| jerryline | 11.11.2011 09:31 |
Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben
Hallo Ihr,
ich verzweifel. Ich hoffe, Ihr könnt mir helfen. Habe gegoogelt, aber nichts hilfreiches gefunden.
Mein PC hat seit ca. 2 Monaten ein Eigenleben.
(Vista 32 Home, Avast Antivirenprogramm, Zonealarm, Spybot, Antimalbytes, 2-Realtek Soundkarte, IE 9, FF 8)
Ordnersymbole verschwinden, manchmal sind sie wieder da.
Bekomme seltsame Emails, habe angeblich mehrere Kreuzfahrten gleichzeitig gebucht, einige Seiten besucht (Im Verlauf ist die Seite überhaupt nicht vorhanden)
und besonders, was die Sicherheit oder Datenschutz angeht, sind einige Einstellungen hellblau unterlegt, was ich nicht auswählen kann. Auch bei Firefox und IE. Avira.
Seit mehreren Wochen geht der Lautstärkeregler (2-Realtek) nach kurzer Zeit selbstständig auf 0. Hochziehen geht nicht, er fällt sofort ab, wie von einem Gummiband gezogen. (Gerätemanager zeigt keine Probleme).
Wenn dieses Problem auftritt, ist er mit einem Rahmen aus kleinen Punkten umgeben, wie dann auch andere Ordner/Programme auf dem Desktop, (die dann ebenfalls Probleme machen - teilweise kann man sie nicht mehr starten).
Selbst nach einem Neustart.
Es sind nur wenige wichtige Programme im Autostart.
Wenn ich den PC starte, ist das Problem entweder gleich da, oder spät. nach ein paar Minuten.
Hatte Firefox und IE deinstalliert, aber daran lag es nicht.
Realtek-Treiber deinstalliert und neu – nichts geändert.
Realplayer drauf, der machte Schwierigkeiten, habe ihn deinstalliert.
Als Avira, Spybot und Adaware nichts gefunden hatten, habe ich das
System neu installiert.
Es war nur Vista, ServicePack2 und die üblichen Updates und Programme von Microsoft auf dem Rechner – das Problem war wieder da!!
Dann IE 9, FF 6, Avira, Spybot und Zonealarm dazu.
Habe nicht mehrere Firewalls und Antivirenprogramme am laufen.
Der PC ist sehr langsam, friert ein, ab und zu Bluescreen, Programme schließen sich plötzlich oder sind überhaupt nicht mehr da. Dann kann man sie plötzlich wieder öffnen. Oder auch nicht.
Selbst bei OTL und GMER kam häufiger „keine Rückmeldung“ und der Hintergrund war hell.
Wenn ich auf verschiedene Dateien zugreifen möchte, steht jetzt „Zugriff verweigert“, was vorher nicht war.
Realtek-Treiber entfernt, neu gestartet, neuer Treiber rauf = gleiches Problem.
Nochmals Virenscanner, Spybot (Browser ist Immunisiert, Tea-Timer) und Antimalwarebytes durchlaufen lassen (als Admin).
Die Probleme sind nach wie vor da. Dann von MS Fix-it laufen lassen, fand Fehler und hatte sie angeblich behoben.
Jetzt – nachträglich sind wieder Programme installiert. (auch Tune-up und ccleaner. Letzteres nur 1x durchlaufen lassen).
Im Moment geht der Lautstärkeregler wieder.??? (habe nichts verändert).
Hoffe, habe soweit alles beschrieben.
