czernobill | 21.01.2011 12:05 | OTL Logfile: Code:
OTL logfile created on: 20.01.2011 20:26:05 - Run 4
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\**\Downloads
An unknown product (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 70,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 293,32 Gb Total Space | 104,98 Gb Free Space | 35,79% Space Free | Partition Type: NTFS
Computer Name: **-PC | User Name: ** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\**\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version6\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version6\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (hxxp://tortoisesvn.net)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
PRC - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
========== Modules (SafeList) ==========
MOD - C:\Users\**\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (TeamViewer6) -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
========== Driver Services (SafeList) ==========
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (ialm) -- C:\Windows\System32\drivers\igxpmp32.sys (Intel Corporation)
DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\Windows\System32\drivers\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (yukonw7) -- C:\Windows\System32\drivers\yk62x86.sys (Marvell)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2731699726-416715535-3730857417-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2731699726-416715535-3730857417-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-2731699726-416715535-3730857417-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7D F6 8B EF 30 B5 CB 01 [binary data]
IE - HKU\S-1-5-21-2731699726-416715535-3730857417-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\software\mozilla\Instantbird 0.2\extensions\\Components: C:\Program Files\Instantbird\components [2011.01.10 16:17:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Instantbird 0.2\extensions\\Plugins: C:\Program Files\Instantbird\plugins
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.01.08 13:39:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.01.09 17:10:47 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011.01.08 14:00:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
[2011.01.10 16:18:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\**\AppData\Roaming\mozilla\Extensions
[2011.01.10 16:18:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\**\AppData\Roaming\mozilla\Extensions\{33cb9019-c295-46dd-be21-8c4936574bee}
[2011.01.08 14:00:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\**\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.01.08 18:41:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\**\AppData\Roaming\mozilla\Firefox\Profiles\f9jjpgl8.default\extensions
[2011.01.20 17:01:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\**\AppData\Roaming\mozilla\Firefox\Profiles\jct6cejb.default\extensions
[2011.01.08 20:22:08 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\**\AppData\Roaming\mozilla\Firefox\Profiles\jct6cejb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.01.08 18:30:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\**\AppData\Roaming\mozilla\Firefox\Profiles\ORIGjct6cejb.default\extensions
[2011.01.08 18:30:27 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\**\AppData\Roaming\mozilla\Firefox\Profiles\ORIGjct6cejb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.01.19 16:31:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2010.12.21 10:14:26 | 000,167,704 | ---- | M] (Tracker Software Products Ltd.) -- C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
[2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2010.04.30 14:56:09 | 000,001,798 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 adobe.activate.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 125.252.224.90
O1 - Hosts: 127.0.0.1 125.252.224.91
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\S-1-5-21-2731699726-416715535-3730857417-1000\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-2731699726-416715535-3730857417-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab (DLM Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.123.254
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation)
NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation)
SafeBootMin: Primary disk - Driver Group
SafeBootMin: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: Dhcp - C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: ndiscap - C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation)
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (hxxp://www.mp3dev.org/)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)
========== Files/Folders - Created Within 30 Days ==========
[2011.01.19 16:42:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.01.19 16:42:04 | 000,000,000 | ---D | C] -- C:\Program Files\Skype
[2011.01.19 16:42:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2011.01.19 11:27:16 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2011.01.16 21:35:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synergy+
[2011.01.16 21:35:33 | 000,000,000 | ---D | C] -- C:\Program Files\Synergy+
[2011.01.12 22:06:04 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Malwarebytes
[2011.01.12 22:05:56 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.01.12 22:05:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.01.12 22:05:53 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.01.12 22:05:52 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.01.12 18:36:25 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011.01.12 18:36:19 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2011.01.12 18:36:19 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011.01.12 18:36:19 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2011.01.12 18:36:18 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2011.01.12 18:36:18 | 000,801,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2011.01.12 18:36:18 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011.01.12 18:36:17 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2011.01.12 18:36:17 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011.01.12 18:36:16 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2011.01.12 18:36:16 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2011.01.12 18:36:16 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2011.01.12 18:36:16 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2011.01.12 18:36:16 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2011.01.12 18:36:16 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2011.01.12 18:36:15 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2011.01.12 00:14:31 | 000,021,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dvlqtznb.sys
[2011.01.11 22:25:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\MpEngineStore
[2011.01.10 21:55:50 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\TSVNCache
[2011.01.10 20:46:03 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Subversion
[2011.01.10 19:09:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
[2011.01.10 19:09:19 | 000,000,000 | ---D | C] -- C:\Program Files\TortoiseSVN
[2011.01.10 19:09:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\TortoiseOverlays
[2011.01.10 16:18:00 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Instantbird
[2011.01.10 16:18:00 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Instantbird
[2011.01.10 16:17:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Instantbird
[2011.01.10 16:17:56 | 000,000,000 | ---D | C] -- C:\Program Files\Instantbird
[2011.01.09 18:53:51 | 000,000,000 | ---D | C] -- C:\Users\**\.thumbnails
[2011.01.09 17:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011.01.09 17:19:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2011.01.09 17:19:00 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.01.09 17:19:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2011.01.09 17:17:25 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2011.01.09 17:16:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2011.01.09 17:15:56 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011.01.09 15:02:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
