| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: System wird langsam zugemüllt - Systemlast immer bei 50%Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
10.11.2010, 11:37
| #1 |
| |  System wird langsam zugemüllt - Systemlast immer bei 50% Hallo, ich bin neu hier und verzweifle langsam mit meinem Problem. Ich hoffe hier kann mir geholfen werden. Seit einigen Tagen war mein System im Leerlauf ständig bei 50-60% Auslastung (alle 4 Kerne). Dazu kam das meine Systemplatte von Tag zu Tag voller wurde, obwohl keine Programme installiert wurden, keine Wiederherstellungspunkte gesetzt wurden... Temp Ordner sind geleert. Systembereinigung hat keine Erfolge erzielt. Was wurde bereits getan? - Habe dann eScan durchlaufen lassen, der hatte Funde. - danach AntiVir im abgesicherten Modus Systemcheck machen lassen, der hatte 3 Funde welche in Quarantäne geschoben wurden. - Seit dem ist die Systemlast wieder normal. - Festplattenprüfung: Keine Fehler - eScan: Immer noch mehrere Funde (unter anderem gif´s und png´s?), Log File ist dabei. - HijackThis laufen lassen: Log File ist dabei. - Malwarebytes laufen lassen: 1 Fund, Log File ist dabei. Nachdem die Systemlast wieder normal ist hoffe ich das der Schädling entfernt wurde, die Funde machen mir aber trotzdem Sorgen. Außerdem hätte ich gerne meine Systemplatte wieder "bereinigt". Hoffe die Logs helfen weiter  Logs liegen entweder in der Zip im Anhang oder direkt im web: Hijack This: hxxp://dl.dropbox.com/u/6617922/hijackthis.txt eScan: hxxp://dl.dropbox.com/u/6617922/MWAV.txt Malwarebytes: hxxp://dl.dropbox.com/u/6617922/mbam-log-2010-11-10%20%2811-14-25%29.txt Mit besten Grüßen, Markus Habe noch OTL laufen lassen, hier die Logs: OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 10.11.2010 11:42:43 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\XXXXX\Downloads
64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 69,00% Memory free
16,00 Gb Paging File | 13,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 17,34 Gb Free Space | 31,07% Space Free | Partition Type: NTFS
Drive D: | 297,99 Gb Total Space | 216,93 Gb Free Space | 72,80% Space Free | Partition Type: NTFS
Computer Name: BLACK | User Name: XXXXX | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{3DDACE1F-3B1E-D6AB-CD3D-B6E987511945}" = ATI Catalyst Install Manager
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{503640E5-B2ED-3173-D109-D4D03153471A}" = AMD Drag and Drop Transcoding
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{AC76BA86-1033-0000-0064-0003D0000004}" = Adobe Acrobat 9 Pro Extended 64-bit Add-On
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FD53298A-4734-AFCB-B733-4C07776E589E}" = ccc-utility64
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"WinRAR archiver" = WinRAR
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = RemoteCapture 2.7.5
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{179C91E9-D9ED-D5CC-F0D8-9579DBDED8D6}" = CCC Help English
"{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}" = Adobe Creative Suite 5 Master Collection
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback 10
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{28526951-55EF-4901-A0CA-B9AC966D1DD1}" = Split/Second
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51D460F0-E302-44D5-A174-BAD2ADF17689}" = Canon Camera TWAIN Driver
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C8B53B9-41EE-AD83-007A-55EE64DE6932}" = Catalyst Control Center Graphics Previews Common
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{71B6A593-6596-4300-825E-315895018771}" = Canon Camera WIA Driver
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{AC76BA86-1033-F400-7761-000000000004}" = Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
"{AC76BA86-1033-F400-7761-000000000004}{AC76BA86-1033-F400-7761-000000000004}" = Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
"{B4F3A360-E1E2-479D-ADE7-9BE3B07F4539}" = NVIDIA PhysX
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CF5DE1DD-F7E6-694D-1E82-84C7C9C9ABDB}" = Catalyst Control Center Graphics Previews Vista
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{DDA34038-89BD-4804-B0B8-DC48D5DFB463}" = Catalyst Control Center - Branding
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F71E7762-8A64-AECC-0917-DA51677041CF}" = Catalyst Control Center InstallProxy
"{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}" = 325 USB PC Camera
"{F9D65BA1-84C5-B4CB-91FE-D68F07ECBA24}" = ccc-core-static
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ArcaniA" = ArcaniA - Gothic 4
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BSW" = BrettspielWelt
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"FileZilla Client" = FileZilla Client 3.2.7.1
"HD Tune Pro_is1" = HD Tune Pro 4.60
"InstallShield_{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = Canon Utilities RemoteCapture 2.7
"InstallShield_{51D460F0-E302-44D5-A174-BAD2ADF17689}" = Canon Camera TWAIN Driver 6.2
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{71B6A593-6596-4300-825E-315895018771}" = Canon Camera WIA Driver 6.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"Mozilla Thunderbird (3.1.4)" = Mozilla Thunderbird (3.1.4)
"PowerISO" = PowerISO
"Revo Uninstaller" = Revo Uninstaller 1.89
"StarCraft II" = StarCraft II
"SUPER ©" = SUPER © Version 2010.bld.42 (Nov 7, 2010)
"Totalcmd" = Total Commander (Remove or Repair)
"Trillian" = Trillian
"Tunnelier" = Bitvise Tunnelier 4.37 (remove only)
"VLC media player" = VLC media player 1.1.4
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Mozilla Thunderbird (3.1.6)" = Mozilla Thunderbird (3.1.6)
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 31.10.2010 08:02:32 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm vlc.exe, Version 1.1.4.0 kann nicht mehr unter Windows ausgeführt
werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: fe8 Startzeit:
01cb78ef819f2672 Endzeit: 27 Anwendungspfad: D:\Programme\VLC\vlc.exe Berichts-ID:
aa672473-e4e6-11df-97bb-6cf04957cd4d
Error - 31.10.2010 09:03:49 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm vlc.exe, Version 1.1.4.0 kann nicht mehr unter Windows ausgeführt
werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: e54 Startzeit:
01cb78f3821f895b Endzeit: 25 Anwendungspfad: D:\Programme\VLC\vlc.exe Berichts-ID:
39845733-e4ee-11df-97bb-6cf04957cd4d
Error - 31.10.2010 09:39:21 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: trillian.exe, Version: 5.0.0.26,
Zeitstempel: 0x4c97a9a0 Name des fehlerhaften Moduls: oscar.dll, Version: 5.0.0.26,
Zeitstempel: 0x4c97a59d Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034de4 ID des fehlerhaften
Prozesses: 0xb7c Startzeit der fehlerhaften Anwendung: 0x01cb78e23f487521 Pfad der
fehlerhaften Anwendung: D:\Programme\Trillian\trillian.exe Pfad des fehlerhaften
Moduls: D:\Programme\Trillian\plugins\oscar.dll Berichtskennung: 43e557a2-e4f4-11df-97bb-6cf04957cd4d
Error - 31.10.2010 11:04:58 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: vlc.exe, Version: 1.1.4.0, Zeitstempel:
0x4c76f9fe Name des fehlerhaften Moduls: vlc.exe, Version: 1.1.4.0, Zeitstempel:
0x4c76f9fe Ausnahmecode: 0xc0000005 Fehleroffset: 0x000016e8 ID des fehlerhaften Prozesses:
0xe14 Startzeit der fehlerhaften Anwendung: 0x01cb790cf70461a6 Pfad der fehlerhaften
Anwendung: D:\Programme\VLC\vlc.exe Pfad des fehlerhaften Moduls: D:\Programme\VLC\vlc.exe
Berichtskennung:
398fda21-e500-11df-97bb-6cf04957cd4d
Error - 01.11.2010 05:08:11 | Computer Name = black | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
Richtliniendatei "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 01.11.2010 15:36:55 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm vlc.exe, Version 1.1.4.0 kann nicht mehr unter Windows ausgeführt
werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 14f0 Startzeit:
01cb79f293abc4a2 Endzeit: 271 Anwendungspfad: D:\Programme\VLC\vlc.exe Berichts-ID:
