Hallihallo,
nachdem ich so einen Bösewicht von wegen "Internet Explorer öffnet mit Werbung" hatte, habe ich meine SSD neu installiert. Dabei habe ich jedoch missachtet meine zweite Datenplatte zu "checken". Ich möchte jetzt wissen ob die Viren entfernt wurden oder ob noch welche irgendwo versteckt sind.

OTL:
[SPOILER=OTL]OTL Logfile:

OTL logfile created on: 08.02.2011 16:23:59 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\René\Documents
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 42,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 62,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,90 Gb Total Space | 32,17 Gb Free Space | 57,55% Space Free | Partition Type: NTFS
 
Computer Name: LILI | User Name: René | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.02.08 07:37:25 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\René\Documents\OTL.exe
PRC - [2011.02.06 23:32:30 | 000,943,472 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\Opera.exe
PRC - [2011.01.07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2009.07.07 13:13:38 | 000,241,789 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe
PRC - [2001.05.10 13:33:53 | 000,096,768 | ---- | M] (Ingo Heeskens) -- C:\Program Files (x86)\WinEject\WinEject.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2011.02.08 07:37:25 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\René\Documents\OTL.exe
MOD - [2010.08.21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2010.11.11 14:36:38 | 000,282,616 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2010.11.11 14:36:38 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2011.02.06 23:45:32 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2011.01.07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2010.10.24 21:25:38 | 000,072,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2010.07.21 17:14:24 | 000,051,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB)
DRV:64bit: - [2010.07.21 16:59:28 | 000,045,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:64bit: - [2009.10.16 09:44:56 | 001,309,696 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\P17.sys -- (P17)
DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:09:02 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008.01.19 06:36:12 | 000,027,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\irsir.sys -- (irsir)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C1 7F 77 E8 4C C6 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O4:64bit: - HKLM..\Run: [EPSON Stylus DX3800 Series] C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION)
O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [P17RunE] C:\Windows\SysWow64\P17RunE.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [WinEjectAutoStart1] File not found
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.02.08 16:22:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EPSON
[2011.02.08 16:22:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2011.02.08 16:22:00 | 000,008,704 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\E_GCINST.DLL
[2011.02.08 16:21:59 | 000,119,808 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_ILMACE.DLL
[2011.02.08 16:21:58 | 000,086,528 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_IBCBACE.DLL
[2011.02.08 16:21:52 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON
[2011.02.08 16:21:41 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Malwarebytes
[2011.02.08 16:21:29 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.02.08 16:21:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.02.08 16:21:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.02.08 16:21:25 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.02.08 16:21:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.02.08 16:06:11 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\Adobe
[2011.02.08 16:05:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011.02.08 16:05:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.02.08 16:05:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011.02.08 07:37:30 | 007,734,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\René\Documents\mbam-setup.exe
[2011.02.08 07:37:23 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\René\Documents\OTL.exe
[2011.02.07 17:37:58 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\ElevatedDiagnostics
[2011.02.07 15:58:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VLCPortable
[2011.02.07 11:49:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
[2011.02.07 11:49:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
[2011.02.07 09:59:22 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2011.02.07 09:59:22 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2011.02.07 09:59:22 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2011.02.07 09:59:22 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2011.02.07 09:59:22 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2011.02.07 09:59:21 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2011.02.07 09:59:21 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2011.02.07 09:59:21 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2011.02.07 09:59:00 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[2011.02.07 09:45:34 | 000,000,000 | ---D | C] -- C:\Users\René\Kendra.Exposed.XXX.WEBRip.XviD-GiNALiSA
[2011.02.07 09:39:04 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.02.07 09:39:04 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.02.07 09:39:04 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2011.02.07 09:39:04 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2011.02.07 09:39:03 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2011.02.07 09:39:01 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2011.02.07 09:39:01 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2011.02.07 09:39:01 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2011.02.07 09:39:01 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2011.02.07 09:39:01 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2011.02.07 09:39:01 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2011.02.07 09:39:01 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2011.02.07 09:39:01 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2011.02.07 09:39:00 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2011.02.07 09:39:00 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.02.07 09:39:00 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.02.07 09:38:59 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.02.07 09:38:59 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.02.07 09:38:56 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2011.02.07 