| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStoreWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.05.2010, 10:45
| #1 |
 |  Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Hallo! Kennt jemand diesen dubiosen Ordner??? Bei mir liegt er direkt auf C: auf einem Windows 7 PC. Er enthält unzählige Unterordner in immer wiederkehrender Reihenfolge: C:\$UPGRADE.~OS\OnlineUpgradeStore\File\C$\$UPGRADE.~OS\OnlineUpgradeStore\ File\C$\$UPGRADE.~OS\OnlineUpgradeStore\File\C$... ...und so weiter... Dieser Ordner lässt sich nicht löschen, es kommt die Meldung "Der Quellpfad ist zu lang" Ich hab's auch schon über die verschiedensten Schredder-, und Löschprogramme versucht. Auch das löschen über die Boot CD von Acronis geht nicht. Eine Anleitung aus dem Netz in die tiefste erreichbare Ebene vorzudringen und dort umzubennennen und zu löschen bringt auch nichts. Ich kann zwar umbenennen, aber der tiefste erreichbare Ordner bleibt erhalten, kann nicht umbenannt werden und erzeugt immer wieder neue Unterordner Seltsamerweise lässt sich dieser Ordner nicht über die Such-Funktion von Windows7 finden, obwohl er ja existiert. Ich nehme an, dass es sich dabei um etwas bösartiges handelt!? Wer was darüber weiß, bzw. eine Lösung kennt, bitte melden! Danke! |
|
21.05.2010, 12:36
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Hallo und
__________________ Das muss nichts Bösartiges sein, aber wir können mal prüfen: bitte nen Vollscan mit Malwarebytes machen und Log posten. Danach OTL: Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ |
|
22.05.2010, 08:45
| #3 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Hier der Log von malwarebytes.
__________________Hat wohl nichts gefunden. Avira bleibt bei mir an besagtem Ordner endlos hängen da es alle Unterordner öffnet, und diese scheinen ja unendlich. Wäre doch 'ne Klasse Möglichkeit um eine Virensoftware lahm zu legen und dahinter sein böses Spiel zu treiben!? HTML-Code: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4129 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 22.05.2010 09:36:23 mbam-log-2010-05-22 (09-36-23).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 257305 Laufzeit: 30 Minute(n), 36 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
|
22.05.2010, 08:58
| #4 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore So, hier der erste Teil des OTL Log (War zu lang für einen Post): HTML-Code: OTL logfile created on: 22.05.2010 09:50:58 - Run 1 OTL by OldTimer - Version 3.2.5.0 Folder = C:\Users\Bruno\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 72,00% Memory free 16,00 Gb Paging File | 14,00 Gb Available in Paging File | 86,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 149,05 Gb Total Space | 109,68 Gb Free Space | 73,59% Space Free | Partition Type: NTFS Drive D: | 465,76 Gb Total Space | 286,87 Gb Free Space | 61,59% Space Free | Partition Type: NTFS Drive E: | 931,51 Gb Total Space | 375,27 Gb Free Space | 40,29% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: BRUNO-PC Current User Name: Bruno Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Users\Bruno\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files (x86)\Opera\opera.exe (Opera Software) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.) PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Programme\Logitech\SetPoint\x86\SetPoint32.exe () PRC - C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe (EIZO NANAO CORPORATION) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Users\Bruno\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Programme\Logitech\SetPoint\x86\lgscroll.dll (Logitech, Inc.) MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\msvcr80.dll (Microsoft Corporation) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.) SRV:[b]64bit:[/b] - (WwanSvc) -- C:\Windows\SysNative\wwansvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (WbioSrvc) -- C:\Windows\SysNative\wbiosrvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (Power) -- C:\Windows\SysNative\umpo.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (Themes) -- C:\Windows\SysNative\themeservice.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (sppuinotify) -- C:\Windows\SysNative\sppuinotify.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (SensrSvc) -- C:\Windows\SysNative\sensrsvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (PNRPsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (p2pimsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (HomeGroupProvider) -- C:\Windows\SysNative\provsvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (RpcEptMapper) -- C:\Windows\SysNative\RpcEpMap.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (PNRPAutoReg) -- C:\Windows\SysNative\pnrpauto.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (HomeGroupListener) -- C:\Windows\SysNative\ListSvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (FontCache) -- C:\Windows\SysNative\FntCache.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (Dhcp) -- C:\Windows\SysNative\dhcpcore.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (defragsvc) -- C:\Windows\SysNative\defragsvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (bthserv) -- C:\Windows\SysNative\bthserv.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (BDESVC) -- C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (AxInstSV) -- C:\Windows\SysNative\AxInstSv.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (AppIDSvc) -- C:\Windows\SysNative\appidsvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (wbengine) -- C:\Windows\SysNative\wbengine.exe (Microsoft Corporation) SRV:[b]64bit:[/b] - (sppsvc) -- C:\Windows\SysNative\sppsvc.exe (Microsoft Corporation) SRV:[b]64bit:[/b] - (Fax) -- C:\Windows\SysNative\FXSSVC.exe (Microsoft Corporation) SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (VSS) -- C:\Windows\Vss [2009.07.14 05:20:14 | 000,000,000 | ---D | M] SRV - (MSDTC) -- C:\Windows\SysWOW64\Msdtc [2009.07.14 05:20:14 | 000,000,000 | ---D | M] SRV - (HomeGroupProvider) -- C:\Windows\SysWOW64\provsvc.dll (Microsoft Corporation) SRV - (Dhcp) -- C:\Windows\SysWOW64\dhcpcore.dll (Microsoft Corporation) SRV - (vds) -- C:\Windows\SysWOW64\wbem\vds.mof () SRV - (clr_optimization_v2.0.50727_64) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (AcrSch2Svc) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) SRV - (Adobe Version Cue CS4) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe (Adobe Systems Incorporated) SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - (tdrpman228) Acronis Try&Decide and Restore Points filter (build 228) -- C:\Windows\SysNative\drivers\tdrpm228.sys (Acronis) DRV:[b]64bit:[/b] - (timounter) -- C:\Windows\SysNative\drivers\timntr.sys (Acronis) DRV:[b]64bit:[/b] - (tifsfilter) -- C:\Windows\SysNative\drivers\tifsfilt.sys (Acronis) DRV:[b]64bit:[/b] - (snapman) -- C:\Windows\SysNative\drivers\snapman.sys (Acronis) DRV:[b]64bit:[/b] - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:[b]64bit:[/b] - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:[b]64bit:[/b] - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:[b]64bit:[/b] - (KSecPkg) -- C:\Windows\SysNative\drivers\ksecpkg.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (fvevol) -- C:\Windows\SysNative\drivers\fvevol.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:[b]64bit:[/b] - (hwpolicy) -- C:\Windows\SysNative\drivers\hwpolicy.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (FsDepends) -- C:\Windows\SysNative\drivers\fsdepends.