[2011.01.09 15:01:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon IJ Network Utilities
[2011.01.09 15:01:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP620 series
[2011.01.09 14:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\CANON
[2011.01.09 14:47:32 | 000,000,000 | -H-D | C] -- C:\Windows\System32\CanonIJ Uninstaller Information
[2011.01.09 14:47:08 | 000,230,912 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMLM9D.DLL
[2011.01.09 14:46:48 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2011.01.09 14:46:46 | 000,364,032 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMNPPM.DLL
[2011.01.09 14:46:46 | 000,144,384 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMNPUI.DLL
[2011.01.09 14:46:33 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2011.01.09 12:43:05 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2011.01.09 12:43:05 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2011.01.09 12:43:05 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2011.01.09 12:38:49 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011.01.09 12:15:59 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.01.09 12:15:59 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011.01.09 12:15:59 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.01.09 12:15:59 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.01.09 12:15:59 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.01.09 12:15:59 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.01.09 12:15:59 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.01.09 12:15:59 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.01.09 12:15:59 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.01.09 12:15:59 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.01.09 12:15:59 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.01.09 12:15:49 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll
[2011.01.09 12:15:49 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2011.01.09 12:15:47 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2011.01.09 12:15:46 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011.01.09 12:15:46 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2011.01.09 12:15:46 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2011.01.09 12:15:46 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2011.01.09 12:14:37 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.01.09 12:14:31 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2011.01.09 12:14:28 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011.01.09 12:13:21 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2011.01.09 12:13:21 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2011.01.09 12:13:21 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2011.01.09 12:13:21 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2011.01.09 12:13:11 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2011.01.09 12:13:10 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
[2011.01.09 12:13:00 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2011.01.09 12:12:47 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2011.01.09 12:12:47 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2011.01.09 12:12:47 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2011.01.09 12:12:31 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2011.01.09 12:12:25 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2011.01.09 12:12:25 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2011.01.09 12:12:01 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2011.01.09 12:11:57 | 000,026,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2011.01.09 12:10:44 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.01.09 12:10:34 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2011.01.09 12:10:34 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2011.01.09 12:10:34 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2011.01.09 12:10:34 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2011.01.09 12:10:34 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2011.01.09 12:10:34 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2011.01.09 12:10:34 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2011.01.09 12:10:34 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2011.01.09 12:10:33 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.01.09 12:10:29 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2011.01.09 12:10:29 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2011.01.09 12:10:29 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2011.01.09 12:10:27 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2011.01.09 12:10:27 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.01.09 12:10:27 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2011.01.09 12:10:27 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.01.09 12:10:25 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011.01.09 12:10:25 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011.01.09 12:10:07 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2011.01.09 12:10:06 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2011.01.09 12:10:05 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
[2011.01.09 12:09:59 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.01.09 08:42:08 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2011.01.09 08:41:46 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2011.01.08 22:25:23 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2011.01.08 21:53:33 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.01.08 21:53:20 | 000,000,000 | -HSD | C] -- C:\Boot
[2011.01.08 19:26:02 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\EndNote
[2011.01.08 19:25:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Risxtd
[2011.01.08 19:25:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ResearchSoft
[2011.01.08 19:25:07 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\EndNote
[2011.01.08 19:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EndNote
[2011.01.08 19:24:47 | 000,000,000 | ---D | C] -- C:\Program Files\EndNote X4
[2011.01.08 19:24:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Thomson.ResearchSoft.Installers
[2011.01.08 19:19:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2011.01.08 19:07:50 | 000,000,000 | ---D | C] -- C:\Users\**\Documents\MATLAB
[2011.01.08 19:07:09 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\MathWorks
[2011.01.08 19:04:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
[2011.01.08 19:04:16 | 000,407,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSHFLXGD.OCX
[2011.01.08 19:04:16 | 000,203,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RICHTX32.OCX
[2011.01.08 19:04:15 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscomct2.ocx
[2011.01.08 18:59:22 | 000,000,000 | ---D | C] -- C:\Mama
[2011.01.08 18:58:19 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2011.01.08 18:55:37 | 000,000,000 | ---D | C] -- C:\markus
[2011.01.08 18:44:24 | 000,000,000 | ---D | C] -- C:\VorFormatierung
[2011.01.08 18:24:35 | 000,000,000 | ---D | C] -- C:\Program Files\MATLAB
[2011.01.08 18:07:07 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Avira
[2011.01.08 17:41:43 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Nero
[2011.01.08 17:34:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
[2011.01.08 17:34:33 | 000,000,000 | ---D | C] -- C:\Program Files\Nero
[2011.01.08 17:34:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2011.01.08 17:34:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nero
[2011.01.08 17:34:06 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
[2011.01.08 17:12:50 | 000,000,000 | ---D | C] -- C:\Users\**\Documents\gegl-0.0
[2011.01.08 17:12:50 | 000,000,000 | ---D | C] -- C:\Users\**\.gimp-2.6
[2011.01.08 17:12:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
[2011.01.08 17:12:14 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0
[2011.01.08 17:03:59 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Microsoft Help
[2011.01.08 17:03:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2011.01.08 15:41:14 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2011.01.08 15:32:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2011.01.08 15:32:45 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Media Player