Danke schon mal im Voraus :dankeschoen: – und bitte habt Geduld, ich bin keine PC-Expertin :dummguck:
Die Ergebnisse:OTL Logfile: Code:
OTL logfile created on: 10.11.2011 10:04:06 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = c:\Users\Sylvester\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,05 Gb Available Physical Memory | 68,36% Memory free
6,20 Gb Paging File | 5,10 Gb Available in Paging File | 82,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 91,41 Gb Total Space | 54,30 Gb Free Space | 59,40% Space Free | Partition Type: NTFS
Drive D: | 20,00 Gb Total Space | 10,45 Gb Free Space | 52,26% Space Free | Partition Type: FAT32
Drive E: | 47,21 Gb Total Space | 11,98 Gb Free Space | 25,37% Space Free | Partition Type: NTFS
Drive F: | 46,80 Gb Total Space | 28,58 Gb Free Space | 61,08% Space Free | Partition Type: NTFS
Drive G: | 86,52 Gb Total Space | 16,71 Gb Free Space | 19,32% Space Free | Partition Type: NTFS
Drive H: | 20,23 Gb Total Space | 7,12 Gb Free Space | 35,17% Space Free | Partition Type: NTFS
Drive I: | 47,18 Gb Total Space | 42,85 Gb Free Space | 90,83% Space Free | Partition Type: NTFS
Drive J: | 46,43 Gb Total Space | 6,13 Gb Free Space | 13,19% Space Free | Partition Type: NTFS
Drive K: | 36,96 Gb Total Space | 27,98 Gb Free Space | 75,70% Space Free | Partition Type: NTFS
Computer Name: SYLVESTER-PC | User Name: Sylvester | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - c:\Users\Sylvester\Downloads\OTL.exe (OldTimer Tools)
PRC - I:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software)
PRC - I:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - i:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Programme\CheckPoint\ZAForceField\ISWSVC.exe (Check Point Software Technologies)
PRC - I:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - I:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Programme\Sceneo\AbsolutTV\Services\PVR\pvrservice.exe (Buhl Data Service GmbH)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Programme\Medion\MEDIONbox\Program\GCS.exe (Empolis GmbH)
PRC - c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH)
========== Modules (No Company Name) ==========
========== Win32 Services (SafeList) ==========
SRV - (McComponentHostService) -- File not found
SRV - (TuneUp.Defrag) -- I:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (GoogleDesktopManager) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe (Google)
SRV - (NitroReaderDriverReadSpool2) -- I:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software)
SRV - (avast! Antivirus) -- i:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (MatSvc) -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe (Microsoft Corporation)
SRV - (vsmon) -- C:\Windows\System32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD)
SRV - (IswSvc) -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe (Check Point Software Technologies)
SRV - (WinHttpAutoProxySvc) -- winhttp.dll (Microsoft Corporation)
SRV - (SBSDWSCService) -- I:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (srvcPVR) -- C:\Programme\Sceneo\AbsolutTV\Services\PVR\pvrservice.exe (Buhl Data Service GmbH)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (GnabService) -- c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH)
SRV - (FirebirdServerMAGIXInstance) -- C:\Programme\ALDI Foto Service Nord\Common\Database\bin\fbserver.exe (MAGIX®)
========== Driver Services (SafeList) ==========
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (ISWKL) -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys (Check Point Software Technologies)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (Vsdatant) -- C:\Windows\System32\drivers\vsdatant.sys (Check Point Software Technologies LTD)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) -- C:\Programme\HomeCinema\PlayMovie\000.fcl (Cyberlink Corp.)
DRV - ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) -- C:\Programme\HomeCinema\PowerDVD\000.fcl (Cyberlink Corp.)
DRV - (ahcix86s) -- C:\Windows\system32\DRIVERS\ahcix86s.sys (AMD Technologies Inc.)
DRV - (netr28u) -- C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.)
DRV - (amdide) -- C:\Windows\system32\DRIVERS\amdide.sys (Advanced Micro Devices)
DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (EverestDriver) -- i:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDA
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDA
IE - HKLM\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hiergehtslos.de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - user.js..browser.search.selectedEngine: "Suche"
FF - user.js..browser.search.order.1: "Suche"
FF - user.js..browser.search.defaultenginename: "Suche"
FF - user.js..keyword.URL: "hxxp://www.finduny.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: I:\Program Files\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.81\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.81\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: i:\Program Files\Alwil Software\Avast5\WebRep\FF [2011.10.27 16:44:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: i:\Program Files\Mozilla Firefox\components [2011.11.09 18:30:35 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: I:\Program Files\Mozilla Firefox\components [2011.11.09 18:30:35 | 000,000,000 | ---D | M]
[2011.11.03 07:02:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sylvester\AppData\Roaming\mozilla\Extensions
[2011.10.27 16:44:30 | 000,000,000 | ---D | M] (avast! WebRep) -- I:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\WEBREP\FF
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\npctrl.1.0.30109.0.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: avast! WebRep = C:\Users\Sylvester\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1289_0\
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\Sylvester\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
O1 HOSTS File: ([2011.10.28 08:49:38 | 000,437,862 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 15062 more lines...
