Trojaner-Board - GVU Trojaner Windows XP - abgesicherter Modus nicht möglich

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - GVU Trojaner Windows XP - abgesicherter Modus nicht möglich - windowsunlocker ohne Erfolg (https://www.trojaner-board.de/143296-gvu-trojaner-windows-xp-abgesicherter-modus-moeglich-windowsunlocker-ohne-erfolg.html)

GVU Trojaner Windows XP - abgesicherter Modus nicht möglich - windowsunlocker ohne Erfolg

Hallo,
habe mir einen Trojaner eingefangen und komme nicht mehr ins Windows und der abgesicherte Modus ist leider nicht möglich. Beigefügt der Scan mit OTL.

VG
steff

Code:

OTL logfile created on: 10/19/2013 7:32:00 PM - Run 

OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE

Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM

Internet Explorer (Version = 7.0.5730.13)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

895.00 Mb Total Physical Memory | 680.00 Mb Available Physical Memory | 76.00% Memory free

807.00 Mb Paging File | 721.00 Mb Available in Paging File | 89.00% Paging File free

Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 67.05 Gb Total Space | 14.32 Gb Free Space | 21.36% Space Free | Partition Type: FAT32

Drive D: | 40.79 Gb Total Space | 5.70 Gb Free Space | 13.98% Space Free | Partition Type: FAT32

Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: REATOGO | User Name: SYSTEM

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

Using ControlSet: ControlSet001

 
 ========== Win32 Services (SafeList) ==========

 

SRV - [2013/10/11 22:11:40 | 000,188,416 | ---- | M] (Nolet Jeneverstokerij Corporation) [Auto] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz -- (winmgmt)

SRV - [2013/09/06 12:39:30 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2013/09/06 12:39:20 | 000,815,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Disabled] -- C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)

SRV - [2013/09/06 12:39:18 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2013/05/20 12:50:50 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013/02/21 10:34:20 | 000,012,800 | ---- | M] () [Auto] -- C:\Programme\Haufe\iDesk\iDeskService\iDeskService.exe -- (HRService)

SRV - [2013/02/11 12:19:52 | 000,663,184 | ---- | M] (Star Finanz-Software Entwicklung und Vertriebs GmbH) [Disabled] -- C:\Programme\StarMoney Business 6.0\ouservice\StarMoneyOnlineUpdate.exe -- (StarMoney Business 6.0 OnlineUpdate)

SRV - [2012/12/04 19:35:56 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)

SRV - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2008/11/24 02:00:00 | 000,077,312 | ---- | M] (DATEV eG) [Disabled] -- D:\DATEV\PROGRAMM\B0001442\PSNTServ.exe -- (DatevPrintService)

SRV - [2008/11/20 02:42:00 | 000,141,408 | ---- | M] (DATEV eG) [Disabled] -- D:\DATEV\PROGRAMM\INSTALL\DvInesASDSvc.Exe -- (DATEV Update-Service)

SRV - [2008/10/10 17:43:58 | 000,239,200 | ---- | M] (DATEV eG) [Disabled] -- D:\DATEV\PROGRAMM\B0000347\ScMgmt\SCardService.exe -- (SCardService)

SRV - [2008/09/22 08:47:14 | 000,176,128 | ---- | M] (DATEV eG) [Disabled] -- D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DcManag.exe -- (Dcmanag)

SRV - [2008/09/13 14:05:48 | 001,425,408 | ---- | M] (DATEV eG) [Disabled] -- D:\DATEV\PROGRAMM\B0000150\ScServer\DVckService.exe -- (DVckService)

SRV - [2008/08/14 11:20:58 | 000,057,344 | ---- | M] (KOBIL Systems) [Auto] -- D:\DATEV\PROGRAMM\B0001356\SpdyScProcessSrv.exe -- (KOBIL Container Encryption Control1)

SRV - [2008/08/06 14:18:00 | 000,172,032 | ---- | M] (DATEV eG) [Disabled] -- D:\DATEV\PROGRAMM\B0001364\DTVSCSer.exe -- (DVSmartCardLogon)

SRV - [2008/05/09 17:12:18 | 000,118,784 | ---- | M] (KOBIL Systems GmbH) [Auto] -- C:\Programme\Kobil Systems\Kobil mIDentity\msdisrv.exe -- (KOBIL_MSDI)

SRV - [2008/03/19 12:30:46 | 002,558,464 | ---- | M] (Aladdin Knowledge Systems Ltd.) [On_Demand] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms)

SRV - [2006/04/24 14:25:44 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Disabled] -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe -- (LightScribeService)

SRV - [2004/10/22 02:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand] --  -- (WDICA)

DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)

DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)

DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)

DRV - File not found [Kernel | System] --  -- (PCIDump)

DRV - File not found [Kernel | System] --  -- (lbrtfdc)

DRV - File not found [Kernel | System] --  -- (i2omgmt)

DRV - File not found [Kernel | System] --  -- (Changer)

DRV - [2013/09/06 12:39:32 | 000,136,672 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2013/09/06 12:39:32 | 000,088,840 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2013/07/28 21:04:56 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)

DRV - [2013/07/28 21:04:56 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2010/04/30 19:52:08 | 000,020,168 | ---- | M] (Cavium Networks) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SSLDrv.sys -- (SSLDrv)

DRV - [2009/12/07 19:53:12 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)

DRV - [2008/12/26 17:39:02 | 000,101,376 | ---- | M] (Protect Software GmbH) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ACEDRV07.sys -- (ACEDRV07)

DRV - [2008/08/08 17:01:00 | 000,019,712 | ---- | M] (KOBIL Systems) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\d3_kafm.sys -- (SC_Serv3D)

DRV - [2008/05/31 12:26:38 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2008/03/18 15:09:16 | 000,350,720 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)

DRV - [2008/02/11 15:55:04 | 000,586,240 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)

DRV - [2007/04/25 04:39:00 | 000,053,248 | ---- | M] (SCM Microsystems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SCR3XX2K.sys -- (SCR3XX2K)

DRV - [2007/02/02 00:03:24 | 001,975,296 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)

DRV - [2007/01/24 02:01:00 | 000,007,680 | ---- | M] (SCM Microsystems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\STCFUx32.sys -- (STCFUx32)

DRV - [2006/11/22 10:01:48 | 000,100,096 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb)

DRV - [2006/11/22 10:01:46 | 000,327,168 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp)

