| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Auch "Windowssystem aus Sicherheitsgründen blockiert"Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.01.2012, 13:45
| #1 |
 |  Auch "Windowssystem aus Sicherheitsgründen blockiert" Hallo, wie schon etliche vor mir habe ich mir wohl auch den Schädling eingefangen, der das "Windowssystem aus Sicherheitsgründen blockiert". Ein Komplettscan mit McAfee hat nichts gefunden. Kann es da reichen, wenn ich das System von einem sauberen Backup wiederherstelle? Oder befällt der Trojaner (?) auch die Windowssicherung und -wiederherstellung und übersteht das? Ansonsten wär ich sehr dankbar für jede Hilfe. Hab mir schon einige andere Threads zum Thema angeguckt, aber da ist wohl individuelle Hilfe nötig. Gruß tissi |
|
19.01.2012, 13:48
| #2 |
| /// Malware-holic   | Auch "Windowssystem aus Sicherheitsgründen blockiert" schaun wir mal.
__________________pc neustarten, f8 drücken abgesicherter modus mit netzwerk wählen. Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
__________________ |
|
19.01.2012, 14:27
| #3 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" Erstmal vielen Dank für die schnelle Hilfe, bin echt begeistert.
__________________Und hier die Logs: OTL.Txt: Code:
ATTFilter OTL logfile created on: 19.01.2012 14:11:20 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\***\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 5,92 Gb Total Physical Memory | 4,93 Gb Available Physical Memory | 83,27% Memory free 11,83 Gb Paging File | 10,97 Gb Available in Paging File | 92,73% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 581,42 Gb Total Space | 440,25 Gb Free Space | 75,72% Space Free | Partition Type: NTFS Drive E: | 488,95 Mb Total Space | 441,96 Mb Free Space | 90,39% Space Free | Partition Type: FAT Computer Name: NOTEBOOKC | User Name: *** | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.01.19 13:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe ========== Modules (No Company Name) ========== ========== Win32 Services (SafeList) ========== SRV:64bit: - [2011.10.18 14:32:28 | 000,161,168 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp) SRV:64bit: - [2011.10.18 14:23:24 | 000,208,536 | ---- | M] () [Unknown | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire) SRV:64bit: - [2011.10.18 14:23:06 | 000,199,272 | ---- | M] () [Unknown | Stopped] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield) SRV:64bit: - [2011.06.23 14:23:52 | 000,501,768 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\VirusScan\mcods.exe -- (McODS) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McProxy) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNASvc) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNaiAnn) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (mcmscsvc) SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc) SRV:64bit: - [2010.11.29 21:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:64bit: - [2010.09.23 00:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2012.01.03 05:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.11.19 17:54:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011.07.08 21:32:14 | 000,666,696 | ---- | M] (Juniper Networks) [Auto | Stopped] -- C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService) SRV - [2011.03.25 22:26:46 | 000,334,448 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP) SRV - [2011.03.25 22:26:28 | 000,404,080 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service) SRV - [2011.03.25 22:26:16 | 000,113,264 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService) SRV - [2011.03.25 21:27:40 | 000,539,248 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService) SRV - [2010.12.21 00:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2010.12.21 00:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2010.12.17 20:41:32 | 001,515,792 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2010.12.17 20:28:46 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV - [2010.12.17 20:26:50 | 000,836,880 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2010.11.03 18:01:20 | 001,298,496 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2010.11.03 17:53:28 | 000,897,088 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2010.10.29 19:20:58 | 000,236,016 | ---- | M] (CyberLink) [Auto | Stopped] -- c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124) SRV - [2010.09.04 07:15:22 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12) SRV - [2010.09.04 07:14:26 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM) SRV - [2010.08.30 20:42:00 | 000,220,528 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- c:\Programme\mcafee\msc\McAWFwk.exe -- (McAWFwk) SRV - [2010.08.26 02:28:54 | 002,823,000 | ---- | M] (Dell, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe -- (NOBU) SRV - [2010.08.19 12:57:14 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.11.18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.12.09 19:45:00 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex) DRV:64bit: - [2011.11.19 17:54:00 | 000,249,152 | ---- | M] (NVIDIA Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\nvkflt.sys -- (nvkflt) DRV:64bit: - [2011.11.19 17:54:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:64bit: - [2011.11.15 01:13:00 | 000,327,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf) DRV:64bit: - [2011.10.15 13:16:16 | 000,647,080 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk) DRV:64bit: - [2011.10.15 13:16:16 | 000,481,768 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek) DRV:64bit: - [2011.10.15 13:16:16 | 000,284,648 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk) DRV:64bit: - [2011.10.15 13:16:16 | 000,229,528 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk) DRV:64bit: - [2011.10.15 13:16:16 | 000,160,280 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk) DRV:64bit: - [2011.10.15 13:16:16 | 000,100,912 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet) DRV:64bit: - [2011.10.15 13:16:16 | 000,075,808 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mfenlfk.sys -- (mfenlfk) DRV:64bit: - [2011.10.15 13:16:16 | 000,065,264 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids) DRV:64bit: - [2011.06.10 05:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2011.03.25 22:27:36 | 000,068,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86) DRV:64bit: - [2011.03.25 22:27:34 | 000,081,008 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci) DRV:64bit: - [2011.03.25 22:25:46 | 000,031,856 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd) DRV:64bit: - [2011.03.25 22:25:34 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif) DRV:64bit: - [2011.03.25 21:27:36 | 000,038,512 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon) DRV:64bit: - [2011.03.25 19:05:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb) DRV:64bit: - [2011.03.25 19:04:58 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge) DRV:64bit: - [2011.03.25 19:04:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter) DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.31 16:24:46 | 000,121,960 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB) DRV:64bit: - [2011.01.07 16:02:28 | 000,045,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64) DRV:64bit: - [2010.12.23 18:44:20 | 012,260,000 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2010.12.22 18:08:48 | 008,505,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel(R) DRV:64bit: - [2010.12.13 18:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler) DRV:64bit: - [2010.11.29 21:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2010.11.19 19:34:26 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2010.11.19 19:34:26 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2010.11.12 13:40:50 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:64bit: - [2010.11.11 02:32:20 | 000,172,632 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR) DRV:64bit: - [2010.11.04 11:07:06 | 000,058,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:64bit: - [2010.10.20 01:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R) DRV:64bit: - [2010.10.15 09:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R) DRV:64bit: - [2010.09.24 02:44:48 | 001,394,224 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2010.09.03 17:42:40 | 000,167,920 | ---- | M] (Sonic Solutions) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\C2SCSI64.SYS -- (c2scsi64) DRV:64bit: - [2010.08.20 11:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn) DRV:64bit: - [2010.08.12 16:51:30 | 000,175,168 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt) DRV:64bit: - [2010.07.13 03:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt) DRV:64bit: - [2010.03.19 09:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:64bit: - [2010.02.27 00:32:12 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd) DRV:64bit: - [2009.12.09 14:10:40 | 000,032,768 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dsNcAdpt.sys -- (dsNcAdpt) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2008.04.08 14:41:08 | 000,170,016 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USB_0064.sys -- (DVBUSB_0064_Sevice) DRV:64bit: - [2006.11.01 18:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr) DRV - [2010.08.19 12:56:38 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60) DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll () FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2011.12.24 11:56:48 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.12.21 14:42:55 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.03 19:59:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions [2011.07.13 22:27:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011.07.13 22:27:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011.12.24 11:56:48 | 000,000,000 | ---D | M] (McAfee ScriptScan for Firefox) -- C:\PROGRAM FILES (X86)\COMMON FILES\MCAFEE\SYSTEMCORE [2011.12.21 14:42:54 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011.04.14 13:01:38 | 000,024,376 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\mozilla firefox\components\Scriptff.dll [2011.12.21 14:42:52 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.12.21 14:42:52 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2011.12.21 14:42:52 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2011.12.21 14:42:52 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2011.12.21 14:42:52 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2011.12.21 14:42:52 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2012.01.14 18:15:01 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Programme\Common Files\mcafee\systemcore\ScriptSn.20111224115439.dll (McAfee, Inc.) O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Programme\mcafee\msk\mskapbho.dll () O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20111224115439.dll (McAfee, Inc.