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - I:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - i:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - i:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (xplugin) - {DFEFCDEE-CF1A-4FC8-88AD-18272BE37E29} - C:\Users\Sylvester\AppData\Roaming\xplugin\toolbar.dll ()
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Program Files\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm-Sicherheit Toolbar) - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} - C:\Program Files\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
O4 - HKLM..\Run: [avast5] i:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ZoneAlarm Client] I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - HKCU..\Run: [SpybotSD TeaTimer] i:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - I:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 File not found
O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 File not found
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - I:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6EBCC3D3-8898-4ECD-88C1-AAD8E686EFDB}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) -C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: G:\bild\Halloween\halloween-eve.jpg
O24 - Desktop BackupWallPaper: G:\bild\Halloween\halloween-eve.jpg
O29 - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\Microsoft
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\Microsoft
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\System32\Adobe
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EFCE7BE0-510E-4932-9475-F44CD90DE16A} - Microsoft .NET Framework 1.1 Security Update (KB2572067)
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011.11.09 18:14:30 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\QuickPar
[2011.11.08 10:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF
[2011.11.04 09:59:00 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Ulead Systems
[2011.11.01 13:14:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities
[2011.11.01 05:51:14 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Nitro PDF
[2011.10.31 10:58:24 | 006,111,232 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
[2011.10.31 10:58:24 | 001,929,216 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioEQ.dll
[2011.10.31 10:58:24 | 001,773,568 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesLib.dll
[2011.10.31 10:58:24 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2011.10.31 10:58:24 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2011.10.31 10:58:24 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2011.10.31 10:58:24 | 000,155,648 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO20.dll
[2011.10.31 10:58:24 | 000,140,288 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\FMAPO.dll
[2011.10.31 10:58:24 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2011.10.31 10:58:24 | 000,126,976 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO.dll
[2011.10.31 10:58:24 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.10.31 10:27:16 | 000,000,000 | ---D | C] -- C:\Program Files\Guru3D.com
[2011.10.31 10:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
[2011.10.31 10:00:53 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\xplugin
[2011.10.31 09:23:25 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Malwarebytes
[2011.10.31 09:23:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.10.31 09:23:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.10.31 09:23:09 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.10.31 08:56:59 | 000,026,408 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll
[2011.10.31 08:56:59 | 000,017,704 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll
[2011.10.31 08:56:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF
[2011.10.31 08:54:42 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Downloaded Installations
[2011.10.31 08:49:33 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Paint.NET
[2011.10.31 08:40:20 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\DivX
[2011.10.31 08:39:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2011.10.31 08:39:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
[2011.10.31 08:38:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2011.10.31 08:31:10 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2011.10.31 08:29:25 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX
[2011.10.31 07:47:31 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\dvdcss
[2011.10.31 07:41:38 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ratDVD
[2011.10.31 07:41:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ratDVD
[2011.10.30 10:50:10 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2011.10.29 20:20:16 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\vlc
[2011.10.29 20:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2011.10.29 20:19:28 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2011.10.29 07:55:32 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\FixItCenter
[2011.10.29 07:48:27 | 000,000,000 | ---D | C] -- C:\Windows\MATS
[2011.10.29 07:48:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Fix it Center
[2011.10.29 07:20:03 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ElevatedDiagnostics
[2011.10.28 17:56:25 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2011.10.28 17:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rootkit Unhooker
[2011.10.28 11:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2011.10.28 09:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2011.10.28 09:26:15 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
