|
Plagegeister aller Art und deren Bekämpfung: Minianwendungen werden nicht mehr richtig angezeigtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.03.2013, 12:32 | #1 |
| Minianwendungen werden nicht mehr richtig angezeigt Hallo zusammen, seit kurzem werden bei mir die Minianwendungen nicht mehr richtig angezeigt. Meist nur ein kleiner schwarzer und weißer fleck. Handelt es sich hier möglicherweise um einen Virus? Vielleicht kennt sich einer von euch damit aus. duddl |
03.03.2013, 18:15 | #2 |
/// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt Hi,
__________________Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex netsvcs msconfig %SYSTEMDRIVE%\*. %PROGRAMFILES%\*.exe %LOCALAPPDATA%\*.exe %systemroot%\*. /mp /s C:\Windows\system32\*.tsp /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL explorer.exe iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\system32\*.dll /lockedfiles %USERPROFILE%\*.* %USERPROFILE%\Local Settings\Temp\*.exe %USERPROFILE%\Local Settings\Temp\*.dll %USERPROFILE%\Application Data\*.exe HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs CREATERESTOREPOINT
__________________ |
03.03.2013, 21:01 | #3 |
| Minianwendungen werden nicht mehr richtig angezeigt Bitdefender sagt mir dass otl eine bösartige anwendung sei, soll ich sie also nicht ausführen?
__________________ |
03.03.2013, 21:12 | #4 |
/// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt doch ist n Fehlalarm
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
03.03.2013, 21:28 | #5 | |
| Minianwendungen werden nicht mehr richtig angezeigtZitat:
OTL Logfile: Code:
ATTFilter OTL logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia! IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: Google CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 ???,????,????cr67com,????,??????,?????112scg,tt???8bc8,????? O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ O1 - Hosts: 127.0.0.1 100sexlinks.com - Informationen zum Thema Sex links. Diese Website steht zum Verkauf! O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys [2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys [2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll [2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL [2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL [2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL [2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL [2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL [2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL [2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309 [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc [2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc [2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll [2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll [2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll [2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc [2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc [2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc [2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc [2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc [2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc [2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc [2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll [2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll [2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll [2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc [2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc [2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll [2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll [2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl [2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll [2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe [2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll [2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== < End of report > Wie kann man nochmal die Texte zitieren bzw. einfügen. also mit welchen Zeichen? hallo? |
04.03.2013, 14:20 | #6 |
| Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys [2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys [2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll [2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL [2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL [2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL [2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL [2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL [2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL [2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309 [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc [2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc [2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll [2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll [2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll [2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc [2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc [2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc [2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc [2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc [2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc [2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc [2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll [2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll [2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll [2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc [2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc [2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll [2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll [2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl [2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll [2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe [2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll [2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== < End of report > |
04.03.2013, 14:21 | #7 |
| Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys [2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys [2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll [2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL [2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL [2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL [2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL [2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL [2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL [2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309 [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc [2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc [2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc [2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc [2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc [2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll [2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll [2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll [2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc [2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc [2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc [2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc [2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc [2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc [2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc [2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc [2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc [2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc [2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll [2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll [2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll [2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc [2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc [2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll [2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll [2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl [2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll [2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe [2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll [2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== < End of report > |
04.03.2013, 14:24 | #8 |
| Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL Extras logfile created on: 03.03.2013 21:30:20 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free 5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) [HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) Directory [AddToPlaylistApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Key error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.) "C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.) "C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.) "C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.) ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{01DBE142-27E9-4773-A0CD-B304003A5DF7}" = lport=137 | protocol=17 | dir=in | app=system | "{12F58715-4624-4FD1-B010-BDBB1E7B080E}" = rport=137 | protocol=17 | dir=out | app=system | "{1D2089B8-89D0-4BA7-A5B4-8F155E15D214}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{32A2271E-7150-4DA8-8C6D-BEE0170453F2}" = lport=138 | protocol=17 | dir=in | app=system | "{37CFFEA8-E16F-43E4-BF1A-F88551A92DE4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{39748B89-9815-4550-B841-532E2154ACF6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3D59763D-1ED3-4C74-BDFA-8A8FCC9FC525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3EB7CAEB-87BB-4EA0-B067-ACC73089BC53}" = rport=139 | protocol=6 | dir=out | app=system | "{4361BAA7-7834-412A-9E44-1BA065BD74E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{4839B456-FDA6-4BEB-8D20-3376989267D7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{49BABFCE-DC11-4F95-ACBC-9C8BE5EDC36D}" = lport=139 | protocol=6 | dir=in | app=system | "{4DE142EE-3AC5-4683-A93D-73C964D0A799}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{56A0396B-6F40-4055-A5C3-5063299FB17E}" = rport=138 | protocol=17 | dir=out | app=system | "{66F5B08D-0A57-46B4-AA17-F10C3C22F759}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{8C8F29E3-63A1-4816-81E5-EE4150655CFB}" = lport=445 | protocol=6 | dir=in | app=system | "{90695147-1B32-4BF1-929C-80FA22015799}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{A86F6B4F-9E54-4DB3-AA76-A0A683C3E610}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{AFC82FD5-38F0-4F3E-9E7D-057741979768}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C4066647-0930-4F92-AED6-7BFA6D998905}" = lport=10243 | protocol=6 | dir=in | app=system | "{EAB4A630-A4D2-4BD4-8678-B51E957BE3FC}" = lport=2869 | protocol=6 | dir=in | app=system | "{EFE6FD3C-175A-4490-963E-25D99B7C8EA2}" = rport=445 | protocol=6 | dir=out | app=system | "{F48DB664-08F0-4795-9171-196F48F7B1D2}" = lport=80 | protocol=6 | dir=in | name=www | "{F5167275-B910-4332-8B20-73F7A0B8BBCF}" = rport=10243 | protocol=6 | dir=out | app=system | "{FFA4C39C-5201-4494-9C67-A43E86E58075}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{06D07C9B-2AD0-4369-AB48-298D5D18296B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{0AF7B335-6CF4-4D3E-8667-438F4A4EADDA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{1253855C-B82A-4533-A923-299F385CEE73}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{15EA55BC-0D82-4443-B1D0-D1D174C8B98A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{31EF75E5-69F3-4986-A494-697A2D4B0B79}" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "{3367344A-00FA-45DB-846E-477E214F9D96}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe | "{36C659E4-9313-4E22-A9CA-B5B3FE55F6F6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{47A7770A-CDF0-42BE-B810-BC82EC215190}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{4CF43D84-0084-43ED-B110-3D63EDF671BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{4E9C997D-58B2-4974-9A3B-5B3FBC9FBDDD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{55224F95-277E-482D-BC14-B97F8D85E435}" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "{5E76D313-567F-495F-8B8C-24A65DD02DA5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6156A7B9-18E4-4FF5-AF53-F97D16C2D1AF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{664CA150-E671-4567-90EC-299E6D3B4035}" = protocol=6 | dir=out | app=system | "{791C8FDF-21B4-4874-B18A-F02E0285293E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{80C8EE46-FD19-483A-B00E-A9CCE3000760}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | "{8CC52C5F-AA3B-41D7-A1B7-203AA9B2C047}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{94D74F6B-79F1-46DB-A69A-A8B39BE3639D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{AB6B0AAB-C44F-418A-969C-D4712E88839F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{ACE84729-F7CE-40F2-BBFE-1E21659DB267}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{C95F78A8-49C0-44EC-99C4-940067C828E7}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe | "{DAD0094F-D544-4CED-A3C4-ECC5FD4C9F36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{E72A7411-CB21-440F-B894-74A43100BFD3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{E9182B6C-9065-48DF-8991-4E7BE3001FE6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "TCP Query User{5AE05BC8-C5D2-4583-AED7-24C58FC6768E}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "TCP Query User{6C914251-2626-430D-84DE-5249E13427AF}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | "UDP Query User{0DF4C5BA-CE9D-4847-A7DD-9D84929383D0}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "UDP Query User{3669F7DB-5032-4F4F-AA0A-01C4A71BADEC}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{152A537F-45E9-4B15-8847-2E3E5BE61859}" = Intel® Trusted Connect Service Client "{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 6.1 "{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes "{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1 "{23C3F5C0-566B-478B-AAB6-197ADAD0C945}" = Uniblue SpeedUpMyPC 2009 "{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9 "{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program "{2C26B97F-698E-4E04-B398-8203B147859B}_is1" = TOPP Vorlagen-Druckstudio (5156) "{33FFD86B-569C-9E8D-6659-A1F84D07CAD0}" = AMD Catalyst Install Manager "{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7 "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{53B17A98-5BF0-40BC-AAFF-850A357975AC}" = HP Quick Launch "{5F32D89B-D3A0-4562-AC03-F6DE4614AE1A}" = DVB-T USB DEVICE "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{74292F90-895A-4FC6-A692-9641532B1B63}" = ArcSoft TotalMedia 3.5 "{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch "{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy "{BBBA20E0-D9F3-4C6F-83AC-D66EFC0BFA93}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista "{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader "{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013 "{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support "{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader "{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE "{E2E7A0E8-77C4-495F-8FA3-63DAEDAA2DB3}" = F-Secure PSC Prerequisites "{E63E34A7-E552-412B-9E40-FD6FC5227ABA}" = Uniblue RegistryBooster 2009 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE) "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package "1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung "1&1 Mail & Media GmbH Toolbar IE8" = WEB.DE MailCheck für Internet Explorer "7-Zip" = 7-Zip 9.20 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12 "Bitdefender" = Bitdefender Internet Security 2013 "BitTorrent" = BitTorrent "DMX5_is1" = DriverMax 6 "DriverEasy_is1" = DriverEasy 4.4.2 "Finale NotePad 2012" = Finale NotePad 2012 "Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128 "Freemake Video Converter_is1" = Freemake Video Converter Version 3.2.0 "freeocr_is1" = FreeOCR v4.2 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de) "MozillaMaintenanceService" = Mozilla Maintenance Service "SynTPDeinstKey" = Synaptics TouchPad Driver "TuneUp Utilities 2013" = TuneUp Utilities 2013 "WinPcapInst" = WinPcap 4.1.2 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "1&1 Mail & Media WEB.DE MailCheck GC" = WEB.DE MailCheck für Google Chrome "Google Chrome" = Google Chrome ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 02.03.2013 04:40:40 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 04:47:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000 Error - 02.03.2013 04:47:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000 Error - 02.03.2013 05:09:33 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 07:46:25 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version: 13.0.3020.2, Zeitstempel: 0x51067abd Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x8c0 Startzeit der fehlerhaften Anwendung: 0x01ce1723c5213387 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: unknown Berichtskennung: cf90084a-832e-11e2-8f0e-e4115bf9b2f0 Error - 02.03.2013 07:47:41 | Computer Name = Alexander-HP630 | Source = Microsoft-Windows-CAPI2 | ID = 512 Description = Vom Kryptografiedienst konnte das VSS-Sicherungsobjekt "System Writer" nicht initialisiert werden. Details: Could not query the status of the EventSystem service. System Error: Der Computer wird heruntergefahren. . Error - 02.03.2013 07:51:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 07:57:20 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 07:58:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version: 13.0.3020.2, Zeitstempel: 0x51067abd Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x8b0 Startzeit der fehlerhaften Anwendung: 0x01ce173d14bd2c26 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: 7c1d470b-8330-11e2-8fd3-e4115bf9b2f0 Error - 02.03.2013 08:02:06 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 09:38:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. [ Media Center Events ] Error - 03.12.2012 14:10:35 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 19:10:35 - Fehler beim Herstellen der Internetverbindung. 