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe () O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [QuickSet] c:\Programme\Dell\QuickSet\quickset.exe (Dell Inc.) O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink) O4 - HKLM..\Run: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe (Dell, Inc.) O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe () O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.) O4 - HKLM..\Run: [PDVD9LanguageShortcut] c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.) O4 - HKLM..\Run: [RemoteControl9] c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions) O4 - HKLM..\Run: [VMware hqtray] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.) O4 - HKCU..\Run: [{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}] C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe (TrueCrypt Foundation) O4 - HKCU..\Run: [NetLimiter] C:\Program Files\NetLimiter 3\NLClientApp.exe /tray File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{37A2E693-68C7-4C41-AD0A-C700B7C90D43}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D91BEF26-4787-4BAE-BB9C-F2AFD4FB2C70}: NameServer = 192.168.0.1 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.) O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) -C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP MsConfig:64bit - StartUpReg: Dell DataSafe Online - hkey= - key= - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.) MsConfig:64bit - StartUpReg: Dell Webcam Central - hkey= - key= - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd) MsConfig:64bit - State: "startup" - Reg Error: Key error. MsConfig:64bit - State: "services" - Reg Error: Key error. CREATERESTOREPOINT Error creating restore point. ========== Files/Folders - Created Within 30 Days ========== [2012.01.19 13:51:26 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2012.01.19 13:29:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee [2012.01.16 14:21:40 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{F5E49959-780D-4AF1-AEA8-316FE8D3EC8F} [2012.01.16 14:21:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5395C7DE-ED9D-4E36-8202-A4060F1FCA3A} [2012.01.16 09:13:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BB13469D-6288-4D21-9CCD-5504158D04AD} [2012.01.15 16:07:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{11AA8A5B-D667-465F-AA1E-95DB0C28E7BE} [2012.01.15 16:07:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0FDD9D70-3042-4C2C-B148-A415B4335A40} [2012.01.15 13:15:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{62979A56-2C94-4058-A862-C4150F520C33} [2012.01.14 12:41:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3A202188-F656-47CF-B7EE-C0F794531340} [2012.01.14 12:41:42 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{63A7C9EA-4DE1-4FA8-8527-FD7744358A0C} [2012.01.13 22:10:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{079C89EE-5CD9-4AD3-86BB-2F8CDE14D64F} [2012.01.13 22:09:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{69CFE995-2C67-4B3F-80CA-70B319D76936} [2012.01.13 09:55:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2012.01.13 09:54:43 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA GPU Computing Toolkit [2012.01.13 09:42:43 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2012.01.13 09:42:43 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2012.01.13 09:39:49 | 000,000,000 | ---D | C] -- C:\NVIDIA [2012.01.13 09:01:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{908A21C4-F77A-4B96-A775-C516608982AF} [2012.01.13 09:01:14 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8368E417-56A5-45C5-9CAC-80830BD07042} [2012.01.12 22:12:03 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C009C50F-D146-4764-9F0A-A7A5FE609791} [2012.01.12 17:19:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{82E1F997-35C4-406D-BA11-A421D14AFAF1} [2012.01.12 14:28:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{13BA3195-80EE-4834-907F-2950C47269A8} [2012.01.12 14:23:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{999E6D61-FE5C-4585-BAED-012649D60AA5} [2012.01.12 09:01:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DFE6DED4-622E-4179-AD7D-4E18F99DD933} [2012.01.11 09:39:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{96AB6259-26BB-457A-B9DD-FC26B1C13B41} [2012.01.11 09:38:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{83751B27-F6EB-4458-87FF-F846E96BDEE2} [2012.01.10 17:56:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7C0AFBF6-748D-4BFD-BE7D-F865DAAE4732} [2012.01.10 17:56:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A49618AD-CF91-4E99-9D2C-F02B055E4F77} [2012.01.09 17:18:14 | 000,000,000 | ---D | C] -- C:\Users\***\.ssh [2012.01.09 14:08:34 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DB0CEA02-82E3-40B9-802C-2957210092D7} [2012.01.09 14:08:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7288F2A2-C9BB-48EC-9890-FF5FB8B607E6} [2012.01.09 09:18:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7D87BF4E-437F-4502-B069-56E409ADCB7D} [2012.01.08 17:02:09 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C10A7703-70DC-4E05-BB39-A437FC5A2F59} [2012.01.08 17:01:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FF4D416C-D7AA-4A97-B26D-3FA8E8238D7C} [2012.01.08 13:43:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B32B0963-0793-4838-8AE5-43F2480E11B8} [2012.01.07 21:37:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C5E99881-E284-4334-9069-E610D4D004C6} [2012.01.07 21:37:21 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{237A82B1-DDA0-48AE-8268-7C98E295440E} [2012.01.07 15:35:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ANNO 1602 [2012.01.07 10:45:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BCBFCF43-C1ED-47FF-8555-6F22227027DA} [2012.01.07 10:45:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3B407DCC-C0A1-4E56-A258-609896913565} [2012.01.06 11:56:35 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{ED72B535-0050-476D-8C22-F0085857D2E7} [2012.01.06 11:06:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2ECF5C5B-2569-4A43-94D9-3B557CCDBE6F} [2012.01.06 11:06:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8EB08F8E-A919-4021-8DC0-0EDE401D2E01} [2012.01.05 08:17:14 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3CBC80B6-1D3C-4202-9358-C4799113E543} [2012.01.05 08:17:03 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{ACB167BA-8C23-400C-833E-6DEEA4D97457} [2012.01.04 11:05:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4F3A287C-A4C4-4FF4-879D-BF886C606A7A} [2012.01.04 11:05:00 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{9C871109-6636-43A2-9189-19C4A09541AE} [2012.01.04 10:09:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{65DAF0A5-33F0-4F20-99DF-FEFA9A043AFA} [2012.01.04 09:55:37 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{547E83CE-50BB-49B3-A7CD-44CDE6EFC7C6} [2012.01.03 14:53:04 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{83EB7081-F6C2-4A63-BE39-0686976CA5B6} [2012.01.03 14:52:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0441681F-1E60-48E6-B5A9-6EEB2148466D} [2012.01.03 13:11:37 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{55503357-364C-49C2-858B-205C76C5C123} [2012.01.03 11:18:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8938EC12-F280-4DD3-9D70-FAE4D33A1410} [2012.01.02 17:42:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7DB47592-8CD7-40FB-BD88-6B2A83642F80} [2012.01.02 17:42:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2902E46A-D8DE-4FE5-90FC-186A51BD7B25} [2012.01.02 10:22:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{432FC88B-296B-45A4-A173-404882BAB606} [2012.01.02 10:22:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{784248E9-E5C2-439A-9143-8CFC664FB6F1} [2012.01.02 00:30:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1926FC3F-4034-484B-8962-0397C09F92B0} [2012.01.01 21:51:47 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{631134C0-E052-49D4-8AE1-6661964D3F9C} [2012.01.01 21:51:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8008940C-EA93-43E7-8AA9-C0F1AA5A21E7} [2012.01.01 19:52:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{728C4FA8-CF44-4B2C-B6A8-2D2CA8498EC8} [2012.01.01 12:54:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BAEDB6AA-7DE9-4AE7-B186-D7D179085F5F} [2012.01.01 12:54:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{38D6569F-1DF6-4113-9EF3-7916ABB7DEF8} [2011.12.31 15:27:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{81BD2A98-96FF-46B1-9E9B-E9BF7A12352C} [2011.12.31 15:27:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5569259B-0F04-40B2-B1AD-DDF0A721E5DC} [2011.12.30 15:13:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1F968AF9-F931-4B36-884D-E9027FD4925E} [2011.12.30 15:12:56 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2D7055AE-1EFE-4277-A488-E996DF39A950} [2011.12.30 10:59:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BDB98F43-CCE7-4328-95EA-F1D6A08BF427} [2011.12.29 