[2011.01.08 15:31:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2011.01.08 15:27:21 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Adobe
[2011.01.08 14:56:32 | 000,000,000 | ---D | C] -- C:\Users\**\.spss
[2011.01.08 14:56:24 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Eclipse
[2011.01.08 14:56:16 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\javasharedresources
[2011.01.08 14:55:32 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\WinRAR
[2011.01.08 14:55:24 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.01.08 14:55:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.01.08 14:55:20 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2011.01.08 14:41:55 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\skypePM
[2011.01.08 14:37:53 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Skype
[2011.01.08 14:37:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011.01.08 14:36:34 | 000,000,000 | -H-D | C] -- C:\Program Files\Zero G Registry
[2011.01.08 14:36:33 | 000,000,000 | -H-D | C] -- C:\Users\**\InstallAnywhere
[2011.01.08 14:35:55 | 000,000,000 | ---D | C] -- C:\ProgramData\SafeNet Sentinel
[2011.01.08 14:35:49 | 000,000,000 | ---D | C] -- C:\ProgramData\SPSS
[2011.01.08 14:35:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics
[2011.01.08 14:34:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\IBM
[2011.01.08 14:34:27 | 000,000,000 | ---D | C] -- C:\Program Files\IBM
[2011.01.08 14:17:56 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Download Manager
[2011.01.08 14:09:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2011.01.08 14:09:45 | 000,839,680 | ---- | C] (hxxp://www.mp3dev.org/) -- C:\Windows\System32\lameACM.acm
[2011.01.08 14:09:45 | 000,237,568 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\yv12vfw.dll
[2011.01.08 14:09:45 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\System32\ac3acm.acm
[2011.01.08 14:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2011.01.08 14:09:29 | 000,000,000 | ---D | C] -- C:\Program Files\Tracker Software
[2011.01.08 14:07:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011.01.08 14:07:32 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2011.01.08 14:06:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011.01.08 14:04:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
[2011.01.08 14:04:04 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Projects
[2011.01.08 14:00:41 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Thunderbird
[2011.01.08 14:00:41 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Thunderbird
[2011.01.08 14:00:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird
[2011.01.08 14:00:35 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2011.01.08 13:52:35 | 000,000,000 | ---D | C] -- C:\Windows\de-DE
[2011.01.08 13:52:26 | 000,000,000 | ---D | C] -- C:\Windows\System32\XPSViewer
[2011.01.08 13:52:26 | 000,000,000 | ---D | C] -- C:\Windows\System32\0407
[2011.01.08 13:52:25 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\de-DE
[2011.01.08 13:52:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\de
[2011.01.08 13:51:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\usbrpm.sys.mui
[2011.01.08 13:51:53 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\fvevol.sys.mui
[2011.01.08 13:51:45 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\nwifi.sys.mui
[2011.01.08 13:51:45 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\qwavedrv.sys.mui
[2011.01.08 13:51:40 | 000,033,280 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\de-DE\yk62x86.sys.mui
[2011.01.08 13:51:40 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\usbport.sys.mui
[2011.01.08 13:51:40 | 000,025,088 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1y6032.sys.mui
[2011.01.08 13:51:40 | 000,025,088 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1e6032.sys.mui
[2011.01.08 13:51:40 | 000,022,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\E1G60I32.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1q6032.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1k6032.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\de-DE\k57nd60x.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\de-DE\b57nd60x.sys.mui
[2011.01.08 13:51:40 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\usbhub.sys.mui
[2011.01.08 13:51:40 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\serial.sys.mui
[2011.01.08 13:51:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerIb.sys.mui
[2011.01.08 13:51:40 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\acpi.sys.mui
[2011.01.08 13:51:40 | 000,010,752 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\de-DE\ltmdmnt.sys.mui
[2011.01.08 13:51:40 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\battc.sys.mui
[2011.01.08 13:51:40 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\IPMIDrv.sys.mui
[2011.01.08 13:51:40 | 000,006,144 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\de-DE\bcm4sbxp.sys.mui
[2011.01.08 13:51:40 | 000,005,120 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e100b325.sys.mui
[2011.01.08 13:51:40 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\wacompen.sys.mui
[2011.01.08 13:51:40 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\tpm.sys.mui
[2011.01.08 13:51:40 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\parport.sys.mui
[2011.01.08 13:51:40 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ataport.sys.mui
[2011.01.08 13:51:40 | 000,003,072 | ---- | C] (VIA Technologies, Inc. ) -- C:\Windows\System32\drivers\de-DE\getn62.sys.mui
[2011.01.08 13:51:40 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\umbus.sys.mui
[2011.01.08 13:51:40 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\parvdm.sys.mui
[2011.01.08 13:51:40 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\MTConfig.sys.mui
[2011.01.08 13:51:40 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\amdide.sys.mui
[2011.01.08 13:51:39 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\volsnap.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\viac7.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\processr.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\intelppm.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\amdppm.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\amdk8.sys.mui
[2011.01.08 13:51:39 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ohci1394.sys.mui
[2011.01.08 13:51:39 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\1394ohci.sys.mui
[2011.01.08 13:51:39 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\i8042prt.sys.mui
[2011.01.08 13:51:39 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pci.sys.mui
[2011.01.08 13:51:39 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bthport.sys.mui
[2011.01.08 13:51:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\sermouse.sys.mui
[2011.01.08 13:51:39 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\kbdclass.sys.mui
[2011.01.08 13:51:39 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mouclass.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vhdmp.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vdrvroot.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\isapnp.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\hdaudbus.sys.mui
[2011.01.08 13:51:39 | 000,003,584 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\de-DE\atikmdag.sys.mui
[2011.01.08 13:51:39 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mssmbios.sys.mui
[2011.01.08 13:51:39 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mouhid.sys.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vwifibus.sys.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\VIAAGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ULIAGPKX.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\UAGP35.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\SISAGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\NV_AGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\kbdhid.sys.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\GAGP30KX.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\BTHUSB.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\AMDAGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\AGP440.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\wd.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\disk.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\cdrom.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bthenum.sys.mui
