D:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
========== Driver Services (SafeList) ==========
DRV - (SASKUTIL) -- D:\Programme\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (avipbb) -- D:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (SASDIFSV) -- D:\Programme\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (avgntflt) -- D:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- D:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avgio) -- D:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (HDAudBus) -- D:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- D:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (ialm) -- D:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation)
DRV - (RTLWUSB) -- D:\WINDOWS\system32\drivers\wg111v2.sys (NETGEAR Inc.)
DRV - (EverestDriver) -- D:\Programme\Lavalys\EVEREST Home Edition\kerneld.wnt ()
DRV - (BsStor) -- D:\WINDOWS\System32\DRIVERS\bsstor.sys (B.H.A Co.,Ltd.)
DRV - (BsUDF) -- D:\WINDOWS\system32\drivers\bsudf.sys (ahead software)
DRV - (BrPar) -- D:\WINDOWS\System32\drivers\BrPar.sys (Brother Industries Ltd.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: ([2004.08.04 13:00:00 | 000,000,820 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] D:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] D:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [InCD] D:\Programme\ahead\InCD\InCD.exe (Copyright (C) ahead software gmbh and its licensors)
O4 - HKLM..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKCU..\Run: [SUPERAntiSpyware] D:\Programme\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\NETGEAR WG111v2 Smart Wizard.lnk = D:\Programme\NETGEAR\WG111v2\WG111v2.exe ()
O4 - Startup: D:\Dokumente und Einstellungen\Moritz\Startmenü\Programme\Autostart\OpenOffice.org 2.3.lnk = D:\Programme\OpenOffice.org 2.3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/DE-DE/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} hxxp://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} hxxp://download.mcafee.com/molbin/iss-loc/mcfscan/3,0,0,5971/mcfscan.cab (McFreeScan Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - D:\Programme\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - D:\Programme\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (RtlGina2.dll) - D:\WINDOWS\System32\RtlGina2.dll ()
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Programme\SUPERAntiSpyware\SASWINLO.dll - D:\Programme\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - D:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: D:\WINDOWS\Seifenblase.bmp
O24 - Desktop BackupWallPaper: D:\WINDOWS\Seifenblase.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.09.10 13:01:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.05.06 00:18:54 | 000,570,880 | ---- | C] (OldTimer Tools) -- D:\Dokumente und Einstellungen\Moritz\Desktop\OTL.exe
[2010.05.05 19:48:02 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com
[2010.05.05 19:47:56 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Moritz\Anwendungsdaten\SUPERAntiSpyware.com
[2010.05.05 19:47:56 | 000,000,000 | ---D | C] -- D:\Programme\SUPERAntiSpyware
[2010.05.05 19:47:35 | 000,000,000 | ---D | C] -- D:\Programme\Gemeinsame Dateien\Wise Installation Wizard
[2010.05.05 17:54:04 | 000,000,000 | RH-D | C] -- D:\Dokumente und Einstellungen\Moritz\Recent
[2010.05.05 17:47:57 | 000,000,000 | ---D | C] -- D:\Programme\CCleaner
[2010.05.05 17:14:27 | 000,000,000 | ---D | C] -- D:\Programme\trend micro