6013b65d-e5ef-11df-8de5-6cf04957cd4d
Error - 02.11.2010 05:36:20 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Adobe Premiere Pro.exe, Version:
5.0.0.0, Zeitstempel: 0x4bb568b7 Name des fehlerhaften Moduls: VideoFrame.dll, Version:
5.0.0.0, Zeitstempel: 0x4bb529f2 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000104a7
ID
des fehlerhaften Prozesses: 0xa00 Startzeit der fehlerhaften Anwendung: 0x01cb7a70ee98b0f7
Pfad
der fehlerhaften Anwendung: C:\Program Files\Adobe Premiere Pro CS5\Adobe Premiere
Pro.exe Pfad des fehlerhaften Moduls: C:\Program Files\Adobe Premiere Pro CS5\VideoFrame.dll
Berichtskennung:
a5cdc2ff-e664-11df-b53a-6cf04957cd4d
Error - 04.11.2010 11:38:21 | Computer Name = black | Source = Application Hang | ID = 1002
Description = Programm CryptLoad.exe, Version 1.1.8.0 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: c18 Startzeit:
01cb7c35f439588f Endzeit: 7 Anwendungspfad: D:\CryptLoad_1.1.8\CryptLoad.exe Berichts-ID:
8b8b69b2-e829-11df-8e9a-6cf04957cd4d
Error - 04.11.2010 15:36:48 | Computer Name = black | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: plugin-container.exe, Version: 1.9.2.3951,
Zeitstempel: 0x4cc7add9 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16559,
Zeitstempel: 0x4ba9b29c Ausnahmecode: 0xc0000005 Fehleroffset: 0x00022262 ID des fehlerhaften
Prozesses: 0x998 Startzeit der fehlerhaften Anwendung: 0x01cb7c414af613bf Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll Berichtskennung: dcbeb727-e84a-11df-a65d-6cf04957cd4d
Error - 05.11.2010 04:02:50 | Computer Name = black | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
Richtliniendatei "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
[ System Events ]
Error - 09.11.2010 07:19:05 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 07:20:50 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 08:34:02 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 09:23:23 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 09:40:52 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 09:41:02 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 10:58:53 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 11:19:54 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 14:00:30 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 09.11.2010 16:09:32 | Computer Name = black | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
< End of report >
OTL Logfile: Code:
ATTFilter OTL logfile created on: 10.11.2010 11:42:43 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\XXXXX\Downloads 64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 8,00 Gb Total Physical Memory | 6,00 Gb Available Physical Memory | 69,00% Memory free 16,00 Gb Paging File | 13,00 Gb Available in Paging File | 81,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 55,80 Gb Total Space | 17,34 Gb Free Space | 31,07% Space Free | Partition Type: NTFS Drive D: | 297,99 Gb Total Space | 216,93 Gb Free Space | 72,80% Space Free | Partition Type: NTFS Computer Name: BLACK | User Name: XXXXX | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\XXXXX\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) PRC - D:\Programme\Thunderbird\thunderbird.exe (Mozilla Messaging) PRC - D:\Programme\Trillian\trillian.exe (Cerulean Studios) PRC - D:\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - D:\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) PRC - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG) PRC - C:\Users\XXXXX\AppData\Roaming\Dropbox\bin\Dropbox.exe () PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.) PRC - C:\Windows\FixCamera.exe () PRC - C:\Windows\tsnp325.exe () ========== Modules (SafeList) ========== MOD - C:\Users\XXXXX\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\SysWOW64\guard32.dll (COMODO) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (cmdAgent) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (AntiVirSchedulerService) -- D:\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (AntiVirService) -- D:\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (cmderd) -- C:\Windows\SysNative\drivers\cmderd.sys (COMODO) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (ATI Technologies, Inc.) DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation) DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (61883) -- C:\Windows\SysNative\drivers\61883.sys (Microsoft Corporation) DRV:64bit: - (Avc) -- C:\Windows\SysNative\drivers\avc.sys (Microsoft Corporation) DRV:64bit: - (MSDV) -- C:\Windows\SysNative\drivers\msdv.sys (Microsoft Corporation) DRV:64bit: - (AVCSTRM) -- C:\Windows\SysNative\drivers\avcstrm.sys (Microsoft Corporation) DRV:64bit: - (MSTAPE) -- C:\Windows\SysNative\drivers\mstape.sys (Microsoft Corporation) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (AtiPcie) AMD PCI Express (3GIO) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = h**p://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 90 D6 68 EF F6 6A CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "h**p://www.google.com/ig" FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.87 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.10.28 22:54:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.11.08 17:19:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: D:\Programme\Thunderbird\components [2010.10.28 22:53:32 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: D:\Programme\Thunderbird\plugins [2010.10.13 18:32:27 | 000,000,000 | ---D | M] -- C:\Users\XXXXX\AppData\Roaming\mozilla\Extensions [2010.10.13 18:32:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXXXX\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.11.09 23:36:49 | 000,000,000 | ---D | M] -- C:\Users\XXXXX\AppData\Roaming\mozilla\Firefox\Profiles\eour9tl1.default\extensions [2010.10.13 18:50:37 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\XXXXX\AppData\Roaming\mozilla\Firefox\Profiles\eour9tl1.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010.11.08 17:19:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010.10.18 16:06:50 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010.11.08 17:19:56 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2010.11.08 17:19:50 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010.09.14 22:32:39 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.09.14 22:32:39 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-de.xml [2010.09.14 22:32:39 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.09.14 22:32:39 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.09.14 22:32:39 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.10.18 18:35:29 | 000,001,380 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com:443 O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 192.150.18.108 O1 - Hosts: 127.0.0.1 adobeereg.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:64bit: - HKLM..\Run: [Chew7Hale] C:\Windows\SysNative\hale.exe File not found O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe () O4 - HKLM..\Run: [ Malwarebytes Anti-Malware (reboot)] D:\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NBAgent] D:\Programme\Nero\Nero BackItUp\NBAgent.exe (Nero AG) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [tsnp325] C:\Windows\tsnp325.exe () O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] D:\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\XXXXX\AppData\Roaming\Dropbox\bin\Dropbox.exe () O4 - Startup: C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk = D:\Programme\Trillian\trillian.exe (Cerulean Studios) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8:64bit: - Extra context menu item: An vorhandenes PDF anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: An vorhandenes PDF anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} h**p://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} h**p://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} h**p://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - AppInit_DLLs: (acaptuser64.dll) - C:\Windows\SysNative\acaptuser64.dll (Adobe Systems, Inc.) O20 - AppInit_DLLs: (acaptuser32.dll) - C:\Windows\SysWow64\acaptuser32.dll (Adobe Systems, Inc.