Ihr Computer ist gesperrt, GVU, Abgesicherter Modus startet nicht

OTL logfile created on: 1/15/2013 10:33:47 AM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows 7 Professional Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files
Drive C: | 19.53 Gb Total Space | 19.44 Gb Free Space | 99.50% Space Free | Partition Type: NTFS
Drive D: | 75.13 Gb Total Space | 38.56 Gb Free Space | 51.32% Space Free | Partition Type: NTFS
Drive E: | 19.53 Gb Total Space | 16.33 Gb Free Space | 83.59% Space Free | Partition Type: NTFS
Drive F: | 175.78 Gb Total Space | 55.77 Gb Free Space | 31.73% Space Free | Partition Type: NTFS
Drive G: | 175.78 Gb Total Space | 63.88 Gb Free Space | 36.34% Space Free | Partition Type: NTFS
Drive H: | 4.13 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive I: | 1.85 Gb Total Space | 1.85 Gb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto] --  -- (mitsijm2012)
SRV - File not found [Auto] --  -- (AntiVirService)
SRV - File not found [Auto] --  -- (AntiVirSchedulerService)
SRV - [2013/01/14 07:30:24 | 000,143,360 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Users\Step\AppData\Local\Temp\dYSEvWR.exe -- (Winmgmt)
SRV - [2013/01/04 12:01:47 | 002,554,472 | ---- | M] () [Auto] -- D:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
SRV - [2012/10/23 04:47:48 | 002,848,168 | ---- | M] (TeamViewer GmbH) [Auto] -- D:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012/09/02 07:51:55 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand] -- D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012/06/11 12:19:02 | 000,217,600 | ---- | M] (AMD) [Auto] -- D:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012/05/03 10:53:14 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- D:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2011/05/18 05:24:32 | 000,641,464 | ---- | M] (Cisco Systems, Inc.) [Auto] -- D:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent)
SRV - [2010/03/23 06:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) [Auto] -- D:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2009/07/16 10:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand] -- D:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009/07/13 20:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/13 20:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 20:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2007/12/19 18:04:00 | 000,364,544 | R--- | M] (AVM Berlin) [Auto] -- D:\Program Files\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2013/01/14 07:49:48 | 000,022,328 | ---- | M] () [Kernel | On_Demand] -- D:\Windows\System32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2013/01/14 05:52:10 | 000,281,760 | ---- | M] () [Kernel | Auto] -- D:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2013/01/14 05:52:09 | 000,025,888 | ---- | M] () [Kernel | Auto] -- D:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2012/12/11 16:17:20 | 000,134,336 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System] -- D:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012/12/11 16:17:18 | 000,083,944 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto] -- D:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012/11/14 06:10:04 | 000,036,552 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System] -- D:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2012/09/12 06:36:37 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand] -- D:\Windows\System32\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV - [2012/08/27 08:50:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2012/06/11 13:58:44 | 008,733,696 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012/06/11 11:25:48 | 000,295,936 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012/05/11 00:34:08 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.)
