Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   RunDLL - das angegebene Modul wurde nicht gefunden (https://www.trojaner-board.de/101394-rundll-angegebene-modul-wurde-gefunden.html)

Lin123 16.07.2011 18:07
RunDLL - das angegebene Modul wurde nicht gefunden
 
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo Zusammen!

Vor ca 1Monat hat Avast 2 Funde entdeckt. Den einen habe ich gelöscht, der andere liegt noch im Container.

Dazu muss man sagen, dass ich direkt davor immer Antivir benutzt habe. Dort wurde auch was gefunden, aber wie oder was kann ich jetzt nicht mehr sagen und ich habe das komplette Programm dann gelöscht und durch Avast ersetzt, weil ich das Gefühl hatte, dass es mit Win7 und 64bit irgendwie nicht so gut klarkommt...

Nunja, seit den Avast Funden erscheinen auf jeden Fall immer direkt nach dem Start folgende Fenster:

RunDLL
Problem beim Starten von
C:\Users\Linda\AppData\Local\ucononulurupohof.dll
Das angegebene Modul wurde nicht gefunden

und

RunDLL
Problem beim Starten von
C:\Users\Linda\AppData\Local\KBDAprd.dll
Das angegebene Modul wurde nicht gefunden

außerdem wurden beim letzten Scan erneut Dateien in den Container verschoben. Alles in allem sieht es dort jetzt so aus:
[ siehe Anhang ]

Problem hierbei ist jetzt, dass das Ganze wie gesagt schon vor 1 Monat angefangen hat und ich damals dann die Defogger und OTL Scans gemacht hatte... allerdings war dann so viel los, dass ich es nicht geschafft habe diese zu posten. Mein (unwissender und wahrscheinlich dümmlicher) Gedanke jetzt war löschen und neu machen. Hat aber nicht so ganz funktioniert. Defogger hat keine neue Datei erstellt und OTL hat zwar gescannt aber keine Extras.txt erstellt. (Als letzte Einstellung bin ich dann jetzt bei Defogger wieder auf Re-Enable gegangen...)
Hatte die alten Scans schon gelöscht, aber jetzt wieder hergestellt. Sprich ich kann bei Bedarf sonst gerne die ursprünglichen, vollständigen Scans einmal posten.

Hier jetzt sonst einmal nur der aktuelle OTL Scan:

HTML-Code:
OTL logfile created on: 16.07.2011 17:56:04 - Run 2
OTL by OldTimer - Version 3.2.24.0    Folder = C:\Users\Linda\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,79 Gb Total Physical Memory | 2,29 Gb Available Physical Memory | 60,39% Memory free
7,59 Gb Paging File | 5,95 Gb Available in Paging File | 78,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 54,38 Gb Free Space | 46,70% Space Free | Partition Type: NTFS
Drive D: | 329,79 Gb Total Space | 329,00 Gb Free Space | 99,76% Space Free | Partition Type: NTFS
 
Computer Name: LINDA-NOTEBOOK | User Name: Linda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011.06.16 15:02:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Linda\Downloads\OTL.exe
PRC - [2011.05.10 14:10:58 | 003,459,712 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.05.10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
PRC - [2010.06.08 09:03:27 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010.05.14 10:32:30 | 001,479,680 | ---- | M] (Nokia) -- C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\PCSuite.exe
PRC - [2010.05.11 11:16:34 | 000,140,288 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
PRC - [2010.04.24 02:10:34 | 000,209,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2010.04.24 02:10:28 | 000,483,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2010.03.27 17:34:00 | 001,800,808 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2010.02.08 20:04:04 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
PRC - [2010.02.05 19:05:08 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2010.02.04 23:05:32 | 007,350,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2010.01.05 22:59:12 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2010.01.05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2009.12.15 19:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009.11.02 23:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009.10.27 10:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2009.10.01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009.10.01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009.07.31 19:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009.06.24 21:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
PRC - [2009.06.19 19:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009.06.19 19:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009.06.16 02:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
PRC - [2008.12.23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007.11.30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011.06.16 15:02:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Linda\Downloads\OTL.exe
MOD - [2011.05.10 14:10:55 | 000,199,792 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010.11.20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2010.03.27 14:38:57 | 000,090,216 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWOW64\nvinit.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2010.08.20 16:00:46 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2009.12.08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:[b]64bit:[/b] - [2009.08.06 23:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand | Running] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2011.05.10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- D:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.11.20 14:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010.08.17 16:00:07 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.04.24 02:10:34 | 000,209,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2010.04.24 02:10:28 | 000,483,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2010.03.27 17:34:00 | 001,800,808 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.12.15 19:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009.10.01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009.10.01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2009.06.16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2011.05.10 13:59:48 | 000,064,344 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010.08.25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2010.04.24 02:10:32 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:[b]64bit:[/b] - [2010.04.24 02:10:28 | 000,269,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:[b]64bit:[/b] - [2010.04.24 02:10:28 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:[b]64bit:[/b] - [2010.04.24 02:10:20 | 000,721,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:[b]64bit:[/b] - [2010.03.03 13:51:39 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2010.03.02 10:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2010.02.26 10:32:11 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:[b]64bit:[/b] - [2010.02.25 05:26:57 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\JME.sys -- (JME) JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits)
DRV:[b]64bit:[/b] - [2010.02.03 00:38:29 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:[b]64bit:[/b] - [2010.01.18 14:37:57 | 000,128,512 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:[b]64bit:[/b] - [2009.10.30 04:50:03 | 000,704,512 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:[b]64bit:[/b] - [2009.09.17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:[b]64bit:[/b] - [2009.08.18 10:23:31 | 000,143,472 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2009.08.06 23:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:[b]64bit:[/b] - [2009.07.20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009.06.18 21:18:10 | 000,015,928 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\lullaby.sys -- (lullaby)
DRV:[b]64bit:[/b] - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009.06.10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009.06.05 12:15:57 | 001,806,400 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV:[b]64bit:[/b] - [2009.05.13 18:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2008.12.08 17:35:52 | 000,061,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:[b]64bit:[/b] - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:[b]64bit:[/b] - [2008.05.24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.07.03 02:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2008.08.14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.732
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?sourceid=navclient&hl=de&q="
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\bkmrksync\ [2010.08.23 16:50:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{A9ECA5C0-B01D-4D09-BCD3-4647FC91AA40}: C:\Users\Linda\AppData\Local\{A9ECA5C0-B01D-4D09-BCD3-4647FC91AA40} [2011.06.11 00:40:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\wrc@avast.com: D:\Program Files\AVAST Software\Avast\WebRep\FF [2011.06.15 21:40:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.06.24 11:17:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.08 05:44:32 | 000,000,000 | ---D | M]
 
[2010.08.09 17:10:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Linda\AppData\Roaming\mozilla\Extensions
[2011.07.14 19:55:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Linda\AppData\Roaming\mozilla\Firefox\Profiles\hqrcurl1.default\extensions
[2011.06.03 11:23:19 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Linda\AppData\Roaming\mozilla\Firefox\Profiles\hqrcurl1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011.07.13 12:33:51 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Users\Linda\AppData\Roaming\mozilla\Firefox\Profiles\hqrcurl1.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011.05.08 05:35:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.12.11 22:43:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
File not found (No name found) --
[2011.06.11 00:40:24 | 000,000,000 | ---D | M] (XULRunner) -- C:\USERS\LINDA\APPDATA\LOCAL\{A9ECA5C0-B01D-4D09-BCD3-4647FC91AA40}
() (No name found) -- C:\USERS\LINDA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\HQRCURL1.DEFAULT\EXTENSIONS\COMPATIBILITY@ADDONS.MOZILLA.ORG.XPI
[2011.06.15 21:40:54 | 000,000,000 | ---D | M] (avast! WebRep) -- D:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011.06.24 11:17:27 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.12.11 22:43:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.05.08 05:44:29 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.05.08 05:44:29 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.08 05:44:29 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.05.08 05:44:29 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.05.08 05:44:29 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.05.08 05:44:29 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.09.26 16:50:26 | 000,002,177 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:[b]64bit:[/b] - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Setwallpaper]  File not found
O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avast] D:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Imiceg]  File not found
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [Gvahozugecavaleg]  File not found
O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\PCSuite.exe (Nokia)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]AdobeCS4ServiceManager[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]ADSMTray[/b] - hkey= - key= - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe (ASUSTek Computer Inc.)
MsConfig:64bit - StartUpReg: [b]ASUS Screen Saver Protector[/b] - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS)
MsConfig:64bit - StartUpReg: [b]CLMLServer[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
MsConfig:64bit - StartUpReg: [b]DivXUpdate[/b] - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: [b]PC Suite Tray[/b] - hkey= - key= - C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\PCSuite.exe (Nokia)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011.06.30 15:10:16 | 000,000,000 | ---D | C] -- C:\Users\Linda\Desktop\WILDPARK
[2011.06.24 19:06:16 | 000,000,000 | ---D | C] -- C:\Users\Linda\Desktop\monte
[2008.08.12 06:45:20 | 000,155,648 | ---- | C] (ASUS) -- C:\Program Files (x86)\Common Files\MSIactionall.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011.07.16 17:57:44 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.07.16 17:57:44 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.07.16 17:56:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.07.16 17:53:21 | 001,500,018 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.07.16 17:53:21 | 000,654,610 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.07.16 17:53:21 | 000,616,452 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.07.16 17:53:21 | 000,130,192 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.07.16 17:53:21 | 000,106,574 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.07.16 17:49:48 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.07.16 17:49:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.07.16 17:49:19 | 3054,882,816 | -HS- | M] () -- C:\hiberfil.sys
[2011.07.16 17:45:00 | 000,002,780 | ---- | M] () -- C:\Users\Public\Documents\DME-SETTINGS.xml
[2011.07.16 17:45:00 | 000,000,312 | ---- | M] () -- C:\Windows\tasks\DMEPeriodicTask.job
[2011.07.14 14:10:30 | 002,005,775 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1989.JPG
[2011.07.14 09:51:10 | 003,131,080 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.07.14 01:28:08 | 001,968,232 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1992.JPG
[2011.07.14 01:27:40 | 001,990,159 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1990.JPG
[2011.07.14 00:56:16 | 002,613,000 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1988.JPG
[2011.07.13 03:38:34 | 000,034,663 | ---- | M] () -- C:\Users\Linda\Desktop\arbeiten2.png
[2011.07.12 21:04:07 | 000,261,727 | ---- | M] () -- C:\Users\Linda\Desktop\rewe.jpg
[2011.07.12 19:45:34 | 000,641,805 | ---- | M] () -- C:\Users\Linda\Desktop\12072011974.jpg
[2011.07.11 23:52:45 | 000,183,980 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1987.JPG
[2011.07.10 21:02:56 | 002,507,684 | ---- | M] () -- C:\Users\Linda\Desktop\katha2.jpg
[2011.07.10 21:02:27 | 030,295,935 | ---- | M] () -- C:\Users\Linda\Desktop\katha2.psd
[2011.07.10 19:39:58 | 001,552,865 | ---- | M] () -- C:\Users\Linda\Desktop\katha.jpg
[2011.07.10 19:39:48 | 008,791,308 | ---- | M] () -- C:\Users\Linda\Desktop\katha.psd
[2011.07.09 17:00:26 | 001,592,037 | ---- | M] () -- C:\Users\Linda\Desktop\sarah.jpg
[2011.07.09 17:00:13 | 003,617,008 | ---- | M] () -- C:\Users\Linda\Desktop\sarah.psd
[2011.07.08 02:06:35 | 000,082,406 | ---- | M] () -- C:\Users\Linda\Desktop\hair.jpg
[2011.07.07 12:30:22 | 000,017,787 | ---- | M] () -- C:\Users\Linda\Desktop\arbeiten.png
[2011.07.05 01:20:53 | 000,000,238 | ---- | M] () -- C:\Users\Linda\Desktop\TOMMY.rtf
[2011.06.30 21:04:49 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011.07.14 14:10:01 | 002,613,000 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1988.JPG
[2011.07.14 14:10:01 | 002,005,775 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1989.JPG
[2011.07.14 14:10:01 | 001,990,159 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1990.JPG
[2011.07.14 14:10:01 | 001,968,232 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1992.JPG
[2011.07.13 03:38:34 | 000,034,663 | ---- | C] () -- C:\Users\Linda\Desktop\arbeiten2.png
[2011.07.12 21:04:06 | 000,261,727 | ---- | C] () -- C:\Users\Linda\Desktop\rewe.jpg
[2011.07.12 20:59:35 | 000,641,805 | ---- | C] () -- C:\Users\Linda\Desktop\12072011974.jpg
[2011.07.12 20:59:16 | 000,359,524 | ---- | C] () -- C:\Users\Linda\Desktop\13062011931.jpg
[2011.07.12 20:59:14 | 000,301,477 | ---- | C] () -- C:\Users\Linda\Desktop\13062011937.jpg
[2011.07.12 20:59:12 | 000,304,842 | ---- | C] () -- C:\Users\Linda\Desktop\13062011933.jpg
[2011.07.12 20:59:10 | 000,373,176 | ---- | C] () -- C:\Users\Linda\Desktop\13062011932.jpg
[2011.07.11 23:50:48 | 000,183,980 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1987.JPG
[2011.07.10 21:02:52 | 002,507,684 | ---- | C] () -- C:\Users\Linda\Desktop\katha2.jpg
[2011.07.10 20:17:41 | 030,295,935 | ---- | C] () -- C:\Users\Linda\Desktop\katha2.psd
[2011.07.10 19:39:54 | 001,552,865 | ---- | C] () -- C:\Users\Linda\Desktop\katha.jpg
[2011.07.10 19:13:21 | 008,791,308 | ---- | C] () -- C:\Users\Linda\Desktop\katha.psd
[2011.07.09 17:00:22 | 001,592,037 | ---- | C] () -- C:\Users\Linda\Desktop\sarah.jpg
[2011.07.09 15:53:42 | 003,617,008 | ---- | C] () -- C:\Users\Linda\Desktop\sarah.psd
[2011.07.08 02:06:34 | 000,082,406 | ---- | C] () -- C:\Users\Linda\Desktop\hair.jpg
[2011.07.05 01:20:53 | 000,000,238 | ---- | C] () -- C:\Users\Linda\Desktop\TOMMY.rtf
[2011.06.30 11:25:16 | 000,017,787 | ---- | C] () -- C:\Users\Linda\Desktop\arbeiten.png
[2011.05.22 16:22:35 | 000,000,120 | ---- | C] () -- C:\Users\Linda\AppData\Local\Fsociqeniwareh.dat
[2011.05.22 16:22:35 | 000,000,000 | ---- | C] () -- C:\Users\Linda\AppData\Local\Umadeyitam.bin
[2010.11.03 12:52:45 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2010.10.12 19:33:07 | 000,000,600 | ---- | C] () -- C:\Users\Linda\AppData\Roaming\winscp.rnd
[2010.08.28 20:52:05 | 000,179,493 | ---- | C] () -- C:\Windows\hpoins38.dat
[2010.08.25 20:34:30 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2010.08.25 20:34:30 | 000,104,796 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2010.08.20 17:54:56 | 001,500,444 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.08.17 18:46:29 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2010.06.08 09:03:11 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\LogonStart.dll
[2010.06.08 08:37:17 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2010.03.31 09:44:35 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2010.03.31 08:47:05 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2010.03.31 08:47:05 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2009.10.26 05:38:22 | 000,000,176 | ---- | C] () -- C:\Windows\explorer.exe.config
[2009.08.19 10:33:09 | 000,000,232 | ---- | C] () -- C:\Windows\OOBEPlayer.ini
[2009.07.29 07:20:40 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009.06.04 19:59:42 | 000,000,622 | ---- | C] () -- C:\Windows\hpomdl38.dat
[2009.04.08 19:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files (x86)\Common Files\CPInstallAction.dll
[2008.05.22 17:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files (x86)\Common Files\banner.jpg
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010.08.09 16:10:03 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\Asus WebStorage
[2010.11.16 03:08:09 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\Nokia
[2010.08.21 22:14:48 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\PC Suite
[2011.06.16 14:08:02 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\QuickScan
[2011.06.12 01:54:32 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\SoftGrid Client
[2010.11.16 12:30:56 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\TP
[2011.07.16 17:45:00 | 000,000,312 | ---- | M] () -- C:\Windows\Tasks\DMEPeriodicTask.job
[2011.07.16 17:41:07 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %SYSTEMDRIVE%\*. >[/color]
[2010.08.16 19:48:11 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2010.08.09 15:51:22 | 000,000,000 | -H-D | M] -- C:\ASUS.DAT
[2011.06.12 16:34:28 | 000,000,000 | -HSD | M] -- C:\Boot
[2011.06.17 23:10:14 | 000,000,000 | -H-D | M] -- C:\Config.Msi
[2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2010.06.08 09:03:17 | 000,000,000 | ---D | M] -- C:\eSupport
[2010.06.08 08:49:20 | 000,000,000 | ---D | M] -- C:\Intel
[2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.06.15 21:50:38 | 000,000,000 | R--D | M] -- C:\Program Files
[2011.06.15 21:24:15 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.06.15 21:38:27 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2010.08.09 15:41:41 | 000,000,000 | -HSD | M] -- C:\Recovery
[2011.07.16 17:58:22 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2010.08.09 15:43:11 | 000,000,000 | R--D | M] -- C:\Users
[2011.06.15 21:40:53 | 000,000,000 | ---D | M] -- C:\Windows
 