15:42:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3C17CAEE-8C3F-48A9-BA6E-CFBF48073654} [2011.12.29 15:42:47 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{43E54ED1-7ECD-4703-B6A7-2D38CEF21ECD} [2011.12.29 13:23:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C33DCB05-5A26-4DB3-AFC1-AF9F45A51E57} [2011.12.28 23:13:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7385C042-44A0-42D8-B690-FC3E96393994} [2011.12.28 10:46:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{351497D7-A61E-408D-A9C7-A2F6613FE12C} [2011.12.28 10:46:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C5C8D459-0028-4461-95A5-56E1BDCA24E6} [2011.12.28 01:11:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1394A59D-8236-489B-8BAF-4228E27D36D5} [2011.12.28 01:11:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1A3EC290-7225-4D40-BA81-5FC0C7445CFA} [2011.12.28 00:21:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{774DB3B6-4F92-419C-A159-2D4BE0A19A88} [2011.12.27 10:53:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1179B0F7-ADA9-47AA-A1A6-06CD75D3A2CA} [2011.12.27 10:52:35 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{AA3BB59A-737F-4B68-9BC7-FD11168DE800} [2011.12.26 23:18:18 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2790D2D6-C157-4004-ACA6-D0B7FB9EB723} [2011.12.26 18:02:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1313F1C9-7CA4-45E6-AAB3-A1608848A0B4} [2011.12.26 10:26:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5BB666DD-B05B-4772-9D7E-FCD57311C770} [2011.12.25 17:56:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FF0088EB-1390-4459-B391-4D2FE951F165} [2011.12.25 17:56:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{15CDA084-806B-4AAD-B536-434CC07E7567} [2011.12.25 12:09:56 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{65860843-269C-4238-8391-571C827B91A0} [2011.12.25 12:09:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0BF61365-0F43-4AFB-8321-241E008AA00E} [2011.12.24 10:42:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5B71B9E3-F366-4A90-BF96-5CD15C774611} [2011.12.23 10:45:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3A9BEFB7-C8C0-4421-9EE0-433D03654B6B} [2011.12.23 10:45:18 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A75C0FC1-BF43-46B9-A7B4-431DDBF2EA0E} [2011.12.22 20:01:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{70150D8C-5B26-408D-BE5B-A07AF22C1F9C} [2011.12.22 19:58:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4782F48D-0BC5-48A8-8D89-5194D8F700C5} [2011.12.22 09:11:34 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{03B31392-FBD2-4ED9-B9FE-838AB2DE9849} [2011.12.22 09:11:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1869E4E1-1E28-4DBE-BCAE-55DC302998F2} [2011.12.21 13:49:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git [2011.12.21 13:48:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Git [2011.12.21 10:11:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{AA62CBC9-B103-461E-AF26-3628B2AEA0C0} [2011.12.21 10:11:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C1A4717A-3E2C-4BAB-A975-963B603CE55B} ========== Files - Modified Within 30 Days ========== [2012.01.19 13:55:03 | 001,506,624 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.01.19 13:55:03 | 000,656,660 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.01.19 13:55:03 | 000,618,542 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.01.19 13:55:03 | 000,131,058 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.01.19 13:55:03 | 000,107,448 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.01.19 13:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2012.01.19 13:29:26 | 000,001,830 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Center.lnk [2012.01.19 13:22:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.01.19 13:22:26 | 469,372,927 | -HS- | M] () -- C:\hiberfil.sys [2012.01.19 11:42:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.01.19 11:42:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.01.12 14:42:05 | 000,000,378 | ---- | M] () -- C:\Users\***\.bash_history [2012.01.11 15:03:44 | 000,000,937 | -H-- | M] () -- C:\Users\***\.gitk [2012.01.09 17:20:02 | 000,000,081 | ---- | M] () -- C:\Users\***\.gitconfig ========== Files Created - No Company Name ========== [2012.01.11 15:01:00 | 000,000,937 | -H-- | C] () -- C:\Users\***\.gitk [2012.01.09 17:27:10 | 000,000,378 | ---- | C] () -- C:\Users\***\.bash_history [2012.01.09 17:20:02 | 000,000,081 | ---- | C] () -- C:\Users\***\.gitconfig [2011.12.26 10:50:05 | 000,001,830 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Center.lnk [2011.05.25 19:03:06 | 000,005,120 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.05.24 10:45:34 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.05.21 14:27:33 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI [2011.03.26 16:59:07 | 000,007,600 | ---- | C] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg [2011.03.14 22:50:52 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin [2011.03.14 22:50:50 | 000,207,376 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011.03.14 22:50:48 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [1997.06.14 09:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll ========== LOP Check ========== [2011.07.29 11:41:24 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FOG Downloader [2011.10.18 20:34:49 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo [2011.05.18 15:52:25 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0 [2012.01.18 22:30:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ICQ [2011.10.23 14:23:21 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Juniper Networks [2011.03.22 17:16:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech [2011.03.23 22:47:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\mp3DirectCut [2011.03.22 18:04:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Opera [2011.04.21 17:30:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Subversion [2011.03.23 10:45:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TerraTec [2011.09.12 18:14:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TS3Client [2011.03.23 11:20:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer [2011.10.18 20:49:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Zylom [2012.01.19 13:13:03 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2011.03.22 17:15:44 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN [2011.03.22 20:56:43 | 000,000,000 | ---D | M] -- C:\3fc56901d71852fea37f6c313746d1af [2011.04.20 16:46:31 | 000,000,000 | -H-D | M] -- C:\CanoScan [2011.03.22 17:35:17 | 000,000,000 | ---D | M] -- C:\dell [2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2011.03.22 17:12:39 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2011.03.24 14:00:11 | 000,000,000 | ---D | M] -- C:\Drivers [2011.03.22 18:24:16 | 000,000,000 | ---D | M] -- C:\Intel [2011.03.23 10:11:28 | 000,000,000 | RH-D | M] -- C:\MSOCache [2012.01.13 09:39:49 | 000,000,000 | ---D | M] -- C:\NVIDIA [2011.10.19 13:27:09 | 000,000,000 | ---D | M] -- C:\opt [2012.01.13 09:54:43 | 000,000,000 | R--D | M] -- C:\Program Files [2011.12.21 13:48:52 | 000,000,000 | R--D | M] -- C:\Program Files (x86) [2011.10.18 20:48:56 | 000,000,000 | -H-D | M] -- C:\ProgramData [2011.03.22 17:12:39 | 000,000,000 | -HSD | M] -- C:\Programme [2011.03.23 11:37:48 | 000,000,000 | ---D | M] -- C:\Programmierung [2012.01.07 15:35:53 | 000,000,000 | ---D | M] -- C:\Spiele [2011.03.22 17:17:59 | 000,000,000 | -HSD | M] -- C:\System Recovery [2012.01.13 09:54:23 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2011.03.24 14:00:11 | 000,000,000 | ---D | M] -- C:\Temp [2011.03.22 17:12:54 | 000,000,000 | R--D | M] -- C:\Users [2012.01.19 13:22:26 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < MD5 for: AGP440.SYS > [2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys [2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys [2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.20575_none_39c1885e54505643\atapi.sys [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll [2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll < MD5 for: EXPLORER.EXE > [2011.03.14 23:03:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe [2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe [2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe [2011.03.14 23:03:58 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe [2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe [2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe [2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2011.03.14 23:03:51 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe [2011.03.14 23:03:54 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe [2011.03.14 23:03:58 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2011.03.14 23:03:54 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2011.03.14 23:03:58 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2011.03.14 23:03:54 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2011.03.14 23:03:58 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe [2011.03.14 23:03:51 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe [2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe [2011.03.14 23:03:54 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe [2011.03.14 23:03:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe < MD5 for: IASTORV.SYS > [2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys [2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys [2011.03.14 23:04:21 | 000,410,504 | ---- | M] (Intel Corporation) MD5=513DC087CFED7D2BB82F005385D3531F -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_0af87721a183cb70\iaStorV.sys [2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys [2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys [2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys [2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys [2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys [2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys [2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys [2011.03.14 23:04:21 | 000,410,496 | ---- | M] (Intel Corporation) MD5=E353CF970C5D4D6A092911E15FB78C07 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_0bd89532ba6088d9\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll [2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll [2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll < MD5 for: NVSTOR.SYS > [2011.03.14 23:04:21 | 000,166,280 | ---- | M] (NVIDIA Corporation) MD5=0AF7B8136794E23E87BE138992880E64 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvstor.sys [2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys [2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys [2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys [2011.03.14 23:04:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=CE76755AF933E728CEBA6C7A970838A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvstor.sys [2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys [2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys [2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys [2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys [2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys [2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll [2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll [2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll [2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll < MD5 for: USER32.DLL > [2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll [2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll [2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll [2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll [2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll [2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll < MD5 for: USERINIT.EXE > [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe [2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe [2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe < MD5 for: WINLOGON.EXE > [2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe [2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2011.03.14 23:03:58 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2011.03.14 23:03:58 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys [2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\system32\*.dll /lockedfiles > < %USERPROFILE%\*.* > [2012.01.12 14:42:05 | 000,000,378 | ---- | M] () -- C:\Users\***\.bash_history [2012.01.09 17:20:02 | 000,000,081 | ---- | M] () -- C:\Users\***\.gitconfig [2012.01.11 15:03:44 | 000,000,937 | -H-- | M] () -- C:\Users\***\.gitk [2011.05.18 15:52:25 | 000,001,457 | ---- | M] () -- C:\Users\***\.recently-used.xbel [2012.01.19 14:13:09 | 002,359,296 | -HS- | M] () -- C:\Users\***\NTUSER.DAT [2012.01.19 14:13:09 | 000,262,144 | -HS- | M] () -- C:\Users\***\ntuser.dat.LOG1 [2011.03.22 17:12:54 | 000,000,000 | -HS- | M] () -- C:\Users\***\ntuser.dat.LOG2 [2011.03.22 17:33:52 | 000,065,536 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2011.03.22 17:33:52 | 000,524,288 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2011.03.22 17:33:52 | 000,524,288 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2011.03.22 17:12:54 | 000,000,020 | -HS- | M] () -- C:\Users\***\ntuser.ini [2012.01.18 09:11:01 | 000,053,853 | ---- | M] () -- C:\Users\***\UnionInvestment.xlsx < %USERPROFILE%\Local Settings\Temp\*.exe > < %USERPROFILE%\Local Settings\Temp\*.dll > < %USERPROFILE%\Application Data\*.exe > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < End of report > |
|
19.01.2012, 14:28
| #4 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" Extras.Txt: Code:
ATTFilter OTL Extras logfile created on: 19.01.2012 13:55:08 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
5,92 Gb Total Physical Memory | 5,16 Gb Available Physical Memory | 87,25% Memory free
11,83 Gb Paging File | 11,09 Gb Available in Paging File | 93,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 581,42 Gb Total Space | 440,27 Gb Free Space | 75,72% Space Free | Partition Type: NTFS
Drive E: | 488,95 Mb Total Space | 441,96 Mb Free Space | 90,39% Space Free | Partition Type: FAT
Computer Name: NOTEBOOKC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center
"{0ABFCCD6-DB8E-4DAB-869E-68C908AABD0D}" = NVIDIA CUDA Toolkit v4.1 (64 bit)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)
"{290D4DB2-F1B4-4B8E-918D-D71EF29A001B}" = Intel(R) PROSet/Wireless WiFi-Software
"{2BF35D84-6377-4F70-9F39-97CF67E67FFF}" = Microsoft IntelliPoint 8.0
"{45EF12B0-F531-4A2C-A1C0-6B1495698E30}" = TortoiseSVN 1.6.15.21042 (64 bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{64A3A4F4-B792-11D6-A78A-00B0D0160260}" = Java(TM) SE Development Kit 6 Update 26 (64-bit)
"{64A3A4F4-B792-11D6-A78A-00B0D0160270}" = Java(TM) SE Development Kit 6 Update 27 (64-bit)
"{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.1.13.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Überwachungstool für die Intel® Turbo-Boost-Technik 2.0
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Dell Support Center" = Dell Support Center
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.00 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{184A26D9-6561-49A9-A571-4D9BD93394C8}" = QtSpim
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
"{2A0F2CC5-3065-492C-8380-B03AA7106B1A}" = Dell Product Registration
"{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}" = TerraTec Home Cinema
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{73E0D3A0-9C30-4F59-ABBF-6233686FB396}_is1" = ConTEXT v0.98.6
"{746F49C9-3789-4F8E-AF3A-3A4B42ACFAF8}" = Spellforce 2 Gold
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7E8242F8-BD2A-44D7-BCED-9B231A02B367}" = SpellForce 2 Patch
"{7EC66A95-AC2D-4127-940B-0445A526AB2F}" = Dell DataSafe Online
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84F7CAD9-2316-4701-B5CA-E90FD60029E9}" = ANNO 1602
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.SingleImage_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9569E6BC-326A-432F-97AB-35263A327BF1}" = Roxio Burn
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{A53A11EA-0095-493F-86FA-A15E8A86A405}" = VMware Player
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.2) MUI
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D102611A-6466-4101-A51D-51069303AC65}" = tools-linux
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter
"{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"Blobby Volley 2.0 Version 0.9b_is1" = Blobby Volley 2.0 Version 0.9b
"Cinergy S USB" = Cinergy S USB V1.04.02.04
"Dell Webcam Central" = Dell Webcam Central
"Git_is1" = Git version 1.7.8-preview20111206
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"Juniper Network Connect 6.5.0" = Juniper Networks Network Connect 6.5.0
"Juniper Network Connect 7.0.0" = Juniper Networks Network Connect 7.0.0
"Juniper_Setup_Client Activex Control" = Juniper Networks Setup Client Activex Control
"LANconfig" = ELSA LANconfig
"LANmonitor" = ELSA LANmonitor
"MiKTeX 2.9" = MiKTeX 2.9
"Mozilla Firefox 7.0.1 (x86 de)" = Mozilla Firefox 7.0.1 (x86 de)
"MSC" = McAfee SecurityCenter
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"Opera 11.60.1185" = Opera 11.60
"Revo Uninstaller" = Revo Uninstaller 1.91
"S2TNG" = Die Siedler II - Die nächste Generation
"StarCraft II" = StarCraft II
"TeXnicCenter_is1" = TeXnicCenter Version 1.0 Stable RC1
"VMware_Player" = VMware Player
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Juniper_Setup_Client" = Juniper Networks Setup Client
"ScrollDemo" = ScrollDemo
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 18.10.2011 17:43:48 | Computer Name = NotebookC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\***\Downloads\SoftonicDownloader_fuer_monopoly-3.exe".
Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche
Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In
Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error - 18.10.2011 18:57:26 | Computer Name = NotebookC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "c:\Users\***\downloads\softonicdownloader_fuer_monopoly-3.exe".
Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche
Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In
Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error - 19.10.2011 16:44:47 | Computer Name = NotebookC | Source = Application Hang | ID = 1002
Description = Programm Client.exe, Version 4.0.3.2451 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 508 Startzeit:
01cc8e9789b7e134 Endzeit: 260 Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe Berichts-ID:
2c5d0c03-fa93-11e0-a30f-14feb59a632f
Error - 20.10.2011 02:59:44 | Computer Name = NotebookC | Source = ESENT | ID = 484
Description = wlmail (4724) WindowsLiveMail0: Versuch, Ordner "C:\Users\***\AppData\Local\Microsoft\Windows
Live Mail\Backup\old" zu entfernen, ist mit Systemfehler 145 (0x00000091): "Das
Verzeichnis ist nicht leer. " fehlgeschlagen. Fehler -1022 (0xfffffc02) beim Entfernen
von Ordnern.
Error - 20.10.2011 02:59:44 | Computer Name = NotebookC | Source = ESENT | ID = 215
Description = wlmail (4724) WindowsLiveMail0: Die Sicherung wurde abgebrochen, weil
sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen
wurde.
Error - 25.10.2011 02:45:53 | Computer Name = NotebookC | Source = ESENT | ID = 484
Description = wlmail (5500) WindowsLiveMail0: Versuch, Ordner "C:\Users\***\AppData\Local\Microsoft\Windows
Live Mail\Backup\old" zu entfernen, ist mit Systemfehler 145 (0x00000091): "Das
Verzeichnis ist nicht leer. " fehlgeschlagen. Fehler -1022 (0xfffffc02) beim Entfernen
von Ordnern.
Error - 25.10.2011 02:45:53 | Computer Name = NotebookC | Source = ESENT | ID = 215
Description = wlmail (5500) WindowsLiveMail0: Die Sicherung wurde abgebrochen, weil
sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen
wurde.