DRV - [2012/05/11 00:34:06 | 000,080,824 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV - [2012/04/25 04:27:01 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System] -- D:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/04/25 04:23:55 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- D:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2012/02/23 07:31:58 | 000,086,544 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand] -- D:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2012/02/09 15:43:00 | 010,816,832 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011/09/09 10:59:19 | 000,087,976 | R--- | M] (Cisco Systems, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\acsock.sys -- (acsock)
DRV - [2011/05/18 05:12:08 | 000,019,192 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\vpnva.sys -- (vpnva)
DRV - [2010/11/20 16:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 16:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 16:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 16:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 16:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 16:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 16:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 16:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 16:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/03/23 06:15:36 | 000,308,859 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto] -- D:\Windows\System32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2009/07/13 17:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- D:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009/07/13 17:02:47 | 000,047,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\L1E62x86.sys -- (L1E) NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20)
DRV - [2008/11/16 11:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2007/12/19 18:04:00 | 000,265,088 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- D:\Windows\System32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2007/12/19 18:04:00 | 000,004,352 | R--- | M] (AVM Berlin) [Kernel | On_Demand] -- D:\Windows\System32\drivers\avmeject.sys -- (avmeject)
DRV - [2007/01/18 13:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2004/08/13 02:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand] -- D:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\Step_ON_D\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.claro-search.com/?affID=116143&tt=0213_5&babsrc=HP_clro&mntrId=7610071a000000000000000c29caf2f0
IE - HKU\Step_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.claro-search.com/?affID=116143&tt=0213_5&babsrc=HP_clro&mntrId=7610071a000000000000000c29caf2f0
IE - HKU\Step_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\Step_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKU\Step_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 40 A8 6A 68 00 23 CD 01  [binary data]
IE - HKU\Step_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\Windows\System32\Macromed\Flash\NPSWF32_11_2_202_233.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0:  File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: D:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0:  File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader:  File not found
 
 
[2013/01/13 11:29:40 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions
 
O1 HOSTS File: ([2012/05/03 06:29:15 | 000,000,824 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  File not found
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} -  File not found
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  File not found
O3 - HKU\Step_ON_D\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O4 - HKLM..\Run: [AMD AVT] D:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avgnt]  File not found
O4 - HKLM..\Run: [AVMWlanClient] D:\Program Files\avmwlanstick\WLanGUI.exe (AVM Berlin)
O4 - HKLM..\Run: [StartCCC] D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\Step_ON_D..\Run: [DAEMON Tools Lite]  File not found
O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: Error locating startup folders.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\Step_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00  [binary data]
O7 - HKU\Step_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} -  File not found
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} -  File not found
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} -  File not found
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} -  File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -  File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: 55963676-2F5E-4BAF-AC28-CF26AA587566 vpnweb.cab (Reg Error: Key error.)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261070~1.41\{c16c1~1\browse~1.dll) - D:\ProgramData\BrowserProtect\2.6.1070.41\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/08/24 00:43:12 | 000,000,224 | R--- | M] () - H:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX: {073FDCA0-1998-DE8E-CBBA-A70AE1307521} - Internet Explorer
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {359FC3CE-4E8E-D845-B1F9-D9B7EC21549A} - Java (Sun)
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8AAE06DA-3D1A-259A-2797-581B55E39372} - Microsoft Windows Media Player
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {95407D9E-38E3-2BB1-45A5-7F14749AE4A5} - Java (Sun)
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CFCCD20E-4D39-9933-4272-F61C02830A9C} - Internet Explorer
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: Sharedaccess -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: wuauserv -  File not found
NetSvcs: BITS -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
NetSvcs: winmgmt - D:\Users\Step\AppData\Local\Temp\dYSEvWR.exe (Microsoft Corporation)
 
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VPN Client.lnk - D:\Windows\Installer\{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}\Icon3E5562ED7.ico - ()
MsConfig - StartUpFolder: C:^Users^Step^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -  - File not found
MsConfig - StartUpFolder: C:^Users^Step^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk -  - File not found
MsConfig - StartUpReg: Adobe ARM - hkey= - key= - D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= -  File not found
MsConfig - StartUpReg: Cisco AnyConnect Secure Mobility Agent for Windows - hkey= - key= - D:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Cisco Systems, Inc.)
MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= -  File not found
MsConfig - StartUpReg: RGSC - hkey= - key= -  File not found
MsConfig - StartUpReg: Steam - hkey= - key= -  File not found
MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - D:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig - State: "startup" - 2
MsConfig - State: "services" - 0
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/01/14 07:38:41 | 000,000,000 | -HSD | C] -- D:\Config.Msi
[2013/01/14 06:29:35 | 000,000,000 | ---D | C] -- D:\Users\Step\Documents\Anno 1404
[2013/01/14 05:54:56 | 000,000,000 | ---D | C] -- D:\Users\Step\AppData\Roaming\Ubisoft
[2013/01/14 05:53:50 | 000,000,000 | ---D | C] -- D:\ProgramData\Tages
[2013/01/14 04:41:22 | 000,000,000 | ---D | C] -- D:\Users\Step\Documents\Amazon Downloader Logs
[2013/01/13 11:48:02 | 000,000,000 | ---D | C] -- D:\Windows\symbols
[2013/01/13 11:48:00 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Merge Modules
[2013/01/13 11:29:55 | 000,000,000 | ---D | C] -- D:\Users\Step\AppData\Roaming\SpecialSavings
[2013/01/13 11:29:52 | 000,000,000 | ---D | C] -- D:\ProgramData\IBUpdaterService
[2013/01/13 11:29:51 | 000,000,000 | ---D | C] -- D:\Users\Step\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
[2013/01/13 11:29:47 | 000,000,000 | ---D | C] -- D:\Program Files\File Scout
[2013/01/13 11:29:44 | 000,000,000 | ---D | C] -- D:\ProgramData\BrowserProtect
[2013/01/13 11:29:40 | 000,000,000 | ---D | C] -- D:\Program Files\Mozilla Firefox
[2013/01/13 11:28:56 | 000,000,000 | ---D | C] -- D:\Users\Step\AppData\Local\Wajam
[2013/01/13 11:28:09 | 002,719,736 | ---- | C] (Microsoft Corporation) -- D:\Users\Step\Desktop\vcsetup.exe
[2013/01/10 14:15:57 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft SQL Server
[2013/01/10 14:13:23 | 000,000,000 | ---D | C] -- D:\Users\Step\Documents\Visual Studio 2010
[2013/01/10 14:13:09 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
[2013/01/10 14:12:16 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft SDKs
[2013/01/10 14:12:16 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft Help Viewer
[2013/01/10 13:59:05 | 000,025,088 | ---- | C] (TeamViewer GmbH) -- D:\Windows\System32\drivers\teamviewervpn.sys
[2013/01/10 13:57:15 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dymola 2013 FD01
[2013/01/10 11:00:03 | 000,000,000 | ---D | C] -- D:\Users\Step\Desktop\Master
[2013/01/10 10:02:08 | 002,106,216 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\D3DCompiler_43.dll
[2013/01/10 10:02:08 | 001,998,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\D3DX9_43.dll
[2013/01/10 10:02:08 | 001,868,128 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3dcsx_43.dll
[2013/01/10 10:02:08 | 000,527,192 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XAudio2_7.dll
[2013/01/10 10:02:08 | 000,470,880 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3dx10_43.dll
[2013/01/10 10:02:08 | 000,248,672 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3dx11_43.dll
[2013/01/10 10:02:08 | 000,239,960 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\xactengine3_7.dll
[2013/01/10 10:02:08 | 000,074,072 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XAPOFX1_5.dll
[2012/12/20 10:57:57 | 000,000,000 | RH-D | C] -- D:\MSOCache
[2012/12/20 10:52:53 | 000,000,000 | --SD | C] -- D:\Users\Step\Documents\Meine Shapes
[2012/12/20 10:50:22 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft Analysis Services
[2012/12/20 08:48:05 | 000,000,000 | ---D | C] -- D:\Users\Step\AppData\Local\e-academy Inc
[2012/12/19 04:45:38 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2 D:\Windows\*.tmp files -> D:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013/01/14 11:45:10 | 000,000,882 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/01/14 11:44:47 | 000,021,808 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/01/14 11:44:47 | 000,021,808 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/01/14 11:39:44 | 000,000,500 | ---- | M] () -- D:\Windows\tasks\MATLAB R2011b Startup Accelerator.job