[2011.10.28 08:43:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2011.10.28 08:43:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011.10.28 08:36:30 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011.10.28 07:58:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011.10.28 07:47:02 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Real
[2011.10.28 07:37:29 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\PackageAware
[2011.10.28 06:54:47 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QuickPar
[2011.10.28 06:54:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
[2011.10.28 00:33:22 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Ashampoo
[2011.10.28 00:32:27 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ashampoo
[2011.10.28 00:32:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo
[2011.10.28 00:32:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
[2011.10.27 23:22:59 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Softplicity
[2011.10.27 23:15:54 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\CyberLink
[2011.10.27 23:15:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema
[2011.10.27 23:15:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\CyberLink
[2011.10.27 22:10:25 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\.gimp-2.6
[2011.10.27 22:10:24 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\gegl-0.0
[2011.10.27 22:06:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
[2011.10.27 21:28:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2011.10.27 21:27:46 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.10.27 21:27:46 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2011.10.27 20:59:20 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011.10.27 20:58:46 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Apple Computer
[2011.10.27 20:16:03 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\UseNeXT
[2011.10.27 20:16:03 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\UseNeXT
[2011.10.27 20:15:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
[2011.10.27 20:10:21 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop\MP3 und Video
[2011.10.27 20:10:11 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop\Brennprogramme
[2011.10.27 19:50:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2011.10.27 19:49:49 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2011.10.27 19:49:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2011.10.27 19:48:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011.10.27 19:23:41 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Macromedia
[2011.10.27 19:02:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop\Graphikprogramme
[2011.10.27 18:35:08 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Gutscheinmieze
[2011.10.27 18:33:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal Backup
[2011.10.27 18:29:42 | 000,794,112 | R--- | C] (Fred's Software) -- C:\Users\Sylvester\Desktop\PRINTKEY2000.EXE
[2011.10.27 18:26:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2011.10.27 18:25:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
[2011.10.27 17:51:07 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\TuneUp Software
[2011.10.27 17:50:00 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2011.10.27 17:49:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2011.10.27 17:26:09 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Nero
[2011.10.27 17:07:29 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Google
[2011.10.27 17:04:40 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Mozilla
[2011.10.27 17:04:40 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Mozilla
[2011.10.27 16:54:14 | 000,101,720 | ---- | C] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[2011.10.27 16:52:45 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Desktop\Programme
[2011.10.27 16:52:20 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2011.10.27 16:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2011.10.27 16:44:32 | 000,442,200 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011.10.27 16:39:57 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\ForceField Shared Files
[2011.10.27 16:39:57 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\CheckPoint
[2011.10.27 16:39:28 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit
[2011.10.27 16:39:26 | 000,000,000 | ---D | C] -- C:\Program Files\ZoneAlarm-Sicherheit
[2011.10.27 16:39:26 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Conduit
[2011.10.27 16:37:27 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint
[2011.10.27 16:37:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZoneAlarm
[2011.10.27 16:37:23 | 000,046,592 | ---- | C] (Zone Labs Inc.) -- C:\Windows\System32\vsutil_loc0407.dll
[2011.10.27 16:36:51 | 000,000,000 | ---D | C] -- C:\Windows\System32\ZoneLabs
[2011.10.27 16:36:04 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint
[2011.10.27 16:36:03 | 000,000,000 | ---D | C] -- C:\Windows\Internet Logs
[2011.10.27 16:34:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011.10.27 16:30:26 | 000,020,568 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2011.10.27 16:30:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011.10.27 16:30:25 | 000,320,856 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011.10.27 16:30:24 | 000,052,568 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011.10.27 16:30:24 | 000,034,392 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011.10.27 16:30:23 | 000,054,616 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011.10.27 16:30:01 | 000,199,304 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011.10.27 16:30:01 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.10.27 16:29:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2011.10.27 14:10:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\vi-VN