19:10:35 - Serververbindung konnte nicht hergestellt werden.. Error - 03.12.2012 14:10:44 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 19:10:40 - Fehler beim Herstellen der Internetverbindung. 19:10:40 - Serververbindung konnte nicht hergestellt werden.. Error - 04.12.2012 09:37:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 14:37:39 - Fehler beim Herstellen der Internetverbindung. 14:37:39 - Serververbindung konnte nicht hergestellt werden.. Error - 04.12.2012 09:37:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 14:37:44 - Fehler beim Herstellen der Internetverbindung. 14:37:44 - Serververbindung konnte nicht hergestellt werden.. Error - 05.12.2012 12:09:49 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 17:09:49 - Directory konnte nicht abgerufen werden (Fehler: Timeout für Vorgang überschritten) Error - 06.12.2012 11:54:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 16:54:39 - Fehler beim Herstellen der Internetverbindung. 16:54:39 - Serververbindung konnte nicht hergestellt werden.. Error - 06.12.2012 11:54:48 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 16:54:44 - Fehler beim Herstellen der Internetverbindung. 16:54:44 - Serververbindung konnte nicht hergestellt werden.. Error - 14.12.2012 10:40:37 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 15:40:37 - Fehler beim Herstellen der Internetverbindung. 15:40:37 - Serververbindung konnte nicht hergestellt werden.. Error - 14.12.2012 10:40:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 15:40:43 - Fehler beim Herstellen der Internetverbindung. 15:40:43 - Serververbindung konnte nicht hergestellt werden.. Error - 15.12.2012 15:52:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 20:52:47 - Fehler beim Herstellen der Internetverbindung. 20:52:47 - Serververbindung konnte nicht hergestellt werden.. [ Spybot - Search and Destroy Events ] Error - 14.01.2013 13:49:32 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 16.01.2013 13:50:00 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 14.02.2013 10:55:06 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 19.02.2013 09:38:05 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 21.02.2013 13:14:11 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 23.02.2013 05:17:13 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 23.02.2013 16:11:47 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 01.03.2013 12:07:35 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 01.03.2013 14:53:53 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 03.03.2013 04:36:59 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions [ System Events ] Error - 17.02.2013 04:31:32 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7011 Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst IPBusEnum erreicht. Error - 17.02.2013 04:32:26 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697 Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error - 17.02.2013 15:52:04 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = Error - 17.02.2013 16:30:21 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = Error - 18.02.2013 09:10:09 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697 Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error - 18.02.2013 12:49:33 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 40517705 Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306 Description = Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306 Description = Error - 18.02.2013 12:56:23 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = Error - 18.02.2013 13:34:45 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = < End of report > |
04.03.2013, 19:31 | #9 |
/// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt steht doch oben groß und breit, in der codebox und dass in die otl eingabebox
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
04.03.2013, 20:14 | #10 |
| Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL logfile created on: 04.03.2013 19:40:08 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 35,42% Memory free 5,21 Gb Paging File | 2,84 Gb Available in Paging File | 54,48% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 513,40 Gb Free Space | 86,13% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.) PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll () MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll () MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll () MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl () MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl () MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll () ========== Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found SRV - (SDWSCService) -- C:\Program Files\Spybot File not found SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender) SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender) SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found DRV - (massfilter) -- system32\drivers\massfilter.sys File not found DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found DRV - (avkmgr) -- system32\DRIVERS\avkmgr.sys File not found DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found DRV - (40517705) -- system32\drivers\04373023.sys File not found DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation) DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software) DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender) DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender) DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software) DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation) DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation) DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.) DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender) DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.) DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab) DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab) DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab) DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC) DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab) DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros) DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC) DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation) DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO) DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab) DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated) DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC) DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek) DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic) DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.) DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r= IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M] [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions [2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de [2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml [2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\ CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.123fporn.info O1 - Hosts: 15307 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found. O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No CLSID value found. O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender) O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software) O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software) O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm () O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH) O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{E21663EC-B5F9-4842-8303-EE4FDADFEF6D} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpReg: avgnt - hkey= - key= - File not found MsConfig - StartUpReg: Spybot-S&D Cleaning - hkey= - key= - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.) MsConfig - State: "services" - 0 MsConfig - State: "startup" - 2 CREATERESTOREPOINT System Restore Service not available. ========== Files/Folders - Created Within 30 Days ========== [2013.03.04 18:51:52 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2013.03.04 18:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2013.03.04 18:28:01 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2013.03.04 18:28:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2013.03.04 18:19:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2013.03.04 16:33:53 | 000,000,000 | ---D | C] -- C:\Program Files\Avira [2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius [2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software [2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337 [2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner [2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite [2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy [2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck [2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys [2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013 [2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys [2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys [2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys [2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys [2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics [2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys [2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb [2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH [2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys [2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker [2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax [2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE [2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll [2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers [2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers [2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys [2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros [2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon [2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell [2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell [2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551 [2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware [2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS [2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS [2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius [2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions [2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar [2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions [2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox [2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox [2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 [2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe [2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch [2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch [2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive [2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave [2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages [2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages [2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData [2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2 [2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop [2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite [2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters [2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys [2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations [2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp [2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner [2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905 [2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung [2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013 [2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine [2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater [2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express [2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811 [2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.03.04 19:12:05 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.03.04 19:12:04 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.03.04 18:51:52 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2013.03.04 18:28:06 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2013.03.04 16:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.04 16:17:23 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.03.04 16:16:51 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe [2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys [2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin [2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin [2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys [2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml [2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp [2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp [2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp [2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp [2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll [2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config [2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources [2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources [2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources [2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources [2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources [2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources [2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources [2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources [2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources [2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources [2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources [2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources [2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources [2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources [2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources [2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources [2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources [2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources [2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources [2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources [2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources [2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources [2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources [2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources [2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources [2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources [2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources [2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources [2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources [2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml [2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk [2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini [2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini [2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup [2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys [2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe [2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.03.04 18:28:06 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm [2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm [2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin [2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin [2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin [2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin [2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin [2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin [2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt [2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt [2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01 [2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01 [2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz [2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01 [2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01 [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr [2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin [2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin [2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin [2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin [2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk [2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk [2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk [2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk [2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll [2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe [2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf [2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe [2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini [2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job [2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk [2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF [2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll [2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf [2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys [2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys [2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog [2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat [2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini [2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk [2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk [2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar [2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml [2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml [2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk [2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk [2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf [2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL [2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin [2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll [2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg [2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll [2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS [2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS [2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin [2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin [2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml [2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys [2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html [2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe [2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link [2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll [2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin [2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin [2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin [2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH [2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten [2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch [2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging [2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender [2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp [2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files [2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente [2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius [2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps [2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts [2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten [2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters [2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake [2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg [2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions [2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic [2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters [2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros [2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü [2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics [2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP [2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software [2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue [2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen [2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} [2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} [2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F} [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten [2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop [2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites [2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent [2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü [2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten [2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies [2013.03.04 19:36:17 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop [2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents [2013.03.04 18:25:39 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung [2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien [2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites [2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere [2013.03.04 16:21:39 | 000,000,000 | R--D | M] -- C:\Users\Info\Links [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen [2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung [2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark [2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent [2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games [2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo [2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü [2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing [2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos [2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen [2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop [2013.03.04 18:28:06 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop [2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads [2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites [2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries [2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures [2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV [2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2012.10.01 13:20:42 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2013.02.24 20:23:38 | 000,000,000 | ---D | M] -- C:\Dell [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2013.02.25 16:47:38 | 000,000,000 | ---D | M] -- C:\Drivers [2013.02.24 10:59:28 | 000,000,000 | ---D | M] -- C:\Driver_allOS [2012.10.26 22:06:06 | 000,000,000 | ---D | M] -- C:\FreeOCR [2012.09.27 15:10:41 | 000,000,000 | ---D | M] -- C:\HP [2013.02.24 19:54:29 | 000,000,000 | ---D | M] -- C:\HP_LaserJet_Enterprise_500_color_M551 [2013.01.05 21:30:37 | 000,000,000 | ---D | M] -- C:\Macromedia [2012.12.29 13:41:45 | 000,000,000 | ---D | M] -- C:\Mozilla [2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs [2013.03.04 18:28:01 | 000,000,000 | R--D | M] -- C:\Program Files [2013.03.04 18:27:08 | 000,000,000 | -H-D | M] -- C:\ProgramData [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Programme [2012.10.20 13:20:56 | 000,000,000 | ---D | M] -- C:\PSFONTS [2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Recovery [2013.02.19 14:41:41 | 000,000,000 | R--D | M] -- C:\Sandbox [2012.09.29 08:39:29 | 000,000,000 | ---D | M] -- C:\SiLabs [2013.02.26 21:15:24 | 000,000,000 | ---D | M] -- C:\swsetup [2013.03.04 18:19:23 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2013.02.04 20:26:37 | 000,000,000 | ---D | M] -- C:\TDSSKiller_Quarantine [2013.02.15 12:43:10 | 000,000,000 | ---D | M] -- C:\toolbarImages [2012.09.29 10:40:45 | 000,000,000 | ---D | M] -- C:\UserData [2012.11.17 16:39:29 | 000,000,000 | R--D | M] -- C:\Users [2013.03.03 13:09:44 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < C:\Windows\system32\*.tsp > [2009.07.14 02:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp [2009.07.14 02:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp [2009.07.14 02:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp [2009.07.14 02:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp [2010.11.20 13:16:53 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp [4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ] [2009.07.14 05:53:46 | 000,032,630 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT [2012.10.03 17:01:17 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job [2013.01.09 20:46:10 | 000,001,090 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [2013.01.09 20:46:10 | 000,001,094 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\Tasks\DriverEasy Scheduled Scan.job [2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job [2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job < MD5 for: AGP440.SYS > [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16552_none_dd2bf0ef82c7be83\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16593_none_dd01b18982e7479e\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.20669_none_ddb1bfd49be72b9f\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.20713_none_dde1cf9a9bc40507\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: EXPLORER.EXE > [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe [2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe [2012.11.13 14:07:52 | 003,906,584 | ---- | M] (Safer-Networking Ltd.) MD5=E4A0900CF535888DDD85B10040CA3E34 -- C:\Program Files\Spybot - Search & Destroy 2\explorer.exe < MD5 for: IASTOR.SYS > [2011.05.20 08:43:02 | 000,461,592 | ---- | M] (Intel Corporation) MD5=DB81F413FA4E3F328CAD7B5D59EF3F21 -- C:\Windows\System32\drivers\iaStor.sys < MD5 for: IASTORV.SYS > [2010.05.12 10:05:35 | 000,332,168 | ---- | M] (Intel Corporation) MD5=2D2918606673C46769FB516A5ACE958E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_aed9db9de9265a3a\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys [2010.05.12 10:20:41 | 000,332,160 | ---- | M] (Intel Corporation) MD5=FE8186428F0AB44F0E500C7AA33E9B51 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_afb9f9af020317a3\iaStorV.sys < MD5 for: NETLOGON.DLL > [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2010.05.12 10:05:45 | 000,143,752 | ---- | M] (NVIDIA Corporation) MD5=1D8B6A440DFF2BDEAA4EB209FCBA21BF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_39a34c4d205d0412\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys [2010.05.12 10:20:52 | 000,143,752 | ---- | M] (NVIDIA Corporation) MD5=F3596C8A63D3871890B0D3A0DFFEF0D0 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_3a836a5e3939c17b\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll < MD5 for: USERINIT.EXE > [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WINLOGON.EXE > [2012.12.14 16:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > [2012.08.29 17:24:08 | 000,161,312 | ---- | M] (BitDefender LLC) Unable to obtain MD5 -- C:\Windows\system32\drivers\gzflt.sys < %systemroot%\System32\config\*.sav > < %systemroot%\system32\*.dll /lockedfiles > [4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ] < %USERPROFILE%\*.* > [2013.03.04 20:05:26 | 007,340,032 | ---- | M] () -- C:\Users\Info\NTUSER.DAT [2013.02.03 17:27:53 | 006,815,744 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.bak [2013.03.04 20:05:26 | 000,262,144 | -HS- | M] () -- C:\Users\Info\ntuser.dat.LOG1 [2012.09.27 11:34:15 | 000,000,000 | -HS- | M] () -- C:\Users\Info\ntuser.dat.LOG2 [2013.02.03 17:30:51 | 000,000,000 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.sav.LOG1 [2013.02.03 17:30:51 | 000,000,000 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.sav.LOG2 [2012.09.27 12:04:28 | 000,065,536 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2012.09.27 12:04:28 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2012.09.27 12:04:28 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2013.02.03 21:33:02 | 000,065,536 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TM.blf [2013.02.03 21:33:02 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms [2013.02.03 21:33:02 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms [2012.09.27 11:34:16 | 000,000,020 | -HS- | M] () -- C:\Users\Info\ntuser.ini [2012.11.07 17:24:01 | 000,019,449 | ---- | M] () -- C:\Users\Info\return.txt < %USERPROFILE%\Local Settings\Temp\*.exe > < %USERPROFILE%\Local Settings\Temp\*.dll > < %USERPROFILE%\Application Data\*.exe > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < End of report > |
04.03.2013, 20:15 | #11 |
| Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter OTL Extras logfile created on: 04.03.2013 19:40:08 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Info\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16521) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,61 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 35,42% Memory free 5,21 Gb Paging File | 2,84 Gb Available in Paging File | 54,48% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 596,07 Gb Total Space | 513,40 Gb Free Space | 86,13% Space Free | Partition Type: NTFS Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) [HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) Directory [AddToPlaylistApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Key error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.) "C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.) "C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.) "C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.) ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{01DBE142-27E9-4773-A0CD-B304003A5DF7}" = lport=137 | protocol=17 | dir=in | app=system | "{12F58715-4624-4FD1-B010-BDBB1E7B080E}" = rport=137 | protocol=17 | dir=out | app=system | "{1D2089B8-89D0-4BA7-A5B4-8F155E15D214}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{32A2271E-7150-4DA8-8C6D-BEE0170453F2}" = lport=138 | protocol=17 | dir=in | app=system | "{37CFFEA8-E16F-43E4-BF1A-F88551A92DE4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{39748B89-9815-4550-B841-532E2154ACF6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3D59763D-1ED3-4C74-BDFA-8A8FCC9FC525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3EB7CAEB-87BB-4EA0-B067-ACC73089BC53}" = rport=139 | protocol=6 | dir=out | app=system | "{4361BAA7-7834-412A-9E44-1BA065BD74E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{4839B456-FDA6-4BEB-8D20-3376989267D7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{49BABFCE-DC11-4F95-ACBC-9C8BE5EDC36D}" = lport=139 | protocol=6 | dir=in | app=system | "{4DE142EE-3AC5-4683-A93D-73C964D0A799}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{56A0396B-6F40-4055-A5C3-5063299FB17E}" = rport=138 | protocol=17 | dir=out | app=system | "{66F5B08D-0A57-46B4-AA17-F10C3C22F759}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{8C8F29E3-63A1-4816-81E5-EE4150655CFB}" = lport=445 | protocol=6 | dir=in | app=system | "{90695147-1B32-4BF1-929C-80FA22015799}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{A86F6B4F-9E54-4DB3-AA76-A0A683C3E610}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{AFC82FD5-38F0-4F3E-9E7D-057741979768}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C4066647-0930-4F92-AED6-7BFA6D998905}" = lport=10243 | protocol=6 | dir=in | app=system | "{EAB4A630-A4D2-4BD4-8678-B51E957BE3FC}" = lport=2869 | protocol=6 | dir=in | app=system | "{EFE6FD3C-175A-4490-963E-25D99B7C8EA2}" = rport=445 | protocol=6 | dir=out | app=system | "{F48DB664-08F0-4795-9171-196F48F7B1D2}" = lport=80 | protocol=6 | dir=in | name=www | "{F5167275-B910-4332-8B20-73F7A0B8BBCF}" = rport=10243 | protocol=6 | dir=out | app=system | "{FFA4C39C-5201-4494-9C67-A43E86E58075}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{06D07C9B-2AD0-4369-AB48-298D5D18296B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{0AF7B335-6CF4-4D3E-8667-438F4A4EADDA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{1253855C-B82A-4533-A923-299F385CEE73}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{15EA55BC-0D82-4443-B1D0-D1D174C8B98A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{31EF75E5-69F3-4986-A494-697A2D4B0B79}" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "{3367344A-00FA-45DB-846E-477E214F9D96}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe | "{36C659E4-9313-4E22-A9CA-B5B3FE55F6F6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{47A7770A-CDF0-42BE-B810-BC82EC215190}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{4CF43D84-0084-43ED-B110-3D63EDF671BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{4E9C997D-58B2-4974-9A3B-5B3FBC9FBDDD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{55224F95-277E-482D-BC14-B97F8D85E435}" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "{5E76D313-567F-495F-8B8C-24A65DD02DA5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6156A7B9-18E4-4FF5-AF53-F97D16C2D1AF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{664CA150-E671-4567-90EC-299E6D3B4035}" = protocol=6 | dir=out | app=system | "{791C8FDF-21B4-4874-B18A-F02E0285293E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{80C8EE46-FD19-483A-B00E-A9CCE3000760}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | "{8CC52C5F-AA3B-41D7-A1B7-203AA9B2C047}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{94D74F6B-79F1-46DB-A69A-A8B39BE3639D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{AB6B0AAB-C44F-418A-969C-D4712E88839F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{ACE84729-F7CE-40F2-BBFE-1E21659DB267}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{C95F78A8-49C0-44EC-99C4-940067C828E7}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe | "{DAD0094F-D544-4CED-A3C4-ECC5FD4C9F36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{E72A7411-CB21-440F-B894-74A43100BFD3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{E9182B6C-9065-48DF-8991-4E7BE3001FE6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "TCP Query User{5AE05BC8-C5D2-4583-AED7-24C58FC6768E}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "TCP Query User{6C914251-2626-430D-84DE-5249E13427AF}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | "UDP Query User{0DF4C5BA-CE9D-4847-A7DD-9D84929383D0}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe | "UDP Query User{3669F7DB-5032-4F4F-AA0A-01C4A71BADEC}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{152A537F-45E9-4B15-8847-2E3E5BE61859}" = Intel® Trusted Connect Service Client "{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 6.1 "{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes "{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1 "{23C3F5C0-566B-478B-AAB6-197ADAD0C945}" = Uniblue SpeedUpMyPC 2009 "{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15 "{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program "{2C26B97F-698E-4E04-B398-8203B147859B}_is1" = TOPP Vorlagen-Druckstudio (5156) "{33FFD86B-569C-9E8D-6659-A1F84D07CAD0}" = AMD Catalyst Install Manager "{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7 "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{53B17A98-5BF0-40BC-AAFF-850A357975AC}" = HP Quick Launch "{5F32D89B-D3A0-4562-AC03-F6DE4614AE1A}" = DVB-T USB DEVICE "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{74292F90-895A-4FC6-A692-9641532B1B63}" = ArcSoft TotalMedia 3.5 "{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch "{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy "{BBBA20E0-D9F3-4C6F-83AC-D66EFC0BFA93}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista "{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader "{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013 "{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support "{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader "{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE "{E2E7A0E8-77C4-495F-8FA3-63DAEDAA2DB3}" = F-Secure PSC Prerequisites "{E63E34A7-E552-412B-9E40-FD6FC5227ABA}" = Uniblue RegistryBooster 2009 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE) "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package "1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung "7-Zip" = 7-Zip 9.20 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12 "Bitdefender" = Bitdefender Internet Security 2013 "BitTorrent" = BitTorrent "DMX5_is1" = DriverMax 6 "DriverEasy_is1" = DriverEasy 4.4.2 "Finale NotePad 2012" = Finale NotePad 2012 "Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128 "Freemake Video Converter_is1" = Freemake Video Converter Version 3.2.0 "freeocr_is1" = FreeOCR v4.2 "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de) "MozillaMaintenanceService" = Mozilla Maintenance Service "SynTPDeinstKey" = Synaptics TouchPad Driver "TuneUp Utilities 2013" = TuneUp Utilities 2013 "WinPcapInst" = WinPcap 4.1.2 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "1&1 Mail & Media WEB.DE MailCheck GC" = WEB.DE MailCheck für Google Chrome "Google Chrome" = Google Chrome ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 02.03.2013 07:58:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version: 13.0.3020.2, Zeitstempel: 0x51067abd Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x8b0 Startzeit der fehlerhaften Anwendung: 0x01ce173d14bd2c26 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll Berichtskennung: 7c1d470b-8330-11e2-8fd3-e4115bf9b2f0 Error - 02.03.2013 08:02:06 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 09:38:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103 Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000. Error - 02.03.2013 11:37:49 | Computer Name = Alexander-HP630 | Source = VSS | ID = 8194 Description = Error - 02.03.2013 12:26:37 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\innovative solutions\drivermax\DPInst\amd64\dpinst.