| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Festplatte/Ram Speicher Criticel Error Schwarzes Bild bei versuchten Java Ubtate!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
21.05.2011, 06:36
| #1 |
| |  Festplatte/Ram Speicher Criticel Error Schwarzes Bild bei versuchten Java Ubtate! Hallo erst mal. Habe nen Kleines Problem! Gestern Wohlte sich nen Java Ubtate auf mein Rechner Installieren,ich Habe den Nein Butten Gedrückt nach 2 sec. kamm diese Anwendung wieder,und wieder und wieder... im Hintergrund lief Musik sowie einige Webseiten Facebock Browsergame etz. wat mann so Offen Hat. Da ich dat Ganze net beenden Konnte habe ich einfach Den PC Resetet. Als er Hochfuhr kam eine ANzeige von Win Recovery und ich Bekam Meldungen wie Critikel Error für Ram&Festplatte,Leider kann ich nur ein wenig schul Englisch von daher bin ich Ziemlich aufen Schlauch.EIne Meldung Auf Deutsch Sagte mir das auf die Festplatte nicht Zugegriffen werden kann ergendwie. Habe nun eine Wiederherstellung gemacht auf 5 tage Vorher Alles Leuft Leider sind Sämtliche Bild und Ton Dateien weg! Oder ich sag mal nicht mehr sichtbar. Angeblich sollen sie sich noch auf den Pc Befinden sagte mir ein Program als ich ein Song Downloden wohlte. Nach Längeren Suchen bin ich hir auf jemanden mit den gleichen symtomen gestoßen. Führe gerade nen Antivir Check durch. und werde mir gleich mal OTL Downloden denke das sind die ersten Richtigen Schritte? Sry Bin Legastinicker , und in sachen PC naja Mit Hardware kann ich bissel um dat wars aber auch schon... Wer kann mir Weiterhelfen? gruß BjörnOTL Logfile: Code:
ATTFilter OTL logfile created on: 21.05.2011 07:53:05 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Björn\Downloads Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 66,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 81,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 279,38 Gb Total Space | 141,36 Gb Free Space | 50,60% Space Free | Partition Type: NTFS Drive D: | 7,83 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: BJÖRN-PC | User Name: Björn | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.05.21 07:52:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Björn\Downloads\OTL.exe PRC - [2011.05.21 07:50:10 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2011.05.21 07:50:10 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2011.05.21 07:50:10 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2011.05.13 16:22:09 | 000,403,240 | ---- | M] (Valve Corporation) -- C:\Programme\Common Files\Steam\SteamService.exe PRC - [2011.04.27 12:22:26 | 000,393,112 | ---- | M] (Spigot, Inc.) -- C:\Programme\Application Updater\ApplicationUpdater.exe PRC - [2011.04.21 09:56:42 | 011,643,392 | ---- | M] (mozilla.org) -- C:\Programme\SeaMonkey\seamonkey.exe PRC - [2011.03.30 19:49:44 | 000,671,552 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe PRC - [2011.03.30 19:48:00 | 001,523,008 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe PRC - [2010.12.09 20:08:18 | 000,413,016 | ---- | M] (IObit) -- C:\Programme\IObit\Game Booster\GameBox.exe PRC - [2010.11.17 06:56:33 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Programme\Steam\Steam.exe PRC - [2010.10.16 13:42:38 | 000,792,680 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\NvXDSync.exe PRC - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010.01.14 21:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.07.14 03:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2009.07.14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009.07.14 03:14:15 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2003.12.02 07:49:00 | 000,053,248 | ---- | M] (GEAR Software) -- C:\Windows\System32\gearsec.exe ========== Modules (SafeList) ========== MOD - [2011.05.21 07:52:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Björn\Downloads\OTL.exe MOD - [2010.08.21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2011.05.21 07:50:10 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.05.21 07:50:10 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011.05.13 16:22:09 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011.04.27 12:22:26 | 000,393,112 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2011.03.30 19:48:00 | 001,523,008 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc) SRV - [2011.03.30 19:45:32 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp) SRV - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2003.12.02 07:49:00 | 000,053,248 | ---- | M] (GEAR Software) [Auto | Running] -- C:\Windows\System32\gearsec.exe -- (gearsec) ========== Driver Services (SafeList) ========== DRV - [2011.05.21 07:50:10 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011.05.21 07:50:10 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2011.02.10 11:22:58 