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.11.10 11:00:56 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\GHISLER [2010.11.10 10:52:28 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Malwarebytes [2010.11.10 10:52:22 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.11.10 10:52:20 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.11.10 10:52:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.11.10 10:25:00 | 000,000,000 | ---D | C] -- C:\Windows\rundll16.exe [2010.11.10 10:25:00 | 000,000,000 | ---D | C] -- C:\Windows\logo1_.exe [2010.11.10 09:59:10 | 000,000,000 | ---D | C] -- C:\Hijack This [2010.11.10 09:13:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Avira [2010.11.10 01:21:14 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2010.11.10 01:21:14 | 000,081,584 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2010.11.10 01:21:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\VDLL.DLL [2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\runouce.exe [2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\RUNDL132.EXE [2010.11.10 01:11:37 | 000,000,000 | ---D | C] -- C:\Windows\logo_1.exe [2010.11.10 01:06:32 | 000,632,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr80.dll [2010.11.10 01:06:31 | 000,554,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp80.dll [2010.11.10 01:06:30 | 000,034,048 | ---- | C] (MicroWorld Technologies Inc.) -- C:\Windows\SysWow64\eEmpty.exe [2010.11.10 01:06:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\MicroWorld [2010.11.10 01:06:25 | 000,000,000 | ---D | C] -- C:\ProgramData\MicroWorld [2010.11.09 21:53:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eRightSoft [2010.11.08 17:21:02 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\BSW [2010.11.08 17:20:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010.11.08 17:20:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010.11.08 17:19:55 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010.11.08 17:19:55 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010.11.08 17:19:55 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010.11.08 17:19:55 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010.11.08 17:19:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010.11.04 21:46:43 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\ArcaniA - Gothic 4 [2010.11.04 21:43:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010.11.04 21:42:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010.11.04 21:42:25 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2010.11.04 21:42:20 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2010.11.04 21:42:20 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2010.11.04 21:42:19 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2010.11.04 21:42:19 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2010.11.04 21:42:15 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2010.11.04 21:42:15 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2010.11.04 21:42:10 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2010.11.04 21:42:10 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2010.11.04 21:42:02 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2010.11.04 21:42:02 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2010.11.04 21:42:02 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2010.11.04 21:42:02 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2010.11.04 21:41:57 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2010.11.04 21:41:57 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2010.11.04 21:41:57 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2010.11.04 21:41:57 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2010.11.04 21:41:57 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2010.11.04 21:41:57 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2010.11.04 21:41:52 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2010.11.04 21:41:52 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2010.11.04 21:41:52 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2010.11.04 21:41:52 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2010.11.04 21:41:43 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2010.11.04 21:41:43 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2010.11.04 21:41:39 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll [2010.11.04 21:41:39 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll [2010.11.04 21:41:35 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll [2010.11.04 21:41:35 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll [2010.11.04 21:41:34 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll [2010.11.04 21:41:34 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll [2010.11.04 21:41:34 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll [2010.11.04 21:41:34 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll [2010.11.04 21:41:27 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll [2010.11.04 21:41:27 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll [2010.11.04 21:41:20 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll [2010.11.04 21:41:20 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll [2010.11.04 21:41:20 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll [2010.11.04 21:41:20 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll [2010.11.04 21:41:16 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll [2010.11.04 21:41:16 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll [2010.11.04 21:41:15 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2010.11.04 21:41:15 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2010.11.04 21:41:11 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll [2010.11.04 21:41:11 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll [2010.11.04 21:41:11 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll [2010.11.04 21:41:11 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll [2010.11.04 21:41:06 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll [2010.11.04 21:41:06 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll [2010.11.04 21:41:02 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll [2010.11.04 21:41:02 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll [2010.11.04 21:40:57 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll [2010.11.04 21:40:57 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll [2010.11.04 21:40:57 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll [2010.11.04 21:40:57 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll [2010.11.04 21:40:53 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll [2010.11.04 21:40:53 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll [2010.11.04 21:40:52 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll [2010.11.04 21:40:52 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll [2010.11.04 21:40:33 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll [2010.11.04 21:40:33 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2010.11.04 21:40:30 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll [2010.11.04 21:40:30 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll [2010.11.04 21:40:30 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll [2010.11.04 21:40:30 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll [2010.11.04 21:40:29 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll [2010.11.04 21:40:29 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll [2010.11.04 21:40:21 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll [2010.11.04 21:40:21 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2010.11.04 21:40:16 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll [2010.11.04 21:40:16 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll [2010.11.04 21:40:11 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll [2010.11.04 21:40:11 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll [2010.11.04 21:40:10 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll [2010.11.04 21:40:10 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll [2010.11.04 21:40:06 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll [2010.11.04 21:40:06 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll [2010.11.02 22:35:15 | 000,186,880 | RHS- | C] (RadLight) -- C:\Windows\SysWow64\RLOgg.ax [2010.11.02 22:35:15 | 000,161,792 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\RealMediaDX.ax [2010.11.02 22:35:15 | 000,092,672 | RHS- | C] (RadLight) -- C:\Windows\SysWow64\RLVorbisDec.ax [2010.11.02 22:35:15 | 000,090,112 | RHS- | C] (-) -- C:\Windows\SysWow64\TTADSSplitter.ax [2010.11.02 22:35:15 | 000,090,112 | RHS- | C] (-) -- C:\Windows\SysWow64\TTADSDecoder.ax [2010.11.02 22:35:15 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\Windows\SysWow64\RLTheoraDec.ax [2010.11.02 22:35:14 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\Windows\SysWow64\nbDX.dll [2010.11.02 22:35:14 | 000,179,200 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\DiracSplitter.ax [2010.11.02 22:35:14 | 000,169,472 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\MatroskaDX.ax [2010.11.02 22:35:14 | 000,163,328 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\flvDX.dll [2010.11.02 22:35:14 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\Windows\SysWow64\AVCDX.ax [2010.11.02 22:35:14 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\Windows\SysWow64\msfDX.dll [2010.11.01 19:16:56 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\Windows\SysWow64\devil.dll [2010.11.01 19:16:56 | 000,369,152 | ---- | C] (The Public) -- C:\Windows\SysWow64\avisynth.dll [2010.11.01 19:16:56 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll [2010.11.01 19:16:56 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\i420vfw.dll [2010.11.01 19:16:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AviSynth 2.5 [2010.11.01 19:16:03 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\SysWow64\pncrt.dll [2010.10.27 21:40:16 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\amcap.exe [2010.10.27 21:40:15 | 000,147,456 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp325.dll [2010.10.27 21:40:15 | 000,057,344 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnp325.dll [2010.10.27 21:40:15 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\csnp325.dll [2010.10.27 21:40:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\snp325 [2010.10.27 21:40:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\InstallShield [2010.10.26 18:36:54 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2010.10.26 18:35:32 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\PACE Anti-Piracy [2010.10.26 18:35:32 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\PACE Anti-Piracy [2010.10.26 18:35:32 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy [2010.10.26 18:35:31 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\Adobe [2010.10.25 18:12:30 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\Disney Interactive Studios [2010.10.25 17:47:17 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2010.10.25 17:47:17 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2010.10.25 17:47:17 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2010.10.25 17:47:17 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2010.10.25 17:47:15 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2010.10.25 17:47:15 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2010.10.20 22:25:22 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\StarCraft II [2010.10.20 22:25:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010.10.20 22:25:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2010.10.20 22:07:17 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\COMODO [2010.10.20 20:20:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon [2010.10.19 12:51:26 | 000,000,000 | -H-D | C] -- C:\VritualRoot [2010.10.19 12:49:11 | 000,000,000 | ---D | C] -- C:\Programme\COMODO [2010.10.19 12:48:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo [2010.10.19 12:43:32 | 000,000,000 | ---D | C] -- C:\Windows\Internet Logs [2010.10.19 12:42:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Application Data [2010.10.19 12:41:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2010.10.18 20:21:20 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\FileZilla [2010.10.18 19:48:28 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Dropbox [2010.10.18 19:07:58 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2010.10.18 19:07:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared [2010.10.18 19:07:28 | 000,024,416 | R--- | C] (Adobe Systems Inc.) -- C:\Windows\SysNative\AdobePDFUI.dll [2010.10.18 18:39:11 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Thunderbird [2010.10.18 16:08:15 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\skypePM [2010.10.18 16:06:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010.10.18 16:06:43 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010.10.18 16:06:43 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Skype [2010.10.18 16:06:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.10.18 15:59:42 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Trillian [2010.10.18 15:56:12 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Apple Computer [2010.10.18 15:32:05 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe [2010.10.18 15:22:35 | 000,000,000 | ---D | C] -- C:\Programme\Adobe Photoshop CS5 (64 Bit) [2010.10.18 15:22:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Photoshop CS5 [2010.10.18 15:21:49 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM [2010.10.18 15:21:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Illustrator CS5 [2010.10.18 15:21:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Fireworks CS5 [2010.10.18 15:20:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Dreamweaver CS5 [2010.10.18 15:20:12 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Adobe [2010.10.18 15:19:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Encore CS5 [2010.10.18 15:19:30 | 000,000,000 | ---D | C] -- C:\Programme\Adobe Premiere Pro CS5 [2010.10.18 15:19:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Soundbooth CS5 [2010.10.18 15:19:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Premiere Pro CS4 [2010.10.18 15:19:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe OnLocation CS5 [2010.10.18 15:19:01 | 000,000,000 | ---D | C] -- C:\Programme\Adobe After Effects CS5 [2010.10.18 15:18:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Flash CS5 [2010.10.18 15:18:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Bridge CS5 [2010.10.18 15:18:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Device Central CS5 [2010.10.18 15:17:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Media Player [2010.10.18 15:17:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe InDesign CS5 [2010.10.18 15:16:51 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Adobe [2010.10.18 15:16:50 | 000,000,000 | ---D | C] -- C:\Programme\Adobe [2010.10.18 15:16:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Extension Manager CS5 [2010.10.18 15:16:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2010.10.18 15:16:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010.10.18 15:15:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010.10.18 15:15:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010.10.18 