DRV - [2006/11/02 18:32:30 | 004,394,496 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2006/10/12 16:28:42 | 000,604,928 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)

DRV - [2006/08/13 20:40:24 | 000,027,776 | ---- | M] (Attansic Technology corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\atl02_xp.sys -- (AtcL002)

DRV - [2006/04/06 01:00:00 | 000,264,704 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB)

DRV - [2006/03/21 08:04:24 | 000,889,472 | ---- | M] (Motorola Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)

DRV - [2006/01/24 10:45:56 | 000,034,944 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ipswuio.sys -- (ipswuio)

DRV - [2005/11/08 11:57:06 | 000,025,984 | ---- | M] (KOBIL Systems GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\KOBCCEX.sys -- (KOBCCEX)

DRV - [2005/11/08 11:56:54 | 000,118,912 | ---- | M] (KOBIL Systems GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\KOBCCID.sys -- (KOBCCID)

DRV - [2005/02/17 08:07:48 | 000,005,632 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)

DRV - [2004/05/27 19:13:04 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\ATK0100\ASNDIS5.sys -- (ASNDIS5)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.asus.com

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.asus.com

 

IE - HKU\chef_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = https://87.139.200.94/

IE - HKU\chef_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\chef_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box;192.168.178.1;*.local

 

IE - HKU\LocalService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.asus.com

 

IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.asus.com

 

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@siz.de/SIZCHIP,version=2.0.0.4: C:\Programme\SIZ\SIZCHIP-Plugin\Mozilla-20\npSIZCHIP-Plugin-Mozilla-2004.dll (SIZ Informatikzentrum der Sparkassenorganisation GmbH)

FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2013/05/20 12:50:34 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2013/05/20 12:50:34 | 000,000,000 | ---D | M]

 

[2013/05/20 12:50:52 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions

[2013/05/20 12:50:52 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2009/10/29 13:37:24 | 000,348,160 | ---- | M] (SIZ GmbH, Bonn, Germany) -- C:\Programme\mozilla firefox\plugins\npSIZCHIP_PLUGIN_MOZ_1702.dll

[2012/08/14 17:49:30 | 000,171,136 | ---- | M] (Tracker Software Products (Canada) Ltd.) -- C:\Programme\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll

 

O1 HOSTS File: ([2006/02/28 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (SCardBHOEvent Class) - {AF8CD625-E04A-4A8F-A90A-0C74846C2E30} - D:\DATEV\SYSTEM\DVCCSASCardBHO002.dll (DATEV eG)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKU\chef_ON_C\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.

O3 - HKU\chef_ON_C\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.

O4 - HKLM..\Run: [ACMON] C:\Programme\ASUS\Splendid\ACMON.exe (ATK)

O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [ATKMEDIA] C:\Programme\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe (ASUSTeK COMPUTER INC.)

O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)

O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()

O4 - HKLM..\Run: [LexwareInfoService] C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe (Haufe-Lexware GmbH & Co. KG)

O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)

O4 - HKLM..\Run: [Power_Gear] C:\Programme\ASUS\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.)

O4 - HKLM..\Run: [PowerForPhone] C:\Programme\ASUS\PowerForPhone\PowerForPhone.exe ()

O4 - HKLM..\Run: [RemoteControl] C:\Programme\ASUSTek\ASUSDVD\PDVDServ.exe (Cyberlink Corp.)

O4 - HKLM..\Run: [SMB60StarMoneyRunEntry] C:\Programme\StarMoney Business 6.0\app\oflagent.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH)

O4 - HKLM..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Programme\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)

O4 - HKLM..\Run: [Wireless Console 2] C:\Programme\Wireless Console 2\wcourier.exe ()

O4 - HKU\Administrator_ON_C..\Run: []  File not found

O4 - HKU\Administrator_ON_C..\Run: [ASUSTPE] C:\WINDOWS\system32\ASUSTPE.exe (ASUS)

O4 - HKU\Administrator_ON_C..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()

O4 - HKU\chef_ON_C..\Run: []  File not found

O4 - HKU\chef_ON_C..\Run: [ASUSTPE] C:\WINDOWS\system32\ASUSTPE.exe (ASUS)

O4 - HKU\chef_ON_C..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader Synchronizer.lnk = C:\Programme\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Quicken Jubiläumsversion Zahlungserinnerung.lnk = C:\WINDOWS\Installer\{A907A713-DA24-4352-8786-96C7A6944646}\BillMinder.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)

O4 - Startup: C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\chef_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O15 - HKU\chef_ON_C\..Trusted Domains: datev.de ([www] http is out of zone range -  5)

O15 - HKU\chef_ON_C\..Trusted Domains: datev.de ([www] https is out of zone range -  5)

O16 - DPF: {19DFFB5D-E30A-4E3B-8524-0AD8F4D88D32} https://87.139.200.94/XTunnel.cab (VPLaunch Class)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Reg Error: Value error.)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)

O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1

O18 - Protocol\Handler\haufereader - No CLSID value found

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O20 - Winlogon\Notify\DVCCSA: DllName - DVCCSAnotify002.dll - C:\WINDOWS\System32\DVCCSAnotify002.dll (DATEV eG)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: 

O24 - Desktop BackupWallPaper: 

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2007/10/22 04:14:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]

O32 - AutoRun File - [2013/10/12 17:04:00 | 000,000,000 | ---D | M] - D:\AutoSicherung -- [ FAT32 ]

O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013/10/13 12:09:20 | 000,000,000 | -HSD | C] -- C:\FOUND.017

[2013/10/12 19:54:37 | 000,000,000 | ---D | C] -- C:\WINDOWS

[2013/10/12 19:23:32 | 000,000,000 | -HSD | C] -- C:\FOUND.016

[2013/10/12 19:01:05 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\chef\Eigene Dateien

[2013/10/11 22:26:10 | 000,000,000 | -HSD | C] -- C:\FOUND.015

[2013/10/11 22:11:38 | 000,188,416 | ---- | C] (Nolet Jeneverstokerij Corporation) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz

[2013/10/02 20:10:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\StreamTransport

[2013/10/02 19:37:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\StreamTransport

[2013/10/02 19:37:16 | 003,982,240 | ---- | C] (Adobe Systems, Inc.) -- C:\WINDOWS\System32\Flash10d.ocx