[2011.10.27 14:10:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\eu-ES
[2011.10.27 14:10:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\ca-ES
[2011.10.27 14:08:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2011.10.27 14:06:23 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Apple
[2011.10.27 14:00:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2011.10.27 13:59:55 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Adobe
[2011.10.27 13:59:55 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Adobe
[2011.10.27 13:49:05 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\Eigene Google Gadgets
[2011.10.27 13:48:39 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\PlayMovie
[2011.10.27 13:48:38 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ApplicationHistory
[2011.10.27 13:48:37 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Google
[2011.10.27 13:48:33 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011.10.27 13:48:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.10.27 13:48:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Searches
[2011.10.27 13:48:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.10.27 13:48:14 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Identities
[2011.10.27 13:48:11 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Contacts
[2011.10.27 13:48:01 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\VirtualStore
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Vorlagen
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\AppData\Local\Verlauf
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\AppData\Local\Temporary Internet Files
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Startmenü
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\SendTo
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Recent
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Netzwerkumgebung
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Lokale Einstellungen
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Documents\Eigene Videos
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Documents\Eigene Musik
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Eigene Dateien
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Documents\Eigene Bilder
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Druckumgebung
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Cookies
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\AppData\Local\Anwendungsdaten
[2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Anwendungsdaten
[2011.10.27 13:47:52 | 000,000,000 | --SD | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Videos
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Saved Games
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Pictures
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Music
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Links
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Favorites
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Downloads
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Documents
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop
[2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.10.27 13:47:52 | 000,000,000 | -H-D | C] -- C:\Users\Sylvester\AppData
[2011.10.27 13:47:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Temp
[2011.10.27 13:47:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Microsoft
[2011.10.27 13:47:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Media Center Programs
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.10.27 13:39:14 | 000,000,000 | ---D | C] -- C:\Program Files\GoogleEULA
[2011.10.27 13:39:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2011.10.27 13:39:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Desktop
[2011.10.27 13:39:00 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011.10.27 13:37:25 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.10.27 13:32:18 | 000,000,000 | -HSD | C] -- C:\System Volume Information
========== Files - Modified Within 30 Days ==========
[2011.11.10 10:03:16 | 000,002,475 | ---- | M] () -- C:\Users\Sylvester\Desktop\Microsoft Office Word 2003.lnk
[2011.11.10 09:55:04 | 000,664,044 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.11.10 09:55:04 | 000,625,384 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.11.10 09:55:04 | 000,142,416 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.11.10 09:55:04 | 000,116,946 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.11.10 09:48:17 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.11.10 09:47:10 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.11.10 09:47:10 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.11.10 09:47:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.11.10 09:46:33 | 3219,316,736 | -HS- | M] () -- C:\hiberfil.sys
[2011.11.10 09:34:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.11.08 10:31:36 | 000,001,703 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Reader.lnk
[2011.11.03 07:02:19 | 000,000,669 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.11.02 12:49:54 | 000,000,000 | ---- | M] () -- C:\Users\Sylvester\defogger_reenable
[2011.11.02 07:18:03 | 000,000,306 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2011.11.01 13:31:27 | 000,000,870 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk
[2011.10.31 10:27:23 | 019,981,960 | ---- | M] () -- C:\Program Files\Realtek_R190-[Guru3D.com].exe
[2011.10.31 10:25:52 | 021,499,867 | ---- | M] () -- C:\Program Files\Realtek_R191-[Guru3D.com].exe