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:[b]64bit:[/b] - (WIMMount) -- C:\Windows\SysNative\drivers\wimmount.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (vhdmp) -- C:\Windows\SysNative\drivers\vhdmp.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (vdrvroot) -- C:\Windows\SysNative\drivers\vdrvroot.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:[b]64bit:[/b] - (rdyboost) -- C:\Windows\SysNative\drivers\rdyboost.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (pcw) -- C:\Windows\SysNative\drivers\pcw.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (CNG) -- C:\Windows\SysNative\drivers\cng.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (rdpbus) -- C:\Windows\SysNative\drivers\rdpbus.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (RDPREFMP) -- C:\Windows\SysNative\drivers\RDPREFMP.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\SysNative\drivers\agilevpn.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (WfpLwf) -- C:\Windows\SysNative\drivers\wfplwf.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (NdisCap) -- C:\Windows\SysNative\drivers\ndiscap.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (vwifibus) -- C:\Windows\SysNative\drivers\vwifibus.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (1394ohci) -- C:\Windows\SysNative\drivers\1394ohci.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (HdAudAddService) -- C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (UmPass) -- C:\Windows\SysNative\drivers\umpass.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (mshidkmdf) -- C:\Windows\SysNative\drivers\mshidkmdf.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (WudfPf) -- C:\Windows\SysNative\drivers\WUDFPf.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (MTConfig) -- C:\Windows\SysNative\drivers\MTConfig.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (CompositeBus) -- C:\Windows\SysNative\drivers\CompositeBus.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (Beep) -- C:\Windows\SysNative\drivers\beep.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (AppID) -- C:\Windows\SysNative\drivers\appid.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (scfilter) -- C:\Windows\SysNative\drivers\scfilter.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (discache) -- C:\Windows\SysNative\drivers\discache.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (HidBatt) -- C:\Windows\SysNative\drivers\hidbatt.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (CmBatt) -- C:\Windows\SysNative\drivers\CmBatt.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (AcpiPmi) -- C:\Windows\SysNative\drivers\acpipmi.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (AmdPPM) -- C:\Windows\SysNative\drivers\amdppm.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (LMouKE) -- C:\Windows\SysNative\drivers\LMouKE.Sys (Logitech, Inc.) DRV:[b]64bit:[/b] - (L8042mou) -- C:\Windows\SysNative\drivers\L8042mou.Sys (Logitech, Inc.) DRV:[b]64bit:[/b] - (L8042Kbd) -- C:\Windows\SysNative\drivers\L8042Kbd.sys (Logitech, Inc.) DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:[b]64bit:[/b] - (adfs) -- C:\Windows\SysNative\drivers\adfs.sys (Adobe Systems, Inc.) DRV:[b]64bit:[/b] - (EyeOneDisplay) -- C:\Windows\SysNative\drivers\i1display_x64.sys (GretagMacbeth LLC) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) DRV - (NetBIOS) -- C:\Windows\SysWOW64\netbios.dll (Microsoft Corporation) DRV - (mpsdrv) -- C:\Windows\SysWOW64\wbem\mpsdrv.mof () DRV - (Tcpip) -- C:\Windows\SysWOW64\wbem\tcpip.mof () DRV - (adfs) -- C:\Windows\SysWOW64\drivers\adfs.sys (Adobe Systems, Inc.) DRV - (pfc) -- C:\Windows\SysWOW64\drivers\pfc.sys (Padus, Inc.) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2319825 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E4 2A 85 84 47 B6 CA 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010.05.10 14:09:35 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [NVRaidService] C:\Windows\SysNative\nvraidservice.exe (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Programme\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [ScreenManager Pro for LCD] C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe (EIZO NANAO CORPORATION) O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O4 - Startup: C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:[b]64bit:[/b] - Extra context menu item: add to &BOM - C:\\PROGRA~2\\BIET-O~1\\\\AddToBOM.hta () O8:[b]64bit:[/b] - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:[b]64bit:[/b] - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:[b]64bit:[/b] - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:[b]64bit:[/b] - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: add to &BOM - C:\\PROGRA~2\\BIET-O~1\\\\AddToBOM.hta () O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010.05.22 09:48:08 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Users\Bruno\Desktop\OTL.exe [2010.05.22 09:04:18 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Malwarebytes [2010.05.22 09:04:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.05.22 09:04:11 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.05.22 09:04:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010.05.22 09:04:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.05.19 21:33:52 | 000,000,000 | ---D | C] -- C:\Programme\SyncToy 2.1 [2010.05.19 21:32:31 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Sync Framework [2010.05.18 20:39:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Paragon [2010.05.18 20:34:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Paragon Software [2010.05.18 17:04:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EIZO [2010.05.18 15:30:17 | 000,007,808 | ---- | C] (GretagMacbeth LLC) -- C:\Windows\SysNative\drivers\i1display_x64.sys [2010.05.18 15:29:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GretagMacbeth [2010.05.17 07:55:41 | 000,052,568 | R--- | C] (Adobe Systems Inc) -- C:\Windows\SysNative\AdobePDF.dll [2010.05.17 07:55:41 | 000,024,416 | R--- | C] (Adobe Systems Inc.) -- C:\Windows\SysNative\AdobePDFUI.dll [2010.05.16 18:15:28 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\BOM [2010.05.16 18:14:55 | 001,066,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomctl.ocx [2010.05.16 18:14:55 | 000,209,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Tabctl32.ocx [2010.05.16 18:14:55 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscmcde.dll [2010.05.16 18:14:55 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vb6de.dll [2010.05.16 18:14:55 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msstdfmt.dll [2010.05.16 18:14:55 | 000,109,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mswinsck.ocx [2010.05.16 18:14:55 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Tabctde.dll [2010.05.16 18:14:55 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winskde.dll [2010.05.16 18:14:55 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\stdftde.dll [2010.05.16 18:14:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Biet-O-Matic [2010.05.14 17:13:58 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe [2010.05.14 17:13:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LightScribe [2010.05.14 15:22:55 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\OpenOffice.org [2010.05.13 12:07:49 | 000,000,000 | ---D | C] -- C:\Windows\pss [2010.05.13 11:54:01 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\ElevatedDiagnostics [2010.05.13 11:35:50 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Microsoft