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 02.03.2013 12:26:37 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\innovative solutions\drivermax\DPInst\ia64\dpinst.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 02.03.2013 12:26:46 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\MaxxAudioControl64.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 02.03.2013 12:26:47 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\RAVBg64.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 02.03.2013 12:26:47 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\RAVCpl64.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 02.03.2013 12:26:50 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\vncutil64.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 02.03.2013 12:26:52 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\WDM\vncutil64.exe". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". [ Media Center Events ] Error - 03.12.2012 14:10:35 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 19:10:35 - Fehler beim Herstellen der Internetverbindung. 19:10:35 - Serververbindung konnte nicht hergestellt werden.. Error - 03.12.2012 14:10:44 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 19:10:40 - Fehler beim Herstellen der Internetverbindung. 19:10:40 - Serververbindung konnte nicht hergestellt werden.. Error - 04.12.2012 09:37:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 14:37:39 - Fehler beim Herstellen der Internetverbindung. 14:37:39 - Serververbindung konnte nicht hergestellt werden.. Error - 04.12.2012 09:37:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 14:37:44 - Fehler beim Herstellen der Internetverbindung. 14:37:44 - Serververbindung konnte nicht hergestellt werden.. Error - 05.12.2012 12:09:49 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 17:09:49 - Directory konnte nicht abgerufen werden (Fehler: Timeout für Vorgang überschritten) Error - 06.12.2012 11:54:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 16:54:39 - Fehler beim Herstellen der Internetverbindung. 16:54:39 - Serververbindung konnte nicht hergestellt werden.. Error - 06.12.2012 11:54:48 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 16:54:44 - Fehler beim Herstellen der Internetverbindung. 16:54:44 - Serververbindung konnte nicht hergestellt werden.. Error - 14.12.2012 10:40:37 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 15:40:37 - Fehler beim Herstellen der Internetverbindung. 15:40:37 - Serververbindung konnte nicht hergestellt werden.. Error - 14.12.2012 10:40:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 15:40:43 - Fehler beim Herstellen der Internetverbindung. 15:40:43 - Serververbindung konnte nicht hergestellt werden.. Error - 15.12.2012 15:52:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0 Description = 20:52:47 - Fehler beim Herstellen der Internetverbindung. 20:52:47 - Serververbindung konnte nicht hergestellt werden.. [ Spybot - Search and Destroy Events ] Error - 14.01.2013 13:49:32 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 16.01.2013 13:50:00 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 14.02.2013 10:55:06 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 19.02.2013 09:38:05 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 21.02.2013 13:14:11 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 23.02.2013 05:17:13 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 23.02.2013 16:11:47 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 01.03.2013 12:07:35 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 01.03.2013 14:53:53 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions Error - 03.03.2013 04:36:59 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100 Description = LoadCleaningInstructions [ System Events ] Error - 17.02.2013 04:31:32 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7011 Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst IPBusEnum erreicht. Error - 17.02.2013 04:32:26 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697 Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error - 17.02.2013 15:52:04 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = Error - 17.02.2013 16:30:21 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = Error - 18.02.2013 09:10:09 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697 Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error - 18.02.2013 12:49:33 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 40517705 Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306 Description = Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306 Description = Error - 18.02.2013 12:56:23 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = Error - 18.02.2013 13:34:45 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010 Description = < End of report > |
04.03.2013, 21:05 | #12 |
/// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt Hi, Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
04.03.2013, 21:26 | #13 |
| Minianwendungen werden nicht mehr richtig angezeigt Er hat keine Bedrohungen gefunden: Code:
ATTFilter 21:23:45.0711 2816 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 21:23:46.0142 2816 ============================================================ 21:23:46.0142 2816 Current date / time: 2013/03/04 21:23:46.0142 21:23:46.0142 2816 SystemInfo: 21:23:46.0142 2816 21:23:46.0142 2816 OS Version: 6.1.7601 ServicePack: 1.0 21:23:46.0142 2816 Product type: Workstation 21:23:46.0143 2816 ComputerName: ALEXANDER-HP630 21:23:46.0143 2816 UserName: Info 21:23:46.0143 2816 Windows directory: C:\Windows 21:23:46.0143 2816 System windows directory: C:\Windows 21:23:46.0143 2816 Processor architecture: Intel x86 21:23:46.0143 2816 Number of processors: 2 21:23:46.0143 2816 Page size: 0x1000 21:23:46.0143 2816 Boot type: Normal boot 21:23:46.0143 2816 ============================================================ 21:23:49.0736 2816 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 21:23:49.0738 2816 ============================================================ 21:23:49.0738 2816 \Device\Harddisk0\DR0: 21:23:49.0739 2816 MBR partitions: 21:23:49.0739 2816 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000 21:23:49.0739 2816 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x4A825800 21:23:49.0739 2816 ============================================================ 21:23:49.0782 2816 C: <-> \Device\Harddisk0\DR0\Partition2 21:23:49.0782 2816 ============================================================ 21:23:49.0782 2816 Initialize success 21:23:49.0782 2816 ============================================================ 21:24:12.0623 3544 ============================================================ 21:24:12.0623 3544 Scan started 21:24:12.0623 3544 Mode: Manual; SigCheck; TDLFS; 21:24:12.0623 3544 ============================================================ 21:24:13.0761 3544 ================ Scan system memory ======================== 21:24:13.0761 3544 System memory - ok 21:24:13.0762 3544 ================ Scan services ============================= 21:24:13.0987 3544 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 21:24:14.0139 3544 1394ohci - ok 21:24:14.0178 3544 40517705 - ok 21:24:14.0292 3544 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe 21:24:14.0689 3544 ACDaemon - ok 21:24:14.0730 3544 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys 21:24:14.0758 3544 ACPI - ok 21:24:14.0793 3544 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 21:24:14.0860 3544 AcpiPmi - ok 21:24:14.0956 3544 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 21:24:16.0846 3544 AdobeARMservice - ok 21:24:16.0885 3544 [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 21:24:16.0987 3544 AdobeFlashPlayerUpdateSvc - ok 21:24:17.0019 3544 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 21:24:17.0066 3544 adp94xx - ok 21:24:17.0101 3544 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 21:24:17.0170 3544 adpahci - ok 21:24:17.0203 3544 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 21:24:17.0238 3544 adpu320 - ok 21:24:17.0287 3544 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 21:24:17.0340 3544 AeLookupSvc - ok 21:24:17.0425 3544 [ A6CE73469591554279DA63BE715DBC93 ] AERTFilters C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe 21:24:17.0560 3544 AERTFilters - ok 21:24:17.0606 3544 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys 21:24:17.0662 3544 AFD - ok 21:24:17.0717 3544 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys 21:24:17.0738 3544 agp440 - ok 21:24:17.0773 3544 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys 21:24:17.0798 3544 aic78xx - ok 21:24:17.0829 3544 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe 21:24:17.0896 3544 ALG - ok 21:24:17.0920 3544 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys 21:24:17.0952 3544 aliide - ok 21:24:17.0978 3544 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys 21:24:18.0024 3544 amdagp - ok 21:24:18.0043 3544 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys 21:24:18.0064 3544 amdide - ok 21:24:18.0094 3544 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 21:24:18.0189 3544 AmdK8 - ok 21:24:18.0220 3544 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 21:24:18.0261 3544 AmdPPM - ok 21:24:18.0294 3544 [ E7F4D42D8076EC60E21715CD11743A0D ] amdsata C:\Windows\system32\drivers\amdsata.sys 21:24:18.0318 3544 amdsata - ok 21:24:18.0352 3544 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 21:24:18.0393 3544 amdsbs - ok 21:24:18.0417 3544 [ 146459D2B08BFDCBFA856D9947043C81 ] amdxata C:\Windows\system32\drivers\amdxata.sys 21:24:18.0439 3544 amdxata - ok 21:24:18.0478 3544 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys 21:24:18.0647 3544 AppID - ok 21:24:18.0678 3544 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll 21:24:18.0761 3544 AppIDSvc - ok 21:24:18.0806 3544 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll 21:24:18.0859 3544 Appinfo - ok 21:24:18.0879 3544 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll 21:24:18.0927 3544 AppMgmt - ok 21:24:18.0946 3544 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys 21:24:18.0969 3544 arc - ok 21:24:18.0989 3544 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 21:24:19.0029 3544 arcsas - ok 21:24:19.0057 3544 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 21:24:19.0270 3544 AsyncMac - ok 21:24:19.0308 3544 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys 21:24:19.0367 3544 atapi - ok 21:24:19.0371 3544 AthBTPort - ok 21:24:19.0475 3544 [ E573045DFBEAD298A8DFCD11CAC71B93 ] athr C:\Windows\system32\DRIVERS\athr.sys 21:24:19.0713 3544 athr - ok 21:24:19.0785 3544 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 21:24:19.0879 3544 AudioEndpointBuilder - ok 21:24:19.0911 3544 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll 21:24:19.0961 3544 Audiosrv - ok 21:24:20.0003 3544 [ F3D3B0AFFD227AA2BFC80C1A4536BAA0 ] avc3 C:\Windows\system32\DRIVERS\avc3.sys 21:24:20.0305 3544 avc3 - ok 21:24:20.0350 3544 [ 7F9B99B564E7C9FBB6729ED95B5BBB24 ] avchv C:\Windows\system32\DRIVERS\avchv.sys 21:24:20.0469 3544 avchv - ok 21:24:20.0495 3544 [ C7BE750843A8A39167187FD28634A25E ] avckf C:\Windows\system32\DRIVERS\avckf.sys 21:24:20.0673 3544 avckf - ok 21:24:20.0682 3544 AVFSFilter - ok 21:24:20.0714 3544 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll 21:24:20.0809 3544 AxInstSV - ok 21:24:20.0852 3544 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys 21:24:20.0898 3544 b06bdrv - ok 21:24:20.0931 3544 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys 21:24:20.0996 3544 b57nd60x - ok 21:24:21.0114 3544 [ 0FB5160737E1027936425C1E5FF2AEF9 ] BdDesktopParental C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe 21:24:21.0230 3544 BdDesktopParental - ok 21:24:21.0294 3544 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll 21:24:21.0358 3544 BDESVC - ok 21:24:21.0453 3544 [ 2C8F82DC54215B2FE064EFF996F39D9B ] BdfNdisf c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys 21:24:21.0577 3544 BdfNdisf - ok 21:24:21.0615 3544 [ 2F66C9DF34134419928BAC00E21E2679 ] bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys 21:24:21.0839 3544 bdfwfpf - ok 21:24:21.0871 3544 [ B6CBFC9D825BB2D955620CD4D8EF07F9 ] BDSandBox C:\Windows\system32\drivers\bdsandbox.sys 21:24:21.0986 3544 BDSandBox - ok 21:24:22.0071 3544 [ A7478F77584F8DB6AD74B2BBE1144886 ] bdselfpr C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys 21:24:22.0295 3544 bdselfpr - ok 21:24:22.0340 3544 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys 21:24:22.0399 3544 Beep - ok 21:24:22.0483 3544 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll 21:24:22.0556 3544 BFE - ok 21:24:22.0616 3544 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll 21:24:22.0683 3544 BITS - ok 21:24:22.0715 3544 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 21:24:22.0794 3544 blbdrive - ok 21:24:23.0151 3544 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 21:24:23.0353 3544 Bonjour Service - ok 21:24:23.0401 3544 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 21:24:23.0442 3544 bowser - ok 21:24:23.0483 3544 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 21:24:23.0559 3544 BrFiltLo - ok 21:24:23.0584 3544 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 21:24:23.0628 3544 BrFiltUp - ok 21:24:23.0665 3544 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll 21:24:23.0708 3544 Browser - ok 21:24:23.0747 3544 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys 21:24:23.0821 3544 Brserid - ok 21:24:23.0842 3544 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 21:24:23.0869 3544 BrSerWdm - ok 21:24:23.0893 3544 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 21:24:23.0936 3544 BrUsbMdm - ok 21:24:23.0967 3544 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 21:24:24.0001 3544 BrUsbSer - ok 21:24:24.0007 3544 BTATH_A2DP - ok 21:24:24.0016 3544 BTATH_BUS - ok 21:24:24.0028 3544 BTATH_HCRP - ok 21:24:24.0039 3544 BTATH_LWFLT - ok 21:24:24.0049 3544 BTATH_RCP - ok 21:24:24.0117 3544 [ C840DFF077AA30FF64DEF169CBB49164 ] BtFilter C:\Windows\system32\DRIVERS\btfilter.sys 21:24:24.0197 3544 BtFilter - ok 21:24:24.0230 3544 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys 21:24:24.0294 3544 BthEnum - ok 21:24:24.0308 3544 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 21:24:24.0335 3544 BTHMODEM - ok 21:24:24.0406 3544 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 21:24:24.0434 3544 BthPan - ok 21:24:24.0481 3544 [ C2FBF6D271D9A94D839C416BF186EAD9 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys 21:24:24.0526 3544 BTHPORT - ok 21:24:24.0579 3544 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll 21:24:24.0657 3544 bthserv - ok 21:24:24.0685 3544 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys 21:24:24.0724 3544 BTHUSB - ok 21:24:24.0748 3544 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 21:24:24.0823 3544 cdfs - ok 21:24:24.0852 3544 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 21:24:24.0900 3544 cdrom - ok 21:24:24.0943 3544 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll 21:24:25.0001 3544 CertPropSvc - ok 21:24:25.0029 3544 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys 21:24:25.0083 3544 circlass - ok 21:24:25.0128 3544 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys 21:24:25.0171 3544 CLFS - ok 21:24:25.0237 3544 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 