[color=#A23BEC]< %PROGRAMFILES%\*.exe >[/color]
 
[color=#A23BEC]< %LOCALAPPDATA%\*.exe >[/color]
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010.06.08 09:02:16 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010.06.08 08:49:49 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.06.08 09:02:16 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010.06.08 08:49:49 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010.06.08 09:02:16 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010.06.08 08:49:49 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010.06.08 09:02:16 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010.06.08 08:49:49 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
 
[color=#A23BEC]< MD5 for: REGEDIT.EXE  >[/color]
[2009.07.14 03:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=2E2C937846A0B8789E5E91739284D17A -- C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe
[2009.07.14 03:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe
[2009.07.14 03:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\SysWOW64\regedit.exe
[2009.07.14 03:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5a78515e29ea6f39\regedit.exe
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
[color=#A23BEC]< MD5 for: WININIT.EXE  >[/color]
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2010.06.08 09:02:16 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010.06.08 09:02:16 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:2F370DA6

< End of report >
... über Hilfe wäre ich sehr dankbar! :)

kira 17.07.2011 08:25
Hallo und Herzlich Willkommen! :)

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen:)
Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
  • Installieren und per Doppelklick starten.
  • Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
  • "Komplett Scan durchführen" wählen (überall Haken setzen)
  • wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
  • Alle Funde - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
  • Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"
eine bebilderte Anleitung findest Du hier: Anleitung

2.
erneut einen Scan mit OTL:
  • Doppelklick auf die OTL.exe
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Oben findest Du ein Kästchen mit Ausgabe.
    Wähle bitte Standard-Ausgabe
  • Unter Extra-Registrierung wähle bitte Benutze SafeList.
  • Mache Häckchen bei LOP- und Purity-Prüfung.
  • Klicke nun auf Scan links oben.
  • Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
    Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
  • Poste die Logfiles in Code-Tags hier in den Thread.

3.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - bei Win7 wähle Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.
** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool Ccleaner herunter
→ Download
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw
gruß
kira

Lin123 17.07.2011 22:11
Malwarebytes:
Code:
Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Datenbank Version: 7176

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

17.07.2011 21:39:35
mbam-log-2011-07-17 (21-39-35).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|Q:\|)
Durchsuchte Objekte: 396304
Laufzeit: 1 Stunde(n), 8 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Gvahozugecavaleg (Trojan.Agent.U) -> Value: Gvahozugecavaleg -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Imiceg (Trojan.Agent.U) -> Value: Imiceg -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\Linda\2gweorjqjutp92vjy9gake (Malware.Trace) -> Quarantined and deleted successfully.
OTL
OTL Logfile:
Code:
OTL logfile created on: 17.07.2011 21:46:38 - Run 3
OTL by OldTimer - Version 3.2.24.0    Folder = C:\Users\Linda\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,79 Gb Total Physical Memory | 2,20 Gb Available Physical Memory | 57,92% Memory free
7,59 Gb Paging File | 5,82 Gb Available in Paging File | 76,77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 53,88 Gb Free Space | 46,27% Space Free | Partition Type: NTFS
Drive D: | 329,79 Gb Total Space | 329,00 Gb Free Space | 99,76% Space Free | Partition Type: NTFS
 
Computer Name: LINDA-NOTEBOOK | User Name: Linda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.06.24 11:17:27 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011.06.16 15:02:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Linda\Downloads\OTL.exe
PRC - [2011.05.10 14:10:58 | 003,459,712 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.05.10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
PRC - [2010.06.08 09:03:27 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010.05.14 10:32:30 | 001,479,680 | ---- | M] (Nokia) -- C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\PCSuite.exe
PRC - [2010.05.11 11:16:34 | 000,140,288 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
PRC - [2010.04.24 02:10:34 | 000,209,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2010.04.24 02:10:28 | 000,483,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2010.03.27 17:34:00 | 001,800,808 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2010.02.08 20:04:04 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
PRC - [2010.02.05 19:05:08 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2010.02.04 23:05:32 | 007,350,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2010.01.05 22:59:12 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2010.01.05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2009.12.15 19:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009.11.02 23:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009.10.27 10:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2009.10.01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009.10.01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009.07.31 19:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009.06.24 21:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
PRC - [2009.06.19 19:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009.06.19 19:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009.06.16 02:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
PRC - [2008.12.23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007.11.30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2011.06.16 15:02:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Linda\Downloads\OTL.exe
MOD - [2011.05.10 14:10:55 | 000,199,792 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010.11.20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2010.03.27 14:38:57 | 000,090,216 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWOW64\nvinit.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2010.08.20 16:00:46 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2009.12.08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2009.08.06 23:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand | Running] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2011.05.10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- D:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.08.17 16:00:07 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.04.24 02:10:34 | 000,209,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2010.04.24 02:10:28 | 000,483,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2010.03.27 17:34:00 | 001,800,808 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.12.15 19:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009.10.01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009.10.01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2009.06.16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.05.10 13:59:48 | 000,064,344 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.08.25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010.04.24 02:10:32 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2010.04.24 02:10:28 | 000,269,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2010.04.24 02:10:28 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2010.04.24 02:10:20 | 000,721,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2010.03.03 13:51:39 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.03.02 10:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010.02.26 10:32:11 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010.02.25 05:26:57 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\JME.sys -- (JME) JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits)
DRV:64bit: - [2010.02.03 00:38:29 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010.01.18 14:37:57 | 000,128,512 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2009.10.30 04:50:03 | 000,704,512 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2009.09.17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009.08.18 10:23:31 | 000,143,472 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2009.08.06 23:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2009.07.20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.18 21:18:10 | 000,015,928 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\lullaby.sys -- (lullaby)
DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.05 12:15:57 | 001,806,400 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV:64bit: - [2009.05.13 18:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2008.12.08 17:35:52 | 000,061,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2008.05.24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.07.03 02:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2008.08.14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.732
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?sourceid=navclient&hl=de&q="
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\bkmrksync\ [2010.08.23 16:50:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{A9ECA5C0-B01D-4D09-BCD3-4647FC91AA40}: C:\Users\Linda\AppData\Local\{A9ECA5C0-B01D-4D09-BCD3-4647FC91AA40} [2011.06.11 00:40:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\wrc@avast.com: D:\Program Files\AVAST Software\Avast\WebRep\FF [2011.06.15 21:40:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.06.24 11:17:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.08 05:44:32 | 000,000,000 | ---D | M]
 
[2010.08.09 17:10:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Linda\AppData\Roaming\mozilla\Extensions
[2011.07.14 19:55:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Linda\AppData\Roaming\mozilla\Firefox\Profiles\hqrcurl1.default\extensions
[2011.06.03 11:23:19 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Linda\AppData\Roaming\mozilla\Firefox\Profiles\hqrcurl1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011.07.13 12:33:51 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Users\Linda\AppData\Roaming\mozilla\Firefox\Profiles\hqrcurl1.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011.05.08 05:35:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.12.11 22:43:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
File not found (No name found) --
[2011.06.11 00:40:24 | 000,000,000 | ---D | M] (XULRunner) -- C:\USERS\LINDA\APPDATA\LOCAL\{A9ECA5C0-B01D-4D09-BCD3-4647FC91AA40}
() (No name found) -- C:\USERS\LINDA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\HQRCURL1.DEFAULT\EXTENSIONS\COMPATIBILITY@ADDONS.MOZILLA.ORG.XPI
[2011.06.15 21:40:54 | 000,000,000 | ---D | M] (avast! WebRep) -- D:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011.06.24 11:17:27 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.12.11 22:43:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.05.08 05:44:29 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.05.08 05:44:29 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.08 05:44:29 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.05.08 05:44:29 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.05.08 05:44:29 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.05.08 05:44:29 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.09.26 16:50:26 | 000,002,177 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Setwallpaper]  File not found
O4:64bit: - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avast] D:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files (x86)\NokiaPcSuite\Nokia PC Suite 7\PCSuite.exe (Nokia)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.07.17 20:25:15 | 000,000,000 | ---D | C] -- C:\Users\Linda\AppData\Roaming\Malwarebytes
[2011.07.17 20:25:08 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.07.17 20:25:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.07.17 20:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.07.17 20:25:04 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.07.13 12:39:03 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2011.07.13 12:39:01 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.13 12:39:01 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.13 12:39:00 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2011.07.13 12:39:00 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2011.07.13 12:39:00 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2011.07.13 12:39:00 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2011.07.13 12:39:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2011.07.13 12:39:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2011.07.13 12:38:51 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2011.07.13 12:38:50 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2011.07.13 12:38:50 | 000,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2011.07.13 12:38:50 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011.07.13 12:38:48 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2011.07.13 12:38:48 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2011.07.13 12:38:48 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2011.07.13 12:38:48 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2011.07.13 12:38:48 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2011.07.13 12:38:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2011.07.13 12:38:48 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2011.07.13 12:38:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2011.06.30 15:10:16 | 000,000,000 | ---D | C] -- C:\Users\Linda\Desktop\WILDPARK
[2011.06.29 11:15:25 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2011.06.29 11:15:25 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
[2011.06.29 11:15:03 | 002,315,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2011.06.29 11:15:03 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2011.06.29 11:15:02 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2011.06.29 11:15:02 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2011.06.29 11:15:02 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
[2011.06.29 11:15:01 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2011.06.29 11:15:01 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2011.06.29 11:15:01 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
[2011.06.29 11:15:01 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
[2011.06.29 11:15:01 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2011.06.29 11:15:01 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
[2011.06.29 11:15:00 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssphtb.dll
[2011.06.29 11:15:00 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll
[2011.06.29 11:15:00 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll
[2011.06.24 19:06:16 | 000,000,000 | ---D | C] -- C:\Users\Linda\Desktop\monte
[2008.08.12 06:45:20 | 000,155,648 | ---- | C] (ASUS) -- C:\Program Files (x86)\Common Files\MSIactionall.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.07.17 21:50:36 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.07.17 21:50:36 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.07.17 21:45:00 | 000,002,780 | ---- | M] () -- C:\Users\Public\Documents\DME-SETTINGS.xml
[2011.07.17 21:45:00 | 000,000,312 | ---- | M] () -- C:\Windows\tasks\DMEPeriodicTask.job
[2011.07.17 21:42:53 | 000,002,046 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2011.07.17 21:42:53 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.07.17 21:42:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.07.17 21:42:22 | 3054,882,816 | -HS- | M] () -- C:\hiberfil.sys
[2011.07.17 20:56:01 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.07.17 20:25:08 | 000,000,760 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.07.17 15:16:21 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2011.07.16 18:48:52 | 000,030,645 | ---- | M] () -- C:\Users\Linda\Desktop\container.png
[2011.07.16 17:53:21 | 001,500,018 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.07.16 17:53:21 | 000,654,610 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.07.16 17:53:21 | 000,616,452 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.07.16 17:53:21 | 000,130,192 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.07.16 17:53:21 | 000,106,574 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.07.14 14:10:30 | 002,005,775 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1989.JPG
[2011.07.14 09:51:10 | 003,131,080 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.07.14 01:28:08 | 001,968,232 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1992.JPG
[2011.07.14 01:27:40 | 001,990,159 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1990.JPG
[2011.07.14 00:56:16 | 002,613,000 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1988.JPG
[2011.07.13 03:38:34 | 000,034,663 | ---- | M] () -- C:\Users\Linda\Desktop\arbeiten2.png
[2011.07.12 21:04:07 | 000,261,727 | ---- | M] () -- C:\Users\Linda\Desktop\rewe.jpg
[2011.07.12 19:45:34 | 000,641,805 | ---- | M] () -- C:\Users\Linda\Desktop\12072011974.jpg
[2011.07.11 23:52:45 | 000,183,980 | ---- | M] () -- C:\Users\Linda\Desktop\IMG_1987.JPG
[2011.07.10 21:02:56 | 002,507,684 | ---- | M] () -- C:\Users\Linda\Desktop\katha2.jpg
[2011.07.10 21:02:27 | 030,295,935 | ---- | M] () -- C:\Users\Linda\Desktop\katha2.psd
[2011.07.10 19:39:58 | 001,552,865 | ---- | M] () -- C:\Users\Linda\Desktop\katha.jpg
[2011.07.10 19:39:48 | 008,791,308 | ---- | M] () -- C:\Users\Linda\Desktop\katha.psd
[2011.07.09 17:00:26 | 001,592,037 | ---- | M] () -- C:\Users\Linda\Desktop\sarah.jpg
[2011.07.09 17:00:13 | 003,617,008 | ---- | M] () -- C:\Users\Linda\Desktop\sarah.psd
[2011.07.08 02:06:35 | 000,082,406 | ---- | M] () -- C:\Users\Linda\Desktop\hair.jpg
[2011.07.07 12:30:22 | 000,017,787 | ---- | M] () -- C:\Users\Linda\Desktop\arbeiten.png
[2011.07.06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.07.06 19:52:42 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.07.05 01:20:53 | 000,000,238 | ---- | M] () -- C:\Users\Linda\Desktop\TOMMY.rtf
 