[2010.05.05 17:14:26 | 000,000,000 | ---D | C] -- D:\rsit
[2010.05.05 17:14:01 | 003,382,520 | ---- | C] (Piriform Ltd) -- D:\Dokumente und Einstellungen\Moritz\Desktop\ccsetup231.exe
[2010.05.05 14:09:37 | 000,000,000 | ---D | C] -- D:\WINDOWS\CSC
[2010.05.04 20:49:32 | 000,000,000 | ---D | C] -- D:\Programme\herbert
[2010.05.04 20:43:57 | 000,000,000 | ---D | C] -- D:\Programme\Malwarebytes' Anti-Malware2
[2010.05.04 20:43:34 | 006,153,648 | ---- | C] (Malwarebytes Corporation ) -- D:\Dokumente und Einstellungen\Moritz\Desktop\berbert.exe
[2010.05.04 15:48:11 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Moritz\Anwendungsdaten\Malwarebytes
[2010.05.04 15:48:00 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.05.04 15:47:57 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.05.04 15:47:56 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys
[2010.05.04 15:47:56 | 000,000,000 | ---D | C] -- D:\Programme\Malwarebytes' Anti-Malware
[2010.05.04 15:21:45 | 000,000,000 | ---D | C] -- D:\WINDOWS\McAfee.com
[2010.05.04 01:38:30 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\NtmsData
[2010.05.04 01:33:42 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Moritz\Anwendungsdaten\D7EB8EFD8756F5054693970841F5E3D9
[2010.05.04 01:13:18 | 000,000,000 | ---D | C] -- D:\Programme\bmoworld
[33 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.05.10 22:47:29 | 000,000,260 | ---- | M] () -- D:\WINDOWS\tasks\WGASetup.job
[2010.05.10 22:47:28 | 000,013,646 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2010.05.10 22:32:37 | 000,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT
[2010.05.10 22:32:35 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2010.05.10 18:50:59 | 000,002,243 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2010.05.10 17:36:35 | 004,980,736 | -H-- | M] () -- D:\Dokumente und Einstellungen\Moritz\NTUSER.DAT
[2010.05.10 17:36:26 | 000,000,190 | -HS- | M] () -- D:\Dokumente und Einstellungen\Moritz\ntuser.ini
[2010.05.10 17:36:11 | 000,015,929 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\log.odt
[2010.05.10 17:25:30 | 000,000,572 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk
[2010.05.07 13:09:15 | 004,319,814 | -H-- | M] () -- D:\Dokumente und Einstellungen\Moritz\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.05.06 00:18:54 | 000,570,880 | ---- | M] (OldTimer Tools) -- D:\Dokumente und Einstellungen\Moritz\Desktop\OTL.exe
[2010.05.05 19:47:59 | 000,000,752 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010.05.05 19:47:32 | 008,050,208 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\SUPERAntiSpyware.exe
[2010.05.05 18:00:01 | 000,000,206 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\cc_20100505_175958.reg
[2010.05.05 17:59:36 | 000,000,710 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\cc_20100505_175932.reg
[2010.05.05 17:59:20 | 000,039,062 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\cc_20100505_175821.reg
[2010.05.05 17:47:58 | 000,001,512 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\CCleaner.lnk
[2010.05.05 17:14:09 | 003,382,520 | ---- | M] (Piriform Ltd) -- D:\Dokumente und Einstellungen\Moritz\Desktop\ccsetup231.exe
[2010.05.05 17:11:52 | 000,781,909 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\RSIT.exe
[2010.05.05 14:07:11 | 000,084,927 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\.recently-used.xbel
[2010.05.05 11:38:05 | 001,069,228 | ---- | M] () -- D:\WINDOWS\System32\PerfStringBackup.INI