[2013/10/02 19:37:16 | 000,000,000 | ---D | C] -- C:\Programme\StreamTransport

[2 C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp files -> C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013/10/13 20:07:40 | 000,002,449 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Quicken Jubiläumsversion Zahlungserinnerung.lnk

[2013/10/13 20:07:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2013/10/13 20:07:10 | 938,725,376 | -HS- | M] () -- C:\hiberfil.sys

[2013/10/13 12:13:18 | 095,025,368 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.pff

[2013/10/13 12:11:52 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2013/10/13 12:10:24 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.ctrl

[2013/10/13 11:56:42 | 000,000,188 | ---- | M] () -- C:\ASWL2K.ini

[2013/10/11 22:11:46 | 000,000,706 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk

[2013/10/11 22:11:40 | 000,188,416 | ---- | M] (Nolet Jeneverstokerij Corporation) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz

[2013/10/11 21:50:28 | 000,001,724 | -H-- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Default.rdp

[2013/10/10 22:13:10 | 000,002,393 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Quicken Jubiläumsversion.lnk

[2013/10/07 21:59:44 | 000,026,748 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\FRITZ!Box_Anrufliste.csv

[2013/10/06 22:45:14 | 001,115,416 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_unterwegs_zu_den_besten_weinlagen.pdf

[2013/10/06 22:40:20 | 001,068,382 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_kulturflyer_museen.pdf

[2013/10/06 21:02:48 | 364,389,376 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\outlook.pst

[2013/10/06 20:57:58 | 000,002,601 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk

[2013/10/06 20:55:02 | 000,002,411 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Quicken Jubiläumsversion.lnk

[2013/10/05 18:31:26 | 000,299,900 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\folge9.pdf

[2013/10/05 10:46:44 | 000,000,422 | ---- | M] () -- C:\WINDOWS\cdplayer.ini

[2013/10/03 22:15:30 | 000,002,531 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Excel.lnk

[2013/10/03 22:12:28 | 000,002,495 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Word.lnk

[2013/10/02 22:35:18 | 004,529,935 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Video  Wahlkampffinale in Eschborn Schlammschlacht vor der Stichwahl  Nachrichten  hr-online.de.flv

[2013/10/02 22:30:06 | 018,408,182 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\2. Oktober 2013 Die Videos vom Mittwoch  Fernsehen  hr-online.de.flv

[2013/10/02 21:02:14 | 000,098,855 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Readiris.DUS

[2013/10/02 19:37:20 | 000,000,584 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ StreamTransport.lnk

[2013/10/02 19:37:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\StreamTransport

[2013/10/01 18:50:36 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe

[2013/10/01 18:50:34 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl

[2 C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp files -> C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013/10/12 10:53:42 | 938,725,376 | -HS- | C] () -- C:\hiberfil.sys

[2013/10/11 22:11:45 | 000,000,706 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk

[2013/10/11 22:11:45 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.ctrl

[2013/10/11 22:11:40 | 095,025,368 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.pff

[2013/10/07 21:59:49 | 000,026,748 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\FRITZ!Box_Anrufliste.csv

[2013/10/06 22:45:15 | 001,115,416 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_unterwegs_zu_den_besten_weinlagen.pdf

[2013/10/06 22:40:24 | 001,068,382 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_kulturflyer_museen.pdf

[2013/10/05 18:31:35 | 000,299,900 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\folge9.pdf

[2013/10/02 22:34:42 | 004,529,935 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Video  Wahlkampffinale in Eschborn Schlammschlacht vor der Stichwahl  Nachrichten  hr-online.de.flv

[2013/10/02 22:27:11 | 018,408,182 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\2. Oktober 2013 Die Videos vom Mittwoch  Fernsehen  hr-online.de.flv

[2013/10/02 19:37:18 | 000,000,584 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ StreamTransport.lnk

[2013/09/14 22:45:29 | 000,089,032 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat

[2013/03/24 14:34:46 | 000,000,040 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\cdr.ini

[2013/03/23 13:21:14 | 000,000,422 | ---- | C] () -- C:\WINDOWS\cdplayer.ini

[2013/01/14 23:08:53 | 000,028,040 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat

[2012/03/29 10:52:10 | 000,138,608 | ---- | C] () -- C:\WINDOWS\System32\LxDNTvmc100.dll

[2012/03/29 10:52:10 | 000,074,608 | ---- | C] () -- C:\WINDOWS\System32\LxDNTvm100.dll

[2012/03/29 10:52:08 | 000,309,616 | ---- | C] () -- C:\WINDOWS\System32\LxDNT100.dll

[2012/02/15 11:39:40 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll

[2012/02/12 22:28:18 | 000,001,263 | ---- | C] () -- C:\WINDOWS\isxdlge2.ini

[2010/12/11 23:19:32 | 000,000,054 | ---- | C] () -- C:\WINDOWS\Player.INI

[2010/05/02 21:12:39 | 000,017,408 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db

[2010/04/30 19:52:08 | 000,029,384 | ---- | C] () -- C:\WINDOWS\UninstallVTPassage.exe

[2010/04/14 20:49:12 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll

[2010/04/14 20:49:12 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe

[2010/02/01 20:49:22 | 000,000,136 | ---- | C] () -- C:\WINDOWS\Readiris.ini

[2009/11/09 20:03:44 | 000,000,023 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\.SIG_TYP_VOREINSTELLUNG

[2009/10/08 19:13:23 | 000,097,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\Fwusb1b.bin

[2009/09/30 12:05:48 | 000,290,816 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v60.dll

[2009/06/28 20:23:35 | 000,000,021 | ---- | C] () -- C:\WINDOWS\KurusDeinstall.INI

[2009/05/10 23:15:32 | 000,000,019 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\mdbu.bin

[2009/04/06 19:32:41 | 000,014,616 | ---- | C] () -- C:\WINDOWS\System32\skypdfmonpro.dll

[2009/04/06 19:32:41 | 000,012,568 | ---- | C] () -- C:\WINDOWS\System32\skypdfmonuipro.dll

[2009/03/30 21:08:36 | 000,000,021 | ---- | C] () -- C:\WINDOWS\DvInesKurusOleServer003.INI

[2009/03/30 21:01:10 | 000,000,497 | ---- | C] () -- C:\WINDOWS\System32\ASUS.jrf.init

[2009/02/18 23:22:51 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2009/02/18 23:22:47 | 000,005,632 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009/02/03 18:49:58 | 000,000,090 | ---- | C] () -- C:\WINDOWS\Formular.INI