========== Files Created - No Company Name ==========
 
[2011.07.17 20:25:08 | 000,000,760 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.07.16 18:48:51 | 000,030,645 | ---- | C] () -- C:\Users\Linda\Desktop\container.png
[2011.07.14 14:10:01 | 002,613,000 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1988.JPG
[2011.07.14 14:10:01 | 002,005,775 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1989.JPG
[2011.07.14 14:10:01 | 001,990,159 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1990.JPG
[2011.07.14 14:10:01 | 001,968,232 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1992.JPG
[2011.07.13 03:38:34 | 000,034,663 | ---- | C] () -- C:\Users\Linda\Desktop\arbeiten2.png
[2011.07.12 21:04:06 | 000,261,727 | ---- | C] () -- C:\Users\Linda\Desktop\rewe.jpg
[2011.07.12 20:59:35 | 000,641,805 | ---- | C] () -- C:\Users\Linda\Desktop\12072011974.jpg
[2011.07.12 20:59:16 | 000,359,524 | ---- | C] () -- C:\Users\Linda\Desktop\13062011931.jpg
[2011.07.12 20:59:14 | 000,301,477 | ---- | C] () -- C:\Users\Linda\Desktop\13062011937.jpg
[2011.07.12 20:59:12 | 000,304,842 | ---- | C] () -- C:\Users\Linda\Desktop\13062011933.jpg
[2011.07.12 20:59:10 | 000,373,176 | ---- | C] () -- C:\Users\Linda\Desktop\13062011932.jpg
[2011.07.11 23:50:48 | 000,183,980 | ---- | C] () -- C:\Users\Linda\Desktop\IMG_1987.JPG
[2011.07.10 21:02:52 | 002,507,684 | ---- | C] () -- C:\Users\Linda\Desktop\katha2.jpg
[2011.07.10 20:17:41 | 030,295,935 | ---- | C] () -- C:\Users\Linda\Desktop\katha2.psd
[2011.07.10 19:39:54 | 001,552,865 | ---- | C] () -- C:\Users\Linda\Desktop\katha.jpg
[2011.07.10 19:13:21 | 008,791,308 | ---- | C] () -- C:\Users\Linda\Desktop\katha.psd
[2011.07.09 17:00:22 | 001,592,037 | ---- | C] () -- C:\Users\Linda\Desktop\sarah.jpg
[2011.07.09 15:53:42 | 003,617,008 | ---- | C] () -- C:\Users\Linda\Desktop\sarah.psd
[2011.07.08 02:06:34 | 000,082,406 | ---- | C] () -- C:\Users\Linda\Desktop\hair.jpg
[2011.07.05 01:20:53 | 000,000,238 | ---- | C] () -- C:\Users\Linda\Desktop\TOMMY.rtf
[2011.06.30 11:25:16 | 000,017,787 | ---- | C] () -- C:\Users\Linda\Desktop\arbeiten.png
[2011.05.22 16:22:35 | 000,000,120 | ---- | C] () -- C:\Users\Linda\AppData\Local\Fsociqeniwareh.dat
[2011.05.22 16:22:35 | 000,000,000 | ---- | C] () -- C:\Users\Linda\AppData\Local\Umadeyitam.bin
[2010.11.03 12:52:45 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2010.10.12 19:33:07 | 000,000,600 | ---- | C] () -- C:\Users\Linda\AppData\Roaming\winscp.rnd
[2010.08.28 20:52:05 | 000,179,493 | ---- | C] () -- C:\Windows\hpoins38.dat
[2010.08.25 20:34:30 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2010.08.25 20:34:30 | 000,104,796 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2010.08.20 17:54:56 | 001,500,444 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.08.17 18:46:29 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2010.06.08 09:03:11 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\LogonStart.dll
[2010.06.08 08:37:17 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2010.03.31 09:44:35 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2010.03.31 08:47:05 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2010.03.31 08:47:05 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2009.10.26 05:38:22 | 000,000,176 | ---- | C] () -- C:\Windows\explorer.exe.config
[2009.08.19 10:33:09 | 000,000,232 | ---- | C] () -- C:\Windows\OOBEPlayer.ini
[2009.07.29 07:20:40 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009.06.04 19:59:42 | 000,000,622 | ---- | C] () -- C:\Windows\hpomdl38.dat
[2009.04.08 19:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files (x86)\Common Files\CPInstallAction.dll
[2008.05.22 17:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files (x86)\Common Files\banner.jpg
 
========== LOP Check ==========
 
[2010.08.09 16:10:03 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\Asus WebStorage
[2010.11.16 03:08:09 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\Nokia
[2010.08.21 22:14:48 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\PC Suite
[2011.06.16 14:08:02 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\QuickScan
[2011.06.12 01:54:32 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\SoftGrid Client
[2010.11.16 12:30:56 | 000,000,000 | ---D | M] -- C:\Users\Linda\AppData\Roaming\TP
[2011.07.17 21:45:00 | 000,000,312 | ---- | M] () -- C:\Windows\Tasks\DMEPeriodicTask.job
[2011.07.16 17:41:07 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:2F370DA6

< End of report >
--- --- ---



OTL-Extras
OTL Logfile:
Code:
OTL Extras logfile created on: 17.07.2011 21:46:38 - Run 3
OTL by OldTimer - Version 3.2.24.0    Folder = C:\Users\Linda\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,79 Gb Total Physical Memory | 2,20 Gb Available Physical Memory | 57,92% Memory free
7,59 Gb Paging File | 5,82 Gb Available in Paging File | 76,77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 53,88 Gb Free Space | 46,27% Space Free | Partition Type: NTFS
Drive D: | 329,79 Gb Total Space | 329,00 Gb Free Space | 99,76% Space Free | Partition Type: NTFS
 
Computer Name: LINDA-NOTEBOOK | User Name: Linda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{3768263E-8BE8-4CEF-9463-6D36F731824B}" = Windows Live Family Safety
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel(R) Turbo Boost Technology Monitor
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{61CF2C86-8E46-4210-A115-E4D6C65AF369}" = HP Photosmart B109a-m All-In-One Driver Software 13.0 Rel .6
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{90140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Klick-und-Los 2010
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B37A99DD-88E2-4ED0-80B4-1E054AB354BF}" = Adobe InDesign CS4 Icon Handler x64
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"34EA302E7F4CBD17A19E33BBCB72363234956D7E" = Windows-Treiberpaket - Nokia Modem  (06/09/2010 4.5)
"CNXT_AUDIO_HDA" = Conexant HD Audio
"EEEE705096F837B7907659F100C9FE6DA001970F" = Windows-Treiberpaket - Nokia Modem  (06/09/2010 7.01.0.7)
"Elantech" = ETDWare PS/2-x64 7.0.5.10_WHQL
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
"USB 2.0 VGA UVC WebCam" = USB 2.0 VGA UVC WebCam
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4
"{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}" = Nokia PC Suite
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{299CF645-48C7-4FA1-8BCD-5CE200CF180D}" = Microsoft Search Enhancement Pack
"{29F563F4-8807-4496-8463-441EAA0E96AB}" = PC Connectivity Solution
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman)
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{566BAEC0-74CB-4ACC-9E18-8779AC974FB0}" = Windows Live Toolbar
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{656FDFA4-C7C6-40D9-99F7-F6F331412AEF}" = WarrantyExtension
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}" = ASUS CopyProtect
"{6B96DADA-1A27-4A04-8CB2-CC45168D05FA}" = Windows Live Fotogalerie
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files
"{80FE5490-E9DD-4AE9-8537-3EB5EFB606FC}" = PS_AIO_06_B109a-m_SW_Min
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{835686C5-8650-49EB-8CA0-4528B4035495}" = Windows Live Call
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8C1E2925-14F8-45AA-B999-1E2A74BF5607}" = Windows Live Sync
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90140011-0066-0407-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Deutsch
"{922E8525-AC7E-4294-ACAA-43712D4423C0}" = Adobe Flash Player 10 ActiveX
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}" = JMicron Ethernet Adapter NDIS Driver
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.1 MUI
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AF20390E-5ADD-4CB0-BF9D-EDF6E7891AD9}" = B109a-m
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1" = Game Park Console
"{CA1CA5F8-7500-45C5-9D4C-47D13FBC92D2}" = Adobe Setup
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FA2092C5-7979-412D-A962-6485274AE1EE}" = ASUS Data Security Manager
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"7-Zip" = 7-Zip 9.15 beta
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_1710d324011afc3e7658e969025f4ba" = Adobe InDesign CS4
"Adobe_b2d6abde968e6f277ddbfd501383e02" = Adobe Creative Suite 4 Master Collection
"ASUS AP Bank_is1" = ASUS AP Bank
"ASUS WebStorage" = ASUS WebStorage
"avast" = avast! Free Antivirus
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"ESET Online Scanner" = ESET Online Scanner v3
"Google Chrome" = Google Chrome
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"K_Series_ScreenSaver_EN" = K_Series_ScreenSaver_EN
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.1.1800
"Mozilla Firefox 5.0 (x86 de)" = Mozilla Firefox 5.0 (x86 de)
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA.Updatus" = NVIDIA Updatus
"Office14.Click2Run" = Microsoft Office Klick-und-Los 2010
"VLC media player" = VLC media player 1.1.5
"WinLiveSuite_Wave3" = Windows Live Essentials
"winscp3_is1" = WinSCP 4.2.9
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 06.06.2011 07:33:43 | Computer Name = Linda-Notebook | Source = CVHSVC | ID = 100
Description = Nur zur Information.  (Patch task for {90140011-0066-0407-0000-0000000FF1CE}):
 DownloadLatest Failed:
 
Error - 06.06.2011 13:38:12 | Computer Name = Linda-Notebook | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bc637  Name des fehlerhaften Moduls: ozufexemexiz.dll, Version:
 1.15.7.201, Zeitstempel: 0x4b979e45  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00025e4b
ID
 des fehlerhaften Prozesses: 0xfb4  Startzeit der fehlerhaften Anwendung: 0x01cc247067d8710e
Pfad
 der fehlerhaften Anwendung: C:\Windows\SysWOW64\rundll32.exe  Pfad des fehlerhaften
 Moduls: C:\Users\Linda\AppData\Local\ozufexemexiz.dll  Berichtskennung: bf96a478-9063-11e0-8001-485b3965fc48
 
Error - 07.06.2011 05:53:51 | Computer Name = Linda-Notebook | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\NokiaPcSuite\Nokia PC Suite 7\TIS_Windows7PIM.dll".  Die abhängige Assemblierung
 "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 07.06.2011 05:54:31 | Computer Name = Linda-Notebook | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll". Fehler
 in Manifest- oder Richtliniendatei "c:\program files (x86)\microsoft\search enhancement
 pack\search helper\searchhelper.dll" in Zeile 2.  Ungültige XML-Syntax.
 
Error - 07.06.2011 10:17:28 | Computer Name = Linda-Notebook | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bc637  Name des fehlerhaften Moduls: ozufexemexiz.dll, Version:
 1.15.7.201, Zeitstempel: 0x4b979e45  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00025e4b
ID
 des fehlerhaften Prozesses: 0xfc4  Startzeit der fehlerhaften Anwendung: 0x01cc251d8668fdfe
Pfad
 der fehlerhaften Anwendung: C:\Windows\SysWOW64\rundll32.exe  Pfad des fehlerhaften
 Moduls: C:\Users\Linda\AppData\Local\ozufexemexiz.dll  Berichtskennung: df8f1dc4-9110-11e0-bd3b-485b3965fc48
 
Error - 08.06.2011 08:06:18 | Computer Name = Linda-Notebook | Source = CVHSVC | ID = 100
Description = Nur zur Information.  (Patch task for {90140011-0066-0407-0000-0000000FF1CE}):
 DownloadLatest Failed:
 
Error - 09.06.2011 09:18:51 | Computer Name = Linda-Notebook | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 09.06.2011 09:19:17 | Computer Name = Linda-Notebook | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\NokiaPcSuite\Nokia PC Suite 7\TIS_Windows7PIM.dll".  Die abhängige Assemblierung
 "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 09.06.2011 09:19:59 | Computer Name = Linda-Notebook | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll". Fehler
 in Manifest- oder Richtliniendatei "c:\program files (x86)\microsoft\search enhancement
 pack\search helper\searchhelper.dll" in Zeile 2.  Ungültige XML-Syntax.
 
[ System Events ]
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Server" wurde unerwartet beendet. Dies ist bereits 1 Mal
 vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt:
 Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Multimediaklassenplaner" wurde unerwartet beendet. Dies
 ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Benutzerprofildienst" wurde unerwartet beendet. Dies ist
 bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Aufgabenplanung" wurde unerwartet beendet. Dies ist bereits
 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt:
 Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Benachrichtigungsdienst für Systemereignisse" wurde unerwartet
 beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
 in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Shellhardwareerkennung" wurde unerwartet beendet. Dies
 ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Designs" wurde unerwartet beendet. Dies ist bereits 1
Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt:
 Neustart des Diensts.
 
Error - 16.07.2011 11:41:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Windows-Verwaltungsinstrumentation" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 16.07.2011 11:42:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7032
Description = Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden
 des Dienstes "Server" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen,
ist fehlgeschlagen. Fehler:  %%1056
 
Error - 16.07.2011 11:43:16 | Computer Name = Linda-Notebook | Source = Service Control Manager | ID = 7032
Description = Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden
 des Dienstes "Windows-Verwaltungsinstrumentation" Korrekturmaßnahmen (Neustart
des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:  %%1056
 
 
< End of report >
--- --- ---

Lin123 17.07.2011 22:14
HJT
Code:
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
                        º                                    º
                                    hjtscanlist v2.0             
                        º                                    º
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Microsoft Windows [Version 6.1.7601]
 
 
C:

      C:\pagefile.sys ---------   
      C:\hiberfil.sys ---------   
  17.07.2011 20:25    C:\ProgramData --------- 8192 
  16.07.2011 17:58    C:\System Volume Information --------- 20480 
  17.06.2011 23:10    C:\Config.Msi --------- 0 
  15.06.2011 21:50    C:\Program Files --------- 8192 
  15.06.2011 21:40    C:\Windows --------- 28672 
  15.06.2011 21:24    C:\Program Files (x86) --------- 12288 
  12.06.2011 16:34    C:\Boot --------- 4096 
  20.11.2010 14:40    C:\bootmgr --------- 383786 
  16.08.2010 19:48    C:\$Recycle.Bin --------- 0 
  09.08.2010 15:51    C:\ASUS.DAT --------- 4096 
  09.08.2010 15:43    C:\Users --------- 4096 
  09.08.2010 15:41    C:\Recovery --------- 0 
  08.06.2010 09:09    C:\devlist.txt --------- 14490 
  08.06.2010 09:09    C:\Finish.log --------- 9 
  08.06.2010 09:03    C:\eSupport --------- 0 
  08.06.2010 09:03    C:\setup.log --------- 90 
  08.06.2010 08:49    C:\Intel --------- 0 
  08.06.2010 08:23    C:\SumHidd.txt --------- 166 
  08.06.2010 08:22    C:\SumOS.txt --------- 98 
  07.06.2010 20:19    C:\Pass.txt --------- 233 
  26.04.2010 05:32    C:\RECOVERY.DAT --------- 7 
  26.04.2010 05:32    C:\K52JC_WIN7.20 --------- 19 
  29.03.2010 04:43    C:\K52Jc.BIN --------- 2097152 
  29.07.2009 08:03    C:\BOOTSECT.BAK --------- 8192 
  14.07.2009 07:08    C:\Documents and Settings --------- 0 
  14.07.2009 05:20    C:\PerfLogs --------- 0 
  15.06.2009 13:11    C:\AdobeReader.log --------- 54 
  13.05.2006 18:22    C:\store.log --------- 5 
----------------------------------------