[2011.10.31 09:43:19 | 031,126,033 | ---- | M] () -- C:\Program Files\6305_Vista_Win7_PG537.zip
[2011.10.30 05:45:36 | 000,002,701 | ---- | M] () -- C:\Users\Sylvester\Desktop\Microsoft Office Excel 2003.lnk
[2011.10.29 09:42:43 | 000,001,024 | ---- | M] () -- C:\Users\Sylvester\.rnd
[2011.10.29 09:24:45 | 000,018,316 | ---- | M] () -- C:\Users\Sylvester\Documents\cc_20111029_102439.reg
[2011.10.29 07:20:01 | 000,033,280 | ---- | M] () -- C:\Users\Sylvester\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.28 19:51:09 | 000,353,376 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.10.28 11:49:54 | 000,000,000 | ---- | M] () -- C:\Windows\AutoPlayDesign.INI
[2011.10.28 09:25:58 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011.10.28 08:49:38 | 000,437,862 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011.10.28 08:39:24 | 000,019,360 | ---- | M] () -- C:\Users\Sylvester\Documents\cc_20111028_093915.reg
[2011.10.27 23:08:39 | 000,000,216 | ---- | M] () -- C:\Users\Sylvester\Desktop\E-Mail.lnk
[2011.10.27 22:01:58 | 000,000,732 | ---- | M] () -- C:\Users\Sylvester\Desktop\IrfanView Thumbnails.lnk
[2011.10.27 21:28:58 | 000,000,400 | ---- | M] () -- C:\Windows\ODBC.INI
[2011.10.27 20:48:55 | 000,000,693 | ---- | M] () -- C:\Users\Sylvester\Desktop\UseNeXT.lnk
[2011.10.27 16:53:49 | 000,101,720 | ---- | M] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[2011.10.27 16:44:32 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011.10.27 16:40:12 | 000,421,442 | -H-- | M] () -- C:\Windows\System32\drivers\vsconfig.xml
[2011.10.27 16:37:24 | 000,005,977 | ---- | M] () -- C:\Windows\System32\vsconfig.xml
[2011.10.27 14:31:04 | 000,000,680 | ---- | M] () -- C:\Users\Sylvester\AppData\Local\d3d9caps.dat
[2011.10.27 14:30:54 | 000,000,953 | ---- | M] () -- C:\Users\Sylvester\Desktop\Internet Explorer.lnk
[2011.10.27 14:25:10 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011.10.27 14:25:10 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011.10.27 14:25:02 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011.10.27 13:48:38 | 000,000,097 | ---- | M] () -- C:\Users\Sylvester\AppData\Local\fusioncache.dat
[2011.10.27 13:42:08 | 000,060,826 | ---- | M] () -- C:\Windows\System32\license.rtf
[2011.10.25 16:13:44 | 000,017,704 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll
[2011.10.25 16:13:42 | 000,026,408 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll
========== Files Created - No Company Name ==========
[2011.11.08 10:31:36 | 000,001,872 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro PDF Reader 2.lnk
[2011.11.08 10:31:36 | 000,001,703 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Reader.lnk
[2011.11.03 07:02:19 | 000,000,669 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.11.03 07:02:19 | 000,000,669 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011.11.02 12:49:54 | 000,000,000 | ---- | C] () -- C:\Users\Sylvester\defogger_reenable
[2011.11.02 07:18:03 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011.11.01 13:14:43 | 000,000,870 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk
[2011.11.01 13:14:43 | 000,000,870 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities.lnk
[2011.10.31 11:00:16 | 3219,316,736 | -HS- | C] () -- C:\hiberfil.sys
[2011.10.31 10:59:01 | 000,000,553 | ---- | C] () -- C:\Windows\USetup.iss
[2011.10.31 10:23:16 | 019,981,960 | ---- | C] () -- C:\Program Files\Realtek_R190-[Guru3D.com].exe
[2011.10.31 10:22:27 | 021,499,867 | ---- | C] () -- C:\Program Files\Realtek_R191-[Guru3D.com].exe
[2011.10.31 09:34:59 | 031,126,033 | ---- | C] () -- C:\Program Files\6305_Vista_Win7_PG537.zip
[2011.10.31 08:51:13 | 000,000,817 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
[2011.10.29 09:43:35 | 000,774,144 | ---- | C] () -- C:\Windows\System32\NEROINSTAEC43759.DB
[2011.10.29 09:42:41 | 000,001,024 | ---- | C] () -- C:\Users\Sylvester\.rnd
[2011.10.29 09:24:42 | 000,018,316 | ---- | C] () -- C:\Users\Sylvester\Documents\cc_20111029_102439.reg
[2011.10.29 07:48:29 | 000,000,858 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Fix it Center.lnk
[2011.10.28 11:49:54 | 000,000,000 | ---- | C] () -- C:\Windows\AutoPlayDesign.INI
[2011.10.28 09:25:58 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011.10.28 08:48:57 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs
[2011.10.28 08:48:57 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl
[2011.10.28 08:48:56 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml
[2011.10.28 08:39:18 | 000,019,360 | ---- | C] () -- C:\Users\Sylvester\Documents\cc_20111028_093915.reg
[2011.10.27 22:01:58 | 000,000,732 | ---- | C] () -- C:\Users\Sylvester\Desktop\IrfanView Thumbnails.lnk
[2011.10.27 21:28:58 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.10.27 21:28:22 | 000,002,701 | ---- | C] () -- C:\Users\Sylvester\Desktop\Microsoft Office Excel 2003.lnk
[2011.10.27 21:28:22 | 000,002,475 | ---- | C] () -- C:\Users\Sylvester\Desktop\Microsoft Office Word 2003.lnk
[2011.10.27 20:15:59 | 000,000,693 | ---- | C] () -- C:\Users\Sylvester\Desktop\UseNeXT.lnk
[2011.10.27 19:49:51 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011.10.27 18:27:22 | 000,000,641 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Twin.lnk
[2011.10.27 18:18:46 | 002,501,921 | ---- | C] () -- C:\Windows\System32\wlan.tmf
[2011.10.27 16:55:32 | 000,000,216 | ---- | C] () -- C:\Users\Sylvester\Desktop\E-Mail.lnk
[2011.10.27 16:37:24 | 000,005,977 | ---- | C] () -- C:\Windows\System32\vsconfig.xml
[2011.10.27 16:36:51 | 000,421,442 | -H-- | C] () -- C:\Windows\System32\drivers\vsconfig.xml