[2011.01.08 13:51:38 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mpio.sys.mui
[2011.01.08 13:51:38 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\afd.sys.mui
[2011.01.08 13:51:38 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerId.sys.mui
[2011.01.08 13:51:38 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\msdsm.sys.mui
[2011.01.08 13:51:38 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pcmcia.sys.mui
[2011.01.08 13:51:38 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bthpan.sys.mui
[2011.01.08 13:51:38 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\de-DE\pscr.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\portcls.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\modem.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ipnat.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\HdAudio.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\serscan.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\rndismpx.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\rndismp6.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\hidbth.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\volmgrx.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pnpmem.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\Dot4usb.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrParwdm.sys.mui
[2011.01.08 13:51:36 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ntfs.sys.mui
[2011.01.08 13:51:36 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\tunnel.sys.mui
[2011.01.08 13:51:36 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\luafv.sys.mui
[2011.01.08 13:51:36 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\rdbss.sys.mui
[2011.01.08 13:51:36 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ndisuio.sys.mui
[2011.01.08 13:51:36 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\srv.sys.mui
[2011.01.08 13:51:36 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\partmgr.sys.mui
[2011.01.08 13:51:36 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mountmgr.sys.mui
[2011.01.08 13:51:34 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\RNDISMP.sys.mui
[2011.01.08 13:51:33 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ndiscap.sys.mui
[2011.01.08 13:51:33 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\scfilter.sys.mui
[2011.01.08 13:51:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\fltmgr.sys.mui
[2011.01.08 13:51:31 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\http.sys.mui
[2011.01.08 13:51:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ndis.sys.mui
[2011.01.08 13:51:31 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\scsiport.sys.mui
[2011.01.08 13:51:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\wdf01000.sys.mui
[2011.01.08 13:51:29 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\tcpip.sys.mui
[2011.01.08 13:51:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pacer.sys.mui
[2011.01.08 13:51:29 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ws2ifsl.sys.mui
[2011.01.08 13:51:27 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bfe.dll.mui
[2011.01.08 13:46:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011.01.08 13:46:33 | 000,135,096 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2011.01.08 13:46:33 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2011.01.08 13:46:33 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2011.01.08 13:46:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.01.08 13:46:32 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011.01.08 13:40:05 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Mozilla
[2011.01.08 13:40:05 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Mozilla
[2011.01.08 13:39:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2011.01.08 13:38:59 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011.01.08 13:38:28 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.01.08 13:31:00 | 000,000,000 | ---D | C] -- C:\Program Files\XP Anti-Spy
[2011.01.08 13:28:58 | 000,398,848 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\TVWizudlg.exe
[2011.01.08 13:27:44 | 000,000,000 | ---D | C] -- C:\Windows\System32\Lang
[2011.01.08 13:27:43 | 000,997,912 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpun.exe
[2011.01.08 13:27:30 | 008,194,584 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\TVWSetup.exe
[2011.01.08 13:27:30 | 000,304,640 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc
[2011.01.08 13:27:30 | 000,303,616 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
[2011.01.08 13:27:30 | 000,299,520 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc
[2011.01.08 13:27:30 | 000,294,912 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc
[2011.01.08 13:27:30 | 000,291,328 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc
[2011.01.08 13:27:30 | 000,289,280 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc
[2011.01.08 13:27:30 | 000,288,256 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc
[2011.01.08 13:27:30 | 000,287,744 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc
[2011.01.08 13:27:30 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc
[2011.01.08 13:27:30 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc
[2011.01.08 13:27:30 | 000,281,088 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc
[2011.01.08 13:27:30 | 000,280,064 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc
[2011.01.08 13:27:30 | 000,279,040 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc
[2011.01.08 13:27:30 | 000,277,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc
[2011.01.08 13:27:30 | 000,262,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc
[2011.01.08 13:27:30 | 000,257,536 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll
[2011.01.08 13:27:30 | 000,249,856 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc
[2011.01.08 13:27:30 | 000,206,848 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc
[2011.01.08 13:27:30 | 000,205,312 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc
[2011.01.08 13:27:30 | 000,155,648 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxCoIn_v1855.dll
[2011.01.08 13:27:30 | 000,059,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\oemdspif.dll
[2011.01.08 13:27:30 | 000,051,712 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
[2011.01.08 13:27:29 | 005,924,864 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\igdkmd32.sys
[2011.01.08 13:27:29 | 005,702,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
[2011.01.08 13:27:29 | 000,672,792 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxcfg.exe
[2011.01.08 13:27:29 | 000,549,888 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igdumdx32.dll
[2011.01.08 13:27:29 | 000,310,784 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc
[2011.01.08 13:27:29 | 000,303,616 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc
[2011.01.08 13:27:29 | 000,303,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxresp.lrc
[2011.01.08 13:27:29 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc
[2011.01.08 13:27:29 | 000,280,576 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc
[2011.01.08 13:27:29 | 000,275,968 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc
[2011.01.08 13:27:29 | 000,252,416 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc
[2011.01.08 13:27:29 | 000,216,576 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxdev.dll
[2011.01.08 13:27:29 | 000,199,680 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
[2011.01.08 13:27:29 | 000,179,712 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc
[2011.01.08 13:27:29 | 000,178,176 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc
[2011.01.08 13:27:29 | 000,173,080 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxext.exe
[2011.01.08 13:27:29 | 000,130,048 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll
[2011.01.08 13:27:29 | 000,119,296 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl
[2011.01.08 13:27:29 | 000,023,552 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll
[2011.01.08 13:27:28 | 006,042,112 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll
[2011.01.08 13:27:28 | 003,839,488 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ig4dev32.dll
[2011.01.08 13:27:28 | 003,646,976 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
[2011.01.08 13:27:28 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2011.01.08 13:27:28 | 000,094,720 | ---- | C] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
[2011.01.08 13:26:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2011.01.08 13:26:16 | 002,898,464 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2011.01.08 13:26:16 | 002,745,760 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\drivers\RTKVHDA.sys
[2011.01.08 13:26:16 | 001,265,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2011.01.08 13:26:16 | 000,551,456 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2011.01.08 13:26:16 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2011.01.08 13:26:16 | 000,326,176 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2011.01.08 13:26:16 | 000,290,304 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2011.01.08 13:26:16 | 000,290,304 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2011.01.08 13:26:16 | 000,266,240 | ---- | C] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll
[2011.01.08 13:26:16 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2011.01.08 13:26:16 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2011.01.08 13:26:16 | 000,142,848 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2011.01.08 13:26:16 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2011.01.08 13:26:16 | 000,125,952 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2011.01.08 13:26:16 | 000,052,256 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2011.01.08 13:26:16 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2011.01.08 13:26:16 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.01.08 13:26:14 | 000,831,488 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011.01.08 13:26:14 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011.01.08 13:26:13 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2011.01.08 13:24:56 | 000,000,000 | ---D | C] -- C:\Program Files\Marvell
[2011.01.08 13:21:26 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2011.01.08 13:21:09 | 000,000,000 | ---D | C] -- C:\Intel
[2011.01.08 13:21:06 | 003,767,808 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpdx32.dll
[2011.01.08 13:21:06 | 003,226,048 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpdv32.dll
[2011.01.08 13:21:06 | 001,913,728 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\igxpmp32.sys
[2011.01.08 13:21:06 | 000,183,808 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpgd32.dll
[2011.01.08 13:21:06 | 000,081,920 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxCoIn_v5212.dll
[2011.01.08 13:21:06 | 000,057,344 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxprd32.dll
[2011.01.08 13:21:05 | 000,284,672 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc
[2011.01.08 13:21:05 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2011.01.08 13:21:04 | 003,118,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe
[2011.01.08 13:21:04 | 000,120,832 | ---- | C] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll
[2011.01.08 13:21:04 | 000,000,000 | ---D | C] -- C:\SWTOOLS
[2011.01.08 13:16:21 | 000,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2011.01.08 13:15:07 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Macromedia
[2011.01.08 13:08:20 | 000,000,000 | ---D | C] -- C:\LENOVOTOOLS
[2011.01.08 13:07:59 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Adobe
[2011.01.08 13:07:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2011.01.08 12:59:40 | 000,000,000 | R--D | C] -- C:\Users\**\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.01.08 12:59:40 | 000,000,000 | R--D | C] -- C:\Users\**\Searches
[2011.01.08 12:59:40 | 000,000,000 | R--D | C] -- C:\Users\**\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.01.08 12:59:40 | 000,000,000 | -H-D | C] -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2011.01.08 12:59:32 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Identities
[2011.01.08 12:59:31 | 000,000,000 | R--D | C] -- C:\Users\**\Contacts
[2011.01.08 12:59:24 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\VirtualStore
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\AppData\Local\Temporary Internet Files
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Templates
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Start Menu
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\SendTo
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Recent
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\PrintHood
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\NetHood
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Documents\My Videos
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Documents\My Pictures
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Documents\My Music
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\My Documents
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Local Settings
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\AppData\Local\History
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Cookies
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\Application Data
[2011.01.08 12:59:23 | 000,000,000 | -HSD | C] -- C:\Users\**\AppData\Local\Application Data
[2011.01.08 12:59:20 | 000,000,000 | --SD | C] -- C:\Users\**\AppData\Roaming\Microsoft
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Videos
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Saved Games
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Pictures
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Music
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Links
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Favorites
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Downloads
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Documents
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\Desktop
[2011.01.08 12:59:20 | 000,000,000 | R--D | C] -- C:\Users\**\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.01.08 12:59:20 | 000,000,000 | -H-D | C] -- C:\Users\**\AppData
[2011.01.08 12:59:20 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Temp
[2011.01.08 12:59:20 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Local\Microsoft
[2011.01.08 12:59:20 | 000,000,000 | ---D | C] -- C:\Users\**\AppData\Roaming\Media Center Programs
[2011.01.08 12:59:16 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.01.08 12:59:14 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.01.08 12:54:40 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.01.08 12:54:07 | 000,000,000 | -HSD | C] -- C:\System Volume Information
========== Files - Modified Within 30 Days ==========
[2011.01.20 20:06:54 | 000,015,136 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.01.20 20:06:54 | 000,015,136 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.01.20 19:59:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.01.20 19:58:58 | 2388,582,400 | -HS- | M] () -- C:\hiberfil.sys
[2011.01.19 16:42:04 | 000,000,696 | ---- | M] () -- C:\Windows\tasks\{9234584B-68B8-4AB0-B4B8-4BCCB358D707}.job
[2011.01.19 16:40:50 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.19 16:32:40 | 000,000,696 | ---- | M] () -- C:\Windows\tasks\{0BBBF8CA-5D91-47C9-968C-DE74C66DBD04}.job
[2011.01.19 14:55:56 | 000,000,696 | ---- | M] () -- C:\Windows\tasks\{8F39FE42-970B-4E2F-B205-B0E94B0531D9}.job
[2011.01.19 11:27:11 | 000,000,696 | ---- | M] () -- C:\Windows\tasks\{5FEB8761-0FDF-4537-9F50-1E65C1B3511F}.job
[2011.01.16 23:52:27 | 000,653,928 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.01.16 23:52:27 | 000,615,810 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.01.16 23:52:27 | 000,129,800 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.01.16 23:52:27 | 000,106,190 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.01.14 19:06:18 | 000,007,601 | ---- | M] () -- C:\Users\**\AppData\Local\Resmon.ResmonCfg
[2011.01.12 20:14:29 | 000,000,172 | ---- | M] () -- C:\Windows\System32\MRT.INI
[2011.01.12 00:14:31 | 000,021,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dvlqtznb.sys