21:24:25.0258 3544 clr_optimization_v2.0.50727_32 - ok 21:24:25.0297 3544 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 21:24:25.0319 3544 clr_optimization_v4.0.30319_32 - ok 21:24:25.0341 3544 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 21:24:25.0389 3544 CmBatt - ok 21:24:25.0445 3544 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys 21:24:25.0465 3544 cmdide - ok 21:24:25.0530 3544 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys 21:24:25.0597 3544 CNG - ok 21:24:25.0631 3544 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 21:24:25.0657 3544 Compbatt - ok 21:24:25.0700 3544 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 21:24:25.0727 3544 CompositeBus - ok 21:24:25.0731 3544 COMSysApp - ok 21:24:25.0767 3544 [ 86E4082CF6991814E03FAB6DEA22C225 ] cphs C:\Windows\system32\IntelCpHeciSvc.exe 21:24:25.0861 3544 cphs - ok 21:24:25.0913 3544 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 21:24:25.0934 3544 crcdisk - ok 21:24:25.0961 3544 [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc C:\Windows\system32\cryptsvc.dll 21:24:25.0989 3544 CryptSvc - ok 21:24:26.0039 3544 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys 21:24:26.0105 3544 CSC - ok 21:24:26.0153 3544 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll 21:24:26.0224 3544 CscService - ok 21:24:26.0266 3544 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll 21:24:26.0328 3544 DcomLaunch - ok 21:24:26.0365 3544 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll 21:24:26.0430 3544 defragsvc - ok 21:24:26.0462 3544 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 21:24:26.0530 3544 DfsC - ok 21:24:26.0555 3544 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll 21:24:26.0639 3544 Dhcp - ok 21:24:26.0676 3544 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys 21:24:26.0742 3544 discache - ok 21:24:26.0765 3544 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys 21:24:26.0788 3544 Disk - ok 21:24:26.0893 3544 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll 21:24:26.0930 3544 Dnscache - ok 21:24:26.0954 3544 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll 21:24:27.0017 3544 dot3svc - ok 21:24:27.0051 3544 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll 21:24:27.0163 3544 DPS - ok 21:24:27.0204 3544 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 21:24:27.0261 3544 drmkaud - ok 21:24:27.0300 3544 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 21:24:27.0342 3544 DXGKrnl - ok 21:24:27.0383 3544 [ 22EF8965101685ADD128F03A2B03CE16 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys 21:24:27.0413 3544 E1G60 - ok 21:24:27.0451 3544 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll 21:24:27.0522 3544 EapHost - ok 21:24:27.0881 3544 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys 21:24:28.0002 3544 ebdrv - ok 21:24:28.0080 3544 [ A00B61CBF4015C1F04D2D66BCF1A6450 ] ebinfiltr C:\Windows\system32\DRIVERS\ebinfiltr.sys 21:24:28.0141 3544 ebinfiltr - ok 21:24:28.0180 3544 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe 21:24:28.0219 3544 EFS - ok 21:24:28.0303 3544 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 21:24:28.0378 3544 ehRecvr - ok 21:24:28.0418 3544 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe 21:24:28.0507 3544 ehSched - ok 21:24:28.0539 3544 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 21:24:28.0574 3544 elxstor - ok 21:24:28.0601 3544 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys 21:24:28.0626 3544 ErrDev - ok 21:24:28.0691 3544 esgiguard - ok 21:24:28.0753 3544 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll 21:24:28.0819 3544 EventSystem - ok 21:24:28.0847 3544 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys 21:24:28.0908 3544 exfat - ok 21:24:28.0949 3544 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys 21:24:29.0011 3544 fastfat - ok 21:24:29.0051 3544 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe 21:24:29.0101 3544 Fax - ok 21:24:29.0115 3544 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys 21:24:29.0154 3544 fdc - ok 21:24:29.0203 3544 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll 21:24:29.0263 3544 fdPHost - ok 21:24:29.0287 3544 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll 21:24:29.0352 3544 FDResPub - ok 21:24:29.0400 3544 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 21:24:29.0425 3544 FileInfo - ok 21:24:29.0443 3544 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 21:24:29.0521 3544 Filetrace - ok 21:24:29.0558 3544 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 21:24:29.0583 3544 flpydisk - ok 21:24:29.0606 3544 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 21:24:29.0634 3544 FltMgr - ok 21:24:29.0714 3544 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll 21:24:29.0876 3544 FontCache - ok 21:24:29.0965 3544 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 21:24:29.0985 3544 FontCache3.0.0.0 - ok 21:24:30.0008 3544 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 21:24:30.0029 3544 FsDepends - ok 21:24:30.0062 3544 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 21:24:30.0084 3544 Fs_Rec - ok 21:24:30.0125 3544 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 21:24:30.0155 3544 fvevol - ok 21:24:30.0195 3544 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 21:24:30.0223 3544 gagp30kx - ok 21:24:30.0267 3544 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 21:24:30.0311 3544 GEARAspiWDM - ok 21:24:30.0370 3544 [ 34F8E8CCE094942282425ED937A9ECF1 ] GeneStor C:\Windows\system32\DRIVERS\GeneStor.sys 21:24:30.0418 3544 GeneStor - ok 21:24:30.0473 3544 [ 01B2BE86C39752A0FFB30ED1FB4A141C ] gfiark C:\Windows\system32\drivers\gfiark.sys 21:24:30.0579 3544 gfiark - ok 21:24:30.0657 3544 [ 483924F92E55A5F9423201EC635E2CED ] gfibto C:\Windows\system32\drivers\gfibto.sys 21:24:30.0718 3544 gfibto - ok 21:24:30.0792 3544 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll 21:24:30.0870 3544 gpsvc - ok 21:24:30.0939 3544 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 21:24:31.0141 3544 gupdate - ok 21:24:31.0156 3544 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 21:24:31.0198 3544 gupdatem - ok 21:24:31.0265 3544 [ 479664FA3E1BD3E0B828971A0D500D4E ] gzflt C:\Windows\system32\DRIVERS\gzflt.sys 21:24:31.0446 3544 gzflt - ok 21:24:31.0498 3544 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 21:24:31.0562 3544 hcw85cir - ok 21:24:31.0594 3544 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 21:24:31.0645 3544 HdAudAddService - ok 21:24:31.0670 3544 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 21:24:31.0723 3544 HDAudBus - ok 21:24:31.0757 3544 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 21:24:31.0795 3544 HidBatt - ok 21:24:31.0816 3544 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 21:24:31.0871 3544 HidBth - ok 21:24:31.0899 3544 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 21:24:31.0944 3544 HidIr - ok 21:24:31.0979 3544 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll 21:24:32.0043 3544 hidserv - ok 21:24:32.0085 3544 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 21:24:32.0125 3544 HidUsb - ok 21:24:32.0168 3544 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll 21:24:32.0289 3544 hkmsvc - ok 21:24:32.0340 3544 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 21:24:32.0396 3544 HomeGroupListener - ok 21:24:32.0433 3544 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 21:24:32.0490 3544 HomeGroupProvider - ok 21:24:32.0513 3544 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 21:24:32.0536 3544 HpSAMD - ok 21:24:32.0563 3544 [ 2BEC76BDCD1BC080210325E7B5094834 ] HPWMISVC C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 21:24:32.0662 3544 HPWMISVC - ok 21:24:32.0719 3544 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys 21:24:32.0773 3544 HTTP - ok 21:24:32.0815 3544 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 21:24:32.0835 3544 hwpolicy - ok 21:24:32.0884 3544 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 21:24:32.0923 3544 i8042prt - ok 21:24:32.0965 3544 [ DB81F413FA4E3F328CAD7B5D59EF3F21 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 21:24:33.0089 3544 iaStor - ok 21:24:33.0139 3544 [ 902F9086295B54B516B9664327079739 ] iaStorA C:\Windows\system32\DRIVERS\iaStorA.sys 21:24:33.0197 3544 iaStorA - ok 21:24:33.0304 3544 [ 777788D9B63CCEEEF2DB353BA4EDD454 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe 21:24:33.0570 3544 IAStorDataMgrSvc - ok 21:24:33.0592 3544 [ 13F98AAE8E9030C38A9DA7DADE6325A9 ] iaStorF C:\Windows\system32\DRIVERS\iaStorF.sys 21:24:33.0640 3544 iaStorF - ok 21:24:33.0688 3544 [ A3CAE5D281DB4CFF7CFF8233507EE5AD ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 21:24:33.0720 3544 iaStorV - ok 21:24:33.0797 3544 [ 83FF82FE209E7997067B375DAD6CF23D ] ICCS C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe 21:24:33.0849 3544 ICCS - ok 21:24:34.0010 3544 [ 2B0EBB2199D71D79938998252BE8144E ] IconMan_R C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe 21:24:34.0271 3544 IconMan_R - ok 21:24:34.0366 3544 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 21:24:34.0576 3544 idsvc - ok 21:24:34.0706 3544 [ 8CC51204BCE551B90B45E97BE446C48B ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys 21:24:34.0906 3544 igfx - ok 21:24:34.0945 3544 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 21:24:34.0969 3544 iirsp - ok 21:24:35.0020 3544 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll 21:24:35.0096 3544 IKEEXT - ok 21:24:35.0228 3544 [ BFD7663C508B6D6B20D2C15255EA7096 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys 21:24:35.0396 3544 IntcAzAudAddService - ok 21:24:35.0444 3544 [ 6A6E1B319A47FA7AF2AE6B6815AE9854 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys 21:24:35.0503 3544 IntcDAud - ok 21:24:35.0621 3544 [ AE2B75CD6C71F5706AD485FD6693CFF7 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe 21:24:35.0749 3544 Intel(R) Capability Licensing Service Interface - ok 21:24:35.0778 3544 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys 21:24:35.0799 3544 intelide - ok 21:24:35.0853 3544 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 21:24:35.0896 3544 intelppm - ok 21:24:35.0931 3544 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 21:24:36.0003 3544 IPBusEnum - ok 21:24:36.0037 3544 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 21:24:36.0121 3544 IpFilterDriver - ok 21:24:36.0195 3544 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 21:24:36.0272 3544 iphlpsvc - ok 21:24:36.0324 3544 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 21:24:36.0367 3544 IPMIDRV - ok 21:24:36.0411 3544 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys 21:24:36.0468 3544 IPNAT - ok 21:24:36.0520 3544 [ EF1C51222117B37AFBFF8F4642EA8C62 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 21:24:36.0616 3544 iPod Service - ok 21:24:36.0645 3544 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys 21:24:36.0778 3544 IRENUM - ok 21:24:36.0801 3544 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys 21:24:36.0825 3544 isapnp - ok 21:24:36.0856 3544 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 21:24:36.0887 3544 iScsiPrt - ok 21:24:36.0971 3544 [ 3C4002D339491AF73D663FFC7F6E5ECB ] jhi_service C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe 21:24:37.0050 3544 jhi_service - ok 21:24:37.0074 3544 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 21:24:37.0104 3544 kbdclass - ok 21:24:37.0136 3544 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 21:24:37.0161 3544 kbdhid - ok 21:24:37.0180 3544 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe 21:24:37.0215 3544 KeyIso - ok 21:24:37.0289 3544 [ EA26CB00F83686856F2C79673C00C686 ] kl1 C:\Windows\system32\DRIVERS\kl1.sys 21:24:37.0350 3544 kl1 - ok 21:24:37.0477 3544 [ 654BDF113971B6DFAEA21D5554EBF5F6 ] KLIF C:\Windows\system32\DRIVERS\klif.sys 21:24:37.0587 3544 KLIF - ok 21:24:37.0662 3544 [ 24AEBAD59D1DE8A7CC36E8F09F999362 ] klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys 21:24:37.0731 3544 klkbdflt - ok 21:24:37.0762 3544 [ A58507C2827C3AE1D4CCB2746AAB349F ] klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys 21:24:37.0813 3544 klmouflt - ok 21:24:37.0863 3544 [ B20DB17BC4E54B78EAB16D15B058E75B ] kltdi C:\Windows\system32\DRIVERS\kltdi.sys 21:24:37.0912 3544 kltdi - ok 21:24:37.0975 3544 [ 71A38C123600172511C26BFABD0EF579 ] kneps C:\Windows\system32\DRIVERS\kneps.sys 21:24:38.0010 3544 kneps - ok 21:24:38.0040 3544 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 21:24:38.0063 3544 KSecDD - ok 21:24:38.0086 3544 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 21:24:38.0111 3544 KSecPkg - ok 21:24:38.0152 3544 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll 21:24:38.0219 3544 KtmRm - ok 21:24:38.0342 3544 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll 21:24:38.0421 3544 LanmanServer - ok 21:24:38.0497 3544 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 21:24:38.0594 3544 LanmanWorkstation - ok 21:24:38.0700 3544 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 21:24:38.0780 3544 lltdio - ok 21:24:38.0887 3544 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll 21:24:38.0974 3544 lltdsvc - ok 21:24:38.0993 3544 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll 21:24:39.0118 3544 lmhosts - ok 21:24:39.0277 3544 [ 4269D44BB47A6DA5D80B11F4C8536458 ] LMS C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 21:24:39.0451 3544 LMS - ok 21:24:39.0473 3544 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 21:24:39.0495 3544 LSI_FC - ok 21:24:39.0541 3544 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 21:24:39.0609 3544 LSI_SAS - ok 21:24:39.0651 3544 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 21:24:39.0672 3544 LSI_SAS2 - ok 21:24:39.0689 3544 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 21:24:39.0713 3544 LSI_SCSI - ok 21:24:39.0730 3544 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys 21:24:39.0788 3544 luafv - ok 21:24:39.0794 3544 massfilter - ok 21:24:39.0963 3544 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 21:24:39.0989 3544 MBAMProtector - ok 21:24:40.0134 3544 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe 21:24:40.0185 3544 MBAMScheduler - ok 21:24:40.0382 3544 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 21:24:40.0476 3544 MBAMService - ok 21:24:40.0633 3544 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys 21:24:40.0747 3544 MBAMSwissArmy - ok 21:24:40.0786 3544 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 21:24:40.0852 3544 Mcx2Svc - ok 21:24:40.0910 3544 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 21:24:40.0930 3544 megasas - ok 21:24:40.0988 3544 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 21:24:41.0015 3544 MegaSR - ok 21:24:41.0110 3544 [ 9E0A56C77E9244D2CAAC3811F4B47FCB ] MEI C:\Windows\system32\DRIVERS\HECI.sys 21:24:41.0185 3544 MEI - ok 21:24:41.0285 3544 MEMSWEEP2 - ok 21:24:41.0374 3544 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll 21:24:41.0419 3544 MMCSS - ok 21:24:41.0462 3544 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys 21:24:41.0517 3544 Modem - ok 21:24:41.0541 3544 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 21:24:41.0585 3544 monitor - ok 21:24:41.0616 3544 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 21:24:41.0637 3544 mouclass - ok 21:24:41.0697 3544 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 21:24:41.0770 3544 mouhid - ok 21:24:41.0841 3544 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 21:24:41.0864 3544 mountmgr - ok 21:24:41.0965 3544 [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 21:24:42.0026 3544 MozillaMaintenance - ok 21:24:42.0066 3544 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys 21:24:42.0089 3544 mpio - ok 21:24:42.0133 3544 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 21:24:42.0175 3544 mpsdrv - ok 21:24:42.0227 3544 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll 21:24:42.0314 3544 MpsSvc - ok 21:24:42.0348 3544 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 21:24:42.0445 3544 MRxDAV - ok 21:24:42.0487 3544 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 21:24:42.0578 3544 mrxsmb - ok 21:24:42.0603 3544 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 21:24:42.0668 3544 mrxsmb10 - ok 21:24:42.0700 3544 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 21:24:42.0725 3544 mrxsmb20 - ok 21:24:42.0769 3544 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys 21:24:42.0789 3544 msahci - ok 21:24:42.0868 3544 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys 21:24:42.0892 3544 msdsm - ok 21:24:42.0930 3544 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe 21:24:42.0972 3544 MSDTC - ok 21:24:43.0025 3544 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys 21:24:43.0069 3544 Msfs - ok 21:24:43.0105 3544 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 21:24:43.0171 3544 mshidkmdf - ok 21:24:43.0236 3544 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 21:24:43.0257 3544 msisadrv - ok 21:24:43.0304 3544 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 21:24:43.0383 3544 MSiSCSI - ok 21:24:43.0390 3544 msiserver - ok 21:24:43.0446 3544 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 21:24:43.0585 3544 MSKSSRV - ok 21:24:43.0642 3544 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 21:24:43.0744 3544 MSPCLOCK - ok 21:24:43.0790 3544 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 21:24:43.0833 3544 MSPQM - ok 21:24:43.0887 3544 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 21:24:43.0911 3544 MsRPC - ok 21:24:43.0952 3544 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 21:24:43.0973 3544 mssmbios - ok 21:24:44.0010 3544 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 21:24:44.0053 3544 MSTEE - ok 21:24:44.0083 3544 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 21:24:44.0147 3544 MTConfig - ok 21:24:44.0172 3544 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys 21:24:44.0195 3544 Mup - ok 21:24:44.0262 3544 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll 21:24:44.0344 3544 napagent - ok 21:24:44.0401 3544 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 21:24:44.0489 3544 NativeWifiP - ok 21:24:44.0572 3544 [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS C:\Windows\system32\drivers\ndis.sys 21:24:44.0641 3544 NDIS - ok 21:24:44.0669 3544 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 21:24:44.0713 3544 NdisCap - ok 21:24:44.0740 3544 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 21:24:44.0825 3544 NdisTapi - ok 21:24:44.0857 3544 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 21:24:44.0946 3544 Ndisuio - ok 21:24:44.0992 3544 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 21:24:45.0060 3544 NdisWan - ok 21:24:45.0129 3544 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 21:24:45.0210 3544 NDProxy - ok 21:24:45.0248 3544 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 21:24:45.0303 3544 NetBIOS - ok 21:24:45.0350 3544 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 21:24:45.0436 3544 NetBT - ok 21:24:45.0468 3544 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe 21:24:45.0547 3544 Netlogon - ok 21:24:45.0610 3544 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll 21:24:45.0706 3544 Netman - ok 21:24:45.0745 3544 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll 21:24:45.0846 3544 netprofm - ok 21:24:45.0879 3544 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 21:24:45.0900 3544 NetTcpPortSharing - ok 21:24:46.0000 3544 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 21:24:46.0021 3544 nfrd960 - ok 21:24:46.0074 3544 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll 21:24:46.0154 3544 NlaSvc - ok 21:24:46.0191 3544 [ B48DC6ABCD3AEFF8618350CCBDC6B09A ] npf C:\Windows\system32\drivers\npf.sys 21:24:46.0219 3544 npf - ok 21:24:46.0248 3544 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys 21:24:46.0304 3544 Npfs - ok 21:24:46.0339 3544 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll 21:24:46.0408 3544 nsi - ok 21:24:46.0430 3544 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 21:24:46.0481 3544 nsiproxy - ok 21:24:46.0558 3544 [ 33C3093D09017CFE2E219F2472BFF6EB ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 21:24:46.0682 3544 Ntfs - ok 21:24:46.0728 3544 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys 21:24:46.0871 3544 Null - ok 21:24:46.0916 3544 [ AF2EEC9580C1D32FB7EAF105D9784061 ] nvraid C:\Windows\system32\drivers\nvraid.sys 21:24:46.0939 3544 nvraid - ok 21:24:46.0970 3544 [ 9283C58EBAA2618F93482EB5DABCEC82 ] nvstor C:\Windows\system32\drivers\nvstor.sys 21:24:47.0031 3544 nvstor - ok 21:24:47.0075 3544 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 21:24:47.0097 3544 nv_agp - ok 21:24:47.0142 3544 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 21:24:47.0202 3544 ohci1394 - ok 21:24:47.0240 3544 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 21:24:47.0296 3544 p2pimsvc - ok 21:24:47.0458 3544 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll 21:24:47.0487 3544 p2psvc - ok 21:24:47.0597 3544 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys 21:24:47.0621 3544 Parport - ok 21:24:47.0661 3544 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys 21:24:47.0716 3544 partmgr - ok 21:24:47.0755 3544 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys 21:24:47.0836 3544 Parvdm - ok 21:24:47.0892 3544 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll 21:24:47.0940 3544 PcaSvc - ok 21:24:47.0964 3544 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys 21:24:47.0987 3544 pci - ok 21:24:48.0033 3544 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys 21:24:48.0053 3544 pciide - ok 21:24:48.0091 3544 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 21:24:48.0118 3544 pcmcia - ok 21:24:48.0127 3544 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys 21:24:48.0149 3544 pcw - ok 21:24:48.0192 3544 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys 21:24:48.0249 3544 PEAUTH - ok 21:24:48.0355 3544 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll 21:24:48.0414 3544 PeerDistSvc - ok 21:24:48.0502 3544 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll 21:24:48.0568 3544 pla - ok 21:24:48.0608 3544 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll 21:24:48.0636 3544 PlugPlay - ok 21:24:48.0672 3544 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 21:24:48.0705 3544 PNRPAutoReg - ok 21:24:48.0760 3544 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 21:24:48.0787 3544 PNRPsvc - ok 21:24:48.0825 3544 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 21:24:48.0905 3544 PolicyAgent - ok 21:24:48.0943 3544 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll 21:24:48.0987 3544 Power - ok 21:24:49.0020 3544 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 21:24:49.0081 3544 PptpMiniport - ok 21:24:49.0098 3544 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys 21:24:49.0122 3544 Processor - ok 21:24:49.0181 3544 [ 43CA4CCC22D52FB58E8988F0198851D0 ] ProfSvc C:\Windows\system32\profsvc.dll 21:24:49.0227 3544 ProfSvc - ok 21:24:49.0245 3544 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe 21:24:49.0279 3544 ProtectedStorage - ok 21:24:49.0306 3544 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys 21:24:49.0351 3544 Psched - ok 21:24:49.0391 3544 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 21:24:49.0470 3544 ql2300 - ok 21:24:49.0502 3544 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 21:24:49.0525 3544 ql40xx - ok 21:24:49.0559 3544 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll 21:24:49.0590 3544 QWAVE - ok 21:24:49.0609 3544 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 21:24:49.0648 3544 QWAVEdrv - ok 21:24:49.0683 3544 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 21:24:49.0745 3544 RasAcd - ok 21:24:49.0794 3544 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 21:24:49.0848 3544 RasAgileVpn - ok 21:24:49.0887 3544 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll 21:24:49.0931 3544 RasAuto - ok 21:24:49.0956 3544 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 21:24:50.0021 3544 Rasl2tp - ok 21:24:50.0068 3544 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll 21:24:50.0150 3544 RasMan - ok 21:24:50.0172 3544 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 21:24:50.0217 3544 RasPppoe - ok 21:24:50.0254 3544 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 21:24:50.0386 3544 RasSstp - ok 21:24:50.0435 3544 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 21:24:50.0497 3544 rdbss - ok 21:24:50.0514 3544 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 21:24:50.0599 3544 rdpbus - ok 21:24:50.0653 3544 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 21:24:50.0766 3544 RDPCDD - ok 21:24:50.0808 3544 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys 21:24:50.0843 3544 RDPDR - ok 21:24:50.0852 3544 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 21:24:50.0893 3544 RDPENCDD - ok 21:24:51.0050 3544 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 21:24:51.0218 3544 RDPREFMP - ok 21:24:51.0258 3544 [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 21:24:51.0282 3544 RdpVideoMiniport - ok 21:24:51.0317 3544 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 21:24:51.0379 3544 RDPWD - ok 21:24:51.0420 3544 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 21:24:51.0460 3544 rdyboost - ok 21:24:51.0504 3544 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll 21:24:51.0546 3544 RemoteAccess - ok 21:24:51.0601 3544 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll 21:24:51.0650 3544 RemoteRegistry - ok 21:24:51.0676 3544 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 21:24:51.0753 3544 RFCOMM - ok 21:24:51.0827 3544 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 21:24:51.0905 3544 RpcEptMapper - ok 21:24:51.0935 3544 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe 21:24:51.0984 3544 RpcLocator - ok 21:24:52.0020 3544 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll 21:24:52.0068 3544 RpcSs - ok 21:24:52.0113 3544 [ D600D0C37E77CBAF0FDC409FAD6FFDCB ] RSPCIESTOR C:\Windows\system32\DRIVERS\RtsPStor.sys 21:24:52.0182 3544 RSPCIESTOR - ok 21:24:52.0208 3544 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 21:24:52.0370 3544 rspndr - ok 21:24:52.0455 3544 [ D255C9B800D24380B0698AA03C6C4E80 ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe 21:24:52.0523 3544 RtkAudioService - ok 21:24:52.0574 3544 [ 0085ADFE591291B219BADF2D3EBD0BEB ] RTL2832UBDA C:\Windows\system32\drivers\RTL2832UBDA.sys 21:24:52.0649 3544 RTL2832UBDA - ok 21:24:52.0738 3544 [ 653347DBF9CE61B104F237D7B2B33CCF ] RTL2832UUSB C:\Windows\system32\Drivers\RTL2832UUSB.sys 21:24:52.0767 3544 RTL2832UUSB - ok 21:24:52.0790 3544 [ 13AB7EC17C94ACFE93F96EC96BD6B05D ] RTL2832U_IRHID C:\Windows\system32\DRIVERS\RTL2832U_IRHID.sys 21:24:52.0835 3544 RTL2832U_IRHID - ok 21:24:52.0889 3544 [ 9AA3A8EBB12201D24211AB003612BA04 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys 21:24:52.0937 3544 RTL8167 - ok 21:24:52.0985 3544 [ 9EA88492B1DAB90DCE43A6F2C0E133BD ] RTSTOR C:\Windows\system32\drivers\RTSTOR.SYS 21:24:53.0151 3544 RTSTOR - ok 21:24:53.0198 3544 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys 21:24:53.0225 3544 s3cap - ok 21:24:53.0267 3544 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe 21:24:53.0289 3544 SamSs - ok 21:24:53.0325 3544 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 21:24:53.0348 3544 sbp2port - ok 21:24:53.0383 3544 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll 21:24:53.0426 3544 SCardSvr - ok 21:24:53.0468 3544 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 21:24:53.0521 3544 scfilter - ok 21:24:53.0567 3544 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll 21:24:53.0635 3544 Schedule - ok 21:24:53.0674 3544 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll 21:24:53.0717 3544 SCPolicySvc - ok 21:24:53.0747 3544 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll 21:24:53.0783 3544 SDRSVC - ok 21:24:53.0909 3544 [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe 21:24:54.0093 3544 SDUpdateService - ok 21:24:54.0186 3544 [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe 21:24:54.0252 3544 SDWSCService - ok 21:24:54.0287 3544 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys 21:24:54.0355 3544 secdrv - ok 21:24:54.0394 3544 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll 21:24:54.0439 3544 seclogon - ok 21:24:54.0450 3544 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll 21:24:54.0496 3544 SENS - ok 21:24:54.0520 3544 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll 21:24:54.0559 3544 SensrSvc - ok 21:24:54.0579 3544 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 21:24:54.0603 3544 Serenum - ok 21:24:54.0635 3544 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys 21:24:54.0674 3544 Serial - ok 21:24:54.0755 3544 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 21:24:54.0815 3544 sermouse - ok 21:24:54.0870 3544 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll 21:24:54.0929 3544 SessionEnv - ok 21:24:54.0989 3544 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 21:24:55.0026 3544 sffdisk - ok 21:24:55.0044 3544 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 21:24:55.0087 3544 sffp_mmc - ok 21:24:55.0111 3544 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 21:24:55.0151 3544 sffp_sd - ok 21:24:55.0191 3544 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 21:24:55.0244 3544 sfloppy - ok 21:24:55.0407 3544 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll 21:24:55.0482 3544 SharedAccess - ok 21:24:55.0591 3544 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 21:24:55.0787 3544 ShellHWDetection - ok 21:24:55.0837 3544 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys 21:24:55.0869 3544 sisagp - ok 21:24:55.0891 3544 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 21:24:55.0915 3544 SiSRaid2 - ok 21:24:55.0940 3544 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 21:24:55.0963 3544 SiSRaid4 - ok 21:24:55.0998 3544 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys 21:24:56.0062 3544 Smb - ok 21:24:56.0139 3544 [ 8E6E91BEB9545D412470FA2035373BD6 ] SmbDrv C:\Windows\system32\DRIVERS\Smb_driver.sys 21:24:56.0195 3544 SmbDrv - ok 21:24:56.0268 3544 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 21:24:56.0341 3544 SNMPTRAP - ok 21:24:56.0433 3544 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys 21:24:56.0493 3544 spldr - ok 21:24:56.0730 3544 [ 866A43013535DC8587C258E43579C764 ] Spooler C:\Windows\System32\spoolsv.exe 21:24:56.0846 3544 Spooler - ok 21:24:57.0192 3544 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe 21:24:57.0303 3544 sppsvc - ok 21:24:57.0361 3544 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll 21:24:57.0412 3544 sppuinotify - ok 21:24:57.0449 3544 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys 21:24:57.0497 3544 srv - ok 21:24:57.0561 3544 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 21:24:57.0604 3544 srv2 - ok 21:24:57.0628 3544 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 21:24:57.0664 3544 srvnet - ok 21:24:57.0722 3544 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 21:24:57.0787 3544 SSDPSRV - ok 21:24:57.0811 3544 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll 21:24:57.0872 3544 SstpSvc - ok 21:24:57.0901 3544 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 21:24:57.0922 3544 stexstor - ok 21:24:57.0981 3544 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll 21:24:58.0048 3544 StiSvc - ok 21:24:58.0073 3544 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys 21:24:58.0096 3544 storflt - ok 21:24:58.0145 3544 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys 21:24:58.0167 3544 storvsc - ok 21:24:58.0192 3544 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys 21:24:58.0213 3544 swenum - ok 21:24:58.0296 3544 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll 21:24:58.0345 3544 swprv - ok 21:24:58.0357 3544 Synth3dVsc - ok 21:24:58.0429 3544 [ 6DD49E1A5FA0F01824652F1A0A8866FB ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 21:24:58.0484 3544 SynTP - ok 21:24:58.0554 3544 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll 21:24:58.0651 3544 SysMain - ok 21:24:58.0694 3544 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll 21:24:58.0734 3544 TabletInputService - ok 21:24:58.0819 3544 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll 21:24:58.0864 3544 TapiSrv - ok 21:24:58.0919 3544 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll 21:24:58.0984 3544 TBS - ok 21:24:59.0062 3544 [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 21:24:59.0147 3544 Tcpip - ok 21:24:59.0181 3544 [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 21:24:59.0250 3544 TCPIP6 - ok 21:24:59.0297 3544 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 21:24:59.0352 3544 tcpipreg - ok 21:24:59.0403 3544 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 21:24:59.0440 3544 TDPIPE - ok 21:24:59.0473 3544 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 21:24:59.0509 3544 TDTCP - ok 21:24:59.0555 3544 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 21:24:59.0597 3544 tdx - ok 21:24:59.0613 3544 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys 21:24:59.0634 3544 TermDD - ok 21:24:59.0688 3544 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll 21:24:59.0757 3544 TermService - ok 21:24:59.0796 3544 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll 21:24:59.0838 3544 Themes - ok 21:24:59.0872 3544 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll 21:24:59.0917 3544 THREADORDER - ok 21:24:59.0942 3544 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll 21:25:00.0000 3544 TrkWks - ok 21:25:00.0085 3544 [ F2AEE22231046CAD8D2F94D2C0F9BEFB ] trufos C:\Windows\system32\DRIVERS\trufos.sys 21:25:00.0126 3544 trufos - ok 21:25:00.0264 3544 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 21:25:00.0366 3544 TrustedInstaller - ok 21:25:00.0394 3544 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 21:25:00.0453 3544 tssecsrv - ok 21:25:00.0517 3544 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 21:25:00.0540 3544 TsUsbFlt - ok 21:25:00.0552 3544 tsusbhub - ok 21:25:00.0732 3544 [ FC740E4FF236B72CA59B8F762D30C7F3 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe 21:25:00.0842 3544 TuneUp.UtilitiesSvc - ok 21:25:00.0935 3544 [ 94C4CD2D19B8C4137A46261F229FEC24 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys 21:25:00.0963 3544 TuneUpUtilitiesDrv - ok 21:25:01.0004 3544 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 21:25:01.0064 3544 tunnel - ok 21:25:01.0114 3544 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 21:25:01.0135 3544 uagp35 - ok 21:25:01.0180 3544 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys 21:25:01.0239 3544 udfs - ok 21:25:01.0299 3544 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe 21:25:01.0333 3544 UI0Detect - ok 21:25:01.0384 3544 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 21:25:01.0406 3544 uliagpkx - ok 21:25:01.0449 3544 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\DRIVERS\umbus.sys 21:25:01.0490 3544 umbus - ok 21:25:01.0522 3544 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 21:25:01.0546 3544 UmPass - ok 21:25:01.0611 3544 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll 21:25:01.0646 3544 UmRdpService - ok 21:25:01.0737 3544 [ DBE2E6388379D5CC78099650541E9566 ] UNS C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe 21:25:01.0823 3544 UNS - ok 21:25:01.0903 3544 [ 32BE9DFF9A8DFE2EACA30E0A63C523AE ] UPDATESRV C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe 21:25:01.0967 3544 UPDATESRV - ok 21:25:02.0031 3544 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll 21:25:02.0096 3544 upnphost - ok 21:25:02.0148 3544 [ 7E72E7D7E0757D59481D530FD2B0BFAE ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 21:25:02.0172 3544 