[2008/11/26 22:37:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2008/10/30 18:00:22 | 000,048,640 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v60.dll

[2008/10/30 17:59:24 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v60.dll

[2008/10/26 17:01:07 | 000,000,834 | ---- | C] () -- C:\WINDOWS\HBCIKRNL.INI

[2008/10/10 17:45:02 | 000,038,496 | ---- | C] () -- C:\WINDOWS\System32\JNILibrary.dll

[2008/10/10 17:44:54 | 000,112,224 | ---- | C] () -- C:\WINDOWS\System32\INetCert.dll

[2008/08/06 14:16:44 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\DtvEventHandler.dll

[2008/01/05 21:17:46 | 000,000,027 | ---- | C] () -- C:\WINDOWS\VIPZKA.INI

[2007/11/12 17:45:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\netop.ini

[2007/11/12 17:35:02 | 000,000,021 | ---- | C] () -- C:\WINDOWS\DvInesKurusOleServer002.INI

[2007/11/12 17:34:49 | 000,000,094 | ---- | C] () -- C:\WINDOWS\dvinesinstalllocation001.INI

[2007/11/12 17:34:48 | 000,000,094 | ---- | C] () -- C:\WINDOWS\dvinesinstart001.INI

[2007/11/12 17:34:46 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Startup.INI

[2007/11/11 13:25:32 | 000,000,523 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2007/11/10 21:31:55 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat

[2007/10/22 05:07:10 | 000,537,600 | ---- | C] () -- C:\WINDOWS\System32\ASWL2K.exe

[2007/10/22 05:07:10 | 000,496,640 | ---- | C] () -- C:\WINDOWS\System32\ASWLSVC.exe

[2007/10/22 05:07:10 | 000,159,827 | ---- | C] () -- C:\WINDOWS\System32\RemSvc.exe

[2007/10/22 05:06:51 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll

[2007/10/22 04:38:31 | 000,987,136 | ---- | C] () -- C:\WINDOWS\System32\wcourier.exe

[2007/10/22 04:36:44 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe

[2007/10/22 04:28:58 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat

[2007/10/22 04:18:48 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini

[2007/10/22 04:17:53 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2007/10/22 04:12:42 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2007/10/22 04:08:36 | 000,004,335 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2007/10/22 04:07:58 | 000,161,136 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2007/10/21 23:12:31 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2007/02/01 23:40:09 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat

[2007/01/29 20:21:33 | 000,128,813 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat

[2006/08/17 17:42:55 | 000,007,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS

[2006/08/17 17:42:55 | 000,002,538 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI

[2006/08/17 17:42:41 | 000,582,956 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat

[2006/08/17 17:42:41 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat

[2006/08/17 17:42:41 | 000,129,728 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat

[2006/08/17 17:42:41 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat

[2006/08/17 17:42:27 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2006/08/17 17:42:24 | 000,546,554 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2006/08/17 17:42:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2006/08/17 17:42:24 | 000,105,596 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2006/08/17 17:42:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2006/08/17 17:42:23 | 000,004,487 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2006/08/17 17:42:19 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2006/08/17 17:42:17 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2006/08/17 17:42:14 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2006/08/17 17:42:14 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2006/08/17 17:42:11 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2006/08/17 17:42:01 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin

[2005/02/17 08:07:47 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys

[2004/12/14 17:55:22 | 000,000,019 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v50.dll

[2004/12/14 17:55:22 | 000,000,019 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v50.dll

[1999/01/19 15:18:30 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\LFPNG60N.DLL

[1999/01/19 15:18:30 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\LFTIF60N.DLL

[1999/01/19 15:18:30 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\LTFIL60N.DLL

[1999/01/19 15:18:30 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\LFPSD60N.DLL

[1999/01/19 15:18:30 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\LFTGA60N.DLL

[1999/01/19 15:18:30 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\LFWPG60N.DLL

[1999/01/19 15:18:30 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\LFWMF60N.DLL

[1999/01/19 15:18:28 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\LFFAX60N.DLL

[1999/01/19 15:18:28 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\LFCMP60N.DLL

[1999/01/19 15:18:28 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\LFPCX60N.DLL

[1999/01/19 15:18:28 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\LFPCT60N.DLL

[1999/01/19 15:18:28 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\LFEPS60N.DLL

[1999/01/19 15:18:28 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\LFBMP60N.DLL

[1999/01/19 15:18:28 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\LFMSP60N.DLL

[1999/01/19 15:18:28 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\LFMAC60N.DLL

[1995/02/15 00:11:00 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\IMPLODE.DLL

 
 ========== LOP Check ==========

 

[2013/07/28 21:14:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Opera

[2007/11/10 18:26:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Opera

[2007/11/20 00:05:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\SkyCom

[2008/06/06 18:04:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\GMX

[2008/06/29 12:39:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Haufe

[2008/10/26 17:08:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\SCCmdr

[2009/03/30 21:20:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\DATEV

[2009/11/18 21:36:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Lexware

[2010/01/07 20:21:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\OpenOffice.org

[2010/06/16 21:59:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Foxit Software

[2010/11/06 22:49:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\PaymentNetwork

[2011/02/01 16:04:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Haufe Mediengruppe

[2011/03/27 20:59:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Sync App Settings

[2011/03/31 18:57:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Dropbox

[2011/12/10 21:37:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Aquamarin Haushaltsbuch

[2011/12/25 17:10:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\SmartLine

[2011/12/25 17:26:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\SIZ

[2012/01/15 18:37:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Hulubulu

[2012/02/12 22:28:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Chipcardmaster

[2012/03/02 18:27:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\elsterformular

[2012/07/03 20:19:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\DataDesign

[2012/11/26 20:44:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\TeamViewer

[2013/01/01 12:37:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\FreeFileSync

[2013/03/06 21:15:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\www.rene-zeidler.de

[2013/03/24 14:34:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Eusing

[2013/08/09 21:05:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Opera Software

[2013/08/09 21:26:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Opera Mail

[2007/12/19 22:52:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ProCheckViewer

[2008/06/06 18:04:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\GMX

[2008/06/29 12:39:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Haufe

[2008/10/26 16:55:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Software

[2009/04/06 19:32:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SkyCom

[2009/11/18 21:16:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Lexware

[2009/11/18 21:16:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BTrieve

[2011/03/27 20:59:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sync App Settings