[2011.01.10 22:00:14 | 003,954,697 | ---- | M] () -- C:\Users\**\Desktop\Neuer Ordner.zip
[2011.01.10 16:17:57 | 000,001,910 | ---- | M] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Instantbird.lnk
[2011.01.09 19:09:17 | 000,012,459 | ---- | M] () -- C:\Users\**\.recently-used.xbel
[2011.01.09 19:07:07 | 000,001,637 | ---- | M] () -- C:\Users\**\Desktop\Twitter.lnk
[2011.01.09 18:25:51 | 003,769,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.01.09 17:22:20 | 000,000,548 | ---- | M] () -- C:\Users\**\Desktop\Settings.ini
[2011.01.09 17:19:33 | 000,003,029 | ---- | M] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Word 2010.lnk
[2011.01.09 15:02:14 | 000,001,964 | ---- | M] () -- C:\Users\Public\Desktop\Canon My Printer.lnk
[2011.01.09 08:35:19 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011.01.08 21:53:21 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2011.01.08 19:05:43 | 000,000,822 | ---- | M] () -- C:\Windows\tasks\RunAsStdUser Task.job
[2011.01.08 17:41:02 | 000,004,767 | ---- | M] () -- C:\Windows\Irremote.ini
[2011.01.08 17:37:23 | 000,002,717 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2011.01.08 17:14:50 | 000,000,355 | ---- | M] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Computer - Verknüpfung.lnk
[2011.01.08 17:12:41 | 000,001,072 | ---- | M] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2011.01.08 15:48:46 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\AdobeAAMUpdater-1.0-**-PC-**.job
[2011.01.08 14:41:57 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2011.01.08 14:40:37 | 000,000,204 | ---- | M] () -- C:\Windows\tasks\{5D1BAFBF-0646-4EC8-917C-9FCCB5F34A9D}.job
[2011.01.08 14:34:21 | 000,000,219 | ---- | M] () -- C:\Windows\System32\lsprst7.tgz
[2011.01.08 14:34:21 | 000,000,205 | ---- | M] () -- C:\Windows\System32\lsprst7.dll
[2011.01.08 14:34:21 | 000,000,016 | -H-- | M] () -- C:\Windows\System32\servdat.slm
[2011.01.08 14:34:20 | 000,001,025 | ---- | M] () -- C:\Windows\System32\sysprs7.tgz
[2011.01.08 14:34:20 | 000,001,025 | ---- | M] () -- C:\Windows\System32\sysprs7.dll
[2011.01.08 14:00:50 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.01.08 13:52:11 | 000,295,922 | ---- | M] () -- C:\Windows\System32\perfi007.dat
[2011.01.08 13:52:11 | 000,038,104 | ---- | M] () -- C:\Windows\System32\perfd007.dat
[2011.01.08 13:51:59 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\usbrpm.sys.mui
[2011.01.08 13:51:53 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\fvevol.sys.mui
[2011.01.08 13:51:48 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\de-DE\WpdMtpDr.dll.mui
[2011.01.08 13:51:45 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\nwifi.sys.mui
[2011.01.08 13:51:45 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\qwavedrv.sys.mui
[2011.01.08 13:51:40 | 000,033,280 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\de-DE\yk62x86.sys.mui
[2011.01.08 13:51:40 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\usbport.sys.mui
[2011.01.08 13:51:40 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1y6032.sys.mui
[2011.01.08 13:51:40 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1e6032.sys.mui
[2011.01.08 13:51:40 | 000,022,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\E1G60I32.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1q6032.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e1k6032.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\de-DE\k57nd60x.sys.mui
[2011.01.08 13:51:40 | 000,013,312 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\de-DE\b57nd60x.sys.mui
[2011.01.08 13:51:40 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\usbhub.sys.mui
[2011.01.08 13:51:40 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\serial.sys.mui
[2011.01.08 13:51:40 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerIb.sys.mui
[2011.01.08 13:51:40 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\acpi.sys.mui
[2011.01.08 13:51:40 | 000,010,752 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\de-DE\ltmdmnt.sys.mui
[2011.01.08 13:51:40 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\battc.sys.mui
[2011.01.08 13:51:40 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\IPMIDrv.sys.mui
[2011.01.08 13:51:40 | 000,006,144 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\de-DE\bcm4sbxp.sys.mui
[2011.01.08 13:51:40 | 000,005,120 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\de-DE\e100b325.sys.mui
[2011.01.08 13:51:40 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\wacompen.sys.mui
[2011.01.08 13:51:40 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\tpm.sys.mui
[2011.01.08 13:51:40 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\parport.sys.mui
[2011.01.08 13:51:40 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ataport.sys.mui
[2011.01.08 13:51:40 | 000,003,072 | ---- | M] (VIA Technologies, Inc. ) -- C:\Windows\System32\drivers\de-DE\getn62.sys.mui
[2011.01.08 13:51:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\umbus.sys.mui
[2011.01.08 13:51:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\parvdm.sys.mui
[2011.01.08 13:51:40 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\MTConfig.sys.mui
[2011.01.08 13:51:40 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\amdide.sys.mui
[2011.01.08 13:51:39 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\volsnap.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\viac7.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\processr.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\intelppm.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\amdppm.sys.mui
[2011.01.08 13:51:39 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\amdk8.sys.mui
[2011.01.08 13:51:39 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ohci1394.sys.mui
[2011.01.08 13:51:39 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\1394ohci.sys.mui
[2011.01.08 13:51:39 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\i8042prt.sys.mui
[2011.01.08 13:51:39 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pci.sys.mui
[2011.01.08 13:51:39 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bthport.sys.mui
[2011.01.08 13:51:39 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\sermouse.sys.mui
[2011.01.08 13:51:39 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\kbdclass.sys.mui
[2011.01.08 13:51:39 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mouclass.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vhdmp.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vdrvroot.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\isapnp.sys.mui
[2011.01.08 13:51:39 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\hdaudbus.sys.mui
[2011.01.08 13:51:39 | 000,003,584 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\de-DE\atikmdag.sys.mui
[2011.01.08 13:51:39 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mssmbios.sys.mui
[2011.01.08 13:51:39 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mouhid.sys.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vwifibus.sys.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\VIAAGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ULIAGPKX.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\UAGP35.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\SISAGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\NV_AGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\kbdhid.sys.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\GAGP30KX.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\BTHUSB.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\AMDAGP.SYS.mui
[2011.01.08 13:51:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\AGP440.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\wd.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\disk.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\cdrom.sys.mui
[2011.01.08 13:51:39 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bthenum.sys.mui
[2011.01.08 13:51:38 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mpio.sys.mui
[2011.01.08 13:51:38 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\afd.sys.mui
[2011.01.08 13:51:38 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerId.sys.mui
[2011.01.08 13:51:38 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\de-DE\WUDFUsbccidDriver.dll.mui