[2013/01/14 11:38:44 | 095,023,320 | ---- | M] () -- D:\ProgramData\RWvESYd.pad
[2013/01/14 11:38:13 | 000,000,878 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/14 11:37:09 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat
[2013/01/14 11:36:53 | 2616,496,128 | -HS- | M] () -- D:\hiberfil.sys
[2013/01/14 07:50:35 | 000,103,736 | ---- | M] () -- D:\Windows\System32\PnkBstrB.ex0
[2013/01/14 07:49:48 | 000,022,328 | ---- | M] () -- D:\Windows\System32\drivers\PnkBstrK.sys
[2013/01/14 07:30:27 | 000,003,174 | ---- | M] () -- D:\ProgramData\RWvESYd.js
[2013/01/14 07:30:27 | 000,001,080 | ---- | M] () -- D:\Users\Step\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk
[2013/01/14 07:03:00 | 000,000,884 | ---- | M] () -- D:\Windows\tasks\Adobe Flash Player Updater.job
[2013/01/14 06:54:42 | 000,281,768 | ---- | M] () -- D:\Windows\System32\PnkBstrB.xtr
[2013/01/14 05:52:49 | 000,000,348 | ---- | M] () -- D:\Users\Step\Desktop\Anno 1404 - Verknüpfung.lnk
[2013/01/14 05:52:13 | 000,000,000 | R--D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
[2013/01/14 05:52:10 | 000,281,760 | ---- | M] () -- D:\Windows\System32\drivers\atksgt.sys
[2013/01/14 05:52:09 | 000,025,888 | ---- | M] () -- D:\Windows\System32\drivers\lirsgt.sys
[2013/01/14 04:09:24 | 000,696,620 | ---- | M] () -- D:\Windows\System32\perfh007.dat
[2013/01/14 04:09:24 | 000,651,938 | ---- | M] () -- D:\Windows\System32\perfh009.dat
[2013/01/14 04:09:24 | 000,147,916 | ---- | M] () -- D:\Windows\System32\perfc007.dat
[2013/01/14 04:09:24 | 000,120,870 | ---- | M] () -- D:\Windows\System32\perfc009.dat
[2013/01/13 11:49:04 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
[2013/01/13 11:28:19 | 000,621,888 | ---- | M] () -- D:\Users\Step\Desktop\bundleSetup.exe
[2013/01/13 11:28:12 | 002,719,736 | ---- | M] (Microsoft Corporation) -- D:\Users\Step\Desktop\vcsetup.exe
[2013/01/10 14:18:19 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dymola 2013
[2013/01/10 13:58:37 | 000,001,143 | ---- | M] () -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk
[2013/01/10 13:57:16 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dymola 2013 FD01
[2013/01/10 10:17:34 | 000,000,205 | ---- | M] () -- D:\Users\Step\Desktop\Saints Row The Third.url
[2013/01/10 10:04:00 | 000,001,055 | ---- | M] () -- D:\Users\Step\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013/01/10 10:03:43 | 000,001,021 | ---- | M] () -- D:\Users\Step\Desktop\Dropbox.lnk
[2013/01/10 08:07:29 | 000,434,952 | ---- | M] () -- D:\Windows\System32\FNTCACHE.DAT
[2012/12/20 10:55:11 | 000,015,360 | ---- | M] () -- D:\Users\Step\Desktop\Microsoft Visio-Zeichnung (neu).vsd
[2012/12/20 10:51:27 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2012/12/20 10:37:49 | 000,003,133 | ---- | M] () -- D:\Users\Step\Desktop\Secure Download Manager.lnk
[2012/12/19 04:45:38 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2 D:\Windows\*.tmp files -> D:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013/01/14 07:30:27 | 000,003,174 | ---- | C] () -- D:\ProgramData\RWvESYd.js
[2013/01/14 07:30:27 | 000,001,080 | ---- | C] () -- D:\Users\Step\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk
[2013/01/14 07:30:25 | 095,023,320 | ---- | C] () -- D:\ProgramData\RWvESYd.pad
[2013/01/14 05:52:49 | 000,000,348 | ---- | C] () -- D:\Users\Step\Desktop\Anno 1404 - Verknüpfung.lnk
[2013/01/14 05:52:10 | 000,281,760 | ---- | C] () -- D:\Windows\System32\drivers\atksgt.sys
[2013/01/14 05:52:09 | 000,025,888 | ---- | C] () -- D:\Windows\System32\drivers\lirsgt.sys
[2013/01/13 11:28:09 | 000,621,888 | ---- | C] () -- D:\Users\Step\Desktop\bundleSetup.exe
[2013/01/10 10:17:34 | 000,000,205 | ---- | C] () -- D:\Users\Step\Desktop\Saints Row The Third.url
[2012/12/20 10:52:50 | 000,015,360 | ---- | C] () -- D:\Users\Step\Desktop\Microsoft Visio-Zeichnung (neu).vsd