15:11:26 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Adobe [2010.10.18 14:48:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\Documents\NeroVision [2010.10.18 14:46:39 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Nero_AG [2010.10.18 14:46:30 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Nero [2010.10.18 14:46:19 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Nero [2010.10.18 14:45:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero [2010.10.18 14:43:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010.10.18 14:42:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero [2010.10.18 14:40:16 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\vlc [2010.10.18 14:18:03 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Apple Computer [2010.10.18 13:57:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010.10.18 13:57:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010.10.18 13:57:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010.10.18 13:57:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010.10.18 13:57:24 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Apple [2010.10.18 13:57:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010.10.18 13:45:51 | 000,091,568 | ---- | C] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys [2010.10.18 13:45:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PowerISO [2010.10.18 13:18:50 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010.10.18 13:15:07 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\HD Tune Pro [2010.10.18 13:14:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HD Tune Pro [2010.10.17 20:24:39 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll [2010.10.17 20:24:39 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll [2010.10.17 20:24:39 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll [2010.10.17 20:24:39 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll [2010.10.17 20:24:38 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll [2010.10.17 20:24:38 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll [2010.10.17 20:24:38 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll [2010.10.17 20:24:38 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll [2010.10.17 20:24:38 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll [2010.10.17 20:24:38 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll [2010.10.17 20:24:38 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll [2010.10.17 20:24:38 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll [2010.10.17 20:24:38 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll [2010.10.17 20:24:38 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll [2010.10.17 20:24:38 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll [2010.10.17 20:24:38 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll [2010.10.17 20:24:37 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2010.10.17 20:24:37 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2010.10.17 20:24:37 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2010.10.17 20:24:37 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2010.10.17 20:24:37 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2010.10.17 20:24:37 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2010.10.17 20:24:37 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2010.10.17 20:24:37 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2010.10.17 20:24:37 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2010.10.17 20:24:37 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2010.10.17 20:24:37 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2010.10.17 20:24:37 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2010.10.17 20:24:37 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2010.10.17 20:24:37 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2010.10.17 20:24:36 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2010.10.17 20:24:36 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2010.10.17 20:24:36 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2010.10.17 20:24:36 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2010.10.17 20:24:36 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2010.10.17 20:24:36 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2010.10.17 20:24:36 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2010.10.17 20:24:36 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2010.10.17 20:24:36 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2010.10.17 20:24:36 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2010.10.17 20:24:36 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2010.10.17 20:24:36 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2010.10.17 20:24:35 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2010.10.17 20:24:35 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2010.10.17 20:24:35 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2010.10.17 20:24:35 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2010.10.17 20:24:35 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2010.10.17 20:24:35 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2010.10.17 20:24:35 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2010.10.17 20:24:35 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2010.10.17 20:24:35 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2010.10.17 20:24:35 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2010.10.17 20:24:34 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2010.10.17 20:24:34 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2010.10.17 20:24:34 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2010.10.17 20:24:34 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2010.10.17 20:24:34 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2010.10.17 20:24:34 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2010.10.17 20:24:34 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2010.10.17 20:24:34 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2010.10.17 20:24:34 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2010.10.17 20:24:34 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2010.10.17 20:24:33 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2010.10.17 20:24:33 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2010.10.17 20:24:33 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2010.10.17 20:24:33 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2010.10.17 20:24:33 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2010.10.17 20:24:33 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2010.10.17 20:24:33 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2010.10.17 20:24:33 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2010.10.17 20:24:33 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2010.10.17 20:24:33 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2010.10.17 20:24:33 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2010.10.17 20:24:33 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2010.10.17 20:24:33 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2010.10.17 20:24:33 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2010.10.17 20:24:32 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2010.10.17 20:24:32 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2010.10.17 20:24:32 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2010.10.17 20:24:32 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2010.10.17 20:24:32 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2010.10.17 20:24:32 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2010.10.17 20:24:32 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2010.10.17 20:24:32 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2010.10.17 20:24:32 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2010.10.17 