09:38:56 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2011.02.07 09:38:52 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2011.02.07 09:38:52 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2011.02.07 09:38:51 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2011.02.07 09:38:51 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2011.02.07 09:38:51 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2011.02.07 09:38:51 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2011.02.07 09:38:51 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2011.02.07 09:38:51 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011.02.07 09:38:50 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2011.02.07 09:38:50 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2011.02.07 09:38:50 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2011.02.07 09:38:50 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011.02.07 09:38:50 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2011.02.07 09:38:50 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2011.02.07 09:38:50 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011.02.07 09:38:50 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2011.02.07 09:38:40 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2011.02.07 09:38:40 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2011.02.07 09:38:39 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2011.02.07 09:38:39 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2011.02.07 09:38:39 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2011.02.07 09:38:39 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2011.02.07 09:38:39 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2011.02.07 09:38:38 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2011.02.07 09:38:38 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2011.02.07 09:38:35 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2011.02.07 09:38:35 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2011.02.07 09:38:32 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.02.07 09:38:31 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.02.07 09:38:31 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.02.07 09:38:30 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2011.02.07 09:38:29 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2011.02.07 09:38:29 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2011.02.07 09:38:29 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2011.02.07 09:38:29 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll
[2011.02.07 09:38:28 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.02.07 09:38:28 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2011.02.07 09:38:28 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2011.02.07 09:38:28 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2011.02.07 09:38:28 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2011.02.07 09:38:28 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2011.02.07 09:38:28 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2011.02.07 09:38:28 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2011.02.07 09:38:20 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2011.02.07 09:38:20 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2011.02.07 09:38:19 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.02.07 09:38:19 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2011.02.07 09:38:15 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2011.02.07 09:38:15 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2011.02.07 09:38:15 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2011.02.07 09:38:15 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2011.02.07 09:38:14 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2011.02.07 09:38:14 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2011.02.07 09:38:08 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.02.07 09:38:07 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.02.07 09:38:07 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.02.07 09:38:05 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2011.02.07 09:38:02 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2011.02.07 09:38:02 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2011.02.07 09:38:02 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2011.02.07 09:38:01 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2011.02.07 09:37:59 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2011.02.07 09:37:58 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2011.02.07 09:37:58 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2011.02.07 09:37:57 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011.02.07 09:37:57 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2011.02.07 09:37:57 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2011.02.07 09:37:55 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2011.02.07 09:37:49 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.02.07 09:37:48 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.02.07 09:37:47 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.02.07 09:37:47 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.02.07 09:37:47 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.02.07 09:37:47 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.02.07 09:37:47 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.02.07 09:37:46 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.02.07 09:37:46 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.02.07 09:37:46 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.02.07 09:37:46 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.02.07 09:37:46 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.02.07 09:37:46 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.02.07 09:37:46 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.02.07 00:46:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2011.02.07 00:45:36 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2011.02.07 00:45:36 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2011.02.07 00:45:36 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2011.02.07 00:45:35 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2011.02.07 00:45:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamersFirst
[2011.02.07 00:42:40 | 000,000,000 | ---D | C] -- C:\Programme\Paint.NET
[2011.02.07 00:42:26 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\Paint.NET
[2011.02.07 00:39:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GamersFirst
[2011.02.07 00:38:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