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv) DRV - [2010.10.22 08:23:05 | 010,084,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010.08.08 20:41:15 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2010.08.08 20:41:13 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.07.14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus) DRV - [2009.07.14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt) DRV - [2009.07.14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc) DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009.07.14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap) DRV - [2009.07.14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID) DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD) DRV - [2009.05.11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86) DRV - [2004.08.13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 F9 DB 08 F9 C1 CA 01 [binary data] IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU\..\URLSearchHook: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programme\Dealio Toolbar\IE\4.4\dealioToolbarIE.dll (Spigot, Inc.) IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Customized Web Search" FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2682599&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034" FF - prefs.js..browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.startup.homepage: "hxxp://www.searchnownet.com" FF - prefs.js..extensions.enabledItems: ClickPotatoLite@ClickPotatoLite.com:10.0.659.0 FF - prefs.js..keyword.URL: "hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=867034&p=" FF - HKLM\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions [2011.02.14 18:54:20 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\ClickPotatoLite@ClickPotatoLite.com: C:\Program Files\ClickPotatoLite\bin\10.0.659.0\firefox\extensions [2011.02.14 22:11:35 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\SeaMonkey 2.0.14\extensions\\Components: C:\Program Files\SeaMonkey\components [2011.05.20 19:53:58 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\SeaMonkey 2.0.14\extensions\\Plugins: C:\Program Files\SeaMonkey\plugins [2011.05.20 19:53:58 | 000,000,000 | ---D | M] [2010.12.09 07:42:47 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\Extensions [2010.03.12 18:30:45 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a} [2011.02.20 10:16:48 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\Firefox\Profiles\j982q5o3.default\extensions [2011.05.21 01:19:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions [2011.05.20 19:54:04 | 000,000,000 | ---D | M] (ChatZilla) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2011.05.20 19:54:04 | 000,000,000 | ---D | M] (JavaScript Debugger) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8} [2011.05.20 19:54:04 | 000,000,000 | ---D | M] (DOM Inspector) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions\inspector@mozilla.org [2010.11.25 13:02:16 | 000,000,921 | -H-- | M] () -- C:\Users\Björn\AppData\Roaming\Mozilla\Firefox\Profiles\j982q5o3.default\searchplugins\conduit.xml [2011.02.14 22:11:35 | 000,000,000 | ---D | M] (ClickPotatoLite Component) -- C:\PROGRAM FILES\CLICKPOTATOLITE\BIN\10.0.659.0\FIREFOX\EXTENSIONS O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programme\Dealio Toolbar\IE\4.4\dealioToolbarIE.dll (Spigot, Inc.) O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Programme\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Programme\kikin\ie_kikin.dll (kikin) O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programme\Dealio Toolbar\IE\4.4\dealioToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKCU..\Run: [ImpulseFastStart] C:\Program Files\Stardock\Impulse\Impulse.exe (Stardock Corporation) O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Programme\kikin\ie_kikin.dll (kikin) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2010.12.03 16:52:18 | 000,000,081 | R--- | M] () - D:\Autorun.inf -- [ UDF ] O33 - MountPoints2\{226b82ad-a248-11df-97ad-0023545cf764}\Shell - "" = AutoRun O33 - MountPoints2\{226b82ad-a248-11df-97ad-0023545cf764}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a O33 - MountPoints2\{df3482e7-e0c3-11dd-be34-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{df3482e7-e0c3-11dd-be34-806e6f6e6963}\Shell\AutoRun\command - "" = D:\0data\cbs.exe -- [2010.11.10 12:15:38 | 003,417,600 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.05.21 01:22:14 | 000,137,656 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2011.05.21 01:22:14 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2011.05.21 01:22:14 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys [2011.05.21 01:22:14 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys [2011.05.21 01:22:14 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys [2011.05.20 20:42:01 | 000,031,552 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2011.05.20 20:41:57 | 000,029,504 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2011.05.20 20:41:57 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2011.05.20 20:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011 [2011.05.20 20:41:43 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Roaming\TuneUp Software [2011.05.20 20:41:37 | 000,000,000 | ---D | C] -- C:\Programme\TuneUp Utilities 2011 [2011.05.20 20:41:14 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2011.05.20 20:40:56 | 000,000,000 | -HSD | C] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2011.05.20 20:39:41 | 020,541,344 | ---- | C] (TuneUp Software) -- C:\Users\Björn\Desktop\TuneUpUtilities2011_de-DE.exe [2011.05.20 19:26:06 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Local\ElevatedDiagnostics [2011.05.20 19:08:14 | 000,000,000 | -H-D | C] -- C:\Users\Björn\AppData\Roaming\Avira [2011.05.20 19:05:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2011.05.20 19:05:35 | 000,000,000 | ---D | C] -- C:\Programme\Avira [2011.05.20 19:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2011.05.20 17:42:45 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Local\{52D5B2F5-38B2-4B4A-AAB7-B24CF4F85172} [2011.05.19 17:24:25 | 000,000,000 | -H-D | C] -- C:\Users\Björn\Desktop\Mixe eigen [2011.05.13 05:23:12 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Spigot [2011.05.13 05:23:12 | 000,000,000 | ---D | C] -- C:\Programme\Dealio Toolbar [2011.05.13 05:23:12 | 000,000,000 | ---D | C] -- C:\Programme\Application Updater [2011.05.07 07:56:06 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Local\Ntronium_Games [2011.05.07 07:54:27 | 000,000,000 | -H-D | C] -- C:\Users\Björn\AppData\Local\Armada 2526 [2011.04.30 18:48:50 | 000,000,000 | -H-D | C] -- C:\Users\Björn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast [2011.04.30 18:48:50 | 000,000,000 | ---D | C] -- C:\Programme\SopCast [2011.04.30 18:48:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast [2011.04.30 18:34:57 | 000,000,000 | ---D | C] -- C:\Programme\Veetle [2011.04.30 18:34:14 | 004,236,872 | ---- | C] (Veetle Inc) -- C:\Users\Björn\Desktop\veetle-0.9.18.exe [2011.04.27 23:15:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.05.21 07:50:10 | 000,137,656 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2011.05.21 07:50:10 | 000,061,960 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2011.05.21 06:57:15 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.05.21 06:48:30 | 000,017,136 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.05.21 06:48:30 | 000,017,136 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.05.21 06:42:47 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.05.21 06:40:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.05.21 01:22:23 | 000,002,012 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2011.05.20 20:41:56 | 000,002,155 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2011.05.20 20:41:56 | 000,002,135 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk [2011.05.20 20:40:52 | 020,541,344 | ---- | M] (TuneUp Software) -- C:\Users\Björn\Desktop\TuneUpUtilities2011_de-DE.exe [2011.05.20 19:45:39 | 000,000,144 | ---- | M] () -- C:\ProgramData\~26992376r [2011.05.20 19:45:39 | 000,000,120 | ---- | M] () -- C:\ProgramData\~26992376 [2011.05.20 18:10:10 | 000,000,392 | ---- | M] () -- C:\ProgramData\26992376 [2011.05.20 17:23:18 | 004,445,027 | -H-- | M] () -- C:\Users\Björn\Documents\Black Messiah - Söldnerschwein.mp3 [2011.05.20 16:54:18 | 003,528,025 | -H-- | M] () -- C:\Users\Björn\Documents\Buddy Ogün presents Mozart Margarethe.mp3 [2011.05.15 17:59:06 | 004,089,019 | -H-- | M] () -- C:\Users\Björn\Documents\Sidney Samson - Riverside (Robin Clark Bootleg) [FULL HQ + HD VERSION].mp3 [2011.05.15 17:59:03 | 004,908,557 | -H-- | M] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk [HQ + HD].mp3 [2011.05.15 17:59:01 | 005,897,534 | -H-- | M] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk (Techno4ever Beach Rave Edit) [FULL HQ + HD VERSION].mp3 [2011.05.15 17:58:57 | 003,325,403 | -H-- | M] () -- C:\Users\Björn\Documents\Proppy & Heady - Summer Of 2011 (Prophet's Refixx) [HQ + HD].mp3 [2011.05.15 17:58:55 | 003,133,510 | -H-- | M] () -- C:\Users\Björn\Documents\let the bass kick (headhunterz rmx) full HQ.mp3 [2011.05.15 17:58:53 | 003,879,547 | -H-- | M] () -- C:\Users\Björn\Documents\Dutch Master - Million Miles Away.mp3 [2011.05.15 17:58:51 | 002,630,737 | -H-- | M] () -- C:\Users\Björn\Documents\Chuckie - Let The Bass Kick (Headhunterz Edit) (HQ Preview).mp3 [2011.05.12 21:13:14 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\SeaMonkey.lnk [2011.05.12 21:12:08 | 010,579,515 | ---- | M] () -- C:\Users\Björn\Desktop\SeaMonkey Setup 2.0.14.exe [2011.05.09 21:50:52 | 000,139,128 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011.05.09 21:50:43 | 000,215,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2011.05.08 19:09:57 | 000,280,768 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0 [2011.05.07 07:57:28 | 009,931,264 | -H-- | M] () -- C:\Users\Björn\Desktop\Armada_1400_Patch_German_Boxed_Version.msp [2011.04.30 18:48:50 | 000,000,949 | ---- | M] () -- C:\Users\Björn\Desktop\SopCast.lnk [2011.04.30 18:39:31 | 005,283,249 | -H-- | M] () -- C:\Users\Björn\Desktop\SopCast332.zip [2011.04.30 18:34:18 | 004,236,872 | ---- | M] (Veetle Inc) -- C:\Users\Björn\Desktop\veetle-0.9.18.exe [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.05.21 01:22:23 | 000,002,012 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2011.05.20 20:41:56 | 000,002,155 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2011.05.20 20:41:55 | 000,002,135 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk [2011.05.20 20:41:54 | 000,002,147 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011.lnk [2011.05.20 17:41:04 | 000,000,144 | ---- | C] () -- C:\ProgramData\~26992376r [2011.05.20 17:41:04 | 000,000,120 | ---- | C] () -- C:\ProgramData\~26992376 [2011.05.20 17:40:59 | 000,000,392 | ---- | C] () -- C:\ProgramData\26992376 [2011.05.20 17:20:58 | 004,445,027 | -H-- | C] () -- C:\Users\Björn\Documents\Black Messiah - Söldnerschwein.mp3 [2011.05.20 16:51:37 | 003,528,025 | -H-- | C] () -- C:\Users\Björn\Documents\Buddy Ogün presents Mozart Margarethe.mp3 [2011.05.12 21:13:14 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\SeaMonkey.lnk [2011.05.12 21:11:41 | 010,579,515 | ---- | C] () -- C:\Users\Björn\Desktop\SeaMonkey Setup 2.0.14.exe [2011.05.09 18:29:48 | 003,133,510 | -H-- | C] () -- C:\Users\Björn\Documents\let the bass kick (headhunterz rmx) full HQ.mp3 [2011.05.09 18:28:24 | 002,630,737 | -H-- | C] () -- C:\Users\Björn\Documents\Chuckie - Let The Bass Kick (Headhunterz Edit) (HQ Preview).mp3 [2011.05.09 18:27:25 | 004,908,557 | -H-- | C] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk [HQ + HD].mp3 [2011.05.09 18:27:06 | 005,897,534 | -H-- | C] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk (Techno4ever Beach Rave Edit) [FULL HQ + HD VERSION].mp3 [2011.05.09 18:26:47 | 004,089,019 | -H-- | C] () -- C:\Users\Björn\Documents\Sidney Samson - Riverside (Robin Clark Bootleg) [FULL HQ + HD VERSION].mp3 [2011.05.09 18:24:46 | 003,325,403 | -H-- | C] () -- C:\Users\Björn\Documents\Proppy & Heady - Summer Of 2011 (Prophet's Refixx) [HQ + HD].mp3 [2011.05.07 07:57:06 | 009,931,264 | -H-- | C] () -- C:\Users\Björn\Desktop\Armada_1400_Patch_German_Boxed_Version.msp [2011.04.30 18:48:50 | 000,000,949 | ---- | C] () -- C:\Users\Björn\Desktop\SopCast.lnk [2011.04.30 18:39:23 | 005,283,249 | -H-- | C] () -- C:\Users\Björn\Desktop\SopCast332.zip [2011.04.12 22:08:17 | 002,434,856 | ---- | C] () -- C:\Windows\System32\pbsvc_bc2.exe [2011.01.11 22:09:49 | 000,028,672 | ---- | C] () -- C:\Windows\System32\StrvcturedQuery.dll [2010.12.12 13:56:30 | 000,139,128 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010.12.12 13:56:30 | 000,138,056 | ---- | C] () -- C:\Users\Björn\AppData\Roaming\PnkBstrK.sys [2010.12.12 13:55:56 | 000,215,128 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2010.12.12 13:55:50 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2010.12.12 13:55:49 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini [2010.08.24 15:52:35 | 000,197,120 | ---- | C] () -- C:\Windows\patchw32.dll [2010.08.08 20:41:15 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2010.08.08 20:41:13 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2010.05.28 20:27:25 | 000,007,605 | -H-- | C] () -- C:\Users\Björn\AppData\Local\resmon.resmoncfg [2009.07.14 10:47:43 | 000,653,928 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2009.07.14 10:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2009.07.14 10:47:43 | 000,129,800 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2009.07.14 10:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 06:33:53 | 000,265,640 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009.07.14 04:05:48 | 000,615,810 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009.07.14 04:05:48 | 000,106,190 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009.07.14 02:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2004.08.13 10:56:20 | 000,005,810 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys < End of report > Habe gerade nen Beschriebungsling gesehen von euch habe deas nochmals so gemacht wie dort beschrieben war !OTL Logfile: Code:
ATTFilter OTL logfile created on: 21.05.2011 08:40:21 - Run 2 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Björn\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 65,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 279,38 Gb Total Space | 141,36 Gb Free Space | 50,60% Space Free | Partition Type: NTFS Drive D: | 7,83 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: BJÖRN-PC | User Name: Björn | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.05.21 07:52:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Björn\Desktop\OTL.exe PRC - [2011.05.21 07:50:10 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2011.05.21 07:50:10 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2011.05.21 07:50:10 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2011.05.13 16:22:09 | 000,403,240 | ---- | M] (Valve Corporation) -- C:\Programme\Common Files\Steam\SteamService.exe PRC - [2011.04.27 12:22:26 | 000,393,112 | ---- | M] (Spigot, Inc.) -- C:\Programme\Application Updater\ApplicationUpdater.exe PRC - [2011.04.21 09:56:42 | 011,643,392 | ---- | M] (mozilla.org) -- C:\Programme\SeaMonkey\seamonkey.exe PRC - [2011.03.30 19:49:44 | 000,671,552 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe PRC - [2011.03.30 19:48:00 | 001,523,008 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe PRC - [2010.12.09 20:08:18 | 000,413,016 | ---- | M] (IObit) -- C:\Programme\IObit\Game Booster\GameBox.exe PRC - [2010.11.17 06:56:33 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Programme\Steam\Steam.exe PRC - [2010.10.16 13:42:38 | 000,792,680 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\NvXDSync.exe PRC - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010.01.14 21:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.07.14 03:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2009.07.14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009.07.14 03:14:15 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2003.12.02 07:49:00 | 000,053,248 | ---- | M] (GEAR Software) -- C:\Windows\System32\gearsec.exe ========== Modules (SafeList) ========== MOD - [2011.05.21 07:52:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Björn\Desktop\OTL.exe MOD - [2010.08.21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2011.05.21 07:50:10 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.05.21 07:50:10 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011.05.13 16:22:09 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011.04.27 12:22:26 | 000,393,112 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2011.03.30 19:48:00 | 001,523,008 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc) SRV - [2011.03.30 19:45:32 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp) SRV - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2003.12.02 07:49:00 | 000,053,248 | ---- | M] (GEAR Software) [Auto | Running] -- C:\Windows\System32\gearsec.exe -- (gearsec) ========== Driver Services (SafeList) ========== DRV - [2011.05.21 07:50:10 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011.05.21 07:50:10 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2011.02.10 11:22:58 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv) DRV - [2010.10.22 08:23:05 | 010,084,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010.08.08 20:41:15 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2010.08.08 20:41:13 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.07.14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus) DRV - [2009.07.14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt) DRV - [2009.07.14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc) DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009.07.14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap) DRV - [2009.07.14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID) DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD) DRV - [2009.05.11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86) DRV - [2004.08.13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN, Messenger und Hotmail sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 F9 DB 08 F9 C1 CA 01 [binary data] IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU\..