[2010.05.05 11:38:05 | 000,458,806 | ---- | M] () -- D:\WINDOWS\System32\perfh007.dat
[2010.05.05 11:38:05 | 000,440,820 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat
[2010.05.05 11:38:05 | 000,084,516 | ---- | M] () -- D:\WINDOWS\System32\perfc007.dat
[2010.05.05 11:38:05 | 000,071,138 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat
[2010.05.04 20:48:31 | 000,363,520 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\rkill.com
[2010.05.04 20:43:49 | 006,153,648 | ---- | M] (Malwarebytes Corporation ) -- D:\Dokumente und Einstellungen\Moritz\Desktop\berbert.exe
[2010.05.04 18:36:38 | 000,002,710 | ---- | M] () -- D:\WINDOWS\lsrslt.ini
[2010.04.29 16:31:07 | 000,000,432 | ---- | M] () -- D:\WINDOWS\BRWMARK.INI
[2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.04.29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys
[2010.04.20 15:51:33 | 000,000,673 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\Miranda IM.lnk
[2010.04.12 17:49:38 | 000,013,452 | ---- | M] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\bewerbung2.odt
[33 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.05.10 17:36:10 | 000,015,929 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\log.odt
[2010.05.05 19:47:59 | 000,000,752 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010.05.05 19:44:25 | 008,050,208 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\SUPERAntiSpyware.exe
[2010.05.05 18:00:00 | 000,000,206 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\cc_20100505_175958.reg
[2010.05.05 17:59:33 | 000,000,710 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\cc_20100505_175932.reg
[2010.05.05 17:58:25 | 000,039,062 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Eigene Dateien\cc_20100505_175821.reg
[2010.05.05 17:47:58 | 000,001,512 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\CCleaner.lnk
[2010.05.05 17:11:52 | 000,781,909 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\RSIT.exe
[2010.05.05 14:07:11 | 000,084,927 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\.recently-used.xbel
[2010.05.04 20:48:29 | 000,363,520 | ---- | C] () -- D:\Dokumente und Einstellungen\Moritz\Desktop\rkill.com
[2010.05.04 18:36:38 | 000,002,710 | ---- | C] () -- D:\WINDOWS\lsrslt.ini
[2009.10.27 21:18:28 | 000,000,025 | ---- | C] () -- D:\WINDOWS\wpd99.drv
[2009.10.27 21:18:27 | 000,122,880 | ---- | C] () -- D:\WINDOWS\System32\pdfmona.dll
[2009.10.27 21:18:27 | 000,051,716 | ---- | C] () -- D:\WINDOWS\System32\pdf995mon.dll
[2009.01.25 00:40:22 | 000,000,056 | RHS- | C] () -- D:\WINDOWS\System32\4441415382.sys
[2009.01.25 00:40:18 | 000,000,848 | -HS- | C] () -- D:\WINDOWS\System32\KGyGaAvL.sys
[2009.01.13 14:47:02 | 000,000,153 | ---- | C] () -- D:\WINDOWS\scummvm.ini
[2008.10.13 12:22:54 | 000,000,141 | ---- | C] () -- D:\WINDOWS\BRVIDEO.INI
[2008.10.13 12:22:54 | 000,000,040 | ---- | C] () -- D:\WINDOWS\BRDIAG.INI
[2008.10.13 12:22:54 | 000,000,023 | ---- | C] () -- D:\WINDOWS\Brownie.ini
[2008.10.13 12:22:48 | 000,077,824 | ---- | C] () -- D:\WINDOWS\System32\BROSNMP.DLL
[2008.10.13 12:22:48 | 000,026,624 | ---- | C] () -- D:\WINDOWS\System32\BRGSRC32.DLL
[2008.10.13 12:22:48 | 000,004,608 | ---- | C] () -- D:\WINDOWS\System32\BRGSRC16.DLL
[2008.10.13 12:22:47 | 000,008,975 | ---- | C] () -- D:\WINDOWS\HL-2030.INI
[2008.10.13 12:22:16 | 000,000,432 | ---- | C] () -- D:\WINDOWS\BRWMARK.INI
[2008.01.04 23:58:50 | 003,596,288 | ---- | C] () -- D:\WINDOWS\System32\qt-dx331.dll