[2011.02.07 00:38:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CrystalDiskInfo
[2011.02.07 00:33:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2011.02.07 00:33:53 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Security Client
[2011.02.07 00:33:51 | 000,374,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2011.02.07 00:28:25 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Win7codecs
[2011.02.07 00:28:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs
[2011.02.07 00:28:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs
[2011.02.07 00:27:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Win7codecs
[2011.02.07 00:23:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\revoSleep v0.2 BETA
[2011.02.07 00:22:36 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\WinRAR
[2011.02.07 00:22:31 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.02.07 00:22:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.02.07 00:22:25 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR
[2011.02.07 00:12:11 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinEject
[2011.02.07 00:12:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinEject
[2011.02.07 00:12:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinEject
[2011.02.07 00:09:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011.02.07 00:07:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2011.02.07 00:06:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2011.02.07 00:06:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2011.02.07 00:06:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2011.02.07 00:05:23 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office
[2011.02.07 00:05:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2011.02.07 00:04:57 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\Microsoft Help
[2011.02.07 00:04:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2011.02.07 00:04:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2011.02.07 00:04:43 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011.02.07 00:00:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse
[2011.02.07 00:00:41 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliPoint
[2011.02.06 23:59:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Keyboard
[2011.02.06 23:59:39 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliType Pro
[2011.02.06 23:59:37 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.02.06 23:56:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\revoSleep
[2011.02.06 23:54:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2011.02.06 23:53:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2011.02.06 23:53:39 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2011.02.06 23:53:16 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.02.06 23:53:08 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2011.02.06 23:52:50 | 020,471,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2011.02.06 23:52:50 | 015,047,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2011.02.06 23:52:50 | 012,859,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2011.02.06 23:52:50 | 010,078,312 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2011.02.06 23:52:50 | 005,653,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2011.02.06 23:52:50 | 003,112,040 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2011.02.06 23:52:50 | 002,895,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2011.02.06 23:52:50 | 002,479,720 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2011.02.06 23:52:50 | 002,251,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2011.02.06 23:52:50 | 001,614,440 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco642090.dll
[2011.02.06 23:52:50 | 001,359,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642040.dll
[2011.02.06 23:52:50 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011.02.06 23:52:50 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011.02.06 23:52:49 | 018,580,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2011.02.06 23:52:49 | 013,011,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2011.02.06 23:52:49 | 006,604,904 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2011.02.06 23:52:49 | 004,941,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2011.02.06 23:52:49 | 002,200,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2011.02.06 23:52:49 | 001,965,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2011.02.06 23:52:49 | 000,011,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvBridge.kmd
[2011.02.06 23:52:43 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation
[2011.02.06 23:45:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2011.02.06 23:45:41 | 001,868,800 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll
[2011.02.06 23:45:41 | 001,531,904 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll
[2011.02.06 23:45:41 | 000,466,520 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2011.02.06 23:45:41 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2011.02.06 23:45:41 | 000,123,480 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2011.02.06 23:45:41 | 000,109,144 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2011.02.06 23:45:41 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2011.02.06 23:45:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2011.02.06 23:44:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2011.02.06 23:44:50 | 000,000,000 | ---D | C] -- C:\Programme\Creative
[2011.02.06 23:44:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011.02.06 23:42:28 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.02.06 23:41:02 | 001,309,696 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\P17.sys
[2011.02.06 23:41:02 | 000,626,026 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\APOIM64.exe
[2011.02.06 23:41:02 | 000,506,368 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\P17APO32.dll
[2011.02.06 23:41:02 | 000,018,432 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\P17RunE.dll
[2011.02.06 23:41:02 | 000,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\ResDefE.exe
[2011.02.06 23:41:01 | 000,042,496 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AddCat.exe
[2011.02.06 23:40:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2011.02.06 23:39:22 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2011.02.06 23:33:16 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Macromedia
[2011.02.06 23:33:16 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Adobe
[2011.02.06 23:33:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2011.02.06 23:32:31 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Opera