[2012/12/20 08:46:56 | 000,003,133 | ---- | C] () -- D:\Users\Step\Desktop\Secure Download Manager.lnk
[2012/10/20 09:55:26 | 000,000,044 | ---- | C] () -- D:\Users\Step\AppData\Local\EnergyViewer.cfg
[2012/08/01 13:21:17 | 000,000,051 | ---- | C] () -- D:\ProgramData\flnpcwngpuvkodn
[2012/07/30 10:44:55 | 000,000,000 | ---- | C] () -- D:\ProgramData\0x0304A000.sfl
[2012/06/11 11:41:48 | 000,204,952 | ---- | C] () -- D:\Windows\System32\ativvsvl.dat
[2012/06/11 11:41:48 | 000,157,144 | ---- | C] () -- D:\Windows\System32\ativvsva.dat
[2012/06/11 06:50:42 | 000,159,232 | ---- | C] () -- D:\Windows\System32\clinfo.exe
[2012/06/04 04:12:53 | 000,065,536 | ---- | C] () -- D:\Windows\System32\HPPLVS.dll
[2012/05/14 05:54:59 | 000,022,328 | ---- | C] () -- D:\Windows\System32\drivers\PnkBstrK.sys
[2012/05/14 05:54:59 | 000,022,328 | ---- | C] () -- D:\Users\Step\AppData\Roaming\PnkBstrK.sys
[2012/05/14 05:54:42 | 000,103,736 | ---- | C] () -- D:\Windows\System32\PnkBstrB.exe
[2012/05/14 05:54:39 | 000,076,888 | ---- | C] () -- D:\Windows\System32\PnkBstrA.exe
[2012/05/14 05:54:38 | 000,000,286 | ---- | C] () -- D:\Windows\game.ini
[2012/05/14 04:10:37 | 000,000,000 | ---- | C] () -- D:\Windows\ativpsrm.bin
[2012/05/14 04:07:55 | 000,003,917 | ---- | C] () -- D:\Windows\System32\atipblag.dat
[2012/05/10 09:35:16 | 000,029,184 | ---- | C] () -- D:\Windows\System32\kdbsdk32.dll
[2012/05/07 13:28:00 | 000,000,017 | ---- | C] () -- D:\Users\Step\AppData\Local\resmon.resmoncfg
[2012/05/03 03:38:13 | 000,000,028 | ---- | C] () -- D:\Windows\sbinetpro.ini
[2012/05/03 03:38:13 | 000,000,026 | ---- | C] () -- D:\Windows\skat24pro.ini
[2012/04/12 14:30:10 | 000,637,743 | ---- | C] () -- D:\Windows\System32\atiicdxx.dat
[2012/02/29 06:26:56 | 000,416,064 | ---- | C] () -- D:\Windows\System32\nvStreaming.exe
[2011/04/11 20:30:05 | 000,696,620 | ---- | C] () -- D:\Windows\System32\perfh007.dat
[2011/04/11 20:30:05 | 000,295,922 | ---- | C] () -- D:\Windows\System32\perfi007.dat
[2011/04/11 20:30:05 | 000,147,916 | ---- | C] () -- D:\Windows\System32\perfc007.dat
[2011/04/11 20:30:05 | 000,038,104 | ---- | C] () -- D:\Windows\System32\perfd007.dat
[2010/11/20 16:29:26 | 000,066,048 | ---- | C] () -- D:\Windows\System32\PrintBrmUi.exe
[2010/11/20 16:29:24 | 000,252,928 | ---- | C] () -- D:\Windows\System32\DShowRdpFilter.dll
[2010/06/18 06:40:28 | 000,180,224 | ---- | C] () -- D:\Windows\System32\hpputoar.dll
[2010/04/09 15:08:26 | 000,094,208 | ---- | C] () -- D:\Windows\System32\zmbv.dll
[2010/03/23 06:26:48 | 000,201,512 | ---- | C] () -- D:\Windows\System32\vpnapi.dll
[2009/07/13 23:57:37 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat
[2009/07/13 23:33:53 | 000,434,952 | ---- | C] () -- D:\Windows\System32\FNTCACHE.DAT
[2009/07/13 21:05:48 | 000,651,938 | ---- | C] () -- D:\Windows\System32\perfh009.dat
[2009/07/13 21:05:48 | 000,291,294 | ---- | C] () -- D:\Windows\System32\perfi009.dat
[2009/07/13 21:05:48 | 000,120,870 | ---- | C] () -- D:\Windows\System32\perfc009.dat
[2009/07/13 21:05:48 | 000,031,548 | ---- | C] () -- D:\Windows\System32\perfd009.dat
[2009/07/13 21:05:05 | 000,000,741 | ---- | C] () -- D:\Windows\System32\NOISE.DAT
[2009/07/13 21:04:11 | 000,215,943 | ---- | C] () -- D:\Windows\System32\dssec.dat
[2009/07/13 18:55:01 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin
[2009/07/13 18:51:43 | 000,073,728 | ---- | C] () -- D:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- D:\Windows\System32\BWContextHandler.dll
[2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- D:\Windows\System32\mlang.dat
[2008/10/21 22:29:06 | 000,173,550 | ---- | C] () -- D:\Windows\System32\xlive.dll.cat
[2008/02/07 03:05:18 | 000,163,840 | ---- | C] () -- D:\Windows\System32\hppatusg01.dll
[2007/12/19 18:04:00 | 000,097,360 | ---- | C] () -- D:\Windows\System32\drivers\Fwusb1b.bin
[2004/08/13 02:56:20 | 000,005,810 | ---- | C] () -- D:\Windows\System32\drivers\ASACPI.sys
 
========== LOP Check ==========
 
[2012/10/03 07:58:55 | 000,000,000 | ---D | M] -- D:\ProgramData\8618834A8B5E071A007686180D3A0E34