 
C:\Windows

  17.07.2011 21:46    C:\Windows\WindowsUpdate.log --------- 2013821 
  17.07.2011 21:42    C:\Windows\setupact.log --------- 120477 
  17.07.2011 21:42    C:\Windows\bootstat.dat --------- 67584 
  15.06.2011 23:11    C:\Windows\PFRO.log --------- 44902 
  12.06.2011 16:16    C:\Windows\IE9_main.log --------- 2805 
  10.05.2011 14:10    C:\Windows\avastSS.scr --------- 40112 
  25.02.2011 08:19    C:\Windows\explorer.exe --------- 2871808 
  30.01.2011 22:42    C:\Windows\WORDPAD.INI --------- 193 
  27.01.2011 16:42    C:\Windows\ATKPF.ini --------- 24 
  20.11.2010 15:25    C:\Windows\splwow64.exe --------- 67072 
  20.11.2010 15:24    C:\Windows\bfsvc.exe --------- 71168 
  20.11.2010 14:21    C:\Windows\twain_32.dll --------- 51200 
  28.08.2010 21:44    C:\Windows\hpoins38.dat --------- 179493 
  28.08.2010 21:41    C:\Windows\win.ini --------- 438 
  23.08.2010 16:50    C:\Windows\DPINST.LOG --------- 20444 
  09.08.2010 15:50    C:\Windows\PQArecord.log --------- 1504 
  09.08.2010 15:50    C:\Windows\AsDebug.log --------- 2491822 
  09.08.2010 15:50    C:\Windows\AsCDProc.log --------- 282948 
  09.08.2010 15:47    C:\Windows\DirectX.log --------- 31362 
  09.08.2010 15:43    C:\Windows\FixPatch.log --------- 192 
  08.06.2010 09:03    C:\Windows\AsChkDev.txt --------- 31132 
  08.06.2010 09:03    C:\Windows\AsScrPro.exe --------- 3054136 
  08.06.2010 08:41    C:\Windows\msxml4-KB973685-enu.LOG --------- 257710 
  08.06.2010 08:38    C:\Windows\0 --------- 33 
  08.06.2010 08:20    C:\Windows\TSSysprep.log --------- 3540 
  07.06.2010 22:07    C:\Windows\AsRecoveryHD.log --------- 6412 
  07.06.2010 20:19    C:\Windows\AsFac.log --------- 264206 
  07.06.2010 18:10    C:\Windows\DtcInstall.log --------- 3043 
  20.04.2010 04:57    C:\Windows\csup.txt --------- 10 
  14.04.2010 04:26    C:\Windows\AsToolCD.txt --------- 19 
  01.03.2010 09:18    C:\Windows\OOBEPlayer.ini --------- 232 
  25.01.2010 11:48    C:\Windows\Uninstvga.bat --------- 2908 
  26.10.2009 05:38    C:\Windows\explorer.exe.config --------- 176 
  29.07.2009 20:37    C:\Windows\FullScreen.wmv --------- 26541350 
  14.07.2009 06:54    C:\Windows\WindowsShell.Manifest --------- 749 
  14.07.2009 06:51    C:\Windows\setuperr.log --------- 0 
  14.07.2009 03:39    C:\Windows\write.exe --------- 10240 
  14.07.2009 03:39    C:\Windows\regedit.exe --------- 427008 
  14.07.2009 03:39    C:\Windows\notepad.exe --------- 193536 
  14.07.2009 03:39    C:\Windows\HelpPane.exe --------- 733696 
  14.07.2009 03:39    C:\Windows\hh.exe --------- 16896 
  14.07.2009 03:39    C:\Windows\fveupdate.exe --------- 15360 
  14.07.2009 03:14    C:\Windows\winhlp32.exe --------- 9728 
  14.07.2009 03:14    C:\Windows\twunk_32.exe --------- 31232 
  14.07.2009 01:06    C:\Windows\mib.bin --------- 43131 
  10.06.2009 23:41    C:\Windows\twunk_16.exe --------- 49680 
  10.06.2009 23:41    C:\Windows\twain.dll --------- 94784 
  10.06.2009 23:08    C:\Windows\system.ini --------- 219 
  10.06.2009 22:52    C:\Windows\WMSysPr9.prx --------- 316640 
  10.06.2009 22:36    C:\Windows\msdfmap.ini --------- 1405 
  10.06.2009 22:31    C:\Windows\Starter.xml --------- 48201 
  10.06.2009 22:30    C:\Windows\HomePremium.xml --------- 48265 
  05.06.2009 12:15    C:\Windows\DrvInst.exe --------- 19008 
  04.06.2009 19:59    C:\Windows\hpomdl38.dat --------- 622 
  02.02.2009 03:57    C:\Windows\Uninstsxga.bat --------- 2008 
  05.12.2008 00:19    C:\Windows\WLXPGSS.SCR --------- 308584 
  25.06.2008 13:00    C:\Windows\Uninstuxga.bat --------- 1682 
  21.03.2008 15:44    C:\Windows\Uninstvga.reg --------- 384 
  21.03.2008 15:44    C:\Windows\Uninstsxga.reg --------- 386 
  21.03.2008 15:38    C:\Windows\Uninstuxga.reg --------- 386 
  22.02.2003 05:42    C:\Windows\msvcr71.dll --------- 348160 
  15.07.2000 09:00    C:\Windows\MSVCRTD.DLL --------- 434252 
----------------------------------------

 
C:\Windows\System

----------------------------------------

 
C:\Windows\System32

 17.07.2011 21:50    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 10016 
 17.07.2011 21:50    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 10016 
 17.07.2011 21:43    C:\Windows\system32\Tasks --------- 4096 
 17.07.2011 21:42    C:\Windows\system32\AutoRunFilter.ini --------- 2046 
 17.07.2011 21:41    C:\Windows\system32\config --------- 32768 
 17.07.2011 20:25    C:\Windows\system32\drivers --------- 65536 
 17.07.2011 15:16    C:\Windows\system32\acovcnt.exe --------- 45056 
 16.07.2011 17:53    C:\Windows\system32\perfh009.dat --------- 616452 
 16.07.2011 17:53    C:\Windows\system32\perfc007.dat --------- 130192 
 16.07.2011 17:53    C:\Windows\system32\perfc009.dat --------- 106574 
 16.07.2011 17:53    C:\Windows\system32\perfh007.dat --------- 654610 
 16.07.2011 17:53    C:\Windows\system32\PerfStringBackup.INI --------- 1500018 
 14.07.2011 09:51    C:\Windows\system32\FNTCACHE.DAT --------- 3131080 
 14.07.2011 09:48    C:\Windows\system32\DriverStore --------- 4096 
 13.07.2011 21:34    C:\Windows\system32\MRT.exe --------- 50867144 
 13.07.2011 12:38    C:\Windows\system32\catroot --------- 4096 
 13.07.2011 12:38    C:\Windows\system32\catroot2 --------- 40960 
 25.06.2011 00:33    C:\Windows\system32\NDF --------- 4096 
 16.06.2011 11:45    C:\Windows\system32\migration --------- 8192 
 15.06.2011 23:13    C:\Windows\system32\ServiceFilter.ini --------- 1251 
 12.06.2011 16:26    C:\Windows\system32\da-DK --------- 4096 
 12.06.2011 16:26    C:\Windows\system32\de-DE --------- 327680 
 12.06.2011 16:26    C:\Windows\system32\oobe --------- 4096 
 12.06.2011 16:26    C:\Windows\system32\AdvancedInstallers --------- 4096 
 12.06.2011 16:26    C:\Windows\system32\Setup --------- 4096 
 12.06.2011 16:26    C:\Windows\system32\cs-CZ --------- 4096 
 12.06.2011 16:26    C:\Windows\system32\manifeststore --------- 4096 
 12.06.2011 16:26    C:\Windows\system32\es-ES --------- 307200 
 12.06.2011 16:26    C:\Windows\system32\sppui --------- 0 
 12.06.2011 16:26    C:\Windows\system32\wbem --------- 65536 
 12.06.2011 16:26    C:\Windows\system32\migwiz --------- 8192 
 12.06.2011 16:26    C:\Windows\system32\Dism --------- 4096 
 12.06.2011 16:25    C:\Windows\system32\Boot --------- 4096 
 12.06.2011 16:10    C:\Windows\system32\msclmd.dll --------- 175616 
 12.06.2011 15:58    C:\Windows\system32\SPReview --------- 4096 
 12.06.2011 15:57    C:\Windows\system32\EventProviders --------- 4096 
 11.06.2011 05:07    C:\Windows\system32\win32k.sys --------- 3137536 
 03.06.2011 08:57    C:\Windows\system32\wow64cpu.dll --------- 13312 
 03.06.2011 08:57    C:\Windows\system32\wow64.dll --------- 243200 
 03.06.2011 08:57    C:\Windows\system32\wow64win.dll --------- 362496 
 03.06.2011 08:57    C:\Windows\system32\winsrv.dll --------- 214528 
 03.06.2011 08:57    C:\Windows\system32\ntvdm64.dll --------- 16384 
 03.06.2011 08:56    C:\Windows\system32\KernelBase.dll --------- 421888 
 03.06.2011 08:53    C:\Windows\system32\conhost.exe --------- 338944 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll --------- 6144 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll --------- 4608 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll --------- 4096 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll --------- 4096 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll --------- 4608 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll --------- 4096 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll --------- 4096 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll --------- 3584 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll --------- 5120 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll --------- 3072 
 03.06.2011 08:44    C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll --------- 3072 
 28.05.2011 07:32    C:\Windows\system32\mshtml.dll --------- 9001984 
 28.05.2011 05:30    C:\Windows\system32\mshtml.tlb --------- 1638912 
 24.05.2011 13:42    C:\Windows\system32\umpnpmgr.dll --------- 404480 
 14.05.2011 09:20    C:\Windows\system32\kernel32.dll --------- 1162752 
 10.05.2011 14:10    C:\Windows\system32\aswBoot.exe --------- 253888 
 04.05.2011 07:25    C:\Windows\system32\tquery.dll --------- 2315776 
 04.05.2011 07:22    C:\Windows\system32\mssvp.dll --------- 778752 
 04.05.2011 07:22    C:\Windows\system32\mssrch.dll --------- 2223616 
 04.05.2011 07:22    C:\Windows\system32\mssphtb.dll --------- 288256 
 04.05.2011 07:22    C:\Windows\system32\mssph.dll --------- 491520 
 04.05.2011 07:22    C:\Windows\system32\msscntrs.dll --------- 75264 
 04.05.2011 07:19    C:\Windows\system32\SearchProtocolHost.exe --------- 249856 
 04.05.2011 07:19    C:\Windows\system32\SearchIndexer.exe --------- 591872 
 04.05.2011 07:19    C:\Windows\system32\SearchFilterHost.exe --------- 113664 
 03.05.2011 07:29    C:\Windows\system32\inetcomm.dll --------- 976896 
 29.04.2011 07:52    C:\Windows\system32\msfeeds.dll --------- 702464 
 29.04.2011 07:51    C:\Windows\system32\iertutil.dll --------- 2443776 
 23.04.2011 00:08    C:\Windows\system32\wininet.dll --------- 1188864 
 23.04.2011 00:08    C:\Windows\system32\urlmon.dll --------- 1492992 
 23.04.2011 00:04    C:\Windows\system32\jsproxy.dll --------- 64512 
 23.04.2011 00:04    C:\Windows\system32\ieui.dll --------- 247808 
 23.04.2011 00:04    C:\Windows\system32\ieframe.dll --------- 12262400 
 09.04.2011 09:02    C:\Windows\system32\ntoskrnl.exe --------- 5562240 
 09.04.2011 08:58    C:\Windows\system32\poqexec.exe --------- 142336 
 12.03.2011 14:08    C:\Windows\system32\XpsPrint.dll --------- 1465344 
 11.03.2011 08:34    C:\Windows\system32\mfc42u.dll --------- 1359872 
 11.03.2011 08:34    C:\Windows\system32\mfc42.dll --------- 1395712 
 11.03.2011 08:33    C:\Windows\system32\esent.dll --------- 2565632 
----------------------------------------