20:24:32 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2010.10.17 20:24:32 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2010.10.17 20:24:32 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2010.10.17 20:24:31 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2010.10.17 20:24:31 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2010.10.17 20:24:31 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2010.10.17 20:24:31 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2010.10.17 20:24:31 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2010.10.17 20:24:31 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2010.10.17 20:24:31 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2010.10.17 20:24:31 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2010.10.17 20:24:31 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2010.10.17 20:24:31 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2010.10.17 20:24:31 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2010.10.17 20:19:24 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx [2010.10.13 20:50:44 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Macromedia [2010.10.13 20:50:44 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Adobe [2010.10.13 20:39:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010.10.13 20:28:40 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\WinRAR [2010.10.13 20:06:08 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR [2010.10.13 18:32:24 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Thunderbird [2010.10.13 18:27:42 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\ATI [2010.10.13 18:27:42 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\ATI [2010.10.13 18:27:42 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010.10.13 18:26:09 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\ATI Technologies [2010.10.13 18:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies [2010.10.13 18:26:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI [2010.10.13 18:25:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2010.10.13 18:25:15 | 000,000,000 | ---D | C] -- C:\ATI [2010.10.13 18:10:17 | 000,347,680 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys [2010.10.13 18:10:17 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll [2010.10.13 18:09:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Renesas Electronics [2010.10.13 18:07:29 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2010.10.13 18:07:29 | 000,000,000 | ---D | C] -- C:\Programme\Realtek [2010.10.13 18:07:22 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010.10.13 18:07:22 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010.10.13 18:07:22 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010.10.13 18:07:22 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010.10.13 18:07:22 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010.10.13 18:07:21 | 002,618,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010.10.13 18:07:21 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll [2010.10.13 18:07:21 | 002,032,232 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010.10.13 18:07:21 | 001,213,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010.10.13 18:07:21 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010.10.13 18:07:21 | 000,607,832 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBAPO64.dll [2010.10.13 18:07:21 | 000,531,032 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\MBAPO32.dll [2010.10.13 18:07:21 | 000,476,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010.10.13 18:07:21 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010.10.13 18:07:21 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2010.10.13 18:07:21 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010.10.13 18:07:21 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010.10.13 18:07:21 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010.10.13 18:07:21 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010.10.13 18:07:21 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010.10.13 18:07:21 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010.10.13 18:07:21 | 000,080,984 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBWrp64.dll [2010.10.13 18:07:21 | 000,076,904 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010.10.13 18:07:21 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010.10.13 18:07:21 | 000,064,600 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBppld64.dll [2010.10.13 18:07:21 | 000,060,504 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBPPCn64.dll [2010.10.13 18:07:20 | 000,330,656 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010.10.13 18:07:20 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2010.10.13 18:07:20 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2010.10.13 18:07:20 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010.10.13 18:07:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010.10.13 18:07:17 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010.10.13 18:07:17 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2010.10.13 18:07:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010.10.13 18:04:55 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies [2010.10.13 18:04:53 | 000,000,000 | ---D | C] -- C:\Programme\ATI [2010.10.13 18:04:35 | 000,067,128 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys [2010.10.13 18:04:35 | 000,028,216 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys [2010.10.13 18:04:35 | 000,016,440 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\drivers\AtiPcie.sys [2010.10.13 17:56:18 | 000,046,592 | ---- | C] (Zone Labs Inc.) -- C:\Windows\SysWow64\vsutil_loc0407.dll [2010.10.13 17:56:16 | 000,374,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys [2010.10.13 17:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint [2010.10.13 17:53:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Mozilla [2010.10.13 17:53:04 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Mozilla [2010.10.13 17:52:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010.10.13 17:52:43 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.10.13 17:51:22 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Searches [2010.10.13 17:51:16 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Identities [2010.10.13 17:51:15 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Contacts [2010.10.13 17:51:14 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\VirtualStore [2010.10.13 17:51:09 | 000,000,000 | --SD | C] -- C:\Users\XXXXX\AppData\Roaming\Microsoft [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Videos [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Saved Games [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Pictures [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Music [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Links [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Favorites [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Downloads [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Documents [2010.10.13 17:51:09 | 000,000,000 | R--D | C] -- C:\Users\XXXXX\Desktop [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Vorlagen [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\AppData\Local\Verlauf [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\AppData\Local\Temporary Internet Files [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Startmenü [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\SendTo [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Recent [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Netzwerkumgebung [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Lokale Einstellungen [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Documents\Eigene Videos [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Documents\Eigene Musik [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Eigene Dateien [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Documents\Eigene Bilder [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Druckumgebung [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Cookies [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\AppData\Local\Anwendungsdaten [2010.10.13 17:51:09 | 000,000,000 | -HSD | C] -- C:\Users\XXXXX\Anwendungsdaten [2010.10.13 17:51:09 | 000,000,000 | -H-D | C] -- C:\Users\XXXXX\AppData [2010.10.13 17:51:09 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Temp [2010.10.13 17:51:09 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Local\Microsoft [2010.10.13 17:51:09 | 000,000,000 | ---D | C] -- C:\Users\XXXXX\AppData\Roaming\Media Center Programs [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Programme [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.10.13 17:51:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.10.13 17:51:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop [2010.10.13 17:49:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2010.10.13 17:45:41 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010.10.13 17:45:40 | 000,000,000 | ---D | C] -- C:\Windows\CSC [1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.11.10 11:00:58 | 000,000,570 | ---- | M] () -- C:\Users\Public\Desktop\Total Commander.lnk [2010.11.10 10:52:24 | 000,000,558 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.11.10 10:51:43 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.11.10 10:51:43 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.11.10 10:51:43 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.11.10 10:51:43 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.11.10 10:51:43 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.11.10 10:46:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.11.10 10:46:24 | 2145,198,079 | -HS- | M] () -- C:\hiberfil.sys [2010.11.10 10:46:23 | 001,474,832 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat [2010.11.10 10:45:29 | 002,388,818 | ---- | M] () -- C:\Users\XXXXX\Documents\pinfect.zip [2010.11.10 10:25:00 | 000,000,054 | ---- | M] () -- C:\Windows\Lic.xxx [2010.11.10 10:15:27 | 000,012,448 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.11.10 10:15:27 | 000,012,448 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.11.10 09:59:56 | 000,002,965 | ---- | M] () -- C:\Users\XXXXX\Desktop\HiJackThis.lnk [2010.11.10 09:46:41 | 000,003,544 | ---- | M] () -- C:\bootsqm.dat [2010.11.10 01:21:17 | 000,000,749 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2010.11.10 01:06:31 | 000,632,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr80.dll [2010.11.10 01:06:30 | 000,554,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp80.dll [2010.11.10 01:06:29 | 000,034,048 | ---- | M] (MicroWorld Technologies Inc.) -- C:\Windows\SysWow64\eEmpty.exe [2010.11.10 01:05:22 | 004,943,536 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.11.10 01:04:15 | 000,002,666 | ---- | M] () -- C:\Windows\Sandboxie.ini [2010.11.10 00:27:21 | 068,866,904 | ---- | M] () -- C:\Users\XXXXX\Desktop\mwav.exe [2010.11.10 00:26:03 | 000,013,312 | ---- | M] () -- C:\Users\XXXXX\Desktop\find.bat [2010.11.09 22:26:50 | 011,496,501 | ---- | M] () -- C:\Users\XXXXX\Desktop\angelmahr_XXXXX.MOV [2010.11.09 21:54:02 | 000,001,988 | ---- | M] () -- C:\Users\Public\Desktop\SUPER ©.lnk [2010.11.09 21:22:24 | 269,949,362 | ---- | M] () -- C:\Users\XXXXX\Desktop\whiteboard_animation.mpeg [2010.11.08 17:21:03 | 000,000,531 | ---- | M] () -- C:\Users\XXXXX\Desktop\BrettspielWelt.lnk [2010.11.08 17:19:50 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010.11.08 17:19:50 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010.11.08 17:19:50 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010.11.08 17:19:50 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010.11.04 21:38:25 | 000,000,685 | ---- | M] () -- C:\Users\Public\Desktop\ArcaniA - Gothic 4 starten.lnk [2010.11.01 17:25:17 | 000,006,554 | ---- | M] () -- C:\Windows\SysNative\cwlog.dtl [2010.11.01 17:25:15 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppcommdlg.dll [2010.11.01 17:25:14 | 000,419,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll [2010.11.01 17:25:13 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll [2010.11.01 17:25:12 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppwmi.dll [2010.11.01 17:25:11 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2010.11.01 17:25:05 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010.11.01 17:25:05 | 000,349,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe [2010.11.01 17:25:05 | 000,107,946 | ---- | M] () -- C:\Windows\SysNative\slmgr.vbs [2010.11.01 17:25:05 | 000,002,048 | ---- | M] () -- C:\Windows\SysNative\winver.exe [2010.10.28 17:27:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf [2010.10.25 20:56:47 | 000,000,524 | ---- | M] () -- C:\Users\XXXXX\Desktop\Xpadder.lnk [2010.10.25 17:45:39 | 000,000,637 | ---- | M] () -- C:\Users\Public\Desktop\Split Second.lnk [2010.10.21 09:33:06 | 000,001,213 | ---- | M] () -- C:\Users\XXXXX\Desktop\Downloads.lnk [2010.10.21 09:33:06 | 000,001,120 | ---- | M] () -- C:\Users\XXXXX\Desktop\Adobe After Effects CS5.lnk [2010.10.20 22:46:04 | 000,000,620 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk [2010.10.20 17:24:32 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010.10.19 12:41:26 | 000,001,268 | ---- | M] () -- C:\Users\XXXXX\Desktop\Revo Uninstaller.lnk [2010.10.18 19:58:44 | 000,000,368 | ---- | M] () -- C:\HochschuleAnhalt_Bitvise.tlp [2010.10.18 19:54:25 | 000,001,244 | ---- | M] () -- C:\Users\Public\Desktop\Tunnelier.lnk [2010.10.18 19:50:02 | 000,001,017 | ---- | M] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2010.10.18 16:08:22 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010.10.18 16:06:44 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2010.10.18 15:59:42 | 000,000,746 | ---- | M] () -- C:\Users\XXXXX\Desktop\Trillian.lnk [2010.10.18 15:59:42 | 000,000,662 | ---- | M] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2010.10.18 14:44:25 | 000,002,987 | ---- | M] () -- C:\Users\Public\Desktop\Nero Vision 10.lnk [2010.10.18 14:43:20 | 000,002,937 | ---- | M] () -- C:\Users\Public\Desktop\Nero Burning ROM 10.lnk [2010.10.18 14:40:13 | 000,000,610 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2010.10.18 13:45:52 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\PowerISO.lnk [2010.10.18 13:42:49 | 000,000,000 | ---- | M] () -- C:\Windows\Bench32.INI [2010.10.13 23:55:58 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.10.13 18:32:23 | 000,000,768 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk [2010.10.13 18:27:15 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2010.10.13 17:52:55 | 000,001,943 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.10.13 17:49:21 | 000,000,751 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010.10.13 17:49:21 | 000,000,751 | ---- | M] () -- C:\Windows\SysNative\license.rtf [1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.11.10 11:34:27 | 000,035,965 | ---- | C] () -- C:\Users\XXXXX\Desktop\logs.zip [2010.11.10 11:00:58 | 000,000,570 | ---- | C] () -- C:\Users\Public\Desktop\Total Commander.lnk [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF [2010.11.10 11:00:56 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF [2010.11.10 10:52:24 | 000,000,558 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.11.10 09:59:56 | 000,002,965 | ---- | C] () -- C:\Users\XXXXX\Desktop\HiJackThis.lnk [2010.11.10 09:46:41 | 000,003,544 | ---- | C] () -- C:\bootsqm.dat [2010.11.10 01:21:17 | 000,000,749 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2010.11.10 01:17:48 | 002,388,818 | ---- | C] () -- C:\Users\XXXXX\Documents\pinfect.zip [2010.11.10 01:06:44 | 000,000,054 | ---- | C] () -- C:\Windows\Lic.xxx [2010.11.10 00:26:03 | 000,013,312 | ---- | C] () -- C:\Users\XXXXX\Desktop\find.bat [2010.11.10 00:25:57 | 068,866,904 | ---- | C] () -- C:\Users\XXXXX\Desktop\mwav.exe [2010.11.09 22:26:50 | 011,496,501 | ---- | C] () -- C:\Users\XXXXX\Desktop\angelmahr_XXXXX.MOV [2010.11.09 21:12:10 | 269,949,362 | ---- | C] () -- C:\Users\XXXXX\Desktop\whiteboard_animation.mpeg [2010.11.08 17:21:03 | 000,000,531 | ---- | C] () -- C:\Users\XXXXX\Desktop\BrettspielWelt.lnk [2010.11.04 21:38:25 | 000,000,685 | ---- | C] () -- C:\Users\Public\Desktop\ArcaniA - Gothic 4 starten.lnk [2010.11.02 22:35:15 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\RLMPCDec.ax [2010.11.02 22:35:15 | 000,070,656 | RHS- | C] () -- C:\Windows\SysWow64\RLAPEDec.ax [2010.11.02 22:35:15 | 000,051,712 | RHS- | C] () -- C:\Windows\SysWow64\RLSpeexDec.ax [2010.11.02 22:35:15 | 000,001,988 | ---- | C] () -- C:\Users\Public\Desktop\SUPER ©.lnk [2010.11.02 22:35:14 | 000,227,328 | RHS- | C] () -- C:\Windows\SysWow64\ac3DX.ax [2010.11.02 22:35:14 | 000,175,104 | RHS- | C] () -- C:\Windows\SysWow64\CoreAAC.ax [2010.11.02 22:35:14 | 000,120,832 | RHS- | C] () -- C:\Windows\SysWow64\MPCDx.ax [2010.11.02 22:35:14 | 000,097,280 | RHS- | C] () -- C:\Windows\SysWow64\FLACDX.ax [2010.11.02 22:35:14 | 000,081,920 | RHS- | C] () -- C:\Windows\SysWow64\aac_parser.ax [2010.11.01 19:16:56 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll [2010.11.01 17:25:11 | 000,006,554 | ---- | C] () -- C:\Windows\SysNative\cwlog.dtl [2010.10.28 17:27:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf [2010.10.27 21:40:17 | 000,020,480 | ---- | C] () -- C:\Windows\FixCamera.exe [2010.10.27 21:40:16 | 000,835,584 | ---- | C] () -- C:\Windows\vsnp325.exe [2010.10.27 21:40:16 | 000,270,336 | ---- | C] () -- C:\Windows\tsnp325.exe [2010.10.27 21:40:16 | 000,015,498 | ---- | C] () -- C:\Windows\snp325.ini [2010.10.27 21:40:16 | 000,013,023 | ---- | C] () -- C:\Windows\snp325.src [2010.10.25 20:56:47 | 000,000,524 | ---- | C] () -- C:\Users\XXXXX\Desktop\Xpadder.lnk [2010.10.25 17:45:39 | 000,000,637 | ---- | C] () -- C:\Users\Public\Desktop\Split Second.lnk [2010.10.20 22:25:22 | 000,000,620 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk [2010.10.20 17:24:32 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010.10.19 19:37:47 | 000,000,368 | ---- | C] () -- C:\HochschuleAnhalt_Bitvise.tlp [2010.10.19 12:51:03 | 001,474,832 | ---- | C] () -- C:\Windows\SysNative\drivers\sfi.dat [2010.10.19 12:41:26 | 000,001,268 | ---- | C] () -- C:\Users\XXXXX\Desktop\Revo Uninstaller.lnk [2010.10.18 19:54:25 | 000,001,244 | ---- | C] () -- C:\Users\Public\Desktop\Tunnelier.lnk [2010.10.18 19:50:02 | 000,001,017 | ---- | C] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2010.10.18 16:08:22 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.10.18 16:06:44 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2010.10.18 15:59:42 | 000,000,746 | ---- | C] () -- C:\Users\XXXXX\Desktop\Trillian.lnk [2010.10.18 15:59:42 | 000,000,662 | ---- | C] () -- C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2010.10.18 15:34:55 | 000,001,120 | ---- | C] () -- C:\Users\XXXXX\Desktop\Adobe After Effects CS5.lnk [2010.10.18 14:44:25 | 000,002,987 | ---- | C] () -- C:\Users\Public\Desktop\Nero Vision 10.lnk [2010.10.18 14:43:20 | 000,002,937 | ---- | C] () -- C:\Users\Public\Desktop\Nero Burning ROM 10.lnk [2010.10.18 14:40:13 | 000,000,610 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2010.10.18 13:45:52 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\PowerISO.lnk [2010.10.18 13:42:49 | 000,000,000 | ---- | C] () -- C:\Windows\Bench32.INI [2010.10.17 20:20:54 | 000,002,666 | ---- | C] () -- C:\Windows\Sandboxie.ini [2010.10.13 23:55:58 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.10.13 18:32:23 | 000,000,768 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk [2010.10.13 18:27:15 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010.10.13 18:10:17 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll [2010.10.13 18:04:24 | 000,001,213 | ---- | C] () -- C:\Users\XXXXX\Desktop\Downloads.lnk [2010.10.13 17:52:55 | 000,001,943 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.10.13 17:45:23 | 2145,198,079 | -HS- | C] () -- C:\hiberfil.sys [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll ========== Alternate Data Streams ========== @Alternate Data Stream - 1129 bytes -> C:\Users\XXXXX\AppData\Local\Temp:KlGCdpi7gBOzKzdw2fjtq < End of report > |
|
11.11.2010, 08:35
| #2 | ||
| /// Helfer-Team    |  System wird langsam zugemüllt - Systemlast immer bei 50% Hallo und Herzlich Willkommen!
__________________ Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
eScan: Ich würde dem Programm nicht vertrauen, da meistens die angeblichen Funde nicht nachvollziehbar sind bzw oft Fehldiagnose ausgibt  ✏ Fund v. Malwarebytes: in diesem Sinne kein Virus, sondern gehört nur Kategorie "Riskware" ..."unerwünschten Programm" ( Code:
ATTFilter CryptLoad - router\FRITZ!Box - "not-a-virus:RemoteAdmin.Win32.NetCat"
Code:
ATTFilter Potentiell gefährliche Anwendungen (Riskware): Solche Programme verfügen nicht über schädliche Funktionen, können aber unter bestimmten Umständen von Angreifern als Hilfskomponenten eines schädlichen Programms verwendet werden, weil sie Schwachstellen und Fehler enthalten. Unter bestimmten Umständen entsteht durch das Vorhandensein solcher Programme auf dem Computer ein Sicherheitsrisiko für Ihre Daten. Zu dieser Kategorie zählen beispielsweise bestimmte Dienstprogramme zur entfernten Administration, Programme zum automatischen Umschalten der Tastaturbelegung, IRC-Clients, FTP-Server, unterschiedliche Dienstprogramme zum Erstellen oder zum Verstecken von Prozessen.
- Lade dir Random's System Information Tool (RSIT) von random/random herunter - an einen Ort deiner Wahl und führe die rsit.exe aus - wird "Hijackthis" auch von RSIT installiert und ausgeführt - RSIT erstellt 2 Logfiles (C:\rsit\log.txt und C:\rsit\info.txt) mit erweiterten Infos von deinem System - diese beide bitte komplett hier posten **Kannst Du das Log in Textdatei speichern und hier anhängen (auf "Erweitert" klicken) 2. Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken: System-Dateien und -Ordner unter XP und Vista sichtbar machen Am Ende unserer Arbeit, kannst wieder rückgängig machen! 3. → Lade Dir HJTscanlist.zip herunter → entpacke die Datei auf deinem Desktop → Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren → per Doppelklick starten → Wähle dein Betriebsystem aus - bei Win7 wähle Vista → Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen → Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren → Bitte kopiere den Inhalt hier in Deinen Thread. 4. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool "Ccleaner" herunter → "Download"→ " Download from FileHippo.com" → "Download"→ " Download from FileHippo.com" installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein Zitat:
Coverflow |
|
| Themen zu System wird langsam zugemüllt - Systemlast immer bei 50% |
| 64-bit, abgesicherten, adobe after effects, alternate, anhang, antivir, avgntflt.sys, beste, besten, black, c:\windows\system32\rundll32.exe, canon, direkt, entfernt, escan, festplatte, file, firefox.exe, hijack, hijackthis, ieframe.dll, indesign, install.exe, installiert, keine programme, langsam, load.exe, location, log, log file, malwarebytes, media center, modus, mozilla thunderbird, neu, ntdll.dll, oldtimer, ordner, otl.exe, plug-in, poweriso, programdata, programme, quarantäne, revo uninstaller, richtlinie, saver, sched.exe, schädling, searchplugins, shell32.dll, shortcut, start menu, super, system, system wird langsam, systemlast, syswow64, total commander, usb 3.0, vlc media player, web, webcheck, zugemüllt |
Linear-Darstellung