[2012/07/09 02:57:22 | 000,000,000 | ---D | M] -- D:\ProgramData\AMD
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2012/09/02 08:52:02 | 000,000,000 | ---D | M] -- D:\ProgramData\Autodesk
[2012/05/03 10:50:13 | 000,000,000 | ---D | M] -- D:\ProgramData\Babylon
[2013/01/13 11:29:44 | 000,000,000 | ---D | M] -- D:\ProgramData\BrowserProtect
[2012/04/25 12:57:24 | 000,000,000 | ---D | M] -- D:\ProgramData\Cisco
[2012/08/21 09:37:14 | 000,000,000 | -H-D | M] -- D:\ProgramData\Common Files
[2012/04/25 04:30:09 | 000,000,000 | ---D | M] -- D:\ProgramData\DAEMON Tools Lite
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente
[2012/11/09 10:28:34 | 000,000,000 | ---D | M] -- D:\ProgramData\Dynasim
[2012/07/06 15:32:15 | 000,000,000 | ---D | M] -- D:\ProgramData\elsterformular
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2013/01/13 11:29:52 | 000,000,000 | ---D | M] -- D:\ProgramData\IBUpdaterService
[2012/10/20 09:56:00 | 000,000,000 | ---D | M] -- D:\ProgramData\ITI GmbH
[2012/12/10 18:20:44 | 000,000,000 | ---D | M] -- D:\ProgramData\OriginLab
[2012/04/24 13:12:53 | 000,000,000 | ---D | M] -- D:\ProgramData\Panda Security
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü
[2013/01/14 05:54:31 | 000,000,000 | ---D | M] -- D:\ProgramData\Tages
[2012/05/14 06:39:19 | 000,000,000 | ---D | M] -- D:\ProgramData\Tarma Installer
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2012/05/04 10:56:12 | 000,000,000 | ---D | M] -- D:\ProgramData\TLK-Thermo GmbH
[2012/08/21 09:37:37 | 000,000,000 | ---D | M] -- D:\ProgramData\TuneUp Software
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen
[2012/08/02 01:58:31 | 000,000,000 | ---D | M] -- D:\ProgramData\ytryjrpbxdmjtcf
[2012/08/21 09:37:14 | 000,000,000 | -HSD | M] -- D:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012/10/18 09:20:00 | 000,000,000 | -H-D | M] -- D:\ProgramData\{FFCC117F-633D-49E2-9279-CBF58ED15A69}
[2013/01/14 11:39:44 | 000,000,500 | ---- | M] () -- D:\Windows\Tasks\MATLAB R2011b Startup Accelerator.job
[2012/12/02 17:03:32 | 000,032,632 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2012/10/03 07:55:57 | 000,000,000 | -HSD | M] -- D:\$Recycle.Bin
[2012/07/09 02:53:31 | 000,000,000 | ---D | M] -- D:\AMD
[2013/01/14 07:51:49 | 000,000,000 | -HSD | M] -- D:\Config.Msi
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\Documents and Settings
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\Dokumente und Einstellungen
[2012/06/04 04:12:31 | 000,000,000 | ---D | M] -- D:\hp_P1000_P1500_Full_Solution
[2012/09/02 07:44:41 | 000,000,000 | ---D | M] -- D:\MITSI 2012 Temporary Files
[2012/12/20 10:57:57 | 000,000,000 | RH-D | M] -- D:\MSOCache
[2012/05/10 14:01:28 | 000,000,000 | ---D | M] -- D:\NVIDIA
[2009/07/13 21:37:05 | 000,000,000 | ---D | M] -- D:\PerfLogs
[2013/01/14 07:39:34 | 000,000,000 | R--D | M] -- D:\Program Files
[2013/01/14 07:30:27 | 000,000,000 | -H-D | M] -- D:\ProgramData
[2012/04/24 11:59:38 | 000,000,000 | -HSD | M] -- D:\Programme
[2012/04/24 11:59:39 | 000,000,000 | -HSD | M] -- D:\Recovery
[2013/01/14 11:05:13 | 000,000,000 | -HSD | M] -- D:\System Volume Information
[2012/05/12 09:12:18 | 000,000,000 | R--D | M] -- D:\Users
[2013/01/13 11:48:02 | 000,000,000 | ---D | M] -- D:\Windows
 
< %PROGRAMFILES%\*.exe >
 
Invalid Environment Variable: %LOCALAPPDATA%\*.exe
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009/07/13 20:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- D:\Windows\System32\drivers\AGP440.sys
[2009/07/13 20:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- D:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009/07/13 20:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- D:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009/07/13 20:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- D:\Windows\System32\drivers\atapi.sys