Error - 28.10.2011 15:53:08 | Computer Name = NotebookC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: svchost.exe_FontCache, Version: 6.1.7600.16385,
Zeitstempel: 0x4a5bc3c1 Name des fehlerhaften Moduls: fntcache.dll, Version: 6.1.7601.17563,
Zeitstempel: 0x4d5faf0d Ausnahmecode: 0x40000015 Fehleroffset: 0x000000000003d6fa
ID
des fehlerhaften Prozesses: 0x1158 Startzeit der fehlerhaften Anwendung: 0x01cc95a3f796dda4
Pfad
der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe Pfad des fehlerhaften
Moduls: c:\windows\system32\fntcache.dll Berichtskennung: 74c8d0f2-019e-11e1-974c-14feb59a632f
Error - 06.11.2011 16:55:56 | Computer Name = NotebookC | Source = Application Hang | ID = 1002
Description = Programm Client.exe, Version 4.0.4.2456 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1b64 Startzeit:
01cc9cbe54a92698 Endzeit: 127 Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe
Berichts-ID:
b76c8294-08b9-11e1-b42b-8d174f822f32
Error - 17.11.2011 14:33:15 | Computer Name = NotebookC | Source = Application Hang | ID = 1002
Description = Programm Client.exe, Version 4.0.4.2462 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 13e0 Startzeit:
01cca544d06adcd1 Endzeit: 212 Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe
Berichts-ID:
9b2a3d01-114a-11e1-beda-f5c620c5ee2d
[ Dell Events ]
Error - 22.03.2011 13:47:09 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 14:06:28 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 14:06:28 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:15:55 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:15:55 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:17:50 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:17:50 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:18:39 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:18:39 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
Error - 22.03.2011 17:19:31 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
[ Media Center Events ]
Error - 11.04.2011 02:47:23 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 08:47:21 - Fehler beim Herstellen der Internetverbindung. 08:47:21
- Serververbindung konnte nicht hergestellt werden..
Error - 16.04.2011 03:12:30 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 09:12:29 - Fehler beim Herstellen der Internetverbindung. 09:12:29
- Serververbindung konnte nicht hergestellt werden..
Error - 21.04.2011 03:46:13 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 09:46:12 - Fehler beim Herstellen der Internetverbindung. 09:46:12
- Serververbindung konnte nicht hergestellt werden..
Error - 25.04.2011 22:18:25 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:18:24 - Fehler beim Herstellen der Internetverbindung. 04:18:24
- Serververbindung konnte nicht hergestellt werden..
Error - 30.04.2011 22:14:20 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:14:20 - Fehler beim Herstellen der Internetverbindung. 04:14:20
- Serververbindung konnte nicht hergestellt werden..
Error - 05.05.2011 22:52:00 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:51:59 - Fehler beim Herstellen der Internetverbindung. 04:51:59
- Serververbindung konnte nicht hergestellt werden..
Error - 10.05.2011 22:04:16 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:04:15 - Fehler beim Herstellen der Internetverbindung. 04:04:15
- Serververbindung konnte nicht hergestellt werden..
Error - 16.05.2011 02:50:15 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 08:50:14 - Fehler beim Herstellen der Internetverbindung. 08:50:14
- Serververbindung konnte nicht hergestellt werden..
Error - 20.05.2011 22:46:08 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:46:07 - Fehler beim Herstellen der Internetverbindung. 04:46:07
- Serververbindung konnte nicht hergestellt werden..
Error - 25.05.2011 22:47:24 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:47:23 - Fehler beim Herstellen der Internetverbindung. 04:47:23
- Serververbindung konnte nicht hergestellt werden..
[ System Events ]
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
< End of report >
|
|
19.01.2012, 15:37
| #5 |
| /// Malware-holic | Auch "Windowssystem aus Sicherheitsgründen blockiert" hi dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user. wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts. • Starte bitte die OTL.exe • Kopiere nun das Folgende in die Textbox. Code:
ATTFilter :OTL
O4 - HKCU..\Run: [{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}] C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe (TrueCrypt Foundation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
:Files
C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]
• Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren. starte in den normalen modus. falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden Drücke bitte die  + E Taste.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
19.01.2012, 15:53
| #6 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" Hallo, hier der Inhalt der Text-Datei: Code:
ATTFilter All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}\ not found.
File C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
========== COMMANDS ==========
[EMPTYFLASH]
User: All Users
User: ***
->Flash cache emptied: 200880 bytes
User: Default
User: Default User
User: Public
User: UpdatusUser
Total Flash Files Cleaned = 0,00 mb
[EMPTYTEMP]
User: All Users
User: ***
->Temp folder emptied: 65822663 bytes
->Temporary Internet Files folder emptied: 135997783 bytes
->Java cache emptied: 7202799 bytes
->FireFox cache emptied: 133190890 bytes
->Opera cache emptied: 14051537 bytes
->Flash cache emptied: 0 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 132750723 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 53569 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 734 bytes
RecycleBin emptied: 174 bytes
Total Files Cleaned = 466,00 mb
OTL by OldTimer - Version 3.2.31.0 log created on 01192012_154130
Files\Folders moved on Reboot...
C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
Registry entries deleted on Reboot...
Gruß tissi |
|
19.01.2012, 16:07
| #7 |
| /// Malware-holic | Auch "Windowssystem aus Sicherheitsgründen blockiert" du musst das script und den upload noch mal machen, und diesmal natürlich *** durch nutzernamen ersetzen sonst funktionierts nicht richtig :-)
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
19.01.2012, 16:40
| #8 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" oh, ja, natürlich. hatte gar nicht gesehen, dass da so ein Pfad drinsteht. Code:
ATTFilter All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}\ not found.
C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.
========== COMMANDS ==========
[EMPTYFLASH]
User: All Users
User: ***
->Flash cache emptied: 0 bytes
User: Default
User: Default User
User: Public
User: UpdatusUser
Total Flash Files Cleaned = 0,00 mb
[EMPTYTEMP]
User: All Users
User: ***
->Temp folder emptied: 1534 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Opera cache emptied: 665169 bytes
->Flash cache emptied: 0 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7775 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 4700 bytes
Total Files Cleaned = 1,00 mb
OTL by OldTimer - Version 3.2.31.0 log created on 01192012_163721
Files\Folders moved on Reboot...
C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
Registry entries deleted on Reboot...
|
|
19.01.2012, 16:47
| #9 |
| /// Malware-holic | Auch "Windowssystem aus Sicherheitsgründen blockiert" und ich hatte die *** nicht beachtet :-) aber so was passiert, danke für den upload erst mal. Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde! Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
19.01.2012, 17:37
| #10 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" So, ComboFix ist fertig, aber es traten ein paar Komplikationen auf: 1. Zu Beginn mehrfach, dann bei jeder Stufe des Scans und auch noch mehrfach beim Erstellen des Berichts erschien die Fehlermeldung: 'Die Datei "NIRKMD" konnte nicht gefunden werden. Überprüfen Sie die Schreibweise und wiederholen Sie den Vorgang.' 2. Nach dem Scan der Stufen wurde noch ein tieferer Scan durchgeführt, der nicht im Tutorial erwähnt war. Danach startete sich der Computer neu. Anbei noch das Log: Code:
ATTFilter ComboFix 12-01-19.01 - *** 19.01.2012 17:14:32.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.6058.4582 [GMT 1:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Realtek\Audio\HDA\AERTSr64.exe
c:\program files\Realtek\Audio\HDA\RAVBg64.exe
c:\programdata\Roaming
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RtlUpd64.exe
c:\windows\system32\fxsst.dll . . . . Nicht in der Lage zu löschen
c:\windows\system32\java.exe
c:\windows\SysWow64\odbcad32.exe
.