[2011.02.06 23:32:31 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\Opera
[2011.02.06 23:32:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2011.02.06 23:27:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2011.02.06 23:27:50 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Data
[2011.02.06 23:27:50 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DATA
[2011.02.06 23:26:53 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2011.02.06 23:26:53 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll
[2011.02.06 23:26:52 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2011.02.06 23:26:52 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2011.02.06 23:26:12 | 000,000,000 | R--D | C] -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.02.06 23:26:12 | 000,000,000 | R--D | C] -- C:\Users\René\Searches
[2011.02.06 23:26:12 | 000,000,000 | R--D | C] -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.02.06 23:26:06 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Identities
[2011.02.06 23:26:05 | 000,000,000 | R--D | C] -- C:\Users\René\Contacts
[2011.02.06 23:26:04 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\VirtualStore
[2011.02.06 23:26:02 | 000,000,000 | --SD | C] -- C:\Users\René\AppData\Roaming\Microsoft
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Videos
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Saved Games
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Pictures
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Music
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Links
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Favorites
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Downloads
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Documents
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\Desktop
[2011.02.06 23:26:02 | 000,000,000 | R--D | C] -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Vorlagen
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\AppData\Local\Verlauf
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\AppData\Local\Temporary Internet Files
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Startmenü
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\SendTo
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Recent
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Netzwerkumgebung
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Lokale Einstellungen
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Documents\Eigene Videos
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Documents\Eigene Musik
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Eigene Dateien
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Documents\Eigene Bilder
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Druckumgebung
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Cookies
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\AppData\Local\Anwendungsdaten
[2011.02.06 23:26:02 | 000,000,000 | -HSD | C] -- C:\Users\René\Anwendungsdaten
[2011.02.06 23:26:02 | 000,000,000 | -H-D | C] -- C:\Users\René\AppData
[2011.02.06 23:26:02 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\Temp
[2011.02.06 23:26:02 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Local\Microsoft
[2011.02.06 23:26:02 | 000,000,000 | ---D | C] -- C:\Users\René\AppData\Roaming\Media Center Programs
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.02.06 23:25:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.02.06 23:25:49 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.02.06 23:20:09 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.02.06 23:20:01 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011.02.06 23:18:27 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.02.06 23:18:14 | 000,000,000 | -HSD | C] -- C:\Boot
[2010.02.03 23:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.02.08 16:18:19 | 006,858,240 | ---- | M] () -- C:\Users\René\Documents\epson324794eu.exe
[2011.02.08 16:05:50 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.02.08 16:00:11 | 001,513,634 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.02.08 16:00:11 | 000,659,538 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.02.08 16:00:11 | 000,620,814 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.02.08 16:00:11 | 000,131,810 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.02.08 16:00:11 | 000,108,034 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.02.08 15:55:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.02.08 15:55:53 | 1609,895,936 | -HS- | M] () -- C:\hiberfil.sys
[2011.02.08 15:52:17 | 000,013,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.02.08 15:52:17 | 000,013,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.02.08 15:29:14 | 000,000,002 | ---- | M] () -- C:\Windows\SysNative\drives.rev
[2011.02.08 07:37:38 | 007,734,208 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\René\Documents\mbam-setup.exe
[2011.02.08 07:37:25 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\René\Documents\OTL.exe
[2011.02.07 20:27:11 | 000,015,657 | ---- | M] () -- C:\Users\René\Desktop\Microsoft Office Word-Dokument (neu).docx
[2011.02.07 15:52:16 | 000,002,312 | ---- | M] () -- C:\Users\René\Desktop\Herunterfahren.lnk
[2011.02.07 11:49:46 | 000,001,122 | ---- | M] () -- C:\Users\René\Desktop\EVEREST Ultimate Edition.lnk
[2011.02.07 11:28:54 | 000,415,520 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.02.07 00:54:31 | 001,506,084 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.02.07 00:52:17 | 000,001,242 | ---- | M] () -- C:\Users\René\Desktop\Paint.lnk
[2011.02.07 00:52:15 | 000,001,272 | ---- | M] () -- C:\Users\René\Desktop\Snipping Tool.lnk
[2011.02.07 00:45:18 | 000,001,169 | ---- | M] () -- C:\Users\Public\Desktop\War Rock.lnk
[2011.02.07 00:34:24 | 000,002,154 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011.02.07 00:09:15 | 000,002,795 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office Outlook 2007.lnk
[2011.02.07 00:00:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64_01009.Wdf
[2011.02.06 23:59:43 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2011.02.06 23:45:41 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2011.02.06 23:45:41 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2011.02.06 23:45:41 | 000,123,480 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2011.02.06 23:45:41 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2011.02.06 23:44:34 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2011.02.06 23:22:03 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.02.06 23:22:03 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.02.06 23:18:15 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
 