usbccgp - ok 21:25:02.0199 3544 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys 21:25:02.0228 3544 usbcir - ok 21:25:02.0263 3544 [ CFBCE999C057D78979A181C9C60F208E ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 21:25:02.0304 3544 usbehci - ok 21:25:02.0332 3544 [ 9D22AAD9AC6A07C691A1113E5F860868 ] usbhub C:\Windows\system32\drivers\usbhub.sys 21:25:02.0380 3544 usbhub - ok 21:25:02.0414 3544 [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci C:\Windows\system32\drivers\usbohci.sys 21:25:02.0469 3544 usbohci - ok 21:25:02.0512 3544 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 21:25:02.0559 3544 usbprint - ok 21:25:02.0613 3544 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 21:25:02.0640 3544 usbscan - ok 21:25:02.0657 3544 [ BF63EBFC6979FEFB2BC03DF7989A0C1A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 21:25:02.0682 3544 USBSTOR - ok 21:25:02.0706 3544 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 21:25:02.0749 3544 usbuhci - ok 21:25:02.0783 3544 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 21:25:02.0842 3544 usbvideo - ok 21:25:02.0908 3544 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll 21:25:02.0962 3544 UxSms - ok 21:25:03.0024 3544 [ 57324E62405EC114C6C1A6F1C9704E8F ] UxTuneUp C:\Windows\System32\uxtuneup.dll 21:25:03.0054 3544 UxTuneUp - ok 21:25:03.0077 3544 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe 21:25:03.0111 3544 VaultSvc - ok 21:25:03.0158 3544 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 21:25:03.0253 3544 vdrvroot - ok 21:25:03.0393 3544 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe 21:25:03.0526 3544 vds - ok 21:25:03.0619 3544 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 21:25:03.0645 3544 vga - ok 21:25:03.0670 3544 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys 21:25:03.0715 3544 VgaSave - ok 21:25:03.0725 3544 VGPU - ok 21:25:03.0781 3544 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 21:25:03.0805 3544 vhdmp - ok 21:25:03.0824 3544 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys 21:25:03.0847 3544 viaagp - ok 21:25:03.0890 3544 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys 21:25:03.0914 3544 ViaC7 - ok 21:25:03.0959 3544 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys 21:25:03.0979 3544 viaide - ok 21:25:04.0027 3544 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys 21:25:04.0054 3544 vmbus - ok 21:25:04.0098 3544 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys 21:25:04.0163 3544 VMBusHID - ok 21:25:04.0195 3544 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys 21:25:04.0225 3544 volmgr - ok 21:25:04.0265 3544 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 21:25:04.0291 3544 volmgrx - ok 21:25:04.0320 3544 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys 21:25:04.0348 3544 volsnap - ok 21:25:04.0377 3544 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 21:25:04.0401 3544 vsmraid - ok 21:25:04.0492 3544 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe 21:25:04.0568 3544 VSS - ok 21:25:04.0727 3544 [ 3951CAE99EDAF72193EA0F4C8A857BB0 ] VSSERV C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe 21:25:04.0859 3544 VSSERV - ok 21:25:04.0878 3544 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 21:25:04.0923 3544 vwifibus - ok 21:25:04.0937 3544 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 21:25:04.0983 3544 vwififlt - ok 21:25:05.0020 3544 [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 21:25:05.0047 3544 vwifimp - ok 21:25:05.0252 3544 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll 21:25:05.0427 3544 W32Time - ok 21:25:05.0477 3544 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 21:25:05.0512 3544 WacomPen - ok 21:25:05.0605 3544 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 21:25:05.0647 3544 WANARP - ok 21:25:05.0671 3544 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 21:25:05.0712 3544 Wanarpv6 - ok 21:25:05.0773 3544 WatAdminSvc - ok 21:25:05.0863 3544 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe 21:25:05.0923 3544 wbengine - ok 21:25:05.0973 3544 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 21:25:06.0049 3544 WbioSrvc - ok 21:25:06.0088 3544 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll 21:25:06.0149 3544 wcncsvc - ok 21:25:06.0195 3544 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 21:25:06.0224 3544 WcsPlugInService - ok 21:25:06.0295 3544 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys 21:25:06.0332 3544 Wd - ok 21:25:06.0437 3544 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 21:25:06.0470 3544 Wdf01000 - ok 21:25:06.0496 3544 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll 21:25:06.0595 3544 WdiServiceHost - ok 21:25:06.0619 3544 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll 21:25:06.0647 3544 WdiSystemHost - ok 21:25:06.0697 3544 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll 21:25:06.0729 3544 WebClient - ok 21:25:06.0787 3544 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll 21:25:06.0834 3544 Wecsvc - ok 21:25:06.0858 3544 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll 21:25:06.0915 3544 wercplsupport - ok 21:25:06.0936 3544 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll 21:25:06.0982 3544 WerSvc - ok 21:25:07.0002 3544 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 21:25:07.0064 3544 WfpLwf - ok 21:25:07.0112 3544 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys 21:25:07.0132 3544 WIMMount - ok 21:25:07.0240 3544 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll 21:25:07.0300 3544 WinDefend - ok 21:25:07.0320 3544 WinHttpAutoProxySvc - ok 21:25:07.0417 3544 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 21:25:07.0479 3544 Winmgmt - ok 21:25:07.0558 3544 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll 21:25:07.0631 3544 WinRM - ok 21:25:07.0702 3544 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 21:25:07.0729 3544 WinUsb - ok 21:25:07.0806 3544 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll 21:25:07.0847 3544 Wlansvc - ok 21:25:07.0884 3544 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 21:25:07.0930 3544 WmiAcpi - ok 21:25:07.0983 3544 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 21:25:08.0038 3544 wmiApSrv - ok 21:25:08.0117 3544 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe 21:25:08.0192 3544 WMPNetworkSvc - ok 21:25:08.0226 3544 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll 21:25:08.0250 3544 WPCSvc - ok 21:25:08.0294 3544 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 21:25:08.0350 3544 WPDBusEnum - ok 21:25:08.0386 3544 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 21:25:08.0456 3544 ws2ifsl - ok 21:25:08.0502 3544 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll 21:25:08.0548 3544 wscsvc - ok 21:25:08.0562 3544 WSearch - ok 21:25:08.0885 3544 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll 21:25:08.0950 3544 wuauserv - ok 21:25:08.0994 3544 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 21:25:09.0062 3544 WudfPf - ok 21:25:09.0096 3544 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 21:25:09.0164 3544 WUDFRd - ok 21:25:09.0224 3544 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 21:25:09.0393 3544 wudfsvc - ok 21:25:09.0554 3544 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll 21:25:09.0599 3544 WwanSvc - ok 21:25:09.0617 3544 ZTEusbmdm6k - ok 21:25:09.0632 3544 ZTEusbnmea - ok 21:25:09.0648 3544 ZTEusbser6k - ok 21:25:09.0691 3544 ================ Scan global =============================== 21:25:09.0772 3544 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll 21:25:09.0813 3544 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll 21:25:09.0825 3544 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll 21:25:09.0862 3544 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll 21:25:09.0882 3544 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe 21:25:09.0887 3544 [Global] - ok 21:25:09.0890 3544 ================ Scan MBR ================================== 21:25:09.0906 3544 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 21:25:10.0697 3544 \Device\Harddisk0\DR0 - ok 21:25:10.0698 3544 ================ Scan VBR ================================== 21:25:10.0737 3544 [ 54BA4C37D203C2B279E01A9F91269268 ] \Device\Harddisk0\DR0\Partition1 21:25:10.0756 3544 \Device\Harddisk0\DR0\Partition1 - ok 21:25:10.0775 3544 [ EC5907C4C3860910EB67263B34C7422C ] \Device\Harddisk0\DR0\Partition2 21:25:10.0777 3544 \Device\Harddisk0\DR0\Partition2 - ok 21:25:10.0778 3544 ============================================================ 21:25:10.0778 3544 Scan finished 21:25:10.0778 3544 ============================================================ 21:25:10.0793 3128 Detected object count: 0 21:25:10.0793 3128 Actual detected object count: 0 |
04.03.2013, 21:27 | #14 |
/// Malware-holic | Minianwendungen werden nicht mehr richtig angezeigt Sehr gut. Scan mit Combofix
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.03.2013, 13:58 | #15 |
| Minianwendungen werden nicht mehr richtig angezeigtCode:
ATTFilter ComboFix 13-03-04.01 - Info 05.03.2013 7:03.1.2 - x86 ausgeführt von:: c:\users\Info\Desktop\ComboFix.exe . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\Common Files\337 c:\program files\Common Files\337\libcef\1.963.439\icudt.dll c:\program files\Common Files\337\libcef\1.963.439\libcef.dll c:\program files\Common Files\337\libcef\1.963.439\locales\en-US.pak c:\program files\KeyDownload-Addon\KeYDownload.dll c:\programdata\1359390656.bdinstall.bin c:\programdata\1362068248.bdinstall.bin c:\programdata\1362069055.bdinstall.bin c:\programdata\1362069438.bdinstall.bin c:\programdata\1362069898.bdinstall.bin c:\programdata\1362071103.bdinstall.bin c:\programdata\1362227762.3824.bin c:\programdata\1362227762.5144.bin c:\programdata\1362227762.5612.bin c:\programdata\1362227762.5916.bin c:\programdata\1362227762.bdinstall.bin c:\programdata\1362228095.bdinstall.bin c:\windows\system32\SET1641.tmp c:\windows\system32\SET800.tmp c:\windows\system32\SET8DB.tmp c:\windows\system32\SET9D6.tmp . . ((((((((((((((((((((((( Dateien erstellt von 2013-02-05 bis 2013-03-05 )))))))))))))))))))))))))))))) . . 2013-03-05 06:11 . 2013-03-05 06:11 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-03-04 17:28 . 2013-03-04 17:28 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2013-03-04 17:28 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-03-04 17:20 . 2013-03-04 17:20 -------- d-----w- c:\users\Info\AppData\Roaming\Malwarebytes 2013-03-04 17:19 . 2013-03-04 17:19 -------- d-----w- c:\programdata\Malwarebytes 2013-03-04 13:00 . 2013-03-04 12:59 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2013-03-02 17:53 . 2013-03-02 17:53 -------- d-----w- c:\users\Info\AppData\Roaming\Petrax Software 2013-03-02 17:53 . 2013-03-02 17:53 -------- d-----w- c:\program files\Petrax Software 2013-03-02 17:01 . 2013-03-02 17:01 -------- d-----w- c:\users\Info\AppData\Roaming\iPumper 2013-03-02 14:50 . 2013-03-02 14:50 -------- d-----w- c:\program files\DLLSuite 2013-02-28 18:00 . 2012-08-13 17:24 75096 ----a-w- c:\windows\system32\drivers\klflt.sys 2013-02-28 17:38 . 2013-02-28 17:38 72704 ----a-w- c:\windows\system32\drivers\bdvedisk.sys 2013-02-28 17:07 . 2012-11-12 16:11 66392 ------w- c:\windows\system32\drivers\bdsandbox.sys 2013-02-28 17:07 . 2012-07-06 13:13 77192 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys 2013-02-28 17:07 . 2013-01-11 19:29 482928 ----a-w- c:\windows\system32\drivers\avckf.sys 2013-02-28 17:07 . 2013-01-11 19:29 625128 ----a-w- c:\windows\system32\drivers\avc3.sys 2013-02-28 17:07 . 2013-03-02 12:41 -------- d-----w- c:\users\Info\AppData\Roaming\Bitdefender 2013-02-28 17:07 . 2013-02-28 17:08 -------- d-----w- c:\programdata\Bitdefender 2013-02-28 17:05 . 2012-08-29 16:24 161312 ----a-w- c:\windows\system32\drivers\gzflt.sys 2013-02-28 17:05 . 2012-10-31 11:13 343456 ----a-w- c:\windows\system32\drivers\trufos.sys 2013-02-27 20:21 . 2013-02-27 20:21 -------- d-----w- c:\programdata\Synaptics 2013-02-27 18:37 . 2010-03-16 09:58 14400 ----a-w- c:\windows\system32\drivers\ebinfiltr.sys 2013-02-27 17:40 . 2013-02-27 17:40 -------- d-----w- c:\programdata\UUdb 2013-02-27 17:40 . 2013-02-27 17:40 -------- d-----w- c:\programdata\1&1 Mail & Media GmbH 2013-02-27 14:58 . 2012-08-10 11:09 469120 ----a-w- c:\windows\system32\drivers\btfilter.sys 2013-02-26 19:03 . 2013-02-26 19:03 -------- d-----w- c:\program files\ATI Technologies 2013-02-26 18:47 . 2013-02-26 18:47 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-02-26 15:32 . 2013-02-26 15:51 -------- dc-h--w- c:\programdata\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} 2013-02-26 15:27 . 2013-02-26 15:33 -------- d-----w- c:\program files\Uniblue 2013-02-26 15:25 . 2013-02-26 15:51 -------- dc-h--w- c:\programdata\{51019853-129C-4EDE-9030-D5FD7BBD9AD0} 2013-02-26 15:23 . 2013-02-26 15:23 -------- dc-h--w- c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F} 2013-02-26 15:17 . 2013-02-26 15:47 -------- d-----w- c:\program files\Driver Checker 2013-02-26 15:09 . 2013-02-26 15:09 -------- d-----w- c:\programdata\Uniblue 2013-02-26 12:50 . 2013-02-26 12:50 -------- d-----w- c:\users\Info\AppData\Roaming\Leadertech 2013-02-26 12:50 . 2013-02-26 12:50 53248 ----a-r- c:\users\Info\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe 2013-02-26 12:47 . 2013-02-26 12:57 -------- d-----w- c:\programdata\Logitech 2013-02-26 12:46 . 2013-02-26 12:57 -------- d-----w- c:\programdata\Logishrd 2013-02-25 18:33 . 2013-02-26 12:57 -------- d-----w- c:\program files\Common Files\LogiShrd 2013-02-25 18:33 . 2013-02-26 12:54 -------- d-----w- c:\users\Info\AppData\Roaming\Logitech 2013-02-25 18:33 . 2013-02-25 18:33 -------- d-----w- c:\users\Info\AppData\Roaming\Logishrd 2013-02-25 17:48 . 2013-03-04 17:29 -------- d-----w- c:\users\Info\AppData\Roaming\BitTorrent 2013-02-25 17:43 . 2013-02-25 17:47 -------- d-----w- c:\users\Info\AppData\Roaming\uTorrent 2013-02-25 16:27 . 2011-05-25 19:08 49152 ----a-w- c:\windows\system32\UMonit.exe 2013-02-25 16:27 . 2011-05-25 16:57 8323072 ----a-w- c:\windows\system32\GeneIcon.dll 2013-02-25 16:27 . 2009-10-26 14:52 139264 ----a-w- c:\windows\system32\ustor.dll 2013-02-25 16:27 . 2011-05-18 12:49 54784 ------w- c:\windows\system32\drivers\GeneStor.sys 2013-02-25 16:27 . 2008-02-04 14:43 172097 ----a-w- c:\windows\system32\NoMSGuninstall.exe 2013-02-25 15:47 . 2004-04-18 22:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\ctor.dll 2013-02-25 15:47 . 2004-04-18 22:39 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iscript.dll 2013-02-25 15:47 . 2004-04-18 22:39 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iuser.dll 2013-02-25 15:47 . 2004-04-18 22:39 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\DotNetInstaller.exe 2013-02-25 15:47 . 2013-02-25 15:47 303236 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\setup.dll 2013-02-25 15:47 . 2013-02-25 15:47 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iGdi.dll 2013-02-25 15:47 . 2004-04-18 22:42 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iKernel.dll 2013-02-25 15:47 . 2013-02-25 15:47 -------- d-----w- C:\Drivers 2013-02-25 15:24 . 2013-02-25 15:29 -------- d-----w- c:\program files\Qualcomm Atheros 2013-02-25 15:24 . 2012-11-08 18:59 3078656 ----a-w- c:\windows\system32\drivers\athr.sys 2013-02-25 15:16 . 2013-03-05 06:10 -------- d-----w- c:\program files\KeyDownload-Addon 2013-02-25 15:11 . 2013-02-25 15:25 -------- d-----w- c:\programdata\Qualcomm Atheros 2013-02-24 19:24 . 2008-08-12 12:33 61440 ----a-w- c:\windows\system32\drivers\RTSTOR.sys 2013-02-24 19:24 . 2008-05-06 16:41 6416928 ----a-w- c:\windows\system\DriveIcon.dll 2013-02-24 19:23 . 2013-02-24 19:23 -------- d-----w- C:\Dell 2013-02-24 19:12 . 2013-02-24 19:12 -------- d-----w- c:\program files\Innovative Solutions 2013-02-24 18:53 . 2013-02-24 18:54 -------- d-----w- C:\HP_LaserJet_Enterprise_500_color_M551 2013-02-24 18:17 . 2013-02-24 18:17 -------- d-----w- c:\windows\system32\RTCOM 2013-02-24 13:38 . 2012-11-19 11:10 526392 ----a-w- c:\windows\system32\drivers\iaStorA.sys 2013-02-24 13:38 . 2012-11-19 11:10 25656 ----a-w- c:\windows\system32\drivers\iaStorF.sys 2013-02-24 13:29 . 2012-08-03 16:55 9888400 ----a-w- c:\windows\system32\RtsPStorIcon.dll 2013-02-24 12:28 . 2013-02-24 12:28 -------- d-----w- c:\windows\system32\drivers\MFDLL 2013-02-24 12:28 . 2008-01-04 12:34 11832 ------w- c:\windows\system32\drivers\AsInsHelp64.sys 2013-02-24 12:28 . 2008-01-04 12:34 10216 ------w- c:\windows\system32\drivers\AsInsHelp32.sys 2013-02-24 12:24 . 2013-02-24 12:25 -------- d-----w- c:\program files\DVDVideoSoft 2013-02-24 12:24 . 2013-02-24 12:25 -------- d-----w- c:\program files\Common Files\DVDVideoSoft 2013-02-24 12:20 . 2013-02-24 12:25 -------- d-----w- c:\users\Info\AppData\Roaming\DVDVideoSoft 2013-02-24 10:47 . 2012-12-27 00:26 80488 ----a-w- c:\windows\system32\RtNicProp32.dll 2013-02-24 10:47 . 2012-12-27 00:26 614624 ----a-w- c:\windows\system32\drivers\Rt86win7.sys 2013-02-24 10:43 . 2013-02-24 10:43 -------- d-----w- c:\program files\Easeware 2013-02-24 10:00 . 2012-06-21 16:13 15168 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll 2013-02-24 09:59 . 2013-02-24 09:59 -------- d-----w- c:\program files\Common Files\postureAgent 2013-02-24 09:59 . 2012-07-02 14:16 55104 ----a-w- c:\windows\system32\drivers\HECI.sys 2013-02-24 09:59 . 2013-02-24 09:59 -------- d-----w- C:\Driver_allOS 2013-02-23 17:48 . 2013-03-03 11:56 -------- d-----w- c:\programdata\DriverGenius 2013-02-23 10:35 . 2013-02-23 10:35 -------- d-----w- c:\programdata\Innovative Solutions 2013-02-22 20:20 . 2013-02-22 20:21 -------- d-----w- c:\users\Info\AppData\Roaming\GetRightToGo 2013-02-21 18:07 . 2013-02-21 18:08 -------- d-----w- c:\users\Info\AppData\Roaming\GoforFiles 2013-02-21 15:28 . 2013-02-21 15:28 -------- d-----w- c:\users\Info\AppData\Local\Innovative Solutions 2013-02-21 14:56 . 2013-02-21 14:56 -------- d-----w- c:\programdata\SoftSafe 2013-02-21 14:33 . 