----- Datei Replikatoren -----
.
c:\drivers\Audio\Vista64\AERTSr64.exe
c:\drivers\Audio\Vista64\FMAPP.exe
c:\drivers\Audio\Vista64\RAVBg64.exe
c:\drivers\Audio\Vista64\RAVCpl64.exe
c:\drivers\Audio\Vista64\RtlUpd64.exe
c:\program files (x86)\Git\libexec\git-core\git-add.exe
c:\program files (x86)\Git\libexec\git-core\git-annotate.exe
c:\program files (x86)\Git\libexec\git-core\git-apply.exe
c:\program files (x86)\Git\libexec\git-core\git-archive.exe
c:\program files (x86)\Git\libexec\git-core\git-bisect--helper.exe
c:\program files (x86)\Git\libexec\git-core\git-blame.exe
c:\program files (x86)\Git\libexec\git-core\git-branch.exe
c:\program files (x86)\Git\libexec\git-core\git-bundle.exe
c:\program files (x86)\Git\libexec\git-core\git-cat-file.exe
c:\program files (x86)\Git\libexec\git-core\git-check-attr.exe
c:\program files (x86)\Git\libexec\git-core\git-check-ref-format.exe
c:\program files (x86)\Git\libexec\git-core\git-checkout-index.exe
c:\program files (x86)\Git\libexec\git-core\git-checkout.exe
c:\program files (x86)\Git\libexec\git-core\git-cherry-pick.exe
c:\program files (x86)\Git\libexec\git-core\git-cherry.exe
c:\program files (x86)\Git\libexec\git-core\git-clean.exe
c:\program files (x86)\Git\libexec\git-core\git-clone.exe
c:\program files (x86)\Git\libexec\git-core\git-commit-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-commit.exe
c:\program files (x86)\Git\libexec\git-core\git-config.exe
c:\program files (x86)\Git\libexec\git-core\git-count-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-describe.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-files.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-index.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-diff.exe
c:\program files (x86)\Git\libexec\git-core\git-fast-export.exe
c:\program files (x86)\Git\libexec\git-core\git-fetch-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-fetch.exe
c:\program files (x86)\Git\libexec\git-core\git-fmt-merge-msg.exe
c:\program files (x86)\Git\libexec\git-core\git-for-each-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-format-patch.exe
c:\program files (x86)\Git\libexec\git-core\git-fsck-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-fsck.exe
c:\program files (x86)\Git\libexec\git-core\git-gc.exe
c:\program files (x86)\Git\libexec\git-core\git-get-tar-commit-id.exe
c:\program files (x86)\Git\libexec\git-core\git-grep.exe
c:\program files (x86)\Git\libexec\git-core\git-hash-object.exe
c:\program files (x86)\Git\libexec\git-core\git-help.exe
c:\program files (x86)\Git\libexec\git-core\git-index-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-init-db.exe
c:\program files (x86)\Git\libexec\git-core\git-init.exe
c:\program files (x86)\Git\libexec\git-core\git-log.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-files.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-mailinfo.exe
c:\program files (x86)\Git\libexec\git-core\git-mailsplit.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-base.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-file.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-index.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-ours.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-recursive.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-subtree.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-merge.exe
c:\program files (x86)\Git\libexec\git-core\git-mktag.exe
c:\program files (x86)\Git\libexec\git-core\git-mktree.exe
c:\program files (x86)\Git\libexec\git-core\git-mv.exe
c:\program files (x86)\Git\libexec\git-core\git-name-rev.exe
c:\program files (x86)\Git\libexec\git-core\git-notes.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-redundant.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-refs.exe
c:\program files (x86)\Git\libexec\git-core\git-patch-id.exe
c:\program files (x86)\Git\libexec\git-core\git-peek-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-prune-packed.exe
c:\program files (x86)\Git\libexec\git-core\git-prune.exe
c:\program files (x86)\Git\libexec\git-core\git-push.exe
c:\program files (x86)\Git\libexec\git-core\git-read-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-receive-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-reflog.exe
c:\program files (x86)\Git\libexec\git-core\git-remote-ext.exe
c:\program files (x86)\Git\libexec\git-core\git-remote-fd.exe
c:\program files (x86)\Git\libexec\git-core\git-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-replace.exe
c:\program files (x86)\Git\libexec\git-core\git-repo-config.exe
c:\program files (x86)\Git\libexec\git-core\git-rerere.exe
c:\program files (x86)\Git\libexec\git-core\git-reset.exe
c:\program files (x86)\Git\libexec\git-core\git-rev-list.exe
c:\program files (x86)\Git\libexec\git-core\git-rev-parse.exe
c:\program files (x86)\Git\libexec\git-core\git-revert.exe
c:\program files (x86)\Git\libexec\git-core\git-rm.exe
c:\program files (x86)\Git\libexec\git-core\git-send-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-shortlog.exe
c:\program files (x86)\Git\libexec\git-core\git-show-branch.exe
c:\program files (x86)\Git\libexec\git-core\git-show-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-show.exe
c:\program files (x86)\Git\libexec\git-core\git-stage.exe
c:\program files (x86)\Git\libexec\git-core\git-status.exe
c:\program files (x86)\Git\libexec\git-core\git-stripspace.exe
c:\program files (x86)\Git\libexec\git-core\git-symbolic-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-tag.exe
c:\program files (x86)\Git\libexec\git-core\git-tar-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-unpack-file.exe
c:\program files (x86)\Git\libexec\git-core\git-unpack-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-update-index.exe
c:\program files (x86)\Git\libexec\git-core\git-update-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-update-server-info.exe
c:\program files (x86)\Git\libexec\git-core\git-upload-archive.exe
c:\program files (x86)\Git\libexec\git-core\git-var.exe
c:\program files (x86)\Git\libexec\git-core\git-verify-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-verify-tag.exe
c:\program files (x86)\Git\libexec\git-core\git-whatchanged.exe
c:\program files (x86)\Git\libexec\git-core\git-write-tree.exe
c:\program files (x86)\Git\libexec\git-core\git.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\afm2afm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\arlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\authorindex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\autoinst.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bdftops.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bib2xhtml.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bibhtml.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html1.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html3.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\birm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bundledoc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\cmap2enc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\csvtools.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dblatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dumphint.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\eps2eps.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\escontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\eslatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\esmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\estex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\estexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\esxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\esxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\etexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\exceltex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\feynmf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\fig4latex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\findhyph.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\font2afm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\font2c.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\fullref.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsbj.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsdj.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsdj500.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gslj.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gslp.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsnd.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsndt.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gssetgs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gst.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gstt.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ht.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\httex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\httexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ibyhyph.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\internal\runbat.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\internal\runperl.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1context.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1latex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1mex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1tex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1texi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1xelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1xetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jscontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jslatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jstex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jstexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-fast.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-so.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-vc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexmk.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexrevise.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lp386.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lp386r2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lpgs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lpr2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lualatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\luatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\makeglossaries.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\makejmlrbook.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mk4ht.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mkt1font.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mptopdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mztex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mztexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\oocontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\oolatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\oomex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ootex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ootexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ooxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ooxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\orderrefs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ot2kpx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdf2dsc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdf2ps.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfatfi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfcrop.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdflatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfopt.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdftexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pedigree.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\perltex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pf2afm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pfbtopfa.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pfm2kpx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pftogsf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pkfix.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pn2pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ascii.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2epsi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf12.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf13.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf14.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdfxx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ps.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ps2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps4pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pst2pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\rcsinfo.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\showglyphs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\splitindex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\sty2dtx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\svn-multi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teicontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teilatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teitex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teitexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teixelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teixetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texcount.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdiff.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdirflatten.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\thumbpdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\urlbst.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\vpl2ovp.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\vpl2vpl.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wmakebat.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xdv2pdf_mergemarks.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xelatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xetexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhxetex.exe
c:\program files\Realtek\Audio\HDA\AERTSr64.exe
c:\program files\Realtek\Audio\HDA\FMAPP.exe
c:\program files\Realtek\Audio\HDA\RAVBg64.exe
c:\program files\Realtek\Audio\HDA\RAVCpl64.exe
c:\program files\Realtek\Audio\HDA\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RtlUpd64.exe
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_AERTFilters
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-12-19 bis 2012-01-19 ))))))))))))))))))))))))))))))
.
.