[2012/03/02 18:21:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\elsterformular

[2012/04/02 20:08:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp

[2013/01/14 21:56:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1

[2013/03/06 21:15:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\www.rene-zeidler.de

[2013/06/20 20:12:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarMoney Business 6.0

 
 ========== Purity Check ==========

 

 

 
 ========== Files - Unicode (All) ==========

[2013/10/13 12:13:12 | 100,708,056 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ਘ呴6

[2013/10/13 12:13:11 | 100,708,056 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ਘ呴6

[2013/10/10 21:01:56 | 100,332,977 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㾬呴6

[2013/10/10 21:01:54 | 100,332,977 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㾬呴6

[2013/10/08 18:56:20 | 099,859,239 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䊧៦呴6

[2013/10/08 18:56:19 | 099,859,239 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䊧៦呴6

[2013/10/06 21:01:56 | 099,477,982 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瞭ᥱ呴6

[2013/10/06 21:01:54 | 099,477,982 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瞭ᥱ呴6

[2013/10/02 19:25:18 | 098,834,313 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\喫疏呴6

[2013/10/02 19:25:18 | 098,834,313 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\喫疏呴6

[2013/09/25 21:01:40 | 097,858,179 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�呴6

[2013/09/25 19:20:29 | 097,858,179 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�呴6

[2013/09/24 21:02:06 | 097,540,783 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\鱃㨹呴6

[2013/09/24 18:37:01 | 097,540,783 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\鱃㨹呴6

[2013/09/20 17:21:04 | 098,481,651 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䐎�呴6

[2013/09/20 17:21:03 | 098,481,651 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䐎�呴6

[2013/09/19 19:27:32 | 098,395,704 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\֝山呴6

[2013/09/19 19:27:31 | 098,395,704 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\֝山呴6

[2013/09/17 11:08:40 | 097,931,385 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\龃ි呴6

[2013/09/17 11:08:38 | 097,931,385 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\龃ි呴6

[2013/09/13 10:54:50 | 097,446,370 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�⦊呴6

[2013/09/13 10:54:50 | 097,446,370 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�⦊呴6

[2013/09/11 19:21:40 | 097,170,353 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\煤䬧呴6

[2013/09/11 19:21:39 | 097,170,353 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\煤䬧呴6

[2013/09/08 18:27:18 | 096,566,691 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�돩呴6

[2013/09/08 18:27:16 | 096,566,691 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�돩呴6

[2013/09/06 20:58:20 | 096,462,459 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瘚呴6

[2013/09/06 20:58:18 | 096,462,459 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瘚呴6

< End of report >

hi,

Fixen mit OTL

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:

:OTL

O4 - Startup: C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)

[2013/10/13 12:13:18 | 095,025,368 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.pff

[2013/10/13 12:10:24 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.ctrl

[2013/10/11 22:11:46 | 000,000,706 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk

[2013/10/11 22:11:40 | 000,188,416 | ---- | M] (Nolet Jeneverstokerij Corporation) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz

Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

Rechner normal starten.

Hallo,
habe nach dem fixen folgende Fehlermeldung erhalten:

Error: Unable to interpret <:OTL O4 - Startup: C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation) [2013/10/13 12:13:18 | 095,025,368 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.pff [2013/10/13 12:10:24 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.ctrl [2013/10/11 22:11:46 | 000,000,706 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk [2013/10/11 22:11:40 | 000,188,416 | ---- | M] (Nolet Jeneverstokerij Corporation) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz> in the current context!

OTLPE by OldTimer - Version 3.1.48.0 log created on 10192013_234732

du machst den Fix falsch. Das muss wie oben in OTL kopiert werden.

:OTL

in zeile 1, und nur das, Rest zeile für Zeile. Du hast alles am Stück in OTL rein geballert.

OK,
hat geklappt.
Hier nun das OTL Textdokument:

Code:

========== OTL ==========

File move failed. C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk scheduled to be moved on reboot.

File move failed. X:\I386\SYSTEM32\RUNDLL32.EXE scheduled to be moved on reboot.

File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.pff not found.

File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\atjw8z9r.ctrl not found.

File C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk not found.

File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz not found.

 

OTLPE by OldTimer - Version 3.1.48.0 log created on 10202013_232121
 

Files\Folders moved on Reboot...

File\Folder X:\I386\SYSTEM32\RUNDLL32.EXE not found!

File\Folder C:\Dokumente und Einstellungen\chef\Startmenü\Programme\Autostart\atjw8z9r.lnk not found!
 

Registry entries deleted on Reboot...

Kannst Rechner normal starten?

Rechner lässt sich wieder normal starten :)

Bekomme noch eine Fehlermeldung, ich denke von der Grafikkarte:
("Sie verfügen nicht über die erforderlichen Rechte zum Ändern der Catalyst Control Center-Einstellungen. Wenden Sie sich an Ihren Administrator.")

Sollte man das System noch etwas putzen?

VG
steff

Kontrollscans im normalen modus:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die neuen Logfiles.

1. Malwarebytes:

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.10.23.09
 

Windows XP Service Pack 3 x86 FAT32

Internet Explorer 7.0.5730.13

chef :: ASUS [Administrator]
 

Schutz: Aktiviert
 

23.10.2013 22:02:47

mbam-log-2013-10-23 (22-02-47).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 246493

Laufzeit: 9 Minute(n), 33 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 2

HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bösartig: (1) Gut: (0) -> Erfolgreich ersetzt und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bösartig: (1) Gut: (0) -> Erfolgreich ersetzt und in Quarantäne gestellt.
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 3

C:\Dokumente und Einstellungen\chef\Eigene Dateien\Downloads\FreeFileSync_5.10_setup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Dokumente und Einstellungen\chef\Eigene Dateien\Downloads\agsetup183se.exe (PUP.Funmoods) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Temp\~tmf2607903791024803422.dll (Trojan.Ransom.ED) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

2. AdwCleaner:

Code:

# AdwCleaner v3.010 - Bericht erstellt am 23/10/2013 um 23:05:01

# Updated 20/10/2013 von Xplode

# Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits)

# Benutzername : chef - ASUS

# Gestartet von : C:\Dokumente und Einstellungen\chef\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Programme\Notation
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
 

***** [ Browser ] *****
 

-\\ Internet Explorer v7.0.6000.21357
 
 

-\\ Mozilla Firefox v21.0 (de)
 

[ Datei : C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Mozilla\Firefox\Profiles\1g1g8awh.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [927 octets] - [23/10/2013 22:47:28]

AdwCleaner[S0].txt - [851 octets] - [23/10/2013 23:05:01]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [910 octets] ##########

Und jetzt
3. JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.7 (10.15.2013:3)

OS: Microsoft Windows XP x86

Ran by chef on 24.10.2013 at 20:03:52,65

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 24.10.2013 at 22:13:43,39

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4. FRST:

Stürzt leider während dem Scan ab !