 
C:\Windows\Prefetch

 17.07.2011 22:17    C:\Windows\Prefetch\CMD.EXE-4A81B364.pf --------- 12150 
 17.07.2011 22:17    C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf --------- 18012 
 17.07.2011 22:16    C:\Windows\Prefetch\IGFXSRVC.EXE-96A493A4.pf --------- 21828 
 17.07.2011 22:16    C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf --------- 19714 
 17.07.2011 22:16    C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf --------- 18346 
 17.07.2011 22:16    C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf --------- 64430 
 17.07.2011 22:13    C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf --------- 287168 
 17.07.2011 22:11    C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf --------- 38346 
 17.07.2011 22:07    C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf --------- 39576 
 17.07.2011 21:57    C:\Windows\Prefetch\NOTEPAD.EXE-86E0E9B9.pf --------- 22832 
 17.07.2011 21:56    C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf --------- 10062 
 17.07.2011 21:56    C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf --------- 96630 
 17.07.2011 21:56    C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B95715F5.pf --------- 46728 
 17.07.2011 21:55    C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf --------- 138594 
 17.07.2011 21:55    C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf --------- 17194 
 17.07.2011 21:53    C:\Windows\Prefetch\LIVEUPDT.EXE-DAF7AD9D.pf --------- 3830 
 17.07.2011 21:49    C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf --------- 275630 
 17.07.2011 21:47    C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf --------- 31602 
 17.07.2011 21:45    C:\Windows\Prefetch\OTL.EXE-48E15CFF.pf --------- 42828 
 17.07.2011 21:45    C:\Windows\Prefetch\UNS.EXE-E6E49771.pf --------- 23020 
 17.07.2011 21:45    C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf --------- 17106 
 17.07.2011 21:45    C:\Windows\Prefetch\SF.BIN-3C09C363.pf --------- 72628 
 17.07.2011 21:45    C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-8001F7AE.pf --------- 27242 
 17.07.2011 21:45    C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf --------- 17542 
 17.07.2011 21:45    C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf --------- 17238 
 17.07.2011 21:45    C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf --------- 174124 
 17.07.2011 21:45    C:\Windows\Prefetch\HPPROMO.EXE-A3211ACE.pf --------- 36638 
 17.07.2011 21:44    C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf --------- 115772 
 17.07.2011 21:44    C:\Windows\Prefetch\ReadyBoot --------- 4096 
 17.07.2011 21:44    C:\Windows\Prefetch\AVAST.SETUP-0144B743.pf --------- 263358 
 17.07.2011 21:44    C:\Windows\Prefetch\DLLHOST.EXE-40DD444D.pf --------- 26302 
 17.07.2011 21:44    C:\Windows\Prefetch\HPQGPC01.EXE-E2898B9C.pf --------- 87956 
 17.07.2011 21:44    C:\Windows\Prefetch\HPWUSCHD2.EXE-DE9C9D03.pf --------- 14522 
 17.07.2011 21:44    C:\Windows\Prefetch\HCONTROLUSER.EXE-79D3C58D.pf --------- 14314 
 17.07.2011 21:44    C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf --------- 42664 
 17.07.2011 21:44    C:\Windows\Prefetch\DMEDIA.EXE-7CE60415.pf --------- 19398 
 17.07.2011 21:44    C:\Windows\Prefetch\ATKOSD2.EXE-8FADD2D9.pf --------- 21182 
 17.07.2011 21:41    C:\Windows\Prefetch\PfSvPerfStats.bin --------- 584 
 17.07.2011 21:41    C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf --------- 246586 
 17.07.2011 21:41    C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf --------- 54034 
 17.07.2011 21:41    C:\Windows\Prefetch\NCLMSBTSRVEX.EXE-E88FCECF.pf --------- 20364 
 17.07.2011 21:39    C:\Windows\Prefetch\NOTEPAD.EXE-1605FA5B.pf --------- 24182 
 17.07.2011 21:20    C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-1663525457-3656925922-3171797852-1002.db --------- 949196 
 17.07.2011 21:20    C:\Windows\Prefetch\AgGlUAD_S-1-5-21-1663525457-3656925922-3171797852-1002.db --------- 1997489 
 17.07.2011 20:29    C:\Windows\Prefetch\AgGlFgAppHistory.db --------- 1185550 
 17.07.2011 20:29    C:\Windows\Prefetch\AgGlFaultHistory.db --------- 456253 
 17.07.2011 20:29    C:\Windows\Prefetch\AgGlGlobalHistory.db --------- 3208066 
 17.07.2011 20:29    C:\Windows\Prefetch\AgRobust.db --------- 1936736 
 17.07.2011 20:28    C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf --------- 307422 
 17.07.2011 20:25    C:\Windows\Prefetch\MBAM.EXE-938BB081.pf --------- 83178 
 17.07.2011 20:25    C:\Windows\Prefetch\REGSVR32.EXE-D5170E12.pf --------- 29286 
 17.07.2011 20:25    C:\Windows\Prefetch\MBAMGUI.EXE-9F54A4AA.pf --------- 15588 
 17.07.2011 20:25    C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf --------- 21398 
 17.07.2011 20:23    C:\Windows\Prefetch\MBAM-SETUP-1.51.1.1800.TMP-47D8CFC0.pf --------- 24392 
 17.07.2011 20:23    C:\Windows\Prefetch\MBAM-SETUP-1.51.1.1800.EXE-4EC345EB.pf --------- 22444 
 17.07.2011 20:22    C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf --------- 30336 
 17.07.2011 16:24    C:\Windows\Prefetch\JAVAWS.EXE-446541A7.pf --------- 31346 
 17.07.2011 16:24    C:\Windows\Prefetch\JAVAW.EXE-95D02C48.pf --------- 101864 
 17.07.2011 16:24    C:\Windows\Prefetch\JAUCHECK.EXE-EF400866.pf --------- 38260 
 17.07.2011 15:43    C:\Windows\Prefetch\Layout.ini --------- 940388 
 17.07.2011 15:18    C:\Windows\Prefetch\AgCx_SC2.db --------- 840345 
 17.07.2011 15:16    C:\Windows\Prefetch\SMARTLOGON.EXE-8F794AF5.pf --------- 27458 
 17.07.2011 15:16    C:\Windows\Prefetch\ELANTPCFG64.EXE-578825C3.pf --------- 14514 
 17.07.2011 11:41    C:\Windows\Prefetch\PING.EXE-7E94E73E.pf --------- 16216 
 17.07.2011 11:41    C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf --------- 22432 
 17.07.2011 11:41    C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf --------- 29418 
 17.07.2011 11:41    C:\Windows\Prefetch\W32TM.EXE-1101AF41.pf --------- 18592 
 17.07.2011 11:41    C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf --------- 135908 
 17.07.2011 11:41    C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf --------- 22380 
 17.07.2011 11:41    C:\Windows\Prefetch\CSC.EXE-BE9AC2DF.pf --------- 55310 
 17.07.2011 11:41    C:\Windows\Prefetch\CVTRES.EXE-2B9D810D.pf --------- 14192 
 17.07.2011 11:35    C:\Windows\Prefetch\SF.BIN-20A7C533.pf --------- 19294 
 17.07.2011 11:34    C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf --------- 196812 
 17.07.2011 10:48    C:\Windows\Prefetch\ATKOSD.EXE-C5A3162B.pf --------- 21562 
 17.07.2011 10:48    C:\Windows\Prefetch\SEAPORT.EXE-493FD19A.pf --------- 21050 
 17.07.2011 10:48    C:\Windows\Prefetch\SVCHOST.EXE-61AE5AB6.pf --------- 60782 
 17.07.2011 10:48    C:\Windows\Prefetch\SFTVSA.EXE-770B8CE2.pf --------- 20662 
 17.07.2011 10:48    C:\Windows\Prefetch\SVCHOST.EXE-DD9DE812.pf --------- 79496 
 17.07.2011 07:03    C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf --------- 90470 
 17.07.2011 07:02    C:\Windows\Prefetch\WLMERGER.EXE-C117DFA3.pf --------- 31220 
 17.07.2011 07:02    C:\Windows\Prefetch\UPDATUS.10455372_RUNASUSER.EX-1F49E22E.pf --------- 32916 
 17.07.2011 07:02    C:\Windows\Prefetch\NVLHR.EXE-C238A8FB.pf --------- 28808 
 17.07.2011 07:02    C:\Windows\Prefetch\EXTERNSHIMU.EXE-BB3B0465.pf --------- 33488 
 17.07.2011 07:01    C:\Windows\Prefetch\DAEMONU.EXE-B668DD96.pf --------- 31970 
 17.07.2011 07:01    C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf --------- 52354 
 16.07.2011 19:15    C:\Windows\Prefetch\DLLHOST.EXE-4F28A26F.pf --------- 197472 
 16.07.2011 19:01    C:\Windows\Prefetch\DEFOGGER.EXE-685550B3.pf --------- 22442 
 16.07.2011 18:55    C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf --------- 28170 
 16.07.2011 18:51    C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf --------- 21260 
 16.07.2011 18:51    C:\Windows\Prefetch\DLLHOST.EXE-67751737.pf --------- 78088 
 16.07.2011 18:48    C:\Windows\Prefetch\MSPAINT.EXE-76E10B24.pf --------- 46926 
 16.07.2011 18:29    C:\Windows\Prefetch\SF.BIN-4A02F2C6.pf --------- 81494 
 16.07.2011 17:58    C:\Windows\Prefetch\DLLHOST.EXE-B2EB1806.pf --------- 22018 
 16.07.2011 17:52    C:\Windows\Prefetch\RUNDLL32.EXE-993A195D.pf --------- 17452 
 16.07.2011 17:52    C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf --------- 46128 
 16.07.2011 17:51    C:\Windows\Prefetch\ETDCTRLHELPER.EXE-44990BDC.pf --------- 25106 
 16.07.2011 17:51    C:\Windows\Prefetch\HPQTRA08.EXE-9DA8F9E8.pf --------- 22442 
 16.07.2011 17:45    C:\Windows\Prefetch\JUCHECK.EXE-550A12E1.pf --------- 42396 
 16.07.2011 17:45    C:\Windows\Prefetch\JAVA.EXE-873AF69D.pf --------- 18714 
 16.07.2011 17:43    C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf --------- 12300 
 16.07.2011 17:42    C:\Windows\Prefetch\HELPPANE.EXE-FEDC965B.pf --------- 155890 
 16.07.2011 17:42    C:\Windows\Prefetch\WBENGINE.EXE-28FD7E8B.pf --------- 26234 
 16.07.2011 17:42    C:\Windows\Prefetch\RSTRUI.EXE-2D50C58D.pf --------- 50762 
 16.07.2011 17:41    C:\Windows\Prefetch\SRSPREMIUMPANEL_64.EXE-69917D19.pf --------- 46438 
 16.07.2011 17:41    C:\Windows\Prefetch\GFXUI.EXE-C6B3880F.pf --------- 105378 
 16.07.2011 17:41    C:\Windows\Prefetch\FANCYSTART.EXE-91A615E7.pf --------- 56348 
 16.07.2011 17:35    C:\Windows\Prefetch\SFTLIST.EXE-83E2B9AC.pf --------- 46416 
 13.07.2011 01:23    C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 3371586 
 15.06.2011 21:17    C:\Windows\Prefetch\AVWSC.EXE-9DE67EBB.pf --------- 34526 
 12.06.2011 16:48    C:\Windows\Prefetch\AgCx_S1_S-1-5-21-1663525457-3656925922-3171797852-1002.snp.db --------- 5783032 
 12.06.2011 16:36    C:\Windows\Prefetch\AgCx_SC4.db --------- 339117 
 13.02.2011 19:26    C:\Windows\Prefetch\AgCx_SC1.db --------- 700977 
 13.02.2011 19:25    C:\Windows\Prefetch\AgCx_SC1.db.trx --------- 103772 
 10.11.2010 12:46    C:\Windows\Prefetch\AgCx_SC3_E4C1C708C616C227.db --------- 409840 
 10.08.2010 06:15    C:\Windows\Prefetch\AgAppLaunch.db --------- 334168 
----------------------------------------

 
C:\Windows\Tasks

 17.07.2011 21:56    C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1124 
 17.07.2011 21:45    C:\Windows\Tasks\DMEPeriodicTask.job --------- 312 
 17.07.2011 21:42    C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1120 
 17.07.2011 21:42    C:\Windows\Tasks\SA.DAT --------- 6 
 16.07.2011 17:41    C:\Windows\Tasks\SCHEDLGU.TXT --------- 32632 
----------------------------------------

 
C:\Windows\Temp

 17.07.2011 22:16    C:\Windows\Temp\_avast_ --------- 8192 
 17.07.2011 22:08    C:\Windows\Temp\fwtsqmfile14.sqm --------- 608 
 17.07.2011 11:55    C:\Windows\Temp\fwtsqmfile13.sqm --------- 608 
 17.07.2011 07:40    C:\Windows\Temp\fwtsqmfile12.sqm --------- 608 
 16.07.2011 17:51    C:\Windows\Temp\fwtsqmfile11.sqm --------- 608 
 16.07.2011 17:48    C:\Windows\Temp\fwtsqmfile10.sqm --------- 608 
 16.07.2011 17:39    C:\Windows\Temp\fwtsqmfile09.sqm --------- 608 
 16.07.2011 15:09    C:\Windows\Temp\fwtsqmfile08.sqm --------- 608 
 16.07.2011 05:59    C:\Windows\Temp\fwtsqmfile07.sqm --------- 608 
 15.07.2011 16:27    C:\Windows\Temp\fwtsqmfile06.sqm --------- 608 
 15.07.2011 00:57    C:\Windows\Temp\CR_CC906.tmp --------- 0 
 15.07.2011 00:57    C:\Windows\Temp\chrome_installer.log --------- 0 
 14.07.2011 19:59    C:\Windows\Temp\fwtsqmfile05.sqm --------- 608 
 14.07.2011 09:57    C:\Windows\Temp\fwtsqmfile04.sqm --------- 608 
 14.07.2011 09:49    C:\Windows\Temp\hpqddsvc.log --------- 1003120 
 13.07.2011 12:35    C:\Windows\Temp\fwtsqmfile03.sqm --------- 608 
 12.07.2011 20:56    C:\Windows\Temp\fwtsqmfile02.sqm --------- 608 
 12.07.2011 15:12    C:\Windows\Temp\fwtsqmfile01.sqm --------- 608 
 11.07.2011 23:51    C:\Windows\Temp\fwtsqmfile00.sqm --------- 608 
 11.07.2011 11:38    C:\Windows\Temp\fwtsqmfile19.sqm --------- 608 
 10.07.2011 14:48    C:\Windows\Temp\fwtsqmfile18.sqm --------- 608 
 10.07.2011 08:21    C:\Windows\Temp\fwtsqmfile17.sqm --------- 608 
 09.07.2011 12:39    C:\Windows\Temp\fwtsqmfile16.sqm --------- 608 
 09.07.2011 00:53    C:\Windows\Temp\fwtsqmfile15.sqm --------- 608 
 16.06.2011 04:49    C:\Windows\Temp\dd_vcredistUI2467.txt --------- 214876 
 16.06.2011 04:49    C:\Windows\Temp\dd_vcredistMSI2467.txt --------- 443200 
 16.06.2011 04:47    C:\Windows\Temp\Silverlight0.log --------- 2272 
 16.06.2011 04:47    C:\Windows\Temp\SilverlightMSI.log --------- 3067966 
 16.06.2011 04:45    C:\Windows\Temp\KB2518870_20110616_043932198.html --------- 55984 
 16.06.2011 04:44    C:\Windows\Temp\KB2518870_20110616_043932198-Microsoft .NET Framework 4 Client Profile-MSP0.txt --------- 10741668 
 16.06.2011 04:39    C:\Windows\Temp\KB2518870_10.0.30319 --------- 0 
 16.06.2011 04:39    C:\Windows\Temp\dd_clwireg.txt --------- 14687 
 16.06.2011 04:39    C:\Windows\Temp\KB2478663_20110616_043443660.html --------- 55118 
 16.06.2011 04:39    C:\Windows\Temp\KB2478663_20110616_043443660-Microsoft .NET Framework 4 Client Profile-MSP0.txt --------- 10001404 
 16.06.2011 04:34    C:\Windows\Temp\KB2478663_10.0.30319 --------- 0 
 26.04.2011 17:46    C:\Windows\Temp\dd_vcredistUI6752.txt --------- 11682 
 26.04.2011 17:46    C:\Windows\Temp\dd_vcredistMSI6752.txt --------- 431726 
 16.04.2011 17:46    C:\Windows\Temp\GUR8643.tmp --------- 0 
 15.04.2011 14:08    C:\Windows\Temp\KB2446708_20110415_140333927.html --------- 55230 
 15.04.2011 14:08    C:\Windows\Temp\KB2446708_20110415_140333927-Microsoft .NET Framework 4 Client Profile-MSP0.txt --------- 9183238 
 15.04.2011 14:03    C:\Windows\Temp\KB2446708_10.0.30319 --------- 0 
 29.03.2011 04:53    C:\Windows\Temp\AEI89CC.tmp --------- 2243992 
 17.11.2010 13:32    C:\Windows\Temp\KB2160841_20101117_122722935.html --------- 55424 
 17.11.2010 13:31    C:\Windows\Temp\KB2160841_20101117_122722935-Microsoft .NET Framework 4 Client Profile-MSP0.txt --------- 8816774 
 17.11.2010 13:27    C:\Windows\Temp\KB2160841_10.0.30319 --------- 0 
 17.11.2010 03:57    C:\Windows\Temp\Microsoft .NET Framework 4 Client Profile Setup_20101117_025533345-MSI_netfx_Core_x64.msi.txt --------- 6905034 
 17.11.2010 03:55    C:\Windows\Temp\Microsoft .NET Framework 4 Client Profile Setup_20101117_025533345.html --------- 560180 
 17.11.2010 03:55    C:\Windows\Temp\HFIFFDF.tmp.html --------- 15298 
 17.11.2010 03:55    C:\Windows\Temp\dd_SetupUtility.txt --------- 410 
 17.11.2010 03:55    C:\Windows\Temp\dd_dotNetFx40_Client_x86_x64_decompression_log.txt --------- 1274 
 17.11.2010 03:55    C:\Windows\Temp\Microsoft .NET Framework 4 Client Profile Setup_4.0.30319 --------- 0 
 17.11.2010 03:55    C:\Windows\Temp\mavcperf-setup.log --------- 7630 
 28.08.2010 21:40    C:\Windows\Temp\hppldcoi.log --------- 8058 
 21.08.2010 08:32    C:\Windows\Temp\dd_ATL80SP1_KB973923UI0E53.txt --------- 11684 
 21.08.2010 08:32    C:\Windows\Temp\dd_ATL80SP1_KB973923MSI0E53.txt --------- 526510 
 11.08.2010 20:57    C:\Windows\Temp\lpksetup-20100811-204742-0.log --------- 156590 
 11.08.2010 20:38    C:\Windows\Temp\MpCmdRun.log --------- 8018 
 11.08.2010 10:55    C:\Windows\Temp\lpksetup-20100811-104930-0.log --------- 102154 
 09.08.2010 17:23    C:\Windows\Temp\MpSigStub.log --------- 3500 
 09.08.2010 16:07    C:\Windows\Temp\_tis_msiexec42ca.log --------- 767386 
 09.08.2010 16:07    C:\Windows\Temp\09082010_TIS17_tismsi_S-1-5-21-1663525457-3656925922-3171797852-1002.log --------- 2316010 
 09.08.2010 16:05    C:\Windows\Temp\tmdbg.ini --------- 1406 
 09.08.2010 15:45    C:\Windows\Temp\History --------- 0 
 09.08.2010 15:45    C:\Windows\Temp\Cookies --------- 0 
 09.08.2010 15:45    C:\Windows\Temp\Temporary Internet Files --------- 0 
 09.08.2010 15:16    C:\Windows\Temp\FXSAPIDebugLogFile.txt --------- 0 
 09.08.2010 15:16    C:\Windows\Temp\FXSTIFFDebugLogFile.txt --------- 0 
 08.06.2010 09:01    C:\Windows\Temp\WER644D.tmp.appcompat.txt --------- 13078 
 08.06.2010 08:55    C:\Windows\Temp\SoftEQ.ini --------- 9096 
 08.06.2010 08:55    C:\Windows\Temp\ISRSPS.ini --------- 151 
 08.06.2010 08:55    C:\Windows\Temp\ISAPSII.ini --------- 195 
 08.06.2010 08:55    C:\Windows\Temp\IPathWV.INI --------- 216 
 08.06.2010 08:55    C:\Windows\Temp\SETUP.LOG --------- 184 
 08.06.2010 08:54    C:\Windows\Temp\SRS.ini --------- 451 
 08.06.2010 08:54    C:\Windows\Temp\1275980087 --------- 4096 
 08.06.2010 08:54    C:\Windows\Temp\SA2NGEN.ini --------- 623 
 08.06.2010 08:54    C:\Windows\Temp\x64 --------- 0 
 08.06.2010 08:54    C:\Windows\Temp\SAII --------- 4096 
 08.06.2010 08:54    C:\Windows\Temp\SA2SRSLB.ini --------- 302 
 08.06.2010 08:54    C:\Windows\Temp\1275980057 --------- 4096 
 08.06.2010 08:54    C:\Windows\Temp\RTWaveTempINI.ini --------- 92 
 08.06.2010 08:54    C:\Windows\Temp\{4d36e96c-e325-11ce-bfc1-08002be10318}0000 --------- 0 
 08.06.2010 08:53    C:\Windows\Temp\conexant.cer --------- 1864 
 08.06.2010 08:43    C:\Windows\Temp\WER8008.tmp.appcompat.txt --------- 81374 
 08.06.2010 08:40    C:\Windows\Temp\_tis_msiexec1c9f.log --------- 972548 
 08.06.2010 08:40    C:\Windows\Temp\07062010_TIS17_tismsi_S-1-5-21-1663525457-3656925922-3171797852-500.log --------- 6533012 
 08.06.2010 08:39    C:\Windows\Temp\tismsi --------- 4096 
 08.06.2010 08:36    C:\Windows\Temp\ASUT_log.txt --------- 1274 
 08.06.2010 08:20    C:\Windows\Temp\DMI25E7.tmp --------- 0 
 08.06.2010 08:20    C:\Windows\Temp\DMI14F6.tmp --------- 0 
 08.06.2010 08:20    C:\Windows\Temp\DMI10C2.tmp --------- 0 
 08.06.2010 08:20    C:\Windows\Temp\DMIC01.tmp --------- 0 
 08.06.2010 08:20    C:\Windows\Temp\DMICE56.tmp --------- 0 
 08.06.2010 08:19    C:\Windows\Temp\DMI8AB1.tmp --------- 0 
 08.06.2010 08:19    C:\Windows\Temp\DMI755D.tmp --------- 0 
 07.06.2010 18:10    C:\Windows\Temp\WERF8A.tmp.appcompat.txt --------- 11628 
 04.03.2010 11:24    C:\Windows\Temp\LOCAL1.cmd --------- 1276 
 23.02.2010 15:55    C:\Windows\Temp\Remove.exe.mui --------- 405504 
 23.02.2010 12:39    C:\Windows\Temp\Remove.exe --------- 760688 
 22.12.2009 05:48    C:\Windows\Temp\SAII.ini --------- 6956 
 18.12.2009 06:58    C:\Windows\Temp\KESLYN.EXE --------- 1434680 
 18.12.2009 06:57    C:\Windows\Temp\Setup.exe --------- 1133112 
 24.08.2009 05:26    C:\Windows\Temp\LOCAL.cmd --------- 1996 
 29.07.2009 07:08    C:\Windows\Temp\TS_84B1.tmp --------- 327680 
 29.07.2009 07:08    C:\Windows\Temp\TS_7E3A.tmp --------- 196608 
 29.07.2009 07:08    C:\Windows\Temp\TS_6A2D.tmp --------- 720896 
 29.07.2009 07:08    C:\Windows\Temp\TS_680A.tmp --------- 262144 
 29.07.2009 07:08    C:\Windows\Temp\TS_5C75.tmp --------- 524288 
 29.07.2009 07:08    C:\Windows\Temp\TS_59D5.tmp --------- 262144 
 29.07.2009 07:08    C:\Windows\Temp\TS_4EEC.tmp --------- 458752 
 29.07.2009 07:07    C:\Windows\Temp\TS_45A7.tmp --------- 262144 
 29.07.2009 07:06    C:\Windows\Temp\DMIA83F.tmp --------- 0 
 09.06.2009 08:28    C:\Windows\Temp\SA1Remove.ini --------- 396 
 28.09.2006 23:35    C:\Windows\Temp\DIFXAPI.DLL --------- 524768 
----------------------------------------