Games [2010.05.13 10:23:59 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\skypePM [2010.05.13 10:17:55 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Skype [2010.05.13 10:17:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010.05.13 10:17:30 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010.05.13 10:17:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.05.13 09:57:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe Systems [2010.05.13 09:55:33 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Adobe PDF [2010.05.13 09:54:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe Systems Shared [2010.05.13 08:59:57 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2010.05.13 08:56:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0 [2010.05.12 22:04:02 | 000,000,000 | ---D | C] -- E:\MeineBackups [2010.05.12 21:08:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner [2010.05.12 20:45:13 | 000,016,384 | ---- | C] (BitLeader) -- C:\Windows\SysWow64\lgfwunis.exe [2010.05.12 20:45:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\lg_fwupdate [2010.05.12 20:27:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010.05.12 20:27:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero [2010.05.12 20:27:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Ahead [2010.05.12 19:44:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OFPS_abis-foto [2010.05.12 19:25:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard [2010.05.12 19:25:29 | 000,092,672 | ---- | C] (Hewlett-Packard Corporation) -- C:\Windows\SysNative\hpzpnp.dll [2010.05.12 19:25:29 | 000,078,848 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\HPZIDR12.DLL [2010.05.12 19:25:29 | 000,056,320 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\HPBMINI.DLL [2010.05.12 19:25:29 | 000,053,760 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\HPZIPR12.DLL [2010.05.12 19:25:29 | 000,053,760 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\HPBPRO.DLL [2010.05.12 19:25:29 | 000,045,568 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\HPZIPT12.DLL [2010.05.12 19:25:29 | 000,033,280 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\HPBOID.DLL [2010.05.12 19:25:29 | 000,032,768 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\HPBMIAPI.DLL [2010.05.12 19:25:29 | 000,030,208 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\HPZISN12.DLL [2010.05.12 19:25:29 | 000,009,728 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\HPBPROPS.DLL [2010.05.12 19:25:29 | 000,009,216 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\HPBOIDPS.DLL [2010.05.12 07:39:31 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2010.05.12 07:39:31 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbscript.dll [2010.05.12 07:39:30 | 014,629,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2010.05.12 07:39:28 | 011,406,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2010.05.12 07:39:28 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2010.05.12 07:39:28 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2010.05.12 07:39:27 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2010.05.12 07:39:27 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2010.05.12 07:39:21 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2010.05.12 07:39:21 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2010.05.12 07:39:21 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2010.05.12 07:39:21 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2010.05.12 07:39:21 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2010.05.12 07:39:21 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2010.05.12 07:39:21 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2010.05.12 07:39:21 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2010.05.12 07:39:21 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2010.05.12 07:39:21 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2010.05.12 07:39:21 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2010.05.12 07:39:21 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2010.05.12 07:39:21 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2010.05.12 07:39:21 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2010.05.12 07:39:21 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2010.05.12 07:39:20 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2010.05.12 07:39:18 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010.05.12 07:39:18 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010.05.12 07:39:18 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010.05.12 07:39:18 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010.05.12 07:39:18 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010.05.12 07:39:18 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010.05.12 07:39:17 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010.05.12 07:39:17 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010.05.12 07:39:17 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010.05.12 07:39:14 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2010.05.12 07:39:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2010.05.12 07:39:14 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2010.05.12 07:39:14 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2010.05.12 07:39:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2010.05.12 07:39:14 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2010.05.12 07:39:09 | 001,192,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll [2010.05.12 07:39:09 | 001,026,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstime.dll [2010.05.12 07:39:09 | 000,977,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininet.dll [2010.05.12 07:39:09 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstime.dll [2010.05.12 07:39:09 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll [2010.05.12 07:39:09 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll [2010.05.12 07:39:08 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll [2010.05.12 07:39:08 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedsbs.dll [2010.05.12 07:39:05 | 000,223,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fvevol.sys [2010.05.12 07:38:50 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2010.05.12 07:38:50 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2010.05.12 07:38:50 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2010.05.12 07:38:50 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2010.05.12 07:38:50 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iyuv_32.dll [2010.05.12 07:38:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvidc32.dll [2010.05.12 07:38:50 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msyuv.dll [2010.05.12 07:38:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrle32.dll [2010.05.12 07:38:50 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsbyuv.dll [2010.05.12 07:38:46 | 005,509,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2010.05.12 07:38:45 | 003,899,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2010.05.12 07:38:44 | 003,954,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2010.05.12 07:38:42 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2010.05.12 07:38:42 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2010.05.12 07:38:40 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2010.05.12 07:38:40 | 000,153,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ksecpkg.sys [2010.05.12 07:38:36 | 000,960,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010.05.12 07:38:35 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010.05.12 07:38:35 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2010.05.12 07:38:35 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010.05.12 07:38:35 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2010.05.12 07:38:35 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010.05.12 07:38:35 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010.05.12 07:38:30 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2010.05.10 22:25:00 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Avira [2010.05.10 21:08:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Ahead [2010.05.10 20:52:31 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Canon [2010.05.10 20:36:16 | 000,000,000 | ---D | C] -- C:\Users\Bruno\Desktop\Tools [2010.05.10 20:35:53 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Logitech [2010.05.10 20:35:49 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd [2010.05.10 20:35:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LogiShrd [2010.05.10 20:34:56 | 000,235,536 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\KemUtil.dll [2010.05.10 20:34:56 | 000,235,536 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\kemutb.dll [2010.05.10 20:34:56 | 000,159,248 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\KemWnd.dll [2010.05.10 20:34:56 | 000,096,272 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\KemXML.dll [2010.05.10 20:34:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2010.05.10 20:34:41 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Logishrd [2010.05.10 20:34:36 | 000,000,000 | ---D | C] -- C:\Programme\Logitech [2010.05.10 18:57:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Melloware [2010.05.10 18:52:59 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2010.05.10 18:48:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\SpeedProject [2010.05.10 18:48:20 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\SpeedProject [2010.05.10 18:48:15 | 000,000,000 | ---D | C] -- C:\Programme\SpeedProject [2010.05.10 18:47:27 | 000,000,000 | ---D | C] -- C:\Temp [2010.05.10 18:46:46 | 000,115,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSINET.OCX [2010.05.10 18:46:46 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vb6stkit.dll [2010.05.10 18:46:46 | 000,102,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6KO.DLL [2010.05.10 18:46:14 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Ahead [2010.05.10 18:42:49 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2010.05.10 18:42:47 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2010.05.10 18:40:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CyberLink [2010.05.10 18:21:30 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Acronis [2010.05.10 18:14:52 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\EPSON [2010.05.10 18:13:22 | 000,066,560 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\esxcwiab.dll [2010.05.10 18:13:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 5.0 Sprint [2010.05.10 18:08:45 | 000,073,216 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\ADE.DLL [2010.05.10 18:08:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Smart Panel [2010.05.10 18:05:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EPSON [2010.05.10 18:05:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EPSON Print CD [2010.05.10 17:56:24 | 000,008,704 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\E_GCINST.DLL [2010.05.10 17:56:23 | 000,108,032 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_ILMAIE.DLL [2010.05.10 17:56:23 | 000,081,408 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_IBCBAIE.DLL [2010.05.10 17:56:15 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON [2010.05.10 17:09:52 | 000,000,000 | ---D | C] -- C:\Programme\Program Files [2010.05.10 17:03:26 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\MigWiz [2010.05.10 16:32:55 | 001,462,304 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\tdrpm228.sys [2010.05.10 16:32:51 | 000,880,160 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\timntr.sys [2010.05.10 16:32:51 | 000,083,488 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\tifsfilt.sys [2010.05.10 16:32:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis [2010.05.10 16:32:49 | 000,222,240 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\snapman.sys [2010.05.10 16:31:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis [2010.05.10 16:31:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis [2010.05.10 16:00:54 | 000,000,000 | ---D | C] -- C:\Programme\Adobe [2010.05.10 15:40:46 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM [2010.05.10 15:39:38 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Documents [2010.05.10 15:31:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2010.05.10 15:31:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Media Player [2010.05.10 15:30:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2010.05.10 15:29:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010.05.10 15:29:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010.05.10 15:29:14 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Macrovision Shared [2010.05.10 15:29:13 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Adobe [2010.05.10 15:27:48 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Adobe [2010.05.10 15:27:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared [2010.05.10 15:20:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010.05.10 15:12:32 | 000,000,000 | ---D | C] -- C:\ProgramData\ZoomBrowser [2010.05.10 15:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon [2010.05.10 15:09:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Canon [2010.05.10 15:04:08 | 000,000,000 | ---D | C] -- C:\HP CLJ3550 [2010.05.10 15:00:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3 [2010.05.10 14:55:08 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\IrfanView [2010.05.10 14:55:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView [2010.05.10 14:15:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MozBackup [2010.05.10 14:09:34 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Thunderbird [2010.05.10 14:09:34 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Thunderbird [2010.05.10 14:09:34 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Mozilla [2010.05.10 14:09:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird [2010.05.10 13:55:18 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.05.10 11:43:39 | 000,196,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerfr.dll [2010.05.10 11:43:39 | 000,196,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerel.dll [2010.05.10 11:43:39 | 000,196,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerde.dll [2010.05.10 11:43:39 | 000,195,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerptb.dll [2010.05.10 11:43:39 | 000,195,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServernl.dll [2010.05.10 11:43:39 | 000,195,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerit.dll [2010.05.10 11:43:39 | 000,195,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServeres.dll [2010.05.10 11:43:39 | 000,195,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServersl.dll [2010.05.10 11:43:39 | 000,195,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServersk.dll [2010.05.10 11:43:39 | 