2012-01-19 16:22 . 2012-01-19 16:22 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-01-19 16:22 . 2012-01-19 16:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-19 14:41 . 2012-01-19 15:30 -------- d-----w- C:\_OTL
2012-01-13 08:54 . 2012-01-13 08:54 -------- d-----w- c:\program files\NVIDIA GPU Computing Toolkit
2012-01-13 08:39 . 2012-01-13 08:39 -------- d-----w- C:\NVIDIA
2012-01-11 19:17 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 19:17 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-11 19:17 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-11 19:17 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-11 19:17 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 19:17 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 19:16 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 19:16 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-09 16:18 . 2012-01-09 16:18 -------- d-----w- c:\users\***\.ssh
2012-01-07 14:35 . 2012-01-07 14:35 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2012-01-07 14:35 . 2002-12-05 13:12 692224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2012-01-07 14:35 . 2002-12-05 13:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2012-01-07 14:35 . 2002-12-02 14:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2012-01-07 14:35 . 2002-12-02 12:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2012-01-07 14:35 . 2002-12-02 12:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2012-01-07 14:35 . 2012-01-07 14:35 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-12-21 12:48 . 2011-12-21 12:49 -------- d-----w- c:\program files (x86)\Git
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-09 18:45 . 2011-12-09 18:45 60416 ----a-w- c:\windows\system32\drivers\iBtFltCoex.sys
2011-12-09 18:34 . 2011-12-09 18:34 47616 ----a-w- c:\windows\system32\opphelper.dll
2011-11-24 04:52 . 2011-12-14 14:04 3145216 ----a-w- c:\windows\system32\win32k.sys
2011-11-19 16:54 . 2011-03-14 21:51 860992 ----a-w- c:\windows\system32\nvumdshimx.dll
2011-11-19 16:54 . 2011-03-14 21:51 241984 ----a-w- c:\windows\system32\nvinitx.dll
2011-11-19 16:54 . 2011-03-14 21:51 203072 ----a-w- c:\windows\SysWow64\nvinit.dll
2011-11-19 16:54 . 2011-03-14 21:51 1543488 ----a-w- c:\windows\system32\nvdispco64.dll
2011-11-19 16:54 . 2011-03-14 21:51 1454912 ----a-w- c:\windows\system32\nvgenco64.dll
2011-11-19 16:54 . 2011-03-14 21:51 2808640 ----a-w- c:\windows\system32\nvapi64.dll
2011-11-19 16:54 . 2010-11-29 10:35 539456 ----a-w- c:\windows\system32\nvhotkey.dll
2011-11-19 16:54 . 2010-11-29 10:35 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-11-19 16:54 . 2010-11-29 10:35 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-11-19 16:54 . 2010-11-29 10:35 55616 ----a-w- c:\windows\system32\nv3dappshextr.dll
2011-11-19 16:54 . 2010-11-29 10:35 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-11-19 16:54 . 2010-11-29 10:35 1349440 ----a-w- c:\windows\system32\nv3dappshext.dll
2011-11-19 16:54 . 2010-11-29 10:35 837952 ----a-w- c:\windows\system32\easyUpdatusAPIU64.dll
2011-11-19 16:54 . 2010-11-29 10:35 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-11-19 16:54 . 2010-11-29 10:34 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-11-19 16:54 . 2010-11-29 04:35 2402867 ----a-w- c:\windows\system32\nvcoproc.bin
2011-11-19 16:54 . 2010-11-29 04:35 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-11-15 00:13 . 2011-11-15 00:13 327168 ----a-w- c:\windows\system32\drivers\btmhsf.sys
2011-11-14 08:40 . 2011-06-03 07:55 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-05 05:32 . 2011-12-14 14:03 2048 ----a-w- c:\windows\system32\tzres.dll
2011-11-05 04:26 . 2011-12-14 14:03 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-11-04 01:53 . 2011-12-14 14:07 2309120 ----a-w- c:\windows\system32\jscript9.dll
2011-11-04 01:44 . 2011-12-14 14:07 1390080 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 01:44 . 2011-12-14 14:07 1493504 ----a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 01:34 . 2011-12-14 14:07 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-11-03 22:47 . 2011-12-14 14:07 1798144 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-11-03 22:40 . 2011-12-14 14:07 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-11-03 22:39 . 2011-12-14 14:07 1127424 ----a-w- c:\windows\SysWow64\wininet.dll
2011-11-03 22:31 . 2011-12-14 14:07 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-10-26 05:21 . 2011-12-14 14:04 43520 ----a-w- c:\windows\system32\csrsrv.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-01-03 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1675160]
"Dell Registration"="c:\program files (x86)\System Registration\prodreg.exe" [2010-11-10 4144448]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2010-10-29 75048]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-09-04 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-09-03 518640]
"VMware hqtray"="c:\program files (x86)\VMware\VMware Player\hqtray.exe" [2011-03-25 64112]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/03/14 15:00;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-29 236016]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-09-04 219632]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
R3 DVBUSB_0064_Sevice;Cinergy S USB service;c:\windows\system32\DRIVERS\usb_0064.sys [x]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2010-08-30 220528]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]
R3 NLNdisMP;NLNdisMP;c:\windows\system32\DRIVERS\nlndis.sys [x]
R3 NLNdisPT;NetLimiter Ndis Protocol Service;c:\windows\system32\DRIVERS\nlndis.sys [x]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-09-04 1116656]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]
R4 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x]
S1 c2scsi64;c2scsi64;c:\windows\system32\DRIVERS\c2scsi64.sys [x]
S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-10-18 208536]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-19 2253120]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2011-03-25 539248]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_9EC60124
*Deregistered* - mfeavfk01
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 99080 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-08 6560360]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-01-04 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-01-04 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-01-04 418328]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2011-01-25 4479648]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-01-07 2328944]
"combofix"="c:\combofix\CF17644.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
LSP: c:\program files (x86)\VMware\VMware Player\vsocklib.dll
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{D91BEF26-4787-4BAE-BB9C-F2AFD4FB2C70}: NameServer = 192.168.0.1
FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\y96uohb3.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-NetLimiter - c:\program files\NetLimiter 3\NLClientApp.exe
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-RtHDVBg - c:\program files\Realtek\Audio\HDA\RAVBg64.exe
AddRemove-{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} - c:\program files\Realtek\Audio\HDA\RtlUpd64.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Juniper Networks\Common Files\dsNcService.exe
c:\windows\SysWOW64\vmnat.exe
c:\program files (x86)\VMware\VMware Player\vmware-authd.exe
c:\windows\SysWOW64\vmnetdhcp.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-01-19 17:28:56 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-01-19 16:28
.
Vor Suchlauf: 15 Verzeichnis(se), 474.160.631.808 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 473.422.991.360 Bytes frei
.
- - End Of File - - 56957F6B3752DE86161D555BBB515A0D
tissi |
|
19.01.2012, 17:42
| #11 |
| /// Malware-holic | Auch "Windowssystem aus Sicherheitsgründen blockiert" hi malwarebytes: Downloade Dir bitte Malwarebytes
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
19.01.2012, 18:33
| #12 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" Und hier das Log von Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Datenbank Version: v2012.01.19.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 *** :: NOTEBOOKC [Administrator] 19.01.2012 17:49:00 mbam-log-2012-01-19 (17-49-00).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 389548 Laufzeit: 42 Minute(n), 15 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Spiele\AgeOfEmpires2\Downloads\w7ddpatcher.exe (HackTool.Patch) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