 
C:\Users\Linda\AppData\Local\Temp

 17.07.2011 21:49    C:\Users\Linda\AppData\Local\Temp\plugtmp --------- 0 
 17.07.2011 21:48    C:\Users\Linda\AppData\Local\Temp\jusched.log --------- 34222 
 17.07.2011 21:44    C:\Users\Linda\AppData\Local\Temp\RedboxLog.txt --------- 191704 
 17.07.2011 21:44    C:\Users\Linda\AppData\Local\Temp\hpqddusr.log --------- 15900 
 17.07.2011 21:43    C:\Users\Linda\AppData\Local\Temp\MAR8E79.tmp --------- 1285 
 17.07.2011 21:43    C:\Users\Linda\AppData\Local\Temp\NGLALog.txt --------- 16932 
 17.07.2011 21:43    C:\Users\Linda\AppData\Local\Temp\WPDNSE --------- 0 
 17.07.2011 16:24    C:\Users\Linda\AppData\Local\Temp\hsperfdata_Linda --------- 0 
 17.07.2011 16:24    C:\Users\Linda\AppData\Local\Temp\AUCHECK_CORE.txt --------- 1208 
 17.07.2011 16:24    C:\Users\Linda\AppData\Local\Temp\AUCHECK_PARSER.txt --------- 296 
 17.07.2011 10:48    C:\Users\Linda\AppData\Local\Temp\MAR5CCF.tmp --------- 1285 
 17.07.2011 07:01    C:\Users\Linda\AppData\Local\Temp\MAR5C90.tmp --------- 1285 
 16.07.2011 18:39    C:\Users\Linda\AppData\Local\Temp\_avast_ --------- 0 
 16.07.2011 17:50    C:\Users\Linda\AppData\Local\Temp\MAR7F4C.tmp --------- 1285 
 16.07.2011 17:41    C:\Users\Linda\AppData\Local\Temp\MAR7B56.tmp --------- 1285 
 16.07.2011 17:35    C:\Users\Linda\AppData\Local\Temp\MAR4CB8.tmp --------- 1285 
 16.07.2011 15:08    C:\Users\Linda\AppData\Local\Temp\MARFDBE.tmp --------- 1285 
 16.07.2011 15:06    C:\Users\Linda\AppData\Local\Temp\A4D6.tmp --------- 311456 
 16.07.2011 05:42    C:\Users\Linda\AppData\Local\Temp\MAR2E50.tmp --------- 1285 
 15.07.2011 12:31    C:\Users\Linda\AppData\Local\Temp\MAR8AF0.tmp --------- 1285 
 15.07.2011 00:57    C:\Users\Linda\AppData\Local\Temp\chrome_installer.log --------- 195 
 14.07.2011 19:55    C:\Users\Linda\AppData\Local\Temp\MAR38A.tmp --------- 1285 
 14.07.2011 09:51    C:\Users\Linda\AppData\Local\Temp\MAR2CAA.tmp --------- 1285 
 13.07.2011 21:30    C:\Users\Linda\AppData\Local\Temp\wmplog00.sqm --------- 3074 
 13.07.2011 15:31    C:\Users\Linda\AppData\Local\Temp\wmsetup.log --------- 1236 
 13.07.2011 12:35    C:\Users\Linda\AppData\Local\Temp\HPWUCl003.log --------- 2202 
 13.07.2011 12:31    C:\Users\Linda\AppData\Local\Temp\MAR4F38.tmp --------- 1285 
 13.07.2011 01:22    C:\Users\Linda\AppData\Local\Temp\MAR1AD0.tmp --------- 1285 
 12.07.2011 21:04    C:\Users\Linda\AppData\Local\Temp\amt.log --------- 69216 
 12.07.2011 21:04    C:\Users\Linda\AppData\Local\Temp\alm.log --------- 81222 
 12.07.2011 21:04    C:\Users\Linda\AppData\Local\Temp\csxs-PHXS.log --------- 3452 
 12.07.2011 21:00    C:\Users\Linda\AppData\Local\Temp\swtag.log --------- 75904 
 12.07.2011 21:00    C:\Users\Linda\AppData\Local\Temp\libFNP_events.log --------- 2433 
 12.07.2011 21:00    C:\Users\Linda\AppData\Local\Temp\TWAIN.LOG --------- 695 
 12.07.2011 21:00    C:\Users\Linda\AppData\Local\Temp\Twunk001.MTX --------- 156 
 12.07.2011 21:00    C:\Users\Linda\AppData\Local\Temp\Twain001.Mtx --------- 3 
 12.07.2011 20:40    C:\Users\Linda\AppData\Local\Temp\MAR38CB.tmp --------- 1285 
 12.07.2011 13:01    C:\Users\Linda\AppData\Local\Temp\MAR50BE.tmp --------- 1285 
 11.07.2011 23:39    C:\Users\Linda\AppData\Local\Temp\MAR4FF3.tmp --------- 1285 
 11.07.2011 11:36    C:\Users\Linda\AppData\Local\Temp\MAR4826.tmp --------- 1285 
 10.07.2011 18:33    C:\Users\Linda\AppData\Local\Temp\MaglevExpressTemp --------- 0 
 10.07.2011 18:33    C:\Users\Linda\AppData\Local\Temp\ImageDebug --------- 0 
 10.07.2011 18:32    C:\Users\Linda\AppData\Local\Temp\SilverStreakLog --------- 0 
 10.07.2011 18:31    C:\Users\Linda\AppData\Local\Temp\DIOE479.tmp --------- 47416 
 10.07.2011 14:47    C:\Users\Linda\AppData\Local\Temp\MAR1CC3.tmp --------- 1285 
 10.07.2011 07:27    C:\Users\Linda\AppData\Local\Temp\MAR6FD2.tmp --------- 1285 
 09.07.2011 12:32    C:\Users\Linda\AppData\Local\Temp\MARAB1D.tmp --------- 1285 
 09.07.2011 12:31    C:\Users\Linda\AppData\Local\Temp\AA71.tmp --------- 311456 
 08.07.2011 23:45    C:\Users\Linda\AppData\Local\Temp\MAR276D.tmp --------- 1285 
 08.07.2011 12:17    C:\Users\Linda\AppData\Local\Temp\MAR1D8E.tmp --------- 1285 
 07.07.2011 22:54    C:\Users\Linda\AppData\Local\Temp\MAR35BF.tmp --------- 1285 
 07.07.2011 11:34    C:\Users\Linda\AppData\Local\Temp\MAR4D54.tmp --------- 1285 
 07.07.2011 02:07    C:\Users\Linda\AppData\Local\Temp\_pcsuitecheck_new.xml --------- 135076 
 07.07.2011 02:06    C:\Users\Linda\AppData\Local\Temp\MARE80D.tmp --------- 1285 
 06.07.2011 16:29    C:\Users\Linda\AppData\Local\Temp\MARFF16.tmp --------- 1285 
 06.07.2011 12:05    C:\Users\Linda\AppData\Local\Temp\HPWUCl002.log --------- 2202 
 06.07.2011 10:00    C:\Users\Linda\AppData\Local\Temp\MARD29.tmp --------- 1285 
 06.07.2011 00:07    C:\Users\Linda\AppData\Local\Temp\MAR5CCE.tmp --------- 1285 
 05.07.2011 19:00    C:\Users\Linda\AppData\Local\Temp\MAR315C.tmp --------- 1285 
 05.07.2011 11:32    C:\Users\Linda\AppData\Local\Temp\MAR68A1.tmp --------- 1285 
 05.07.2011 00:20    C:\Users\Linda\AppData\Local\Temp\MAR204C.tmp --------- 1285 
 04.07.2011 11:41    C:\Users\Linda\AppData\Local\Temp\MAR46BF.tmp --------- 1285 
 04.07.2011 01:59    C:\Users\Linda\AppData\Local\Temp\MAR2D75.tmp --------- 1285 
 03.07.2011 19:18    C:\Users\Linda\AppData\Local\Temp\MAR13FC.tmp --------- 1285 
 03.07.2011 10:31    C:\Users\Linda\AppData\Local\Temp\MAR8027.tmp --------- 1285 
 03.07.2011 06:23    C:\Users\Linda\AppData\Local\Temp\MAR5C13.tmp --------- 1285 
 02.07.2011 15:30    C:\Users\Linda\AppData\Local\Temp\csxs-IDSN.log --------- 4416 
 02.07.2011 12:33    C:\Users\Linda\AppData\Local\Temp\MAR424C.tmp --------- 1285 
 02.07.2011 01:14    C:\Users\Linda\AppData\Local\Temp\MAR5FBB.tmp --------- 1285 
 02.07.2011 01:14    C:\Users\Linda\AppData\Local\Temp\3C92.tmp --------- 311456 
 01.07.2011 11:30    C:\Users\Linda\AppData\Local\Temp\MAR2683.tmp --------- 1285 
 30.06.2011 14:45    C:\Users\Linda\AppData\Local\Temp\DIO8E9F.tmp --------- 47416 
 30.06.2011 14:43    C:\Users\Linda\AppData\Local\Temp\DIO146F.tmp --------- 47416 
 30.06.2011 10:33    C:\Users\Linda\AppData\Local\Temp\MAR58E8.tmp --------- 1285 
 29.06.2011 11:11    C:\Users\Linda\AppData\Local\Temp\HPWUCl000.log --------- 2202 
 29.06.2011 11:07    C:\Users\Linda\AppData\Local\Temp\MAR4CF6.tmp --------- 1285 
 28.06.2011 20:11    C:\Users\Linda\AppData\Local\Temp\MAR87D4.tmp --------- 1285 
 28.06.2011 09:42    C:\Users\Linda\AppData\Local\Temp\MAR1FB0.tmp --------- 1285 
 27.06.2011 15:00    C:\Users\Linda\AppData\Local\Temp\DIO58A0.tmp --------- 47416 
 27.06.2011 14:59    C:\Users\Linda\AppData\Local\Temp\DIOC1AB.tmp --------- 47416 
 27.06.2011 13:56    C:\Users\Linda\AppData\Local\Temp\MAR64AB.tmp --------- 1285 
 27.06.2011 07:01    C:\Users\Linda\AppData\Local\Temp\MAR169B.tmp --------- 1285 
 26.06.2011 07:20    C:\Users\Linda\AppData\Local\Temp\MAR3A51.tmp --------- 1285 
 25.06.2011 12:02    C:\Users\Linda\AppData\Local\Temp\MARB2CA.tmp --------- 1285 
 25.06.2011 12:01    C:\Users\Linda\AppData\Local\Temp\D5F3.tmp --------- 311456 
 25.06.2011 00:33    C:\Users\Linda\AppData\Local\Temp\msdtadmin --------- 0 
 24.06.2011 12:49    C:\Users\Linda\AppData\Local\Temp\mozilla-media-cache --------- 0 
 24.06.2011 11:03    C:\Users\Linda\AppData\Local\Temp\MAR1E39.tmp --------- 1285 
 23.06.2011 22:07    C:\Users\Linda\AppData\Local\Temp\Adobe --------- 0 
 23.06.2011 18:17    C:\Users\Linda\AppData\Local\Temp\Twunk002.MTX --------- 0 
 23.06.2011 08:02    C:\Users\Linda\AppData\Local\Temp\MARE71.tmp --------- 1285 
 22.06.2011 18:24    C:\Users\Linda\AppData\Local\Temp\MAR6ED8.tmp --------- 1285 
 22.06.2011 16:02    C:\Users\Linda\AppData\Local\Temp\51768273-AA56-44E9-AF97-A5A9D03D69ED --------- 4096 
 22.06.2011 11:05    C:\Users\Linda\AppData\Local\Temp\HPWUCl001.log --------- 2202 
 22.06.2011 11:01    C:\Users\Linda\AppData\Local\Temp\MAR4D83.tmp --------- 1285 
 21.06.2011 16:51    C:\Users\Linda\AppData\Local\Temp\MARFF92.tmp --------- 1285 
 21.06.2011 10:02    C:\Users\Linda\AppData\Local\Temp\MAR3BE6.tmp --------- 1285 
 20.06.2011 15:21    C:\Users\Linda\AppData\Local\Temp\MAR473C.tmp --------- 1285 
 20.06.2011 07:21    C:\Users\Linda\AppData\Local\Temp\MAR931A.tmp --------- 1285 
 19.06.2011 11:00    C:\Users\Linda\AppData\Local\Temp\MAR1F14.tmp --------- 1285 
 18.06.2011 17:21    C:\Users\Linda\AppData\Local\Temp\MAR3C73.tmp --------- 1285 
 18.06.2011 12:01    C:\Users\Linda\AppData\Local\Temp\MARA247.tmp --------- 1285 
 18.06.2011 00:58    C:\Users\Linda\AppData\Local\Temp\jar_cache1598856516110017941.tmp --------- 0 
 17.06.2011 23:13    C:\Users\Linda\AppData\Local\Temp\MAR9B16.tmp --------- 1285 
 17.06.2011 23:12    C:\Users\Linda\AppData\Local\Temp\3024.tmp --------- 311456 
 17.06.2011 23:09    C:\Users\Linda\AppData\Local\Temp\adb9C4A.tmp --------- 136 
 17.06.2011 23:01    C:\Users\Linda\AppData\Local\Temp\adb3DD6.tmp --------- 136 
 17.06.2011 23:00    C:\Users\Linda\AppData\Local\Temp\MSIa3f0e.LOG --------- 200 
 17.06.2011 22:59    C:\Users\Linda\AppData\Local\Temp\MSI90fe3.LOG --------- 200 
 17.06.2011 22:58    C:\Users\Linda\AppData\Local\Temp\MSI84861.LOG --------- 192 
 17.06.2011 12:22    C:\Users\Linda\AppData\Local\Temp\MARB54A.tmp --------- 1285 
 16.06.2011 11:53    C:\Users\Linda\AppData\Local\Temp\MARBE3F.tmp --------- 1285 
 16.06.2011 00:05    C:\Users\Linda\AppData\Local\Temp\amline_settings.xml --------- 2035 
 16.06.2011 00:05    C:\Users\Linda\AppData\Local\Temp\amline_data.xml --------- 39060 
 15.06.2011 23:13    C:\Users\Linda\AppData\Local\Temp\MARCF50.tmp --------- 1285 
 15.06.2011 21:41    C:\Users\Linda\AppData\Local\Temp\dd_vcredistUI5D73.txt --------- 11458 
 15.06.2011 21:41    C:\Users\Linda\AppData\Local\Temp\dd_vcredistMSI5D73.txt --------- 364250 
 15.06.2011 21:20    C:\Users\Linda\AppData\Local\Temp\MAR4F66.tmp --------- 1285 
 15.06.2011 20:17    C:\Users\Linda\AppData\Local\Temp\MAR8610.tmp --------- 1285 
 19.03.2011 03:40    C:\Users\Linda\AppData\Local\Temp\19032011817.jpg --------- 492478 
 11.12.2010 04:27    C:\Users\Linda\AppData\Local\Temp\11122010741.jpg --------- 413652 
 23.08.2010 17:10    C:\Users\Linda\AppData\Local\Temp\NGLATempNokia --------- 4096 
 23.08.2010 16:50    C:\Users\Linda\AppData\Local\Temp\nCommsTempNokia --------- 4096 
 20.08.2010 15:58    C:\Users\Linda\AppData\Local\Temp\application.sif --------- 19208 
 20.08.2010 06:56    C:\Users\Linda\AppData\Local\Temp\History --------- 0 
 20.08.2010 06:56    C:\Users\Linda\AppData\Local\Temp\Cookies --------- 0 
 20.08.2010 06:56    C:\Users\Linda\AppData\Local\Temp\Temporary Internet Files --------- 0 
 10.08.2010 01:22    C:\Users\Linda\AppData\Local\Temp\_TmpImageXSysHive_{7ebc3661-e661-4943-95a5-412378cb16d1}{6cced395-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms --------- 524288 
 10.08.2010 01:22    C:\Users\Linda\AppData\Local\Temp\_TmpImageXSysHive_{7ebc3661-e661-4943-95a5-412378cb16d1}{6cced395-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms --------- 524288 
 10.08.2010 01:22    C:\Users\Linda\AppData\Local\Temp\_TmpImageXSysHive_{7ebc3661-e661-4943-95a5-412378cb16d1}{6cced395-6e01-11de-8bed-001e0bcd1824}.TM.blf --------- 65536 
 10.08.2010 01:22    C:\Users\Linda\AppData\Local\Temp\_TmpImageXSysHive_{7ebc3661-e661-4943-95a5-412378cb16d1}.LOG1 --------- 5120 
 10.08.2010 01:22    C:\Users\Linda\AppData\Local\Temp\_TmpImageXSysHive_{7ebc3661-e661-4943-95a5-412378cb16d1}.LOG2 --------- 0 
 09.08.2010 15:51    C:\Users\Linda\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0 
 05.10.2000 10:01    C:\Users\Linda\AppData\Local\Temp\IEC2081.tmp --------- 339565 
 05.10.2000 10:01    C:\Users\Linda\AppData\Local\Temp\IEC11C2.tmp --------- 339565 
 05.10.2000 10:01    C:\Users\Linda\AppData\Local\Temp\IECC097.tmp --------- 339565 
----------------------------------------