[2011.01.08 13:51:38 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\msdsm.sys.mui
[2011.01.08 13:51:38 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pcmcia.sys.mui
[2011.01.08 13:51:38 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bthpan.sys.mui
[2011.01.08 13:51:38 | 000,004,096 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\de-DE\pscr.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\portcls.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\modem.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ipnat.sys.mui
[2011.01.08 13:51:38 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\HdAudio.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\serscan.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\rndismpx.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\rndismp6.sys.mui
[2011.01.08 13:51:38 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\hidbth.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\volmgrx.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pnpmem.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\Dot4usb.sys.mui
[2011.01.08 13:51:38 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrParwdm.sys.mui
[2011.01.08 13:51:36 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ntfs.sys.mui
[2011.01.08 13:51:36 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\tunnel.sys.mui
[2011.01.08 13:51:36 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\luafv.sys.mui
[2011.01.08 13:51:36 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\rdbss.sys.mui
[2011.01.08 13:51:36 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ndisuio.sys.mui
[2011.01.08 13:51:36 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\srv.sys.mui
[2011.01.08 13:51:36 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\partmgr.sys.mui
[2011.01.08 13:51:36 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\mountmgr.sys.mui
[2011.01.08 13:51:34 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\RNDISMP.sys.mui
[2011.01.08 13:51:33 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ndiscap.sys.mui
[2011.01.08 13:51:33 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\scfilter.sys.mui
[2011.01.08 13:51:32 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\fltmgr.sys.mui
[2011.01.08 13:51:31 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\http.sys.mui
[2011.01.08 13:51:31 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ndis.sys.mui
[2011.01.08 13:51:31 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\scsiport.sys.mui
[2011.01.08 13:51:31 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\wdf01000.sys.mui
[2011.01.08 13:51:29 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\tcpip.sys.mui
[2011.01.08 13:51:29 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\pacer.sys.mui
[2011.01.08 13:51:29 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\ws2ifsl.sys.mui
[2011.01.08 13:51:27 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\bfe.dll.mui
[2011.01.08 13:39:01 | 000,001,916 | ---- | M] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011.01.08 13:39:01 | 000,001,892 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.01.08 13:29:18 | 000,015,220 | ---- | M] () -- C:\Windows\System32\results.xml
[2011.01.08 13:00:45 | 000,001,414 | ---- | M] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011.01.08 12:56:40 | 000,040,833 | ---- | M] () -- C:\Windows\System32\license.rtf
========== Files Created - No Company Name ==========
[2011.01.19 16:42:04 | 000,000,696 | ---- | C] () -- C:\Windows\tasks\{9234584B-68B8-4AB0-B4B8-4BCCB358D707}.job
[2011.01.19 16:40:50 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.19 16:32:40 | 000,000,696 | ---- | C] () -- C:\Windows\tasks\{0BBBF8CA-5D91-47C9-968C-DE74C66DBD04}.job
[2011.01.19 14:55:56 | 000,000,696 | ---- | C] () -- C:\Windows\tasks\{8F39FE42-970B-4E2F-B205-B0E94B0531D9}.job
[2011.01.19 11:27:11 | 000,000,696 | ---- | C] () -- C:\Windows\tasks\{5FEB8761-0FDF-4537-9F50-1E65C1B3511F}.job
[2011.01.14 19:06:18 | 000,007,601 | ---- | C] () -- C:\Users\**\AppData\Local\Resmon.ResmonCfg
[2011.01.12 22:03:02 | 000,003,029 | ---- | C] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Word 2010.lnk
[2011.01.11 17:39:03 | 000,000,172 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011.01.10 22:00:12 | 003,954,697 | ---- | C] () -- C:\Users\**\Desktop\Neuer Ordner.zip
[2011.01.10 16:17:57 | 000,001,910 | ---- | C] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Instantbird.lnk
[2011.01.09 19:09:17 | 000,012,459 | ---- | C] () -- C:\Users\**\.recently-used.xbel
[2011.01.09 17:22:20 | 000,000,548 | ---- | C] () -- C:\Users\**\Desktop\Settings.ini
[2011.01.09 15:02:14 | 000,001,964 | ---- | C] () -- C:\Users\Public\Desktop\Canon My Printer.lnk
[2011.01.09 14:46:46 | 000,132,362 | ---- | C] () -- C:\Windows\System32\Cnmnput.chm
[2011.01.09 08:35:19 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011.01.08 21:53:21 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2011.01.08 21:53:20 | 000,383,562 | RHS- | C] () -- C:\bootmgr
[2011.01.08 19:05:43 | 000,000,822 | ---- | C] () -- C:\Windows\tasks\RunAsStdUser Task.job
[2011.01.08 19:04:15 | 000,002,362 | ---- | C] () -- C:\Windows\System32\mscomct2.dep
[2011.01.08 19:04:00 | 000,645,120 | ---- | C] () -- C:\Windows\System32\config.gms
[2011.01.08 18:51:18 | 000,000,074 | ---- | C] () -- C:\Users\**\Desktop\SPORT1 - Bundesliga Manager Ihr Lieblingsteam.URL
[2011.01.08 18:51:01 | 000,001,637 | ---- | C] () -- C:\Users\**\Desktop\Twitter.lnk
[2011.01.08 18:51:01 | 000,000,049 | ---- | C] () -- C:\Users\**\Desktop\Router.URL
[2011.01.08 17:41:02 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini
[2011.01.08 17:37:23 | 000,002,717 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2011.01.08 17:14:50 | 000,000,355 | ---- | C] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Computer - Verknüpfung.lnk
[2011.01.08 17:12:41 | 000,001,072 | ---- | C] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2011.01.08 15:48:46 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\AdobeAAMUpdater-1.0-**-PC-**.job
[2011.01.08 14:41:57 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.01.08 14:40:37 | 000,000,204 | ---- | C] () -- C:\Windows\tasks\{5D1BAFBF-0646-4EC8-917C-9FCCB5F34A9D}.job
[2011.01.08 14:34:20 | 000,001,025 | ---- | C] () -- C:\Windows\System32\sysprs7.tgz
[2011.01.08 14:34:20 | 000,001,025 | ---- | C] () -- C:\Windows\System32\sysprs7.dll
[2011.01.08 14:34:20 | 000,000,219 | ---- | C] () -- C:\Windows\System32\lsprst7.tgz
[2011.01.08 14:34:20 | 000,000,205 | ---- | C] () -- C:\Windows\System32\lsprst7.dll
[2011.01.08 14:34:20 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\servdat.slm
[2011.01.08 14:09:47 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011.01.08 14:09:46 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011.01.08 14:09:45 | 000,810,496 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011.01.08 14:09:45 | 000,183,808 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011.01.08 14:09:45 | 000,000,414 | ---- | C] () -- C:\Windows\System32\lame_acm.xml
[2011.01.08 14:09:44 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011.01.08 14:00:50 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.01.08 13:53:04 | 000,653,928 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2011.01.08 13:53:04 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2011.01.08 13:53:04 | 000,129,800 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2011.01.08 13:53:04 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2011.01.08 13:39:01 | 000,001,916 | ---- | C] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011.01.08 13:39:01 | 000,001,892 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.01.08 13:29:18 | 000,015,220 | ---- | C] () -- C:\Windows\System32\results.xml
[2011.01.08 13:28:58 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2011.01.08 13:28:58 | 000,121,232 | ---- | C] () -- C:\Windows\System32\IScrNB.bmp
[2011.01.08 13:27:30 | 002,584,543 | ---- | C] () -- C:\Windows\System32\iglhxa32.cpa
[2011.01.08 13:27:30 | 000,982,220 | ---- | C] () -- C:\Windows\System32\igkrng500.bin
[2011.01.08 13:27:30 | 000,058,811 | ---- | C] () -- C:\Windows\System32\iglhxo32.vp
[2011.01.08 13:27:30 | 000,058,602 | ---- | C] () -- C:\Windows\System32\iglhxg32.vp