[2011.10.27 16:30:35 | 000,001,104 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.10.27 16:30:34 | 000,001,100 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.10.27 14:32:36 | 000,033,280 | ---- | C] () -- C:\Users\Sylvester\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.27 14:31:04 | 000,000,680 | ---- | C] () -- C:\Users\Sylvester\AppData\Local\d3d9caps.dat
[2011.10.27 14:25:02 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011.10.27 14:02:42 | 000,392,170 | ---- | C] () -- C:\Windows\System32\onex.tmf
[2011.10.27 14:02:41 | 000,009,212 | ---- | C] () -- C:\Windows\System32\RacUR.xml
[2011.10.27 14:02:41 | 000,000,153 | ---- | C] () -- C:\Windows\System32\RacUREx.xml
[2011.10.27 14:02:38 | 000,344,698 | ---- | C] () -- C:\Windows\System32\eaphost.tmf
[2011.10.27 14:02:37 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2011.10.27 14:02:36 | 000,442,788 | ---- | C] () -- C:\Windows\System32\dot3.tmf
[2011.10.27 14:02:26 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex
[2011.10.27 14:02:25 | 000,208,966 | ---- | C] () -- C:\Windows\System32\WFP.TMF
[2011.10.27 14:02:22 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2011.10.27 14:02:22 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2011.10.27 14:02:21 | 000,092,918 | ---- | C] () -- C:\Windows\System32\slmgr.vbs
[2011.10.27 14:02:21 | 000,009,239 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man
[2011.10.27 14:02:20 | 000,130,008 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
[2011.10.27 13:48:38 | 000,000,097 | ---- | C] () -- C:\Users\Sylvester\AppData\Local\fusioncache.dat
[2011.10.27 13:48:28 | 000,000,953 | ---- | C] () -- C:\Users\Sylvester\Desktop\Internet Explorer.lnk
[2011.10.27 13:48:24 | 000,000,948 | ---- | C] () -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2011.10.27 13:48:10 | 000,000,919 | ---- | C] () -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
[2009.12.03 08:27:30 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2008.04.30 11:12:26 | 000,299,008 | ---- | C] () -- C:\Windows\System32\midas.dll
[2008.04.30 11:12:26 | 000,120,320 | ---- | C] () -- C:\Windows\System32\UnzDll.dll
[2008.04.30 10:28:46 | 000,000,052 | ---- | C] () -- C:\Windows\System32\drivers\VERSION.DAT
[2008.04.01 14:13:07 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2008.04.01 14:13:06 | 000,006,768 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2008.03.31 11:55:09 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2008.01.21 08:15:58 | 000,664,044 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 08:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 08:15:58 | 000,142,416 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 08:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 000,353,376 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,625,384 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,116,946 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
========== LOP Check ==========
[2011.10.28 00:33:22 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Ashampoo
[2011.10.27 16:39:57 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\CheckPoint
[2011.11.08 10:28:04 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Downloaded Installations
[2011.10.27 18:35:08 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Gutscheinmieze
[2011.11.01 05:51:14 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Nitro PDF
[2011.10.27 23:22:59 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Softplicity
[2011.11.01 13:14:33 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\TuneUp Software
[2011.11.04 09:59:00 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Ulead Systems
[2011.11.10 09:45:01 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\UseNeXT
[2011.10.31 10:01:22 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\xplugin
[2011.11.10 09:45:19 | 000,032,596 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2011.10.27 13:48:33 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2011.10.28 12:46:06 | 000,000,000 | -HSD | M] -- C:\Boot
[2006.11.02 14:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.10.27 13:44:30 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.10.27 20:59:20 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2008.04.11 13:08:14 | 000,000,000 | ---D | M] -- C:\MyWorks
[2011.11.03 07:02:07 | 000,000,000 | R--D | M] -- C:\Program Files
[2011.11.02 07:18:03 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.10.27 13:44:30 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.11.10 10:06:12 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.10.28 11:43:15 | 000,000,000 | R--D | M] -- C:\Users
[2011.11.10 09:47:42 | 000,000,000 | ---D | M] -- C:\Windows
< %PROGRAMFILES%\*.exe >
[2011.10.31 10:27:23 | 019,981,960 | ---- | M] () -- C:\Program Files\Realtek_R190-[Guru3D.com].exe
[2011.10.31 10:25:52 | 021,499,867 | ---- | M] () -- C:\Program Files\Realtek_R191-[Guru3D.com].exe
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.manifest /3 >
< MD5 for: EXPLORER.EXE >
[2009.04.10 22:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009.04.10 22:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
< MD5 for: REGEDIT.EXE >
[2008.01.21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\regedit.exe
[2008.01.21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\regedit.exe
< MD5 for: USERINIT.EXE >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
< MD5 for: WININIT.EXE >
[2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe
[2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
< MD5 for: WINLOGON.EXE >
[2009.04.10 22:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009.04.10 22:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-11-10 04:57:35
========== Alternate Data Streams ==========
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:763FFD2C
< End of report >
--- --- --- |