19.01.2012, 18:59
| #13 |
| /// Malware-holic | Auch "Windowssystem aus Sicherheitsgründen blockiert" lade den CCleaner standard: CCleaner Download - CCleaner 3.14.1616 falls der CCleaner bereits instaliert, überspringen. instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen. hinter, jedes von dir benötigte programm, schreibe notwendig. hinter, jedes, von dir nicht benötigte, unnötig. hinter, dir unbekannte, unbekannt. liste posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
19.01.2012, 19:11
| #14 |
| | Auch "Windowssystem aus Sicherheitsgründen blockiert" Bittesehr: Code:
ATTFilter AccelerometerP11 STMicroelectronics 13.03.2011 2.00.11.22 unbekannt Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 13.03.2011 6,00MB 10.1.102.64 notwendig Adobe Flash Player 11 Plugin 64-bit Adobe Systems Incorporated 13.11.2011 6,00MB 11.1.102.55 notwendig Adobe Reader X (10.1.2) MUI Adobe Systems Incorporated 11.01.2012 477MB 10.1.2 notwendig Advanced Audio FX Engine Creative Technology Ltd 13.03.2011 1.12.05 notwendig ANNO 1602 06.01.2012 1.05 notwendig Blobby Volley 2.0 Version 0.9b 01.10.2011 3,58MB unnötig CCleaner Piriform 18.01.2012 3.14 notwendig Cinergy S USB V1.04.02.04 21.03.2011 1.04.02.04 unötig ConTEXT v0.98.6 ConTEXT Project Ltd 20.04.2011 notwendig CyberLink PowerDVD 9.6 CyberLink Corp. 13.03.2011 9.6.1.3522 unnötig Dell DataSafe Local Backup Dell 13.03.2011 9.4.47 unnötig Dell DataSafe Online Dell 13.03.2011 6,46MB 2.1.19634 unnötig Dell Product Registration Dell Inc. 13.03.2011 1.0.6 unnötig Dell Support Center Dell Inc. 13.03.2011 3.0.5621.01 notwendig Dell Webcam Central Creative Technology Ltd 13.03.2011 2.00.35 notwendig Die Siedler II - Die nächste Generation 15.12.2011 unötig ELSA LANconfig 06.08.2011 unnötig ELSA LANmonitor 06.08.2011 unnötig GIMP 2.6.11 The GIMP Team 06.04.2011 107,7MB 2.6.11 notwendig Git version 1.7.8-preview20111206 20.12.2011 69,5MB 1.7.8-preview20111206 notwendig ICQ7.4 ICQ 21.03.2011 7.4 notwendig Intel(R) Control Center Intel Corporation 14.03.2011 1.2.1.1007 unbekannt Intel(R) Management Engine Components Intel Corporation 14.03.2011 7.0.0.1144 unbekannt Intel(R) Processor Graphics Intel Corporation 14.03.2011 8.15.10.2272 unbekannt Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology Intel Corporation 13.03.2011 88,0MB 1.0.0.0454 notwendig Intel(R) PROSet/Wireless WiFi-Software Intel Corporation 13.03.2011 142,9MB 14.00.1000 unbekannt Java(TM) 6 Update 26 Oracle 12.07.2011 97,1MB 6.0.260 notwendig Java(TM) 6 Update 27 (64-bit) Oracle 15.10.2011 91,6MB 6.0.270 notwendig Java(TM) SE Development Kit 6 Update 26 (64-bit) Oracle 12.07.2011 147,2MB 1.6.0.260 notwendig Java(TM) SE Development Kit 6 Update 27 (64-bit) Oracle 15.10.2011 147,4MB 1.6.0.270 notwendig Juniper Networks Network Connect 6.5.0 Juniper Networks 28.03.2011 6.5.0.14951 unnötig Juniper Networks Network Connect 7.0.0 Juniper Networks 22.10.2011 7.0.0.18809 notwendig Juniper Networks Setup Client Juniper Networks 22.10.2011 0,78MB 2.2.5.10685 unbekannt Juniper Networks Setup Client Activex Control Juniper Networks 28.03.2011 2.1.1.1 unbekannt Malwarebytes Anti-Malware Version 1.60.0.1800 Malwarebytes Corporation 18.01.2012 18,6MB 1.60.0.1800 notwendig McAfee SecurityCenter McAfee, Inc. 23.12.2011 11.0.649 notwendig Microsoft .NET Framework 4 Client Profile Microsoft Corporation 21.03.2011 38,8MB 4.0.30319 notwendig Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 21.03.2011 2,94MB 4.0.30319 notwendig Microsoft Age of Empires II 22.06.2011 unnötig Microsoft Age of Empires II: The Conquerors Expansion 22.06.2011 unnötig Microsoft IntelliPoint 8.0 Microsoft 21.03.2011 38,0MB 8.01.249.0 notwendig Microsoft Office Home and Student 2010 Microsoft Corporation 01.07.2011 14.0.6029.1000 notwendig Microsoft Silverlight Microsoft Corporation 11.10.2011 140,1MB 4.0.60831.0 notwendig Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 13.03.2011 1,70MB 3.1.0000 notwendig Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 21.03.2011 0,25MB 8.0.50727.4053 notwendig Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 14.06.2011 0,29MB 8.0.61001 notwendig Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 Microsoft Corporation 12.04.2011 0,77MB 9.0.30729.5570 notwendig Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Corporation 12.04.2011 0,58MB 9.0.30729.5570 notwendig Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 01.09.2011 0,25MB 9.0.30729 notwendig Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 22.03.2011 0,76MB 9.0.30729.4148 notwendig Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 14.06.2011 0,77MB 9.0.30729.6161 notwendig Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 22.03.2011 0,57MB 9.0.30729.4148 notwendig Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 14.06.2011 0,59MB 9.0.30729.6161 notwendig MiKTeX 2.9 MiKTeX.org 03.08.2011 2.9 notwendig Mozilla Firefox 7.0.1 (x86 de) Mozilla 20.12.2011 32,7MB 7.0.1 notwendig MSXML 4.0 SP2 (KB954430) Microsoft Corporation 21.03.2011 1,28MB 4.20.9870.0 notwendig MSXML 4.0 SP2 (KB973688) Microsoft Corporation 21.03.2011 1,33MB 4.20.9876.0 notwendig NVIDIA CUDA Toolkit v4.1 (64 bit) NVIDIA Corporation 12.01.2012 956MB 4.1.21.0 unnötig NVIDIA Grafiktreiber 285.86 NVIDIA Corporation 12.01.2012 285.86 notwendig NVIDIA HD-Audiotreiber 1.1.13.1 NVIDIA Corporation 17.12.2011 1.1.13.1 notwendig Opera 11.60 Opera Software ASA 08.12.2011 11.60.1185 notwendig QtSpim Larus-Stone 22.05.2011 47,0MB 9.0.1 notwendig Quickset64 Dell Inc. 13.03.2011 11.0.10 notwendig Realtek High Definition Audio Driver Realtek Semiconductor Corp. 13.03.2011 6.0.1.6263 notwendig Revo Uninstaller 1.91 VS Revo Group 21.03.2011 1.91 notwendig Roxio Creator Starter Roxio 13.03.2011 1.485MB 12.1.40.0 notwendig Runes of Magic Frogster Online Gaming GmbH 28.07.2011 4.0.0.2360 notwendig ScrollDemo The Java(tm) Tutorial 16.07.2011 unbekannt Spellforce 2 Gold JoWooD Productions Software AG 24.03.2011 1.00.0000 notwendig StarCraft II Blizzard Entertainment 06.01.2012 1.4.2.20141 notwendig Synaptics Pointing Device Driver Synaptics Incorporated 13.03.2011 46,4MB 15.1.15.0 notwendig TeamSpeak 3 Client TeamSpeak Systems GmbH 11.09.2011 unnötig TerraTec Home Cinema 22.03.2011 6.15.11 unnötig TeXnicCenter Version 1.0 Stable RC1 TeXnicCenter.org 03.08.2011 Version 1.0 Stable RC1 notwendig TortoiseSVN 1.6.15.21042 (64 bit) TortoiseSVN 20.04.2011 22,1MB 1.6.21042 notwendig VMware Player VMware, Inc 23.05.2011 391MB 3.1.4.16648 notwendig Windows Live Essentials Microsoft Corporation 14.09.2011 15.4.3538.0513 notwendig Windows Live Mesh ActiveX control for remote connections Microsoft Corporation 13.03.2011 5,58MB 15.4.5722.2 notwendig WinRAR 4.00 (64-Bit) win.rar GmbH 22.03.2011 4.00.0 notwendig Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 Intel 13.03.2011 2.1.23.0 notwendig tissi |
|
19.01.2012, 19:34
| #15 |
| /// Malware-holic | Auch "Windowssystem aus Sicherheitsgründen blockiert" deinstaliere: Adobe Flash Player alle Adobe - Adobe Flash Player installieren neueste version laden adobe reader: Adobe - Adobe Reader herunterladen - Alle Versionen haken bei mcafee security scan raus nehmen bitte auch mal den adobe reader wie folgt konfigurieren: adobe reader öffnen, bearbeiten, voreinstellungen. allgemein: nur zertifizierte zusatz module verwenden, anhaken. internet: hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc. es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht. bei javascript den haken bei java script verwenden raus nehmen bei updater, automatisch instalieren wählen. übernehmen /ok deinstaliere: Blobby Cinergy CyberLink Dell DataSafe Local Dell DataSafe Online Die Siedler ELSA beide Java alle Download der kostenlosen Java-Software downloade java jre instaliere es firefox update: Webbrowser Firefox auf Deutsch | Schneller, sicherer und anpassbar aber ich würde auf ff verzichten und auf opera umsteigen. sag mir mal welchen browser du nutzt das müsste ich für folgende anleitungen wissen deinstaliere: ScrollDemo TeamSpeak TerraTec öffne otl, klicke bereinigen, remover werden nach neustart gelöscht. öffne ccleaner, analysieren bereinigen. neustarten testen ob alles läuft wie gewünscht
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
| Themen zu Auch "Windowssystem aus Sicherheitsgründen blockiert" |
| andere, aus sicherheitsgründen, backup, befällt, blockiert, dankbar, eingefangen, ellung, etliche, gefangen, gefunde, gen, individuelle, mcafee, nichts, reichen, scan, schädling, sicherheitsgründe, sicherheitsgründen, thema, threads, troja, trojaner, übers |
Linear-Darstellung