[2008.01.04 23:57:22 | 000,000,416 | ---- | C] () -- D:\WINDOWS\System32\dtu100.dll.manifest
[2008.01.04 23:57:22 | 000,000,416 | ---- | C] () -- D:\WINDOWS\System32\dpl100.dll.manifest
[2008.01.04 23:56:24 | 000,012,288 | ---- | C] () -- D:\WINDOWS\System32\DivXWMPExtType.dll
[2007.12.30 11:57:01 | 000,237,568 | ---- | C] () -- D:\WINDOWS\System32\Unlha32.dll
[2007.12.30 11:56:49 | 000,473,600 | ---- | C] () -- D:\WINDOWS\System32\Harmony.dll
[2007.09.15 17:25:27 | 000,147,456 | ---- | C] () -- D:\WINDOWS\System32\igfxCoIn_v4864.dll
[2007.09.15 17:25:27 | 000,104,636 | ---- | C] () -- D:\WINDOWS\System32\igmedcompkrn.dll
[2007.09.15 17:25:26 | 001,174,000 | ---- | C] () -- D:\WINDOWS\System32\igmedkrn.dll
[2007.09.15 16:50:03 | 000,021,840 | ---- | C] () -- D:\WINDOWS\System32\SIntfNT.dll
[2007.09.15 16:50:03 | 000,017,212 | ---- | C] () -- D:\WINDOWS\System32\SIntf32.dll
[2007.09.15 16:50:03 | 000,012,067 | ---- | C] () -- D:\WINDOWS\System32\SIntf16.dll
[2006.05.03 17:44:32 | 000,036,864 | ---- | C] () -- D:\WINDOWS\System32\RtlGina2.dll
[2006.01.23 17:17:36 | 000,453,138 | ---- | C] () -- D:\WINDOWS\System32\x264vfw.dll
[2006.01.17 23:19:46 | 000,064,000 | ---- | C] () -- D:\WINDOWS\System32\mp4.dll
[2006.01.17 23:18:04 | 000,099,328 | ---- | C] () -- D:\WINDOWS\System32\mkx.dll
[2006.01.17 23:17:52 | 000,050,688 | ---- | C] () -- D:\WINDOWS\System32\avi.dll
[2006.01.17 23:17:24 | 000,061,440 | ---- | C] () -- D:\WINDOWS\System32\mmfinfo.dll
[2006.01.17 23:17:12 | 000,057,344 | ---- | C] () -- D:\WINDOWS\System32\ogm.dll
[2006.01.17 23:16:58 | 000,045,568 | ---- | C] () -- D:\WINDOWS\System32\mkzlib.dll
[2006.01.17 23:16:54 | 000,023,552 | ---- | C] () -- D:\WINDOWS\System32\mkunicode.dll
[2005.12.30 22:18:26 | 000,180,224 | ---- | C] () -- D:\WINDOWS\System32\xvidvfw.dll
[2005.12.30 22:10:30 | 000,761,856 | ---- | C] () -- D:\WINDOWS\System32\xvidcore.dll
[2005.12.21 12:42:08 | 000,906,240 | ---- | C] () -- D:\WINDOWS\System32\libavcodec.dll
[2005.12.21 12:42:08 | 000,139,264 | ---- | C] () -- D:\WINDOWS\System32\ff_x264.dll
[2005.12.21 12:42:08 | 000,126,976 | ---- | C] () -- D:\WINDOWS\System32\ff_unrar.dll
[2005.12.21 12:42:08 | 000,122,368 | ---- | C] () -- D:\WINDOWS\System32\libmplayer.dll
[2005.12.21 12:42:08 | 000,114,688 | ---- | C] () -- D:\WINDOWS\System32\ff_samplerate.dll
[2005.12.21 12:42:08 | 000,097,280 | ---- | C] () -- D:\WINDOWS
\System32\ff_libdts.dll
[2005.12.21 12:42:08 | 000,077,312 | ---- | C] () -- D:\WINDOWS\System32\ff_theora.dll
[2005.12.21 12:42:08 | 000,071,168 | ---- | C] () -- D:\WINDOWS\System32\ff_realaac.dll
[2005.12.21 12:42:08 | 000,061,952 | ---- | C] () -- D:\WINDOWS\System32\ff_libmad.dll
[2005.12.21 12:42:08 | 000,051,712 | ---- | C] () -- D:\WINDOWS\System32\ff_kernelDeint.dll
[2005.12.21 12:42:08 | 000,045,568 | ---- | C] () -- D:\WINDOWS\System32\TomsMoComp_ff.dll
[2005.12.21 12:42:08 | 000,042,496 | ---- | C] () -- D:\WINDOWS\System32\libmpeg2_ff.dll
[2005.12.21 12:42:08 | 000,040,960 | ---- | C] () -- D:\WINDOWS\System32\ff_wmv9.dll
[2005.12.21 12:42:08 | 000,023,040 | ---- | C] () -- D:\WINDOWS\System32\ff_liba52.dll
[2005.12.21 12:36:46 | 000,009,728 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2005.11.05 18:46:26 | 000,000,537 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest
[2002.05.18 00:18:30 | 000,124,928 | ---- | C] () -- D:\WINDOWS\System32\mp4fil32.dll
[2001.03.30 21:58:36 | 000,135,168 | ---- | C] () -- D:\WINDOWS\System32\drivers\Property.dll
< End of report > |