Gruss,
steff

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Noch Probleme?

ESET Online Scanner:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=51069a84d208ee4b9cf30121eff6950d

# engine=15631

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-10-25 12:50:36

# local_time=2013-10-25 02:50:36 (+0100, Westeuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=5.1.2600 NT Service Pack 3

# compatibility_mode=1799 16775165 100 95 8588 153380340 1279 0

# scanned=147509

# found=2

# cleaned=0

# scan_time=6235

sh=559385770C7E0FA0D7C3038B4AE4F7303DC8C62E ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.Agent.PXV trojan" ac=I fn="C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\33\4f98eb61-1f5cc8c6"

sh=A33258741A3D2FEF2AA929D9386CF6ED98CC10B2 ft=1 fh=ffed8e84e47892df vn="a variant of Win32/Kryptik.BMNC trojan" ac=I fn="C:\_OTL\MovedFiles\10202013_231922\C_Dokumente und Einstellungen\All Users\Anwendungsdaten\r9z8wjta.plz"

SecurityCheck.exe :

Code:

 Results of screen317's Security Check version 0.99.74  

 Windows XP Service Pack 3 x86   

 Internet Explorer 7 Out of date! 
 ``````````````Antivirus/Firewall Check:`````````````` 

 Windows Security Center service is not running! This report may not be accurate! 

Please wait while WMIC compiles updated MOF files. 

 WMI entry may not exist for antivirus; attempting automatic update. 

 Avira successfully updated! 
 `````````Anti-malware/Other Utilities Check:````````` 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 CCleaner     

 Java(TM) 6 Update 21  

 Java 7 Update 9  

 Java(TM) 6 Update 2  

 Java version out of Date! 

 Adobe Flash Player 10 Flash Player out of Date! 

 Adobe Flash Player         11.8.800.168  

 Adobe Reader 8 Adobe Reader out of Date! 

 Mozilla Firefox (fuer.) 
 ````````Process Check: objlist.exe by Laurent````````  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C::  
 ````````````````````End of Log``````````````````````

FSS Farbar Service Scanner :

Code:

Farbar Service Scanner Version: 24-10-2013

Ran by chef (administrator) on 25-10-2013 at 15:35:28

Running from "C:\Dokumente und Einstellungen\chef\Eigene Dateien\Downloads"

Microsoft Windows XP Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============

sharedaccess Service is not running. Checking service configuration:

The start type of sharedaccess service is OK.

The ImagePath of sharedaccess service is OK.

The ServiceDll of sharedaccess service is OK.
 

winmgmt Service is not running. Checking service configuration:

The start type of winmgmt service is OK.

The ImagePath of winmgmt service is OK.

The ServiceDll of winmgmt: "C:\DOKUME~1\ALLUSE~1\ANWEND~1\r9z8wjta.plz".
 
 

Firewall Disabled Policy: 

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Security Center:

============
 

wscsvc Service is not running. Checking service configuration:

The start type of wscsvc service is OK.

The ImagePath of wscsvc service is OK.

The ServiceDll of wscsvc service is OK.
 

winmgmt Service is not running. Checking service configuration:

The start type of winmgmt service is OK.

The ImagePath of winmgmt service is OK.

The ServiceDll of winmgmt: "C:\DOKUME~1\ALLUSE~1\ANWEND~1\r9z8wjta.plz".
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Other Services:

==============
 
 

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0127488 ____A (Microsoft Corporation) C29A1C9B75BA38FA37F8C44405DEC360
 

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll

[2006-08-17 17:42] - [2009-04-20 19:17] - 0045568 ____A (Microsoft Corporation) 407F3227AC618FD1CA54B335B083DE07
 

C:\WINDOWS\system32\ipnathlp.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0334336 ____A (Microsoft Corporation) CAD058D5F8B889A87CA3EB3CF624DCEF
 

C:\WINDOWS\system32\netman.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0198144 ____A (Microsoft Corporation) E6D88F1F6745BF00B57E7855A2AB696C
 

C:\WINDOWS\system32\wbem\WMIsvc.dll

[2007-10-22 04:12] - [2008-04-14 03:22] - 0145408 ____A (Microsoft Corporation) 6F3F3973D97714CC5F906A19FE883729
 

C:\WINDOWS\system32\srsvc.dll

[2007-10-22 04:13] - [2008-04-14 03:22] - 0171520 ____A (Microsoft Corporation) FE77A85495065F3AD59C5C65B6C54182
 

C:\WINDOWS\system32\Drivers\sr.sys

[2007-10-22 04:13] - [2008-04-14 03:02] - 0073472 ____A (Microsoft Corporation) 50FA898F8C032796D3B1B9951BB5A90F
 

C:\WINDOWS\system32\wscsvc.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0080896 ____A (Microsoft Corporation) 300B3E84FAF1A5C1F791C159BA28035D
 

C:\WINDOWS\system32\wbem\WMIsvc.dll

[2007-10-22 04:12] - [2008-04-14 03:22] - 0145408 ____A (Microsoft Corporation) 6F3F3973D97714CC5F906A19FE883729
 

C:\WINDOWS\system32\wuauserv.dll

[2007-10-22 04:13] - [2008-04-14 03:22] - 0006656 ____A (Microsoft Corporation) 7B4FE05202AA6BF9F4DFD0E6A0D8A085
 

C:\WINDOWS\system32\qmgr.dll

[2007-10-22 04:13] - [2008-04-14 03:22] - 0409088 ____A (Microsoft Corporation) D6F603772A789BB3228F310D650B8BD1
 

C:\WINDOWS\system32\es.dll

[2006-08-17 17:42] - [2008-07-07 22:26] - 0253952 ____A (Microsoft Corporation) AF4F6B5739D18CA7972AB53E091CBC74
 

C:\WINDOWS\system32\cryptsvc.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0062464 ____A (Microsoft Corporation) 611F824E5C703A5A899F84C5F1699E4D
 

C:\WINDOWS\system32\svchost.exe

[2006-08-17 17:42] - [2008-04-14 03:23] - 0014336 ____A (Microsoft Corporation) 4FBC75B74479C7A6F829E0CA19DF3366
 

C:\WINDOWS\system32\rpcss.dll

[2006-08-17 17:42] - [2009-02-09 12:51] - 0401408 ____A (Microsoft Corporation) 3127AFBF2C1ED0AB14A1BBB7AAECB85B
 

C:\WINDOWS\system32\services.exe

[2006-08-17 17:42] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) A3EDBE9053889FB24AB22492472B39DC
 
 

Extra List:

=======

AegisP(8) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3) 

0x080000000400000001000000020000000300000005000000060000000700000008000000

IpSec Tag value is correct.
 