2013-02-21 14:33 189 ----a-w- c:\windows\DeleteOnReboot.bat 2013-02-19 13:41 . 2013-02-19 13:41 -------- d-----r- C:\Sandbox 2013-02-18 20:05 . 2013-01-08 04:57 6991832 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{56C844B3-F39D-4279-8A41-CBB5DB9AD805}\mpengine.dll 2013-02-18 19:56 . 2009-01-25 11:14 15224 ----a-w- c:\windows\system32\sdnclean.exe 2013-02-18 16:43 . 2013-02-19 13:37 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2013-02-16 19:42 . 2013-02-16 19:42 -------- d-----w- c:\users\Info\AppData\Local\bdch 2013-02-16 19:42 . 2013-02-16 19:42 -------- d-----w- c:\programdata\bdch 2013-02-16 15:36 . 2013-02-16 15:36 -------- d-----w- c:\program files\7-Zip 2013-02-15 21:29 . 2013-02-16 15:29 -------- d-----w- c:\program files\BrowseToSave 2013-02-15 21:29 . 2013-02-16 15:29 -------- d-----w- c:\program files\EasyLife 2013-02-15 11:43 . 2013-02-15 11:43 -------- d-----w- C:\toolbarImages 2013-02-14 13:54 . 2013-02-18 19:56 -------- d-----w- c:\program files\Spybot - Search & Destroy 2 2013-02-12 21:00 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-02-12 21:00 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\system32\ntkrnlpa.exe 2013-02-12 21:00 . 2013-01-04 03:00 2347008 ----a-w- c:\windows\system32\win32k.sys 2013-02-12 21:00 . 2013-01-03 05:05 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-02-12 21:00 . 2013-01-03 05:04 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-02-12 21:00 . 2013-01-04 04:50 169984 ----a-w- c:\windows\system32\winsrv.dll 2013-02-12 15:54 . 2013-02-13 10:48 -------- d-----w- c:\program files\Enigma Software Group 2013-02-12 15:53 . 2013-02-12 20:28 -------- d-----w- c:\windows\D8167CA8236B4334B77DF388F494EE18.TMP 2013-02-12 15:53 . 2013-02-12 15:53 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2013-02-12 15:49 . 2013-02-12 15:49 -------- d-----w- c:\windows\system32\desktop 2013-02-12 14:13 . 2013-02-12 14:13 -------- d-----w- c:\programdata\Common Toolkit Suite 2013-02-12 14:12 . 2013-02-12 22:04 -------- d-----w- c:\programdata\Fighters 2013-02-10 19:04 . 2012-12-17 05:43 33616 ------w- c:\windows\system32\drivers\gfiark.sys 2013-02-10 17:58 . 2013-02-10 17:58 -------- d-----w- c:\users\Info\AppData\Roaming\LavasoftStatistics 2013-02-10 16:44 . 2013-02-12 20:50 -------- d-----w- c:\users\Info\AppData\Local\Downloaded Installations 2013-02-10 16:44 . 2013-02-10 16:44 13560 ----a-w- c:\windows\system32\drivers\gfibto.sys 2013-02-10 16:36 . 2013-02-10 16:36 -------- d-----w- c:\users\Info\AppData\Local\adawarebp 2013-02-10 16:36 . 2013-02-10 16:36 -------- d-----w- c:\program files\Toolbar Cleaner 2013-02-08 18:04 . 2013-02-08 18:04 285080 ----a-w- c:\program files\Internet Explorer\msdbg2.dll 2013-02-08 18:04 . 2013-02-08 18:04 392080 ----a-w- c:\program files\Internet Explorer\pdm.dll 2013-02-08 18:04 . 2013-02-08 18:04 70568 ----a-w- c:\program files\Internet Explorer\pdmproxy100.dll 2013-02-05 20:07 . 2013-02-27 17:40 -------- d-----w- c:\program files\1und1Softwareaktualisierung 2013-02-05 13:27 . 2013-01-28 13:19 29984 ----a-w- c:\windows\system32\uxtuneup.dll 2013-02-05 13:13 . 2013-01-28 13:19 32032 ----a-w- c:\windows\system32\TURegOpt.exe 2013-02-05 13:13 . 2013-01-28 13:19 21792 ----a-w- c:\windows\system32\authuitu.dll 2013-02-05 13:12 . 2013-02-12 14:29 -------- d-----w- c:\program files\TuneUp Utilities 2013 . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-03-04 12:59 . 2012-12-01 12:59 782240 ----a-w- c:\windows\system32\deployJava1.dll 2013-03-04 12:59 . 2012-12-01 12:59 861088 ----a-w- c:\windows\system32\npDeployJava1.dll 2013-02-27 16:06 . 2012-10-03 16:01 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-02-27 16:06 . 2012-10-03 16:01 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-02-27 14:36 . 2012-12-18 15:07 277640 ----a-w- c:\windows\system32\IntelCpHeciSvc.exe 2013-02-27 14:36 . 2012-12-18 15:07 272008 ----a-w- c:\windows\system32\igfxsrvc.exe 2013-02-27 14:36 . 2012-12-18 15:07 146056 ----a-w- c:\windows\system32\igfxtray.exe 2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrtrk.lrc 2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrsve.lrc 2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrslv.lrc 2013-02-27 14:36 . 2012-12-12 15:41 435200 ----a-w- c:\windows\system32\igfxrtha.lrc 2013-02-27 14:36 . 2012-12-12 15:41 437248 ----a-w- c:\windows\system32\igfxrrus.lrc 2013-02-27 14:36 . 2012-12-12 15:41 437248 ----a-w- c:\windows\system32\igfxrrom.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrsky.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrptg.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrplk.lrc 2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrptb.lrc 2013-02-27 14:36 . 2012-12-12 15:41 435712 ----a-w- c:\windows\system32\igfxrnor.lrc 2013-02-27 14:36 . 2012-12-12 15:40 286720 ----a-w- c:\windows\system32\igfxTMM.dll 2013-02-27 14:36 . 2012-12-12 15:38 519680 ----a-w- c:\windows\system32\iglhsip32.dll 2013-02-27 14:36 . 2012-12-12 15:38 180224 ----a-w- c:\windows\system32\iglhcp32.dll 2013-02-27 14:36 . 2012-01-10 12:15 59904 ----a-w- c:\windows\system32\igfxsrvc.dll 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrnld.lrc 2013-02-27 14:36 . 2012-12-12 15:41 430080 ----a-w- c:\windows\system32\igfxrjpn.lrc 2013-02-27 14:36 . 2012-12-12 15:41 429056 ----a-w- c:\windows\system32\igfxrkor.lrc 2013-02-27 14:36 . 2012-12-12 15:41 438272 ----a-w- c:\windows\system32\igfxrell.lrc 2013-02-27 14:36 . 2012-12-12 15:41 437760 ----a-w- c:\windows\system32\igfxrfra.lrc 2013-02-27 14:36 . 2012-12-12 15:41 437760 ----a-w- c:\windows\system32\igfxresn.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrita.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrhrv.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436736 ----a-w- c:\windows\system32\igfxrdeu.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436224 ----a-w- c:\windows\system32\igfxrhun.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436224 ----a-w- c:\windows\system32\igfxrfin.lrc 2013-02-27 14:36 . 2012-12-12 15:41 435200 ----a-w- c:\windows\system32\igfxrdan.lrc 2013-02-27 14:36 . 2012-12-12 15:41 433664 ----a-w- c:\windows\system32\igfxrheb.lrc 2013-02-27 14:36 . 2012-12-12 15:41 436224 ----a-w- c:\windows\system32\igfxrcsy.lrc 2013-02-27 14:36 . 2012-12-12 15:41 427008 ----a-w- c:\windows\system32\igfxrcht.lrc 2013-02-27 14:36 . 2012-12-12 15:39 284160 ----a-w- c:\windows\system32\igfxrenu.lrc 2013-02-27 14:36 . 2012-01-10 12:14 9023488 ------w- c:\windows\system32\igfxress.dll 2013-02-27 14:36 . 2012-12-18 15:07 199304 ----a-w- c:\windows\system32\igfxext.exe 2013-02-27 14:36 . 2012-12-18 15:07 190088 ----a-w- c:\windows\system32\igfxpers.exe 2013-02-27 14:36 . 2012-12-12 15:41 433664 ----a-w- c:\windows\system32\igfxrara.lrc 2013-02-27 14:36 . 2012-12-12 15:41 426496 ----a-w- c:\windows\system32\igfxrchs.lrc 2013-02-27 14:36 . 2012-12-12 15:40 25088 ----a-w- c:\windows\system32\igfxexps.dll 2013-02-27 14:36 . 2012-12-12 15:40 120320 ----a-w- c:\windows\system32\igfxcpl.cpl 2013-02-27 14:36 . 2012-12-12 15:40 130048 ----a-w- c:\windows\system32\igfxdo.dll 2013-02-27 14:36 . 2012-12-12 15:40 9728 ----a-w- c:\windows\system32\IGFXDEVLib.dll 2013-02-27 14:36 . 2012-12-12 15:40 330752 ------w- c:\windows\system32\igfxdev.dll 2013-02-27 14:36 . 2012-12-12 15:38 640512 ----a-w- c:\windows\system32\igfxcmrt32.dll 2013-02-27 14:36 . 2012-12-12 15:38 3121152 ----a-w- c:\windows\system32\igfxcmjit32.dll 2013-02-27 14:36 . 2012-01-10 13:18 11049472 ----a-w- c:\windows\system32\igdumd32.dll 2013-02-27 14:36 . 2012-01-10 12:15 313344 ----a-w- c:\windows\system32\igfxpph.dll 2013-02-27 14:36 . 2012-12-12 15:41 3759616 ----a-w- c:\windows\system32\drivers\igdkmd32.sys 2013-02-27 14:36 . 2012-12-12 15:41 64512 ----a-w- c:\windows\system32\igdde32.dll 2013-02-27 14:36 . 2012-01-10 12:55 11174912 ----a-w- c:\windows\system32\igd10umd32.dll 2013-02-27 14:36 . 2012-12-12 15:39 10812416 ----a-w- c:\windows\system32\ig4icd32.dll 2013-02-27 14:36 . 2012-12-18 15:07 181384 ----a-w- c:\windows\system32\hkcmd.exe 2013-02-27 14:36 . 2012-12-18 15:07 6232200 ----a-w- c:\windows\system32\GfxUI.exe 2013-02-27 14:36 . 2012-01-10 12:14 96256 ----a-w- c:\windows\system32\hccutils.dll 2013-02-27 14:36 . 2012-12-12 15:40 175616 ----a-w- c:\windows\system32\gfxSrvc.dll 2013-02-27 14:36 . 2012-12-13 15:23 289792 ----a-w- c:\windows\system32\drivers\IntcDAud.sys 2013-02-27 14:36 . 2012-12-13 15:23 14848 ----a-w- c:\windows\system32\IntcDAuC.dll 2012-12-27 00:26 . 2012-11-17 15:39 100896 ----a-w- c:\windows\system32\RTNUninst32.dll 2012-12-16 14:13 . 2012-12-29 16:32 295424 ----a-w- c:\windows\system32\atmfd.dll 2012-12-16 14:13 . 2012-12-29 16:32 34304 ----a-w- c:\windows\system32\atmlib.dll 2012-12-14 15:42 . 2012-10-10 15:24 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2012-12-14 15:42 . 2012-10-01 16:04 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2012-12-14 15:42 . 2012-10-01 16:04 1236816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2012-12-14 01:02 . 2012-12-14 01:02 102400 ----a-w- c:\windows\system32\igfxCoIn_v2932.dll 2012-12-14 01:02 . 2012-12-14 01:02 459264 ----a-w- c:\windows\system32\igfx11cmrt32.dll 2012-12-10 11:01 . 2013-01-06 15:07 18360 ----a-w- c:\windows\system32\roboot.exe 2012-12-05 17:06 . 2012-10-01 16:08 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2012-12-05 17:00 . 2012-10-08 12:05 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll 2012-12-05 16:57 . 2012-10-10 15:15 1236816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll 2013-02-16 00:34 . 2013-02-08 17:54 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2013-01-30 14:49 281760 ------w- c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}] 2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2012-12-17 18:50 556648 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2013-02-12 11325304] "DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2013-02-12 11325304] "Uniblue RegistryBooster 2009"="c:\program files\uniblue\registrybooster\StartRegistryBooster.exe" [2008-08-26 99624] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HP Quick Launch"="c:\program files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI.exe" [2012-12-18 6106336] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-27 146056] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-27 181384] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176] "Bdagent"="c:\program files\Bitdefender\Bitdefender 2013\bdagent.exe" [2013-03-01 1614856] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "MailCheck IE Broker"="c:\program files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe" [2013-02-04 1513536] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *autocheck turegopt . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\01103601.sys] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\40517705.sys] @="Driver" . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spybot-S&D Cleaning] 2012-11-13 13:07 3713032 ----a-w- c:\program files\Spybot - Search & Destroy 2\SDCleaner.exe . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun "Google Update"="c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe" /c "Uniblue RegistryBooster 2009"=c:\program files\uniblue\registrybooster\StartRegistryBooster.exe "DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" -agent "DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" -RESTART . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "ArcSoft Connection Service"=c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "SDTray"="c:\program files\Spybot - Search & Destroy 2\SDTray.exe" "UMonit"=c:\windows\system32\UMonit.exe "IAStorIcon"=c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 . R0 40517705;40517705;c:\windows\system32\drivers\04373023.sys [x] R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [x] R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x] R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [x] R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x] R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys [x] R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x] R3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x] R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x] R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x] R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x] R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 GeneStor;Genesys Logic Storage Driver;c:\windows\system32\DRIVERS\GeneStor.sys [x] R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [x] R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x] R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x] R3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\C541.tmp [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x] R3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [x] R3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [x] R3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys [x] R3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSrv.exe [x] R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x] R4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x] R4 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService.exe [x] R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [x] S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [x] S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys [x] S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [x] S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [x] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x] S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [x] S2 HPWMISVC;HPWMISVC;c:\program files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 IconMan_R;IconMan_R;c:\program files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x] S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x] S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [x] S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [x] S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe [x] S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys [x] S3 ebinfiltr;SR Research Mouse Filter;c:\windows\system32\DRIVERS\ebinfiltr.sys [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [x] S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - 68633480 *NewlyCreated* - MBAMPROTECTOR *Deregistered* - 68633480 . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . . Inhalt des "geplante Tasks" Ordners . 2013-03-05 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-03 16:06] . 2013-03-04 c:\windows\Tasks\DriverEasy Scheduled Scan.job - c:\program files\Easeware\DriverEasy\DriverEasy.exe [2013-02-25 15:00] . 2013-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2013-01-09 19:46] . 2013-03-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2013-01-09 19:46] . 2013-03-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job - c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-02 18:10] . 2013-03-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job - c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-02 18:10] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = about:blank mStart Page = about:blank uInternet Settings,ProxyOverride = *.local;<local> uSearchAssistant = hxxp://www.google.com IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll TCP: DhcpNameServer = 192.168.2.1 Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll FF - ProfilePath - c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.easylifeapp.com/?pid=724&abc=ff1&r=2013/02/15&hid=4095452143&lg=EN&cc=DE&l=1&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - google.com FF - ExtSQL: 2013-01-10 16:52; toolbar@web.de; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\toolbar@web.de.xpi FF - ExtSQL: 2013-02-05 14:34; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF - ExtSQL: 2013-02-06 14:27; {99B98C2C-7274-45a3-A640-D9DF1A1C8460}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi FF - ExtSQL: 2013-02-10 17:36; {87934c42-161d-45bc-8cef-ef18abe2a30c}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c} FF - ExtSQL: 2013-02-10 17:36; jid1-yZwVFzbsyfMrqQ@jetpack; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack FF - user.js: nglayout.initialpaint.delay - 600 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . URLSearchHooks-{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - (no file) WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file) MSConfigStartUp-avgnt - c:\program files\Avira\AntiVir Desktop\avgnt.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MEMSWEEP2] "ImagePath"="\??\c:\windows\system32\C541.tmp" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M" . [HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Internet Explorer\Approved Extensions] @DACL=(02 0000) "{C424171E-592A-415A-9EB1-DFD6D95D3530}"=hex:51,66,7a,6c,4c,1d,3b,1b,0e,0a,32, de,1a,0b,3c,0d,80,b9,98,96,db,1b,75,2a "{17166733-40EA-4432-A85C-AE672FF0E236}"=hex:51,66,7a,6c,4c,1d,3b,1b,23,7a,00, 0d,da,12,54,08,b6,54,e9,27,2d,b6,a2,2c "{BF42D4A8-016E-4FCD-B1EB-837659FD77C6}"=hex:51,66,7a,6c,4c,1d,3b,1b,b8,c9,54, a5,5e,53,ab,03,af,e3,c4,36,5b,bb,37,dc "{4D2D3B0F-69BE-477A-90F5-FDDB05357975}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,26,3b, 57,8e,3b,1c,0b,8e,fd,ba,9b,07,73,39,6f "{5018CFD2-804D-4C99-9F81-25EAEA2769DE}"=hex:51,66,7a,6c,4c,1d,3b,1b,c2,d2,0e, 4a,7d,d2,ff,00,81,89,62,aa,e8,61,29,c4 "{E87806B5-E908-45FD-AF5E-957D83E58E68}"=hex:51,66,7a,6c,4c,1d,3b,1b,a5,1b,6e, f2,38,bb,9b,09,b1,56,d2,3d,81,a3,ce,72 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-03-05 07:13:54 ComboFix-quarantined-files.txt 2013-03-05 06:13 . Vor Suchlauf: 20 Verzeichnis(se), 555.930.079.232 Bytes frei Nach Suchlauf: 23 Verzeichnis(se), 555.789.787.136 Bytes frei . - - End Of File - - 71FF44815639D8957D341A3735BC349D |
Themen zu Minianwendungen werden nicht mehr richtig angezeigt |
angezeigt, gen, hallo zusammen, kleiner, kurzem, minianwendungen, möglicherweise, nicht mehr, richtig, schwarzer, virus, weißer, zusammen |