\URLSearchHook: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programme\Dealio Toolbar\IE\4.4\dealioToolbarIE.dll (Spigot, Inc.) IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Customized Web Search" FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2682599&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034" FF - prefs.js..browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.startup.homepage: "hxxp://www.searchnownet.com" FF - prefs.js..extensions.enabledItems: ClickPotatoLite@ClickPotatoLite.com:10.0.659.0 FF - prefs.js..keyword.URL: "hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=867034&p=" FF - HKLM\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions [2011.02.14 18:54:20 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\ClickPotatoLite@ClickPotatoLite.com: C:\Program Files\ClickPotatoLite\bin\10.0.659.0\firefox\extensions [2011.02.14 22:11:35 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\SeaMonkey 2.0.14\extensions\\Components: C:\Program Files\SeaMonkey\components [2011.05.20 19:53:58 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\SeaMonkey 2.0.14\extensions\\Plugins: C:\Program Files\SeaMonkey\plugins [2011.05.20 19:53:58 | 000,000,000 | ---D | M] [2010.12.09 07:42:47 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\Extensions [2010.03.12 18:30:45 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a} [2011.02.20 10:16:48 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\Firefox\Profiles\j982q5o3.default\extensions [2011.05.21 01:19:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions [2011.05.20 19:54:04 | 000,000,000 | ---D | M] (ChatZilla) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2011.05.20 19:54:04 | 000,000,000 | ---D | M] (JavaScript Debugger) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8} [2011.05.20 19:54:04 | 000,000,000 | ---D | M] (DOM Inspector) -- C:\Users\Björn\AppData\Roaming\Mozilla\SeaMonkey\Profiles\mo5ed2ug.default\extensions\inspector@mozilla.org [2010.11.25 13:02:16 | 000,000,921 | -H-- | M] () -- C:\Users\Björn\AppData\Roaming\Mozilla\Firefox\Profiles\j982q5o3.default\searchplugins\conduit.xml [2011.02.14 22:11:35 | 000,000,000 | ---D | M] (ClickPotatoLite Component) -- C:\PROGRAM FILES\CLICKPOTATOLITE\BIN\10.0.659.0\FIREFOX\EXTENSIONS O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programme\Dealio Toolbar\IE\4.4\dealioToolbarIE.dll (Spigot, Inc.) O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Programme\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Programme\kikin\ie_kikin.dll (kikin) O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programme\Dealio Toolbar\IE\4.4\dealioToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKCU..\Run: [ImpulseFastStart] C:\Program Files\Stardock\Impulse\Impulse.exe (Stardock Corporation) O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Programme\kikin\ie_kikin.dll (kikin) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2010.12.03 16:52:18 | 000,000,081 | R--- | M] () - D:\Autorun.inf -- [ UDF ] O33 - MountPoints2\{226b82ad-a248-11df-97ad-0023545cf764}\Shell - "" = AutoRun O33 - MountPoints2\{226b82ad-a248-11df-97ad-0023545cf764}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a O33 - MountPoints2\{df3482e7-e0c3-11dd-be34-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{df3482e7-e0c3-11dd-be34-806e6f6e6963}\Shell\AutoRun\command - "" = D:\0data\cbs.exe -- [2010.11.10 12:15:38 | 003,417,600 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.05.21 07:52:42 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Björn\Desktop\OTL.exe [2011.05.21 01:22:14 | 000,137,656 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2011.05.21 01:22:14 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2011.05.21 01:22:14 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys [2011.05.21 01:22:14 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys [2011.05.21 01:22:14 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys [2011.05.20 20:42:01 | 000,031,552 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2011.05.20 20:41:57 | 000,029,504 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2011.05.20 20:41:57 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2011.05.20 20:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011 [2011.05.20 20:41:43 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Roaming\TuneUp Software [2011.05.20 20:41:37 | 000,000,000 | ---D | C] -- C:\Programme\TuneUp Utilities 2011 [2011.05.20 20:41:14 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2011.05.20 20:40:56 | 000,000,000 | -HSD | C] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2011.05.20 20:39:41 | 020,541,344 | ---- | C] (TuneUp Software) -- C:\Users\Björn\Desktop\TuneUpUtilities2011_de-DE.exe [2011.05.20 19:26:06 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Local\ElevatedDiagnostics [2011.05.20 19:08:14 | 000,000,000 | -H-D | C] -- C:\Users\Björn\AppData\Roaming\Avira [2011.05.20 19:05:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2011.05.20 19:05:35 | 000,000,000 | ---D | C] -- C:\Programme\Avira [2011.05.20 19:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2011.05.20 17:42:45 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Local\{52D5B2F5-38B2-4B4A-AAB7-B24CF4F85172} [2011.05.19 17:24:25 | 000,000,000 | -H-D | C] -- C:\Users\Björn\Desktop\Mixe eigen [2011.05.13 05:23:12 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Spigot [2011.05.13 05:23:12 | 000,000,000 | ---D | C] -- C:\Programme\Dealio