**** End of log ****

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.

http://i1224.photobucket.com/albums/...3/Capture3.gif
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

http://i1224.photobucket.com/albums/...y3/Capture.gif
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

http://i1224.photobucket.com/albums/...3/Capture1.gif
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

http://i1238.photobucket.com/albums/...eakingtool.jpg

Dann nochmal ein frisches FSS log bitte.

Frisches FSS :

Code:

Farbar Service Scanner Version: 24-10-2013

Ran by chef (administrator) on 26-10-2013 at 22:54:04

Running from "C:\Dokumente und Einstellungen\chef\Eigene Dateien\Downloads"

Microsoft Windows XP Professional Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Security Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Other Services:

==============
 
 

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0127488 ____A (Microsoft Corporation) C29A1C9B75BA38FA37F8C44405DEC360
 

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll

[2006-08-17 17:42] - [2009-04-20 19:17] - 0045568 ____A (Microsoft Corporation) 407F3227AC618FD1CA54B335B083DE07
 

C:\WINDOWS\system32\ipnathlp.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0334336 ____A (Microsoft Corporation) CAD058D5F8B889A87CA3EB3CF624DCEF
 

C:\WINDOWS\system32\netman.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0198144 ____A (Microsoft Corporation) E6D88F1F6745BF00B57E7855A2AB696C
 

C:\WINDOWS\system32\wbem\WMIsvc.dll

[2007-10-22 04:12] - [2008-04-14 03:22] - 0145408 ____A (Microsoft Corporation) 6F3F3973D97714CC5F906A19FE883729
 

C:\WINDOWS\system32\srsvc.dll

[2007-10-22 04:13] - [2008-04-14 03:22] - 0171520 ____A (Microsoft Corporation) FE77A85495065F3AD59C5C65B6C54182
 

C:\WINDOWS\system32\Drivers\sr.sys

[2007-10-22 04:13] - [2008-04-14 03:02] - 0073472 ____A (Microsoft Corporation) 50FA898F8C032796D3B1B9951BB5A90F
 

C:\WINDOWS\system32\wscsvc.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0080896 ____A (Microsoft Corporation) 300B3E84FAF1A5C1F791C159BA28035D
 

C:\WINDOWS\system32\wbem\WMIsvc.dll

[2007-10-22 04:12] - [2008-04-14 03:22] - 0145408 ____A (Microsoft Corporation) 6F3F3973D97714CC5F906A19FE883729
 

C:\WINDOWS\system32\wuauserv.dll

[2007-10-22 04:13] - [2008-04-14 03:22] - 0006656 ____A (Microsoft Corporation) 7B4FE05202AA6BF9F4DFD0E6A0D8A085
 

C:\WINDOWS\system32\qmgr.dll

[2007-10-22 04:13] - [2008-04-14 03:22] - 0409088 ____A (Microsoft Corporation) D6F603772A789BB3228F310D650B8BD1
 

C:\WINDOWS\system32\es.dll

[2006-08-17 17:42] - [2008-07-07 22:26] - 0253952 ____A (Microsoft Corporation) AF4F6B5739D18CA7972AB53E091CBC74
 

C:\WINDOWS\system32\cryptsvc.dll

[2006-08-17 17:42] - [2008-04-14 03:22] - 0062464 ____A (Microsoft Corporation) 611F824E5C703A5A899F84C5F1699E4D
 

C:\WINDOWS\system32\svchost.exe

[2006-08-17 17:42] - [2008-04-14 03:23] - 0014336 ____A (Microsoft Corporation) 4FBC75B74479C7A6F829E0CA19DF3366
 

C:\WINDOWS\system32\rpcss.dll

[2006-08-17 17:42] - [2009-02-09 12:51] - 0401408 ____A (Microsoft Corporation) 3127AFBF2C1ED0AB14A1BBB7AAECB85B
 

C:\WINDOWS\system32\services.exe

[2006-08-17 17:42] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) A3EDBE9053889FB24AB22492472B39DC
 
 

Extra List:

=======

AegisP(8) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3) 

0x080000000400000001000000020000000300000005000000060000000700000008000000

IpSec Tag value is correct.
 

**** End of log ****

Gruß,
steff

Perfekt. Java, Flash und Adobe updaten, frisches FRST log bitte. Noch Probleme?

Updates vorgenommen. Erhalte keine Fehlermeldungen mehr.
Aber FRST stürzt beim Scan ab, bei "Listing Files and Folders: modules 00".

Meine Remoteverbindung funktioniert jetzt leider nicht mehr:

“Die Verbindung mit der Remotesitzung wurde getrennt, da keine Remotedesktop-Clientzugriffslizenzen für diesen Computer vorhanden sind. Wenden Sie sich an den Serveradministrator”

Welche Remotesitzung? Wohin?

FRST mal löschen und neu laden.

Nutze berufsbedingt eine Remoteverbindung mit VPN-Tunnel, die nicht mehr funktioniert.
FRST gelöscht und neu geladen, aber immer noch Absturz.

Remote funktioniert wieder.

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden ).

Doppelklick auf die OTL.exe
Oben findest Du ein Kästchen mit Ausgabe. Wähle bitte Minimal Ausgabe
Unter Extra Registry, wähle bitte Use SafeList
Klicke nun auf Run Scan links oben
Wenn der Scan beendet wurde werden 2 Logfiles erstellt
Poste die Logfiles hier in den Thread.

OTL

Extras.txt und OTL.txt als Anhang beigefügt.