[2009/07/13 20:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- D:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/13 20:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- D:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009/07/13 20:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- D:\Windows\System32\cngaudit.dll
[2009/07/13 20:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- D:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011/02/26 00:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- D:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010/11/20 16:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- D:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 00:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- D:\Windows\explorer.exe
[2011/02/25 00:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- D:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2011/03/11 00:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- D:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 00:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- D:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 00:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- D:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011/03/11 00:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- D:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2010/11/20 16:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- D:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 16:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- D:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010/11/20 16:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- D:\Windows\System32\netlogon.dll
[2010/11/20 16:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- D:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011/03/11 00:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- D:\Windows\System32\drivers\nvstor.sys
[2011/03/11 00:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- D:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 00:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- D:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011/03/11 00:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- D:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2010/11/20 16:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- D:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 16:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- D:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2010/11/20 16:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- D:\Windows\System32\scecli.dll
[2010/11/20 16:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- D:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010/11/20 16:29:20 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- D:\Windows\System32\user32.dll
[2010/11/20 16:29:20 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- D:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010/11/20 16:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- D:\Windows\System32\userinit.exe
[2010/11/20 16:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- D:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010/11/20 16:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- D:\Windows\System32\winlogon.exe
[2010/11/20 16:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- D:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009/07/13 18:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- D:\Windows\System32\drivers\ws2ifsl.sys
[2009/07/13 18:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- D:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2010/11/20 16:29:08 | 000,828,928 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- D:\Windows\system32\fontext.dll
[2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- D:\Windows\system32\shell32.dll
 
Invalid Environment Variable: %USERPROFILE%\*.*
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll
 
Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe
< End of report >