Toolbar [2011.05.13 05:23:12 | 000,000,000 | ---D | C] -- C:\Programme\Application Updater [2011.05.07 07:56:06 | 000,000,000 | ---D | C] -- C:\Users\Björn\AppData\Local\Ntronium_Games [2011.05.07 07:54:27 | 000,000,000 | -H-D | C] -- C:\Users\Björn\AppData\Local\Armada 2526 [2011.04.30 18:48:50 | 000,000,000 | -H-D | C] -- C:\Users\Björn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast [2011.04.30 18:48:50 | 000,000,000 | ---D | C] -- C:\Programme\SopCast [2011.04.30 18:48:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast [2011.04.30 18:34:57 | 000,000,000 | ---D | C] -- C:\Programme\Veetle [2011.04.30 18:34:14 | 004,236,872 | ---- | C] (Veetle Inc) -- C:\Users\Björn\Desktop\veetle-0.9.18.exe [2011.04.27 23:15:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.05.21 07:57:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.05.21 07:52:45 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Björn\Desktop\OTL.exe [2011.05.21 07:50:10 | 000,137,656 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2011.05.21 07:50:10 | 000,061,960 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2011.05.21 06:48:30 | 000,017,136 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.05.21 06:48:30 | 000,017,136 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.05.21 06:42:47 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.05.21 06:40:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.05.21 01:22:23 | 000,002,012 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2011.05.20 20:41:56 | 000,002,155 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2011.05.20 20:41:56 | 000,002,135 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk [2011.05.20 20:40:52 | 020,541,344 | ---- | M] (TuneUp Software) -- C:\Users\Björn\Desktop\TuneUpUtilities2011_de-DE.exe [2011.05.20 19:45:39 | 000,000,144 | ---- | M] () -- C:\ProgramData\~26992376r [2011.05.20 19:45:39 | 000,000,120 | ---- | M] () -- C:\ProgramData\~26992376 [2011.05.20 18:10:10 | 000,000,392 | ---- | M] () -- C:\ProgramData\26992376 [2011.05.20 17:23:18 | 004,445,027 | -H-- | M] () -- C:\Users\Björn\Documents\Black Messiah - Söldnerschwein.mp3 [2011.05.20 16:54:18 | 003,528,025 | -H-- | M] () -- C:\Users\Björn\Documents\Buddy Ogün presents Mozart Margarethe.mp3 [2011.05.15 17:59:06 | 004,089,019 | -H-- | M] () -- C:\Users\Björn\Documents\Sidney Samson - Riverside (Robin Clark Bootleg) [FULL HQ + HD VERSION].mp3 [2011.05.15 17:59:03 | 004,908,557 | -H-- | M] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk [HQ + HD].mp3 [2011.05.15 17:59:01 | 005,897,534 | -H-- | M] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk (Techno4ever Beach Rave Edit) [FULL HQ + HD VERSION].mp3 [2011.05.15 17:58:57 | 003,325,403 | -H-- | M] () -- C:\Users\Björn\Documents\Proppy & Heady - Summer Of 2011 (Prophet's Refixx) [HQ + HD].mp3 [2011.05.15 17:58:55 | 003,133,510 | -H-- | M] () -- C:\Users\Björn\Documents\let the bass kick (headhunterz rmx) full HQ.mp3 [2011.05.15 17:58:53 | 003,879,547 | -H-- | M] () -- C:\Users\Björn\Documents\Dutch Master - Million Miles Away.mp3 [2011.05.15 17:58:51 | 002,630,737 | -H-- | M] () -- C:\Users\Björn\Documents\Chuckie - Let The Bass Kick (Headhunterz Edit) (HQ Preview).mp3 [2011.05.12 21:13:14 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\SeaMonkey.lnk [2011.05.12 21:12:08 | 010,579,515 | ---- | M] () -- C:\Users\Björn\Desktop\SeaMonkey Setup 2.0.14.exe [2011.05.09 21:50:52 | 000,139,128 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011.05.09 21:50:43 | 000,215,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2011.05.08 19:09:57 | 000,280,768 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0 [2011.05.07 07:57:28 | 009,931,264 | -H-- | M] () -- C:\Users\Björn\Desktop\Armada_1400_Patch_German_Boxed_Version.msp [2011.04.30 18:48:50 | 000,000,949 | ---- | M] () -- C:\Users\Björn\Desktop\SopCast.lnk [2011.04.30 18:39:31 | 005,283,249 | -H-- | M] () -- C:\Users\Björn\Desktop\SopCast332.zip [2011.04.30 18:34:18 | 004,236,872 | ---- | M] (Veetle Inc) -- C:\Users\Björn\Desktop\veetle-0.9.18.exe [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.05.21 01:22:23 | 000,002,012 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2011.05.20 20:41:56 | 000,002,155 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2011.05.20 20:41:55 | 000,002,135 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk [2011.05.20 20:41:54 | 000,002,147 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011.lnk [2011.05.20 17:41:04 | 000,000,144 | ---- | C] () -- C:\ProgramData\~26992376r [2011.05.20 17:41:04 | 000,000,120 | ---- | C] () -- C:\ProgramData\~26992376 [2011.05.20 17:40:59 | 000,000,392 | ---- | C] () -- C:\ProgramData\26992376 [2011.05.20 17:20:58 | 004,445,027 | -H-- | C] () -- C:\Users\Björn\Documents\Black Messiah - Söldnerschwein.mp3 [2011.05.20 16:51:37 | 003,528,025 | -H-- | C] () -- C:\Users\Björn\Documents\Buddy Ogün presents Mozart Margarethe.mp3 [2011.05.12 21:13:14 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\SeaMonkey.lnk [2011.05.12 21:11:41 | 010,579,515 | ---- | C] () -- C:\Users\Björn\Desktop\SeaMonkey Setup 2.0.14.exe [2011.05.09 18:29:48 | 003,133,510 | -H-- | C] () -- C:\Users\Björn\Documents\let the bass kick (headhunterz rmx) full HQ.mp3 [2011.05.09 18:28:24 | 002,630,737 | -H-- | C] () -- C:\Users\Björn\Documents\Chuckie - Let The Bass Kick (Headhunterz Edit) (HQ Preview).mp3 [2011.05.09 18:27:25 | 004,908,557 | -H-- | C] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk [HQ + HD].mp3 [2011.05.09 18:27:06 | 005,897,534 | -H-- | C] () -- C:\Users\Björn\Documents\Robin Clark - Da Fuk (Techno4ever Beach Rave Edit) [FULL HQ + HD VERSION].mp3 [2011.05.09 18:26:47 | 004,089,019 | -H-- | C] () -- C:\Users\Björn\Documents\Sidney Samson - Riverside (Robin Clark Bootleg) [FULL HQ + HD VERSION].mp3 [2011.05.09 18:24:46 | 003,325,403 | -H-- | C] () -- C:\Users\Björn\Documents\Proppy & Heady - Summer Of 2011 (Prophet's Refixx) [HQ + HD].mp3 [2011.05.07 07:57:06 | 009,931,264 | -H-- | C] () -- C:\Users\Björn\Desktop\Armada_1400_Patch_German_Boxed_Version.msp [2011.04.30 18:48:50 | 000,000,949 | ---- | C] () -- C:\Users\Björn\Desktop\SopCast.lnk [2011.04.30 18:39:23 | 005,283,249 | -H-- | C] () -- C:\Users\Björn\Desktop\SopCast332.zip [2011.04.12 22:08:17 | 002,434,856 | ---- | C] () -- C:\Windows\System32\pbsvc_bc2.exe [2011.01.11 22:09:49 | 000,028,672 | ---- | C] () -- C:\Windows\System32\StrvcturedQuery.dll [2010.12.12 13:56:30 | 000,139,128 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010.12.12 13:56:30 | 000,138,056 | ---- | C] () -- C:\Users\Björn\AppData\Roaming\PnkBstrK.sys [2010.12.12 13:55:56 | 000,215,128 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2010.12.12 13:55:50 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2010.12.12 13:55:49 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini [2010.08.24 15:52:35 | 000,197,120 | ---- | C] () -- C:\Windows\patchw32.dll [2010.08.08 20:41:15 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2010.08.08 20:41:13 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2010.05.28 20:27:25 | 000,007,605 | -H-- | C] () -- C:\Users\Björn\AppData\Local\resmon.resmoncfg [2009.07.14 10:47:43 | 000,653,928 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2009.07.14 10:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2009.07.14 10:47:43 | 000,129,800 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2009.07.14 10:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 06:33:53 | 000,265,640 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009.07.14 04:05:48 | 000,615,810 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009.07.14 04:05:48 | 000,106,190 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009.07.14 02:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2004.08.13 10:56:20 | 000,005,810 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys ========== LOP Check ========== [2010.08.24 15:57:39 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\Atari [2011.02.14 18:54:24 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\ClickPotatoLite [2011.05.20 19:54:02 | 000,000,000 | ---D | M] -- C:\Users\Björn\AppData\Roaming\FreeAudioPack [2011.05.20 19:54:02 | 000,000,000 | ---D | M] -- C:\Users\Björn\AppData\Roaming\kikin [2011.05.20 19:54:04 | 000,000,000 | ---D | M] -- C:\Users\Björn\AppData\Roaming\PhotoScape [2011.02.14 18:54:18 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\ShopperReports3 [2011.01.09 15:46:14 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\Stardock [2010.04.13 23:04:36 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\The Creative Assembly [2011.05.20 20:33:45 | 000,000,000 | ---D | M] -- C:\Users\Björn\AppData\Roaming\TS3Client [2011.05.20 20:41:43 | 000,000,000 | ---D | M] -- C:\Users\Björn\AppData\Roaming\TuneUp Software [2011.03.27 07:44:03 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\Unity [2011.05.20 19:54:04 | 000,000,000 | ---D | M] -- C:\Users\Björn\AppData\Roaming\uTorrent [2010.08.13 15:12:10 | 000,000,000 | -H-D | M] -- C:\Users\Björn\AppData\Roaming\VDownloader [2011.05.07 15:35:06 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > |
| Themen zu Festplatte/Ram Speicher Criticel Error Schwarzes Bild bei versuchten Java Ubtate! |
| antivir, anwendung, anzeige, beenden, bild, black, check, conduit, dateien, dateien weg, deutsch, englisch, error, festplatte, gen, hardware, hintergrund, iobit, java, langs, musik, nicht mehr, nvlddmkm.sys, oldtimer, plug-in, problem, ram, rechner, recovery, searchplugins, speicher, spigot, start menu, suche, webcheck, webseiten, win |
Baum-Darstellung