000,195,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerpt.dll [2010.05.10 11:43:39 | 000,195,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServercs.dll [2010.05.10 11:43:39 | 000,194,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServertr.dll [2010.05.10 11:43:39 | 000,194,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerru.dll [2010.05.10 11:43:39 | 000,194,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerpl.dll [2010.05.10 11:43:39 | 000,194,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerhu.dll [2010.05.10 11:43:39 | 000,194,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerda.dll [2010.05.10 11:43:39 | 000,194,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerth.dll [2010.05.10 11:43:39 | 000,194,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServersv.dll [2010.05.10 11:43:39 | 000,194,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerno.dll [2010.05.10 11:43:39 | 000,194,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerfi.dll [2010.05.10 11:43:39 | 000,193,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerhe.dll [2010.05.10 11:43:39 | 000,193,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerenu.dll [2010.05.10 11:43:39 | 000,193,024 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerar.dll [2010.05.10 11:43:39 | 000,190,464 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerja.dll [2010.05.10 11:43:39 | 000,189,952 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerko.dll [2010.05.10 11:43:39 | 000,188,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerzht.dll [2010.05.10 11:43:39 | 000,188,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServerzhc.dll [2010.05.10 11:43:39 | 000,181,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServereng.dll [2010.05.10 11:43:38 | 001,524,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFC71.dll [2010.05.10 11:43:38 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSVCP71.dll [2010.05.10 11:43:38 | 000,714,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidServer.dll [2010.05.10 11:43:38 | 000,520,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSVCR71.dll [2010.05.10 11:43:38 | 000,381,952 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvExpBar.dll [2010.05.10 11:43:38 | 000,280,064 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvraidservice.exe [2010.05.10 11:43:38 | 000,276,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsataconnection.exe [2010.05.10 11:43:38 | 000,167,936 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardde.dll [2010.05.10 11:43:38 | 000,166,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardpt.dll [2010.05.10 11:43:38 | 000,165,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardel.dll [2010.05.10 11:43:38 | 000,164,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardit.dll [2010.05.10 11:43:38 | 000,164,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardfr.dll [2010.05.10 11:43:38 | 000,164,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardes.dll [2010.05.10 11:43:38 | 000,162,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardsl.dll [2010.05.10 11:43:38 | 000,162,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardptb.dll [2010.05.10 11:43:38 | 000,162,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardnl.dll [2010.05.10 11:43:38 | 000,161,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardru.dll [2010.05.10 11:43:38 | 000,161,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardhu.dll [2010.05.10 11:43:38 | 000,161,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardcs.dll [2010.05.10 11:43:38 | 000,160,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardtr.dll [2010.05.10 11:43:38 | 000,160,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardno.dll [2010.05.10 11:43:38 | 000,160,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardth.dll [2010.05.10 11:43:38 | 000,160,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardsk.dll [2010.05.10 11:43:38 | 000,160,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardpl.dll [2010.05.10 11:43:38 | 000,159,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardsv.dll [2010.05.10 11:43:38 | 000,159,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardfi.dll [2010.05.10 11:43:38 | 000,159,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardda.dll [2010.05.10 11:43:38 | 000,157,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardenu.dll [2010.05.10 11:43:38 | 000,157,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardeng.dll [2010.05.10 11:43:38 | 000,156,160 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardhe.dll [2010.05.10 11:43:38 | 000,153,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardar.dll [2010.05.10 11:43:38 | 000,144,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardko.dll [2010.05.10 11:43:38 | 000,144,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardja.dll [2010.05.10 11:43:38 | 000,140,800 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardzht.dll [2010.05.10 11:43:38 | 000,139,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizardzhc.dll [2010.05.10 11:43:38 | 000,058,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvfr.dll [2010.05.10 11:43:38 | 000,058,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSves.dll [2010.05.10 11:43:38 | 000,057,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvptb.dll [2010.05.10 11:43:38 | 000,057,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvpt.dll [2010.05.10 11:43:38 | 000,057,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvit.dll [2010.05.10 11:43:38 | 000,057,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvel.dll [2010.05.10 11:43:38 | 000,057,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvde.dll [2010.05.10 11:43:38 | 000,057,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvsl.dll [2010.05.10 11:43:38 | 000,057,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvnl.dll [2010.05.10 11:43:38 | 000,057,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvhu.dll [2010.05.10 11:43:38 | 000,057,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvcs.dll [2010.05.10 11:43:38 | 000,056,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvsk.dll [2010.05.10 11:43:38 | 000,056,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvru.dll [2010.05.10 11:43:38 | 000,056,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvpl.dll [2010.05.10 11:43:38 | 000,056,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvfi.dll [2010.05.10 11:43:38 | 000,056,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvtr.dll [2010.05.10 11:43:38 | 000,056,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvth.dll [2010.05.10 11:43:38 | 000,056,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvsv.dll [2010.05.10 11:43:38 | 000,056,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvno.dll [2010.05.10 11:43:38 | 000,056,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvda.dll [2010.05.10 11:43:38 | 000,055,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvhe.dll [2010.05.10 11:43:38 | 000,055,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvenu.dll [2010.05.10 11:43:38 | 000,055,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvar.dll [2010.05.10 11:43:38 | 000,053,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvja.dll [2010.05.10 11:43:38 | 000,053,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvko.dll [2010.05.10 11:43:38 | 000,051,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvzht.dll [2010.05.10 11:43:38 | 000,051,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSvzhc.dll [2010.05.10 11:43:38 | 000,041,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidSveng.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionzht.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionzhc.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectiontr.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionth.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionsv.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionsl.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionsk.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionru.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionptb.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionpt.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionpl.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionno.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionnl.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionko.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionja.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionit.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionhu.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionhe.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionfr.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionfi.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectiones.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionenu.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectioneng.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionel.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionde.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionda.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectioncs.dll [2010.05.10 11:43:38 | 000,036,864 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvSataConnectionar.dll [2010.05.10 11:43:37 | 000,669,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvRaidWizard.dll [2010.05.10 11:42:26 | 000,385,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvraiins.dll [2010.05.10 11:42:26 | 000,385,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvraidco.dll [2010.05.10 11:40:16 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\InstallShield [2010.05.10 11:38:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2010.05.10 11:38:59 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2010.05.10 11:37:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010.05.10 11:37:11 | 001,003,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpluir.dll [2010.05.10 11:35:42 | 001,732,608 | ---- | C] (MSI) -- C:\Windows\SysNative\msicpl.dll [2010.05.10 11:35:37 | 000,658,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvudisp.exe [2010.05.10 11:25:36 | 000,000,000 | ---D | C] -- C:\Programme\Realtek [2010.05.10 11:25:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2010.05.10 11:25:21 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010.05.10 11:25:21 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010.05.10 11:25:21 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010.05.10 11:25:21 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010.05.10 11:25:20 | 000,149,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010.05.10 11:25:19 | 001,537,568 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010.05.10 11:25:19 | 000,417,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010.05.10 11:25:18 | 001,106,464 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010.05.10 11:25:17 | 000,611,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010.05.10 11:25:16 | 000,295,936 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\RTPCEE64.dll [2010.05.10 11:25:14 | 000,058,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010.05.10 11:25:11 | 000,311,296 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010.05.10 11:25:08 | 000,176,640 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\FMAPO64.dll [2010.05.10 11:25:07 | 000,163,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2010.05.10 11:25:07 | 000,067,072 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2010.05.10 11:25:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010.05.10 11:25:06 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010.05.10 11:25:02 | 000,528,384 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010.05.10 11:25:02 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2010.05.10 11:24:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010.05.10 11:22:07 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Opera [2010.05.10 11:22:07 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Opera [2010.05.10 11:21:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera [2010.05.10 11:17:06 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2010.05.10 11:17:05 | 000,081,072 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2010.05.10 11:17:05 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\SysWow64\drivers\avgntdd.sys [2010.05.10 11:17:05 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\SysWow64\drivers\avgntmgr.sys Geändert von Onurb (22.05.2010 um 09:06 Uhr) |
|
22.05.2010, 08:59
| #5 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Hier Teil zwei: HTML-Code: [2010.05.10 11:17:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010.05.10 11:17:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira [2010.05.10 11:13:21 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Macromedia [2010.05.10 11:13:21 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Adobe [2010.05.10 11:13:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010.05.10 11:08:57 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010.05.10 10:52:25 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010.05.10 10:51:51 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010.05.10 10:51:41 | 000,658,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvuninst.exe [2010.05.10 10:50:00 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2010.05.10 10:50:00 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2010.05.10 10:49:59 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2010.05.10 10:49:59 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2010.05.10 10:48:55 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Searches [2010.05.10 10:48:38 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Identities [2010.05.10 10:48:33 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Contacts [2010.05.10 10:48:31 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\VirtualStore [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Vorlagen [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\AppData\Local\Verlauf [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\AppData\Local\Temporary Internet Files [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Startmenü [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\SendTo [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Recent [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Netzwerkumgebung [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Lokale Einstellungen [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Eigene Dateien [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Druckumgebung [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Cookies [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\AppData\Local\Anwendungsdaten [2010.05.10 10:48:21 | 000,000,000 | -HSD | C] -- C:\Users\Bruno\Anwendungsdaten [2010.05.10 10:48:20 | 000,000,000 | --SD | C] -- C:\Users\Bruno\AppData\Roaming\Microsoft [2010.05.10 10:48:20 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Videos [2010.05.10 10:48:20 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Saved Games [2010.05.10 10:48:20 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Links [2010.05.10 10:48:20 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Favorites [2010.05.10 10:48:20 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Downloads [2010.05.10 10:48:20 | 000,000,000 | R--D | C] -- C:\Users\Bruno\Desktop [2010.05.10 10:48:20 | 000,000,000 | -H-D | C] -- C:\Users\Bruno\AppData [2010.05.10 10:48:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Temp [2010.05.10 10:48:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\Pictures [2010.05.10 10:48:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\Music [2010.05.10 10:48:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Microsoft [2010.05.10 10:48:20 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Media Center Programs [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\Programme [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.05.10 10:47:43 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.05.10 10:47:42 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.05.10 10:47:42 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.05.10 10:47:42 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.05.10 10:47:42 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.05.10 10:47:42 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.05.10 10:13:24 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.05.10 10:10:15 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010.05.10 09:19:03 | 000,000,000 | ---D | C] -- C:\Windows Easy Transfer 7 [2010.05.08 09:27:40 | 000,000,000 | ---D | C] -- C:\$UPGRADE.~OS [2010.05.08 09:19:06 | 000,000,000 | ---D | C] -- C:\Windows Mail [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010.05.22 09:52:02 | 002,621,440 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT [2010.05.22 09:48:08 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Users\Bruno\Desktop\OTL.exe [2010.05.22 09:04:15 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.05.22 08:46:53 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.05.22 08:46:53 | 000,643,628 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.05.22 08:46:53 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.05.22 08:46:53 | 000,126,188 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.05.22 08:46:53 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.05.22 08:45:22 | 000,015,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.05.22 08:45:22 | 000,015,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.05.22 08:38:11 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.05.22 08:38:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.05.22 08:37:56 | 2146,975,743 | -HS- | M] () -- C:\hiberfil.sys [2010.05.20 03:02:02 | 002,941,211 | -H-- | M] () -- C:\Users\Bruno\AppData\Local\IconCache.db [2010.05.18 15:30:18 | 000,002,396 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logo Calibration Loader.lnk [2010.05.18 15:30:18 | 000,002,284 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ProfileReminder.lnk [2010.05.18 12:33:51 | 000,116,088 | ---- | M] () -- C:\Users\Bruno\AppData\Local\GDIPFONTCACHEV1.DAT [2010.05.18 07:02:31 | 003,229,552 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.05.18 00:51:09 | 000,001,118 | ---- | M] () -- C:\Users\Bruno\Desktop\OpenOffice.org Calc.lnk [2010.05.17 16:36:40 | 000,001,134 | ---- | M] () -- C:\Users\Public\Desktop\Digital Photo Professional.lnk [2010.05.15 22:00:22 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{f7325bea-605a-11df-8cea-001d92df1e8b}.TMContainer00000000000000000002.regtrans-ms [2010.05.15 22:00:22 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{f7325bea-605a-11df-8cea-001d92df1e8b}.TMContainer00000000000000000001.regtrans-ms [2010.05.15 22:00:22 | 000,065,536 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{f7325bea-605a-11df-8cea-001d92df1e8b}.TM.blf [2010.05.15 20:05:25 | 000,001,592 | ---- | M] () -- C:\Users\Bruno\Desktop\Adobe Illustrator CS4.lnk [2010.05.15 10:26:28 | 000,000,600 | ---- | M] () -- C:\Users\Bruno\AppData\Local\PUTTY.RND [2010.05.14 15:23:29 | 000,001,237 | ---- | M] () -- C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk [2010.05.13 10:24:00 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010.05.13 09:55:50 | 000,001,383 | ---- | M] () -- C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2010.05.13 08:54:18 | 000,000,330 | ---- | M] () -- C:\Windows\lgfwup.ini [2010.05.12 20:46:47 | 000,016,384 | ---- | M] (BitLeader) -- C:\Windows\SysWow64\lgfwunis.exe [2010.05.12 19:44:36 | 000,001,909 | ---- | M] () -- C:\Users\Bruno\Desktop\OFPS Abis-Foto.lnk [2010.05.10 20:34:57 | 000,001,751 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk [2010.05.10 18:52:49 | 000,001,137 | ---- | M] () -- C:\Users\Bruno\Desktop\Adobe InDesign CS4.lnk [2010.05.10 18:52:41 | 000,001,170 | ---- | M] () -- C:\Users\Bruno\Desktop\Adobe Photoshop CS4 (64 Bit).lnk [2010.05.10 18:07:05 | 000,000,027 | ---- | M] () -- C:\Windows\CDE P4870EFGD.ini [2010.05.10 17:10:03 | 000,023,344 | ---- | M] () -- C:\Windows\SysNative\emptyregdb.dat [2010.05.10 16:32:55 | 001,462,304 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\tdrpm228.sys [2010.05.10 16:32:51 | 000,880,160 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\timntr.sys [2010.05.10 16:32:51 | 000,083,488 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\tifsfilt.sys [2010.05.10 16:32:49 | 000,222,240 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\snapman.sys [2010.05.10 15:01:52 | 000,001,144 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.1.lnk [2010.05.10 14:09:35 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat [2010.05.10 11:08:44 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2010.05.10 10:56:42 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010.05.10 10:56:42 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010.05.10 10:56:42 | 000,065,536 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010.05.10 10:48:21 | 000,000,020 | -HS- | M] () -- C:\Users\Bruno\ntuser.ini [2010.05.10 10:16:07 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010.05.10 10:16:07 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010.05.10 10:13:24 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.05.08 09:28:21 | 000,000,002 | ---- | M] () -- E:\$UpgDrv$ [2010.05.08 09:28:21 | 000,000,002 | ---- | M] () -- C:\$UpgDrv$ [2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.04.29 12:19:14 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010.05.22 09:04:15 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.05.18 15:30:18 | 000,002,396 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logo Calibration Loader.lnk [2010.05.18 15:30:18 | 000,002,284 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ProfileReminder.lnk [2010.05.18 00:51:09 | 000,001,118 | ---- | C] () -- C:\Users\Bruno\Desktop\OpenOffice.org Calc.lnk [2010.05.16 18:14:55 | 000,015,873 | ---- | C] () -- C:\Windows\SysWow64\Inetde.dll [2010.05.15 21:49:57 | 000,524,288 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT{f7325bea-605a-11df-8cea-001d92df1e8b}.TMContainer00000000000000000002.regtrans-ms [2010.05.15 21:49:57 | 000,524,288 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT{f7325bea-605a-11df-8cea-001d92df1e8b}.TMContainer00000000000000000001.regtrans-ms [2010.05.15 21:49:57 | 000,065,536 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT{f7325bea-605a-11df-8cea-001d92df1e8b}.TM.blf [2010.05.15 20:05:25 | 000,001,592 | ---- | C] () -- C:\Users\Bruno\Desktop\Adobe Illustrator CS4.lnk [2010.05.15 10:26:28 | 000,000,600 | ---- | C] () -- C:\Users\Bruno\AppData\Local\PUTTY.RND [2010.05.14 15:23:29 | 000,001,237 | ---- | C] () -- C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk [2010.05.13 10:24:00 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.05.13 09:55:50 | 000,001,383 | ---- | C] () -- C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2010.05.12 19:44:36 | 000,001,909 | ---- | C] () -- C:\Users\Bruno\Desktop\OFPS Abis-Foto.lnk [2010.05.12 19:25:29 | 000,018,224 | ---- | C] () -- C:\Windows\SysNative\hpceac06.hpi [2010.05.10 20:34:57 | 000,001,751 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk [2010.05.10 18:52:49 | 000,001,137 | ---- | C] () -- C:\Users\Bruno\Desktop\Adobe InDesign CS4.lnk [2010.05.10 18:52:41 | 000,001,170 | ---- | C] () -- C:\Users\Bruno\Desktop\Adobe Photoshop CS4 (64 Bit).lnk [2010.05.10 18:46:49 | 000,000,330 | ---- | C] () -- C:\Windows\lgfwup.ini [2010.05.10 18:14:45 | 000,000,000 | ---- | C] () -- C:\Users\Bruno\Sti_Trace.log [2010.05.10 18:08:45 | 000,096,768 | ---- | C] () -- C:\Windows\SlantAdj.dll [2010.05.10 18:08:45 | 000,003,136 | ---- | C] () -- C:\Windows\Ade001.bin [2010.05.10 18:08:45 | 000,000,072 | ---- | C] () -- C:\Windows\SysWow64\epDPE.ini [2010.05.10 18:07:05 | 000,000,027 | ---- | C] () -- C:\Windows\CDE P4870EFGD.ini [2010.05.10 17:10:03 | 000,023,344 | ---- | C] () -- C:\Windows\SysNative\emptyregdb.dat [2010.05.10 15:11:58 | 000,001,134 | ---- | C] () -- C:\Users\Public\Desktop\Digital Photo Professional.lnk [2010.05.10 15:01:52 | 000,001,144 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.1.lnk [2010.05.10 14:24:12 | 000,000,183 | ---- | C] () -- C:\Users\Bruno\Signatur.txt [2010.05.10 14:09:35 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010.05.10 11:43:37 | 000,006,874 | ---- | C] () -- C:\Windows\SysNative\nvraidapp.nvu [2010.05.10 11:35:37 | 000,052,072 | ---- | C] () -- C:\Windows\SysNative\startup.exe [2010.05.10 11:35:36 | 000,009,687 | ---- | C] () -- C:\Windows\SysNative\nvdisp.nvu [2010.05.10 11:25:20 | 000,332,320 | ---- | C] () -- C:\Windows\SysNative\RtlCPAPI64.dll [2010.05.10 11:25:17 | 001,158,176 | ---- | C] () -- C:\Windows\SysNative\RTCOM64.dll [2010.05.10 10:48:21 | 000,524,288 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010.05.10 10:48:21 | 000,524,288 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010.05.10 10:48:21 | 000,262,144 | -HS- | C] () -- C:\Users\Bruno\ntuser.dat.LOG1 [2010.05.10 10:48:21 | 000,065,536 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010.05.10 10:48:21 | 000,000,020 | -HS- | C] () -- C:\Users\Bruno\ntuser.ini [2010.05.10 10:48:21 | 000,000,000 | -HS- | C] () -- C:\Users\Bruno\ntuser.dat.LOG2 [2010.05.10 10:48:20 | 002,621,440 | -HS- | C] () -- C:\Users\Bruno\NTUSER.DAT [2010.05.10 10:13:24 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.05.08 09:28:21 | 000,000,002 | ---- | C] () -- C:\$UpgDrv$ [2010.05.06 18:16:50 | 000,000,002 | ---- | C] () -- E:\$UpgDrv$ [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll < End of report > Geändert von Onurb (22.05.2010 um 09:04 Uhr) |
|
23.05.2010, 20:39
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Die Logs sind unauffällig. Wie der Pfad da aber so reinkommt kann ich nicht nachvollziehen. Mach mal ein chkdsk über Laufwerk C:, evtl korrigiert das den Fehler im Dateisystem: chkdsk der Systempartition 1. Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen" 2. Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden 3. Falls dem so ist, diese neue Verknüpfung rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage von Vista Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich 4. Tipp dort ein: chkdsk c: /f /r /v und bestätige mit enter. 5. Die folgende Abfrage mit j bestätigen und enter drücken. 6. Windows neu starten, es sollte ein Hinweis auf eine geplante Datenträgerüberprüfung erscheinen - die Zeit verstreichen lassen, keine Taste drücken!! 7. Abwarten bis der Vorgang abgeschlossen ist. Bei großen Partitionen kann es u.U. recht lange dauern. Windows bootet automatisch neu.
__________________ --> Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore |
|
25.05.2010, 10:48
| #7 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore chkdsk der Systempartition hat leider auch nicht's geändert! Noch 'ne Idee??? |
|
25.05.2010, 11:37
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Löschen oder umbenennen mit ner Linux-Live-CD? Das mal getestet?
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
26.05.2010, 10:00
| #9 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Hallo! Wollt es mit einer knoppix live CD versuchen, aber beim booten kommt der Fehler: "Konnte Disk nicht nach /mnt-sytem mounten. starte debugging shell." und dann: "sh: can't acces tty; job control turned off" Auch Code die Codes: "knoppix acpi=off nolapic hpet=off nodma" und "knoppix atapicd" und "knoppix noscsi" halfen nicht. Was tun? Danke! |
|
26.05.2010, 13:47
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Was für ne Knoppix-Version hast Du da? Es gibt auch noch andere Live-Distros, wenn Knoppix nicht will, kannst Du Dir mal PartedMagic anschauen.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.05.2010, 14:18
| #11 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Ich hab die Version 6.2. Hab's auch schon mit der Ubuntu live CD versucht. Ging auch nicht. Da hieß es "unable to open '/dev..." Ich schau mir mal PartedMagic an! |
|
26.05.2010, 14:27
| #12 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Die md5summe mal checken lassen vom ISO und am besten von der fertigen CD. Die CD langsam brennen. Auf 32 bit und 64 bit achten bei dem iso-download. 32 sollte immer laufen. Die würde ich vorschlagen http://www.sysresccd.org/Online-Manual-DE Geändert von kickrom (26.05.2010 um 14:37 Uhr) |
|
26.05.2010, 14:39
| #13 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Also hab jetzt mal mit PartedMagic versucht (4.10) auch da findet er scheinbar das Laufwerk mit der CD nicht? nach "searching for pmagic-4.10.sqfs" meldet er höflich, dass er dies nicht finden konnte. Zu Knoppix: Ich habe ein 64Bit System. läuft da die 32er Version trotzdem? Und die CD habe ich mehrfach gebrannt mit verschiedenen Dowloads. |
|
26.05.2010, 15:31
| #14 |
| | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Auch www.sysresccd.org geht nicht: "Cannot find /sysrcd.dat on devices" wird gemeldet. Die md5 Summe wurde vorher überprüft. Das muss also ein und dasselbe Problem bei allen Linux Typen sein. Irgendwie findet der die CD nicht. Und das Ganze wegen eines doofen Ordners :-( |
|
26.05.2010, 15:51
| #15 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore Hm... Hat Dein Controller oder das optische Laufwerk ne Macke? Aber die Acronis-CD konnte booten?  Kannst Du von der Win7-DVD booten? Nur mal testweise, sehen ob Du von da ins Setup kommst.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Dubioser Ordner: $UPGRADE.~OS\OnlineUpgradeStore |
| $upgrade.~os, acronis, anleitung, boot, bösartiges, direkt, ebene, enthält, erhalte, erhalten, file, folge, gen, löschen, lösung, melde, melden, meldung, nenne, neue, nicht löschen, onlineupgradestore, ordner, quellpfad, umbenannt, umbenennen, windows, windows 7, zu lang |
Linear-Darstellung