========== Files Created - No Company Name ==========
 
[2011.02.08 16:18:15 | 006,858,240 | ---- | C] () -- C:\Users\René\Documents\epson324794eu.exe
[2011.02.08 16:05:50 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.02.08 16:05:50 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.02.07 18:44:11 | 000,015,657 | ---- | C] () -- C:\Users\René\Desktop\Microsoft Office Word-Dokument (neu).docx
[2011.02.07 15:50:58 | 000,002,312 | ---- | C] () -- C:\Users\René\Desktop\Herunterfahren.lnk
[2011.02.07 11:49:46 | 000,001,122 | ---- | C] () -- C:\Users\René\Desktop\EVEREST Ultimate Edition.lnk
[2011.02.07 00:52:17 | 000,001,242 | ---- | C] () -- C:\Users\René\Desktop\Paint.lnk
[2011.02.07 00:52:15 | 000,001,272 | ---- | C] () -- C:\Users\René\Desktop\Snipping Tool.lnk
[2011.02.07 00:50:28 | 000,000,002 | ---- | C] () -- C:\Windows\SysNative\drives.rev
[2011.02.07 00:45:18 | 000,001,169 | ---- | C] () -- C:\Users\Public\Desktop\War Rock.lnk
[2011.02.07 00:42:59 | 000,001,300 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
[2011.02.07 00:34:24 | 000,002,154 | ---- | C] () -- C:\Windows\epplauncher.mif
[2011.02.07 00:33:58 | 001,506,084 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.02.07 00:33:55 | 000,001,897 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011.02.07 00:09:15 | 000,002,795 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office Outlook 2007.lnk
[2011.02.07 00:00:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64_01009.Wdf
[2011.02.06 23:59:43 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2011.02.06 23:52:49 | 000,007,621 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2011.02.06 23:44:34 | 000,230,912 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2011.02.06 23:44:34 | 000,177,664 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2011.02.06 23:44:34 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2011.02.06 23:44:34 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2011.02.06 23:44:34 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2011.02.06 23:41:02 | 000,150,016 | ---- | C] () -- C:\Windows\SysWow64\OemSpiE.dll
[2011.02.06 23:41:00 | 000,008,491 | ---- | C] () -- C:\Windows\SysWow64\P17APO64.p17
[2011.02.06 23:41:00 | 000,003,889 | ---- | C] () -- C:\Windows\SysNative\ludap17.ini
[2011.02.06 23:41:00 | 000,001,578 | ---- | C] () -- C:\Windows\P17EPLS.ini
[2011.02.06 23:41:00 | 000,001,489 | ---- | C] () -- C:\Windows\P17EP51.ini
[2011.02.06 23:41:00 | 000,000,054 | ---- | C] () -- C:\Windows\SysNative\ctzapxx.ini
[2011.02.06 23:32:30 | 000,001,841 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011.02.06 23:26:15 | 000,001,405 | ---- | C] () -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011.02.06 23:26:13 | 000,001,439 | ---- | C] () -- C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.02.06 23:22:00 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.02.06 23:22:00 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.02.06 23:20:01 | 1609,895,936 | -HS- | C] () -- C:\hiberfil.sys
[2011.02.06 23:18:15 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2011.02.06 23:18:14 | 000,383,562 | RHS- | C] () -- C:\bootmgr
[2010.12.29 01:23:14 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010.06.23 11:35:52 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.06.23 11:35:52 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.03.15 04:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2008.11.13 06:07:24 | 000,002,177 | ---- | C] () -- C:\Windows\P17EP.ini
[2007.02.05 19:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
 
========== LOP Check ==========
 
[2011.02.06 23:32:31 | 000,000,000 | ---D | M] -- C:\Users\René\AppData\Roaming\Opera
[2011.02.07 00:28:25 | 000,000,000 | ---D | M] -- C:\Users\René\AppData\Roaming\Win7codecs
[2009.07.14 06:08:49 | 000,003,906 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
< End of report >
         

--- --- ---


[SPOILER=Extras]OTL Logfile:

OTL Extras logfile created on: 08.02.2011 16:23:59 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\René\Documents
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 42,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 62,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,90 Gb Total Space | 32,17 Gb Free Space | 57,55% Space Free | Partition Type: NTFS
 
Computer Name: LILI | User Name: René | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{563F041C-DFDB-437B-A1E8-E141E0906076}" = Microsoft IntelliPoint 8.0
"{639673E9-D53F-44F4-A046-485C8A6ADA16}" = Paint.NET v3.5.6
"{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware
"{7782916E-3D46-4F1F-AC4B-3FB9D17049F4}" = Microsoft Antimalware Service DE-DE Language Pack
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{98C8DF59-BE5F-4EC2-9B12-FD2A54928EDB}" = Microsoft IntelliType Pro 8.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 266.58
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 266.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 266.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B76E8F60-D517-44B1-BFCD-B6C153A60F1B}" = revoSleep
"{E77543EE-6FB5-4FF6-AB70-635392C8C756}" = Microsoft Security Client
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FCAB9F73-BF5D-4E3D-92E7-B0F35C568F20}" = Microsoft Security Client DE-DE Language Pack
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X - Deutsch
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ALchemy" = Creative ALchemy
"AudioCS" = Creative Audio-Systemsteuerung
"Console Launcher" = Creative Konsole Starter
"Creative Sound Blaster Properties x64 Edition" = Creative Sound Blaster Properties x64 Edition
"Creative Volume Panel" = Lautstärkefenster
"CrystalDiskInfo_is1" = CrystalDiskInfo 3.10.0
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"GamersFirst War Rock" = War Rock
"Host OpenAL" = Host OpenAL
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Opera 11.01.1190" = Opera 11.01
"WinEject" = WinEject
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 06.02.2011 19:43:47 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 06.02.2011 19:43:47 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 06.02.2011 19:43:47 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 06.02.2011 19:43:48 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 06.02.2011 19:43:48 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 06.02.2011 19:43:50 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 06.02.2011 19:43:50 | Computer Name = Lili | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\PaintDotNet.SystemLayer.Native.x86.dll".
Die
abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
 