[2011.01.08 13:27:30 | 000,058,602 | ---- | C] () -- C:\Windows\System32\iglhxc32.vp
[2011.01.08 13:27:30 | 000,045,028 | ---- | C] () -- C:\Windows\System32\iglhxs32.vp
[2011.01.08 13:27:30 | 000,001,073 | ---- | C] () -- C:\Windows\System32\iglhxa32.vp
[2011.01.08 13:27:29 | 000,134,592 | ---- | C] () -- C:\Windows\System32\igfcg500.bin
[2011.01.08 13:27:29 | 000,092,216 | ---- | C] () -- C:\Windows\System32\igfcg500m.bin
[2011.01.08 13:27:28 | 000,439,300 | ---- | C] () -- C:\Windows\System32\igcompkrng500.bin
[2011.01.08 13:21:07 | 000,058,558 | ---- | C] () -- C:\Windows\System32\igxpxk32.vp
[2011.01.08 13:21:07 | 000,033,304 | ---- | C] () -- C:\Windows\System32\igxpxs32.vp
[2011.01.08 13:21:07 | 000,001,023 | ---- | C] () -- C:\Windows\System32\igxpxa32.vp
[2011.01.08 13:21:06 | 001,674,683 | ---- | C] () -- C:\Windows\System32\igxpxa32.cpa
[2011.01.08 13:21:05 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2011.01.08 13:21:04 | 000,187,765 | ---- | C] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2011.01.08 13:21:04 | 000,176,490 | ---- | C] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2011.01.08 13:21:04 | 000,163,560 | ---- | C] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2011.01.08 13:21:04 | 000,138,088 | ---- | C] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2011.01.08 13:21:04 | 000,134,602 | ---- | C] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2011.01.08 13:21:04 | 000,131,904 | ---- | C] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2011.01.08 13:21:04 | 000,123,747 | ---- | C] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2011.01.08 13:21:04 | 000,121,452 | ---- | C] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2011.01.08 13:21:04 | 000,121,133 | ---- | C] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2011.01.08 13:21:04 | 000,120,883 | ---- | C] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2011.01.08 13:21:04 | 000,119,326 | ---- | C] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2011.01.08 13:21:04 | 000,118,949 | ---- | C] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2011.01.08 13:21:04 | 000,118,570 | ---- | C] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2011.01.08 13:21:04 | 000,117,762 | ---- | C] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2011.01.08 13:21:04 | 000,117,737 | ---- | C] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2011.01.08 13:21:04 | 000,117,527 | ---- | C] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2011.01.08 13:21:04 | 000,117,229 | ---- | C] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2011.01.08 13:21:04 | 000,116,944 | ---- | C] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2011.01.08 13:21:04 | 000,116,868 | ---- | C] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2011.01.08 13:21:04 | 000,116,629 | ---- | C] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2011.01.08 13:21:04 | 000,116,230 | ---- | C] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2011.01.08 13:21:04 | 000,113,040 | ---- | C] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2011.01.08 13:21:04 | 000,112,529 | ---- | C] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2011.01.08 13:21:04 | 000,112,445 | ---- | C] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2011.01.08 13:21:04 | 000,108,405 | ---- | C] () -- C:\Windows\System32\Gfxres.en-US.resources
[2011.01.08 13:21:04 | 000,102,235 | ---- | C] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2011.01.08 13:21:04 | 000,101,113 | ---- | C] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2011.01.08 13:00:45 | 000,001,414 | ---- | C] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011.01.08 12:59:20 | 000,000,290 | ---- | C] () -- C:\Users\**\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011.01.08 12:54:08 | 2388,582,400 | -HS- | C] () -- C:\hiberfil.sys
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
========== LOP Check ==========
[2011.01.08 14:56:24 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Eclipse
[2011.01.08 19:27:19 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\EndNote
[2011.01.10 16:18:00 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Instantbird
[2011.01.10 20:46:03 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Subversion
[2011.01.08 14:00:41 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Thunderbird
[2011.01.08 19:05:43 | 000,000,822 | ---- | M] () -- C:\Windows\Tasks\RunAsStdUser Task.job
[2009.07.14 05:53:46 | 000,001,108 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.01.19 16:32:40 | 000,000,696 | ---- | M] () -- C:\Windows\Tasks\{0BBBF8CA-5D91-47C9-968C-DE74C66DBD04}.job
[2011.01.08 14:40:37 | 000,000,204 | ---- | M] () -- C:\Windows\Tasks\{5D1BAFBF-0646-4EC8-917C-9FCCB5F34A9D}.job
[2011.01.19 11:27:11 | 000,000,696 | ---- | M] () -- C:\Windows\Tasks\{5FEB8761-0FDF-4537-9F50-1E65C1B3511F}.job
[2011.01.19 14:55:56 | 000,000,696 | ---- | M] () -- C:\Windows\Tasks\{8F39FE42-970B-4E2F-B205-B0E94B0531D9}.job
[2011.01.19 16:42:04 | 000,000,696 | ---- | M] () -- C:\Windows\Tasks\{9234584B-68B8-4AB0-B4B8-4BCCB358D707}.job
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2011.01.09 15:14:55 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Adobe
[2011.01.08 18:07:07 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Avira
[2011.01.08 15:24:26 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Download Manager
[2011.01.08 14:56:24 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Eclipse
[2011.01.08 19:27:19 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\EndNote
[2011.01.08 12:59:32 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Identities
[2011.01.10 16:18:00 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Instantbird
[2011.01.08 13:15:07 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Macromedia
[2011.01.12 22:06:04 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Malwarebytes
[2011.01.08 19:07:09 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\MathWorks
[2009.07.14 08:26:55 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Media Center Programs
[2011.01.17 13:33:32 | 000,000,000 | --SD | M] -- C:\Users\**\AppData\Roaming\Microsoft
[2011.01.08 13:40:10 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Mozilla
[2011.01.08 17:57:04 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Nero
[2011.01.20 20:13:23 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Skype
[2011.01.20 17:50:25 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\skypePM
[2011.01.10 20:46:03 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Subversion
[2011.01.08 14:00:41 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\Thunderbird
[2011.01.08 14:55:32 | 000,000,000 | ---D | M] -- C:\Users\**\AppData\Roaming\WinRAR
< %APPDATA%\*.exe /s >
< %SYSTEMDRIVE%\*.exe >
[2007.11.07 08:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
< MD5 for: AGP440.SYS >
[2008.04.14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- C:\markus\Inder\alles\I386\sp3.cab:AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- C:\markus\Inder\alles\I386\sp3.cab:atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\system32\drivers\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\system32\eventlog.dll
[2007.01.23 16:22:16 | 000,032,890 | ---- | M] () MD5=4FA5D1120762802A741F374F8B391E69 -- C:\Program Files\MATLAB\R2010a\sys\perl\win32\lib\auto\Win32\EventLog\EventLog.dll
< MD5 for: EXPLORER.EXE >
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2008.04.14 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: IASTORV.SYS >
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
< MD5 for: USER32.DLL >
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\System32\user32.dll
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
[2008.04.14 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\system32\user32.dll
< MD5 for: USERINIT.EXE >
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2008.04.14 13:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2008.04.14 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\system32\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2008.04.14 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\markus\Inder\alles\RRbackups\FR\UF\WINDOWS\system32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< End of report > --- --- --- |