 
C:\Program Files

 16.06.2011 11:45    C:\Program Files\Internet Explorer --------- 4096 
 12.06.2011 16:27    C:\Program Files\Windows Sidebar --------- 4096 
 12.06.2011 16:27    C:\Program Files\Windows Mail --------- 4096 
 12.06.2011 16:27    C:\Program Files\DVD Maker --------- 4096 
 12.06.2011 16:27    C:\Program Files\Windows Portable Devices --------- 0 
 12.06.2011 16:27    C:\Program Files\Windows Media Player --------- 4096 
 12.06.2011 16:27    C:\Program Files\Windows Journal --------- 4096 
 12.06.2011 16:27    C:\Program Files\Windows Photo Viewer --------- 4096 
 12.06.2011 16:27    C:\Program Files\Windows Defender --------- 4096 
 16.11.2010 12:29    C:\Program Files\Microsoft Office --------- 0 
 23.08.2010 16:50    C:\Program Files\DIFX --------- 0 
 20.08.2010 16:06    C:\Program Files\Adobe --------- 0 
 20.08.2010 16:00    C:\Program Files\Common Files --------- 4096 
 09.08.2010 15:49    C:\Program Files\Windows Live --------- 0 
 08.06.2010 09:03    C:\Program Files\ASUS --------- 0 
 08.06.2010 09:00    C:\Program Files\P4G --------- 4096 
 08.06.2010 08:57    C:\Program Files\Intel --------- 0 
 08.06.2010 08:55    C:\Program Files\CONEXANT --------- 0 
 08.06.2010 08:55    C:\Program Files\SRS Labs --------- 0 
 08.06.2010 08:36    C:\Program Files\Google --------- 0 
 08.06.2010 08:22    C:\Program Files\Elantech --------- 4096 
 14.07.2009 09:45    C:\Program Files\Microsoft Games --------- 4096 
 14.07.2009 07:32    C:\Program Files\Windows NT --------- 0 
 14.07.2009 07:32    C:\Program Files\MSBuild --------- 0 
 14.07.2009 07:32    C:\Program Files\Reference Assemblies --------- 0 
 14.07.2009 07:09    C:\Program Files\Uninstall Information --------- 0 
 14.07.2009 06:54    C:\Program Files\desktop.ini --------- 174 
----------------------------------------

 
C:\ProgramData\..

Linda   
UpdatusUser   
Public   
Default   
All Users   
Default User   
desktop.ini   
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts

127.0.0.1      localhost

----------------------------------------

 

Abbildname                    PID Sitzungsname      Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                  0            24 K
System                          4 Services                  0        1.300 K
smss.exe                      352 Services                  0        1.248 K
csrss.exe                      472 Services                  0        4.868 K
wininit.exe                    556 Services                  0        6.312 K
csrss.exe                      576 Console                    1        12.772 K
services.exe                  620 Services                  0        11.480 K
lsass.exe                      636 Services                  0        13.996 K
lsm.exe                        644 Services                  0        5.484 K
svchost.exe                    760 Services                  0        11.872 K
winlogon.exe                  812 Console                    1        8.680 K
nvvsvc.exe                    880 Services                  0        5.632 K
svchost.exe                    912 Services                  0        11.784 K
svchost.exe                    984 Services                  0        25.068 K
svchost.exe                    368 Services                  0      113.728 K
svchost.exe                    500 Services                  0        42.292 K
svchost.exe                  1032 Services                  0        18.640 K
svchost.exe                  1124 Services                  0        16.660 K
FBAgent.exe                  1208 Services                  0        14.488 K
nvvsvc.exe                    1280 Console                    1        9.460 K
AsLdrSrv.exe                  1288 Services                  0        4.356 K
GFNEXSrv.exe                  1400 Services                  0        2.992 K
AvastSvc.exe                  1424 Services                  0        27.664 K
dwm.exe                      1712 Console                    1        36.948 K
explorer.exe                  1728 Console                    1        96.724 K
taskhost.exe                  1912 Console                    1        8.916 K
HControl.exe                  2016 Console                    1        8.360 K
spoolsv.exe                  1088 Services                  0        14.996 K
taskeng.exe                  1332 Console                    1        7.928 K
ASPG.exe                      1504 Console                    1          528 K
svchost.exe                  2096 Services                  0        18.044 K
ETDCtrl.exe                  2120 Console                    1        13.044 K
ADSMTray.exe                  2128 Console                    1        5.760 K
ACMON.exe                    2168 Console                    1          528 K
ALU.exe                      2176 Console                    1          764 K
AsScrPro.exe                  2196 Console                    1        5.904 K
AsusWSService.exe            2220 Console                    1        39.460 K
sensorsrv.exe                2236 Console                    1          612 K
CLMLSvc.exe                  2252 Console                    1        8.312 K
BatteryLife.exe              2368 Console                    1          744 K
ACEngSvr.exe                  2420 Console                    1        7.640 K
ControlDeck.exe              2452 Console                    1        12.136 K
igfxtray.exe                  2488 Console                    1        8.368 K
hkcmd.exe                    2544 Console                    1        12.084 K
igfxpers.exe                  2556 Console                    1        10.732 K
sidebar.exe                  2628 Console                    1        38.504 K
wcourier.exe                  2720 Console                    1        1.468 K
PCSuite.exe                  2760 Console                    1        25.720 K
svchost.exe                  2980 Services                  0        33.404 K
svchost.exe                  3016 Services                  0        10.820 K
LMS.exe                      3052 Services                  0        5.288 K
svchost.exe                  1888 Services                  0        4.920 K
daemonu.exe                  2260 Services                  0        11.368 K
svchost.exe                  2732 Services                  0        4.924 K
SeaPort.exe                  2324 Services                  0        11.160 K
sftvsa.exe                    3344 Services                  0        5.424 K
ETDCtrlHelper.exe            3388 Console                    1        9.020 K
hpqtra08.exe                  3404 Console                    1        13.952 K
SRSPremiumPanel_64.exe        3416 Console                    1        20.708 K
svchost.exe                  3628 Services                  0        6.960 K
sftlist.exe                  3660 Services                  0        15.692 K
WmiPrvSE.exe                  4120 Services                  0        12.796 K
WmiPrvSE.exe                  4128 Services                  0        8.372 K
ATKOSD2.exe                  4216 Console                    1        5.976 K
DMedia.exe                    4264 Console                    1        5.544 K
HControlUser.exe              4284 Console                    1        4.096 K
hpwuSchd2.exe                4292 Console                    1        4.204 K
jusched.exe                  4300 Console                    1        5.032 K
AvastUI.exe                  4316 Console                    1        9.564 K
ATKOSD.exe                    4548 Console                    1        6.412 K
WDC.exe                      4572 Console                    1        5.940 K
CVHSVC.EXE                    4612 Services                  0        14.864 K
ADSMSrv.exe                  4760 Services                  0        4.424 K
TurboBoost.exe                4816 Services                  0        7.408 K
ServiceLayer.exe              4944 Services                  0        7.580 K
SearchIndexer.exe            5000 Services                  0        25.504 K
svchost.exe                  4340 Services                  0        7.544 K
NclUSBSrv64.exe              4432 Services                  0        5.536 K
NclRSSrv.exe                  4200 Services                  0        3.924 K
NclMSBTSrvEx.exe              2952 Console                    1        5.796 K
firefox.exe                  4044 Console                    1      197.604 K
wmpnetwk.exe                  5104 Services                  0        14.528 K
svchost.exe                  5196 Services                  0        17.360 K
hpqste08.exe                  5896 Console                    1        11.756 K
hpqbam08.exe                  6004 Console                    1        6.288 K
hpqgpc01.exe                  6136 Console                    1        10.336 K
PresentationFontCache.exe    5764 Services                  0        25.328 K
OTL.exe                      5860 Console                    1        23.908 K
UNS.exe                      6080 Services                  0        9.084 K
plugin-container.exe          5632 Console                    1        23.208 K
SearchProtocolHost.exe        4112 Services                  0        10.496 K
SearchFilterHost.exe          4856 Services                  0        10.284 K
cmd.exe                      2780 Console                    1        5.328 K
conhost.exe                  2748 Console                    1        7.740 K
tasklist.exe                  1328 Console                    1        7.220 K