Error - 07.02.2011 06:27:24 | Computer Name = Lili | Source = Microsoft-Windows-CertificateServicesClient | ID = 1001
Description = Zertifikatdienstclient: der Anbieter pautoenr.dll konnte nicht geladen
werden. Fehlercode 32.
 
Error - 07.02.2011 06:27:24 | Computer Name = Lili | Source = Microsoft-Windows-CertificateServicesClient | ID = 1003
Description = Zertifikatdienstclient: Die Anbieter konnten nicht als Antwort auf
Ereignis 256 aufgerufen werden. Fehlercode 2147942432.
 
Error - 08.02.2011 11:23:44 | Computer Name = Lili | Source = Application Hang | ID = 1002
Description = Programm OTL.exe, Version 3.2.20.6 kann nicht mehr unter Windows ausgeführt
werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: e60 Startzeit: 
01cbc7a4039f2396 Endzeit: 15 Anwendungspfad: C:\Users\René\Documents\OTL.exe Berichts-ID:
 
 
[ System Events ]
Error - 06.02.2011 18:28:01 | Computer Name = Lili | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Infrarotüberwachungsdienst" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1314
 
Error - 06.02.2011 19:37:04 | Computer Name = Lili | Source = Microsoft Antimalware | ID = 3002
Description = Fehler in %%860-Echtzeitschutzfunktion. Funktion: %%886 Fehlercode: 
0x8007042c Fehlerbeschreibung: Der Abhängigkeitsdienst oder die Abhängigkeitsgruppe
konnte nicht gestartet werden. Ursache: %%892
 
Error - 06.02.2011 19:37:14 | Computer Name = Lili | Source = Microsoft Antimalware | ID = 3002
Description = Fehler in %%860-Echtzeitschutzfunktion. Funktion: %%886 Fehlercode: 
0x8007042c Fehlerbeschreibung: Der Abhängigkeitsdienst oder die Abhängigkeitsgruppe
konnte nicht gestartet werden. Ursache: %%892
 
Error - 07.02.2011 04:30:53 | Computer Name = Lili | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort2 gefunden.
 
Error - 07.02.2011 06:27:18 | Computer Name = Lili | Source = Application Popup | ID = 877
Description = Fehler [DATABASE OPEN FAILED] beim Verarbeiten der Treiberdatenbank.
 
Error - 07.02.2011 07:23:12 | Computer Name = Lili | Source = Service Control Manager | ID = 7043
Description = Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements
nicht richtig heruntergefahren werden.
 
Error - 07.02.2011 07:23:16 | Computer Name = Lili | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80090017 fehlgeschlagen: Microsoft .NET Framework 4 Client Profile für
Windows 7 x64-basierte Systeme (KB982670)
 
 
< End of report >
         

--- --- ---


Malwarebytes:
[SPOILER]
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5712

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

08.02.2011 16:55:59
mbam-log-2011-02-08 (16-55-59).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 155595
Laufzeit: 1 Minute(n), 3 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
[/SPOILER]

"Tiefer" Scan kommt gleich noch.

Vielen Dank für eure Hilfe.

Was ist denn auf der Datenplatte drauf? Nur reine Daten?

Bei dem "großen" Scan hat Malwaredings auch nichts gefunden auf beiden Platten. Auf der Datenplatte sind nur Musiktitel (org. von der CD) und Programme für der neu Installation, damit ich nicht immer alles neu installieren muss. (Sprich nur die .exe auf der Platte ist nichts installiert.)