 
***** Ende des Scans 17.07.2011 um 22:17:49,08 ***

CCleaner
Code:
7-Zip 9.15 beta                14.08.2010               
Acrobat.com        Adobe Systems Incorporated        06.06.2010        1,61MB        1.6.65
Adobe AIR        Adobe Systems Inc.        07.06.2010                1.5.0.7220
Adobe Anchor Service x64 CS4                06.06.2010               
Adobe CMaps x64 CS4                06.06.2010               
Adobe Creative Suite 4 Master Collection        Adobe Systems Incorporated        19.08.2010        2.652MB        4.0
Adobe CSI CS4 x64                06.06.2010               
Adobe Drive CS4 x64                06.06.2010               
Adobe Flash Player 10 ActiveX        Adobe Systems, Inc.        27.08.2010        1,81MB        10.0.22.87
Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        07.06.2010                10.0.32.18
Adobe Flash Player 10 Plugin        Adobe Systems Incorporated        02.03.2011        6,00MB        10.2.152.32
Adobe Fonts All x64                06.06.2010               
Adobe InDesign CS4        Adobe Systems Incorporated        16.08.2010        1.259MB        6.0
Adobe InDesign CS4 Icon Handler x64                06.06.2010               
Adobe Linguistics CS4 x64                06.06.2010               
Adobe Media Player        Adobe Systems Incorporated        17.08.2010                1.1
Adobe PDF Library Files x64 CS4                06.06.2010               
Adobe Photoshop CS4 (64 Bit)                06.06.2010               
Adobe Reader 9.1 MUI        Adobe Systems Incorporated        06.06.2010        650MB        9.1.0
Adobe Type Support x64 CS4                06.06.2010               
Adobe WinSoft Linguistics Plugin x64                06.06.2010               
ASUS AI Recovery        ASUS        07.06.2010        2,76MB        1.0.9
ASUS AP Bank        ASUSTEK        06.06.2010                1.0.0.0
ASUS CopyProtect        ASUS        07.06.2010        3,62MB        1.0.0015
ASUS Data Security Manager        ASUS        07.06.2010        15,1MB        1.00.0014
ASUS FancyStart        ASUSTeK Computer Inc.        07.06.2010        12,1MB        1.0.8
ASUS LifeFrame3        ASUS        07.06.2010        27,7MB        3.0.20
ASUS Live Update        ASUS        07.06.2010                2.5.9
ASUS MultiFrame        ASUS        07.06.2010                1.0.0021
ASUS Power4Gear Hybrid        ASUS        07.06.2010        12,2MB        1.1.35
ASUS SmartLogon        ASUS        07.06.2010        10,9MB        1.0.0008
ASUS Splendid Video Enhancement Technology        ASUS        07.06.2010        24,4MB        1.02.0028
ASUS Virtual Camera        asus        07.06.2010        3,12MB        1.0.19
ASUS WebStorage        eCareme Technologies, Inc.        07.06.2010                2.0.46.1429
ATK Package        ASUS        06.06.2010        13,8MB        1.0.0003
avast! Free Antivirus        AVAST Software        14.06.2011                6.0.1125.0
CCleaner        Piriform        16.07.2011                3.08
Conexant HD Audio        Conexant        07.06.2010                4.98.18.65
ControlDeck        ASUS        07.06.2010        1,80MB        1.0.6
CyberLink LabelPrint        CyberLink Corp.        06.06.2010        137,6MB        2.5.1908
CyberLink Power2Go        CyberLink Corp.        06.06.2010        110,4MB        6.1.3602c
ESET Online Scanner v3                11.06.2011               
ETDWare PS/2-x64 7.0.5.10_WHQL        ELAN Microelectronics Corp.        07.06.2010                7.0.5.10
Fast Boot        ASUS        07.06.2010        1,47MB        1.0.5
Game Park Console        Oberon Media, Inc.        06.06.2010                6.2.0.2
Google Chrome        Google Inc.        06.06.2010                12.0.742.122
Google Toolbar for Internet Explorer        Google Inc.        07.06.2010               
HP Imaging Device Functions 13.0        HP        27.08.2010                13.0
HP Photosmart B109a-m All-In-One Driver Software 13.0 Rel .6        HP        27.08.2010                13.0
HP Solution Center 13.0        HP        27.08.2010                13.0
HP Update        Hewlett-Packard        27.08.2010        3,73MB        4.000.011.006
Intel(R) Control Center        Intel Corporation        08.06.2010                1.2.1.1007
Intel(R) Graphics Media Accelerator Driver        Intel Corporation        08.06.2010                8.15.10.2104
Intel(R) Management Engine Components        Intel Corporation        08.06.2010                6.0.0.1179
Intel(R) Turbo Boost Technology Monitor        Intel        06.06.2010        1,12MB        1.0.115.11
Java(TM) 6 Update 22        Oracle        10.12.2010        95,0MB        6.0.220
JMicron Ethernet Adapter NDIS Driver        JMicron Technology Corp.        07.06.2010                6.0.17.1
JMicron Flash Media Controller Driver        JMicron Technology Corp.        07.06.2010                1.0.33.2
K_Series_ScreenSaver_EN                07.06.2010               
Malwarebytes' Anti-Malware Version 1.51.1.1800        Malwarebytes Corporation        16.07.2011        13,4MB        1.51.1.1800
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        16.11.2010        38,8MB        4.0.30319
Microsoft Office 2010        Microsoft Corporation        06.06.2010        6,31MB        14.0.4763.1000
Microsoft Office Klick-und-Los 2010        Microsoft Corporation        15.11.2010                14.0.4763.1000
Microsoft Office Starter 2010 - Deutsch        Microsoft Corporation        15.11.2010                14.0.4763.1000
Microsoft Silverlight        Microsoft Corporation        15.06.2011        180,1MB        4.0.60531.0
Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        08.08.2010        1,72MB        3.1.0000
Microsoft Sync Framework Runtime Native v1.0 (x86)        Microsoft Corporation        08.08.2010        0,61MB        1.0.1215.0
Microsoft Sync Framework Services Native v1.0 (x86)        Microsoft Corporation        08.08.2010        1,45MB        1.0.1215.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053        Microsoft Corporation        20.08.2010        0,25MB        8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        15.06.2011        0,29MB        8.0.61001
Microsoft Visual C++ 2005 Redistributable (x64)        Microsoft Corporation        19.08.2010        0,68MB        8.0.61000
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175        Microsoft Corporation        25.04.2011        0,57MB        8.0.51011
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        25.04.2011        0,58MB        9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        11.08.2010        0,58MB        9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        15.06.2011        0,59MB        9.0.30729.6161
Mozilla Firefox 5.0 (x86 de)        Mozilla        23.06.2011        32,1MB        5.0
MSXML 4.0 SP3 Parser (KB973685)        Microsoft Corporation        06.06.2010        1,53MB        4.30.2107.0
Nokia PC Suite        Nokia        22.08.2010                7.1.51.0
NVIDIA Drivers        NVIDIA Corporation        07.06.2010        63,0MB        1.10.58.36
PC Connectivity Solution        Nokia        19.08.2010        19,6MB        10.26.0.0
Photoshop Camera Raw_x64                06.06.2010               
Skype™ 4.2        Skype Technologies S.A.        06.06.2010        31,7MB        4.2.155
SRS Premium Sound Control Panel        SRS Labs, Inc.        06.06.2010        1,85MB        1.8.5100
USB 2.0 VGA UVC WebCam                07.06.2010               
VLC media player 1.1.5        VideoLAN        26.12.2010                1.1.5
Windows Live Anmelde-Assistent        Microsoft Corporation        09.08.2010        1,94MB        5.000.818.6
Windows Live Essentials        Microsoft Corporation        08.08.2010                14.0.8050.1202
Windows Live Sync        Microsoft Corporation        08.08.2010        2,80MB        14.0.8050.1202
Windows Live-Uploadtool        Microsoft Corporation        08.08.2010        0,22MB        14.0.8014.1029
Windows Media Player Firefox Plugin        Microsoft Corp        31.08.2010        0,29MB        1.0.0.8
Windows-Treiberpaket - Nokia Modem  (06/09/2010 4.5)        Nokia        22.08.2010                06/09/2010 4.5
Windows-Treiberpaket - Nokia Modem  (06/09/2010 7.01.0.7)        Nokia        22.08.2010                06/09/2010 7.01.0.7
Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)        Nokia        19.08.2010                08/22/2008 7.0.0.0
WinFlash        ASUS        07.06.2010        0,82MB        2.30.1
WinSCP 4.2.9        Martin Prikryl        11.10.2010        8,67MB        4.2.9
Wireless Console 3        ASUS        07.06.2010        2,43MB        3.0.15

kira 19.07.2011 07:37
1.
Fixen mit OTL
  • Starte die OTL.exe.
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Kopiere folgendes Skript:
Code:
:OTL
[2011.05.08 05:44:29 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.08 05:44:29 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

:Commands
[purity]
[emptytemp]

2.
Öffne CCleaner
  • "Cleaner"-->"Analysieren"-->Klick auf den Button "Start CCleaner"
  • "Registry""Fehler suchen"--> "Fehler beheben"-->"Alle beheben"
  • Starte dein System neu auf

3.
  • lade Dir SUPERAntiSpyware FREE Edition herunter.
  • installiere das Programm und update online.
  • starte SUPERAntiSpyware und klicke auf "Ihren Computer durchsuchen"
  • setze ein Häkchen bei "Kompletter Scan" und klicke auf "Weiter"
  • anschließend alle gefundenen Schadprogramme werden aufgelistet, bei alle Funde Häkchen setzen und mit "OK" bestätigen
  • auf "Weiter" klicken dann "OK" und auf "Fertig stellen"
  • um die Ergebnisse anzuzeigen: auf "Präferenzen" dann auf den "Statistiken und Protokolle" klicken
  • drücke auf "Protokoll anzeigen" - anschließend diesen Bericht bitte speichern und hier posten

4.
- "Link:-> ESET Online Scanner
>>Du sollst nicht die Antivirus-Sicherheitssoftware installieren, sondern dein System nur online scannen<<
Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware ("Worm.Win32.Autorun") verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen.
Schließe jetzt alle externe Datenträgeran (USB Sticks etc) Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.►Anleitung

-> Führe dann einen Komplett-Systemcheck mit Eset/Nod32 durch

- folgendes bitte anhaken > "Remove found threads" und "Scan archives"
- die Scanergebnis als *.txt Dateien speichern)
- meistens "C:\Programme\Eset\EsetOnlineScanner\log.txt"

Vor dem Scan Einstellungen im Internet Explorer:
- "Extras→ Internetoptionen→ Sicherheit":
- alles auf Standardstufe stellen
- Active X erlauben
- um den Scan zu starten: wenn du danach gefragt wirst (den Text in der Informationsleiste ) - ActiveX-Steuerelement installieren lassen

► kannst Du über den Systemzustand des Rechners berichten? Auffälligkeiten..Probleme? erhältst du Fehlermeldungen? sonstiges...

Lin123 19.07.2011 15:50
Vielen dank soweit schon einmal für die Hilfe!!! :)
Habe erstmal Schritt 1 bis 3 abgearbeitet, den komplett Scan schaffe ich zeitlich erst morgen.

Bis jetzt ist mir aber als einzige Veränderung aufgefallen, dass ENDLICH diese ModulNichtGefunden-Fehlermeldung weg ist! :D

OTL Scan
Code:
All processes killed
========== OTL ==========
C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml moved successfully.
C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Linda
->Temp folder emptied: 1376405 bytes
->Temporary Internet Files folder emptied: 532818 bytes
->Java cache emptied: 3294472 bytes
->FireFox cache emptied: 370193206 bytes
->Flash cache emptied: 47651 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5562 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67832 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 358,00 mb
 
 
OTL by OldTimer - Version 3.2.24.0 log created on 07192011_152449

Files\Folders moved on Reboot...
C:\Users\Linda\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...


SuperAntiSpywareScan
Code:
SUPERAntiSpyware Scann-Protokoll
hxxp://www.superantispyware.com

Generiert 07/19/2011 bei 04:36 PM

Version der Applikation : 4.55.1000

Version der Kern-Datenbank : 7424
Version der Spur-Datenbank : 5236

Scan Art      : kompletter Scann
Totale Scann-Zeit : 00:51:07

Gescannte Speicherelemente  : 702
Erfasste Speicher-Bedrohungen  : 0
Gescannte Register-Elemente  : 13606
Erfasste Register-Bedrohungen  : 0
Gescannte Datei-Elemente    : 37877
Erfasste Datei-Elemente  : 0

Lin123 21.07.2011 02:46
so, hier jetzt noch der ESET-Scan

Code:
ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=67bf36012fcd5a498130abbfd91aa626
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-07-21 01:14:21
# local_time=2011-07-21 03:14:21 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=5893 16776574 100 94 3307714 62829989 0 0
# compatibility_mode=8192 67108863 100 0 2523657 2523657 0 0
# scanned=209736
# found=0
# cleaned=0
# scan_time=10722

kira 21.07.2011 19:34
Soweit erst mal alles im grünen Bereich?

Lin123 21.07.2011 21:15
ja, also wie gesagt die fehlermeldungen sind weg.
kann ich dann erstmal wieder beruhigt surfen?! :)

kira 22.07.2011 18:48
1.
Programme deinstallieren/entfernen, die wir verwendet haben und nicht brauchst, bis auf:
Code:
CCleaner
- Zeitweise laufen lassen:-> Anleitung

2.
Tool-Bereinigung mit OTL

Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
  • Bitte lade Dir (falls noch nicht vorhanden) OTL von OldTimer herunter.
  • Speichere es auf Deinem Desktop.
  • Doppelklick auf OTL.exe um das Programm auszuführen.
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Klicke auf den Button "Bereinigung"
  • OTL fragt eventuell nach einem Neustart.
    Sollte es dies tun, so lasse dies bitte zu.
Anmerkung: Nach dem Neustart werden OTL und andere Helferprogramme, die Du im Laufe der Bereinigung heruntergeladen hast, nicht mehr vorhanden sein. Sie wurden entfernt. Es ist daher Ok, wenn diese Programme nicht mehr vorhanden sind. Sollten noch welche übrig geblieben sein, lösche sie manuell.

3.
Wenn alles gut verlaufen und dein System läuft stabil,mache folgendes:
Systemsteuerung/System und Sicherheit/System/Computerschutz/Systemeigenschaften poppt auf und dann einen Sicherungspunkt erstellen
Systemwiederherstellung deaktivieren: Windows 7 - einen manuellen Systemwiederherstellungspunkt erstellen
also zuerst deaktivieren-> dann aktivieren - am Ende soll wieder aktiviert sein!

4.
Ändere deine Passworte und Zugangsdaten! - von einem sauberen System aus
- Alle Passwörter, die auf dem kompromittierten System verwendet wurden (also z.B. Login-, Mail- oder Website-Passwörter, aber auch die PIN für das Online-Banking) sofort ändern (► am besten von einem anderen, nicht-infizierten Rechner aus! )
Tipps:
Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
auch noch hier unter: Sicheres Kennwort (Password)

Lesestoff Nr.1:
  • Wie erstelle ich ein eingeschränktes Benutzerkonto?
  • Software immer auf dem neuesten Stand halten!:
    ALLE auf dem System installierten Programme und Treiber, sollten regelmäßig upgedatet werden um Sicherheitslücken zu vermeiden und um das reibungslose Arbeitsabläufe zu erreichen!
  • Ein sicherer Browser als IE z.B. *Ein Wechsel des Standardbrowsers zu...von SETI@home* - Firefox - FirefoxWiki/Einstellungen - Erweiterungen für Firefox - Standardbrowser
  • Sichere eMail Clients z.B. Thunderbird-->Erweiterungen für Mozilla Thunderbird
  • Sichere Paswort - Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
    auch noch hier unter: Sicheres Kennwort (Password)
    Die fünf häufigsten Passwort-Fehler[/b[
  • "Never accept software from strangers" - Installiere grundsätzlich immer nur Programme, die Du auch wirklich benötigst und von denen Du überzeugt bist, dass sie seriös sind.
    Du hast die Wahl!, welche zusätzlichen Komponenten noch installiert werden sollen? -> Bei der Installation immer mitlesen, Sponsoren und Partnerprogramme, Toolbars oder eventuell noch andere extra angebotene Programme möglichst abwählen!
  • NICHT irgendwelche Programme aus dem Netz laden, wenn nicht zu 100% fest steht, dass es sich dabei um saubere Software handelt. Nette Versprechen der Hersteller garantieren noch lange keine einwandfreie Funktionsweise, also vorher blättere die Seiten bei GOOGLE, da kannst Du Dir wertvolle Informationen holen!!!
  • Vorsicht bei der Nutzung fremder Computer und anschliessbare Externe Speichermedien wie Festplatte, USB Sticks, Speicherkarten usw![/color] - IT-Betrüger machen keinen Urlaub!/bsi-fuer-buerger.de - auch zeitweise anschließen und scannen lassen (sehe unter `kostenlose Online-Viren-Scanner`)
  • Webseiten ohne Gültiges Impressum nicht besuchen
  • Lizenzkosten sparen? - Vorsicht bei Dateien/Programmen aus nicht vertrauenswürdigen Quellen! - "full Keygen, Crack, Serial, Warez, keygenerators" etc.
    Sind immer verseucht mit diverse Malware/Schadprogramme/Code, es gibt keine seite wo Viren frei ist. (Man sollte nicht absitlich der Teufel holen;)) Eine weitere höchst unsichere Quelle ist das File-Sharing der sog. (Musik-)Tauschbörsen.
    ► Ausserdem machst Du dich damit strafbar!
  • Nur eine Firewall sowie ein Antiviren Programm verwenden, welche sich immer auf dem aktuellsten Stand befinden sollten!
    Das Installieren von `zuviel` Software beeinträchtigt die Systemleistung und Sicherheit, verlangsamt den Start-Vorgang enorm und belastet den Arbeitsspeicher (weil laufen ja die Programme nebeneinander gleichzeitig, die viel Performance fressen, aber wenig Qualität bringen). Im Laufe der Zeit wird der rechner durch zu viel unnötigen Ballast immer langsamer, und unsicherer. Um so mehr Programme installiert sind, um so häufiger treten Probleme auf, die dann unter Umständen nur schwer lösen können. Dazu kommt noch, das einige Programme große Sicherheitsrisiken mit sich bringen;)
  • Virenscanner
  • BSI für Bürger
  • SETI@home - [Sicherheit] Sicherheitskonzept
  • Entwicklung schädlicher Websites/viruslist.com
  • Brennpunkt: Bilder und Töne
    Gefährliche Bilder, schräge Töne/BSI

** Der gesunde Menschenverstand, Windows und Internet-Software sicher konfigurieren ist der beste Weg zur Sicherheit im Webverkehr ist !!
Zitat:
Da der Bestand der Datenbank wird täglich ergänzt und erweitert bzw werden mit der aktuellen Virendefinition die Informationen über den betroffenen Virus aufgenommen, empfehle ich dir mindestens einmal pro Woche (später genügt es sicherlich einmal im Monat) dein System Online Scannen lassen (immer mit einen anderen Scanner), um eine zweite Meinung einzuholen - Die auf dem Speichermedium gesicherten Daten sollten auch mit einbezogen werden!
(benutzen meist ActiveX und/oder Java): Kostenlose Online Scanner -
Lesestoff Nr.2:
► Kann sich auf Dauer eine Menge Datenmüll ansammeln, sich Fehlermeldungen häufen, der PC ist wahrscheinlich nicht mehr so schnell, wie früher:wünsch Dir alles Gute:)


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:23 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131