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

LOG1 OTL.txt:

Code:

OTL logfile created on: 28.10.2013 22:21:37 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Dokumente und Einstellungen\chef\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

895,17 Mb Total Physical Memory | 544,27 Mb Available Physical Memory | 60,80% Memory free

2,12 Gb Paging File | 1,43 Gb Available in Paging File | 67,60% Paging File free

Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 67,05 Gb Total Space | 15,19 Gb Free Space | 22,66% Space Free | Partition Type: FAT32

Drive D: | 40,79 Gb Total Space | 8,78 Gb Free Space | 21,52% Space Free | Partition Type: FAT32

 

Computer Name: ASUS | User Name: chef | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Dokumente und Einstellungen\chef\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Programme\Java\jre7\bin\jqs.exe (Oracle Corporation)

PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)

PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)

PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)

PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Oracle Corporation)

PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)

PRC - C:\Programme\Haufe\iDesk\iDeskService\ideskservice.exe ()

PRC - C:\Programme\Haufe\iDesk\iDeskService\ideskpython.exe (Haufe Mediengruppe)

PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)

PRC - D:\DATEV\PROGRAMM\B0001356\SpdyScProcessSrv.exe (KOBIL Systems)

PRC - C:\Programme\Kobil Systems\Kobil mIDentity\msdisrv.exe (KOBIL Systems GmbH)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

PRC - C:\Program Files\ASUS\WLAN Card Utilities\Center.exe (ASUSTeK COMPUTER INC.)

PRC - C:\WINDOWS\system32\ASUSTPE.exe (ASUS)

PRC - C:\WINDOWS\ATK0100\HControl.exe ()

PRC - C:\WINDOWS\ATK0100\ATKOSD.exe ()

PRC - C:\Programme\ASUS\PowerForPhone\PowerForPhone.exe ()

PRC - C:\Programme\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)

PRC - C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)

PRC - C:\Programme\Wireless Console 2\wcourier.exe ()

PRC - C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)

PRC - C:\Programme\ASUSTek\ASUSDVD\PDVDServ.exe (Cyberlink Corp.)

 

 
 ========== Modules (No Company Name) ==========

 

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\831dbfef30e7b3ab3762828c90009ef2\System.Web.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\5124ccb5fd86d4cfd148aa072a9c12cd\System.Configuration.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9b1207cbcb48bd2f1adf4862337b6547\System.Xml.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c6c9f7be272b9300c8156943c96d25d3\System.Windows.Forms.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\2318e625b3ea83eb6544d76ea5a111a7\System.Drawing.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\7e779c0c5323f4a0472356c2e0657e0e\System.ni.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll ()

MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\23ad084ef7ea9121a97a522f05c7ce50\mscorlib.ni.dll ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\_jpype.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\M2Crypto.__m2crypto.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\indexsupport.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\normalizer.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\Record._Record.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\Products.ZCTextIndex.okascore.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\ZODB.winlock.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\Products.ZCTextIndex.stopper.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._IIBTree.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._IOBTree.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._fsBTree.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._OIBTree.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._OOBTree.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\AccessControl.cAccessControl.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\Acquisition._Acquisition.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.cPickleCache.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.cPersistence.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\ExtensionClass._ExtensionClass.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\DocumentTemplate.cDocumentTemplate.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.TimeStamp.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\MultiMapping._MultiMapping.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\Persistence._Persistence.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\Missing._Missing.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\ComputedAttribute._ComputedAttribute.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\Zope\lib\python\MethodObject._MethodObject.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\osr32v10.dll ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32file.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32api.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32evtlog.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32event.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32security.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32process.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32pipe.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\ideskservice.exe ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\pywintypes24.dll ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32service.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\lib\site-packages\win32\servicemanager.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\_ssl.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\_socket.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\pyexpat.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\select.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\zlib.pyd ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\ssleay32.dll ()

MOD - C:\Programme\Haufe\iDesk\iDeskService\DLLS\libeay32.dll ()

MOD - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll ()

MOD - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\libxml2.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2589.34579__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2589.34534__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2589.34592__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2589.34808__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2589.34761__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2589.34570__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Runtime\2.0.2589.34591__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2589.34555__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2589.34693__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2589.34851__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2589.34857__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.2589.34584__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2589.34781__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2589.34549__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.2589.34584__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2589.34707__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2589.34606__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2589.34557__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2589.34795__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2589.34776__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard\2.0.2589.34628__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2589.34599__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2589.34728__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2589.34773__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2589.34703__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2589.34727__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2589.34612__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime\2.0.2589.34633__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2589.34698__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.2589.34748__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.2589.34613__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2589.34694__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2589.34702__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2589.34747__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2560.25964__90ba9c70f846762e\NEWAEM.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2560.25974__90ba9c70f846762e\MOM.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2560.26010__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2560.26001__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Shared\2.0.2560.25988__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2560.25998__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2560.25961__90ba9c70f846762e\CLI.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2560.25971__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2537.29860__90ba9c70f846762e\DEM.Graphics.I0601.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2560.26000__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2560.26012__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2560.25998__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2560.26000__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2560.25959__90ba9c70f846762e\LOG.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2560.25999__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2560.26040__90ba9c70f846762e\CLI.Foundation.XManifest.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2560.25988__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2560.25987__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2560.25999__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2560.25986__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2560.25982__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2560.26001__90ba9c70f846762e\APM.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2560.25982__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2560.25973__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2560.25968__90ba9c70f846762e\CLI.Component.Client.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2560.25988__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared\2.0.2560.25989__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2560.25987__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2560.26001__90ba9c70f846762e\DEM.OS.I0602.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2560.26002__90ba9c70f846762e\DEM.OS.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2560.25997__90ba9c70f846762e\DEM.Graphics.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2531.19989__90ba9c70f846762e\DEM.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2560.25988__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2560.25987__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2560.25960__90ba9c70f846762e\AEM.Foundation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2531.19989__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2560.25970__90ba9c70f846762e\AEM.Server.Shared.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2589.34827_de_90ba9c70f846762e\CLI.Component.Systemtray.resources.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2589.34878__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2589.34543__90ba9c70f846762e\CLI.Component.Dashboard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2589.34565__90ba9c70f846762e\CLI.Component.Wizard.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2589.34827__90ba9c70f846762e\CLI.Component.Systemtray.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2589.34834__90ba9c70f846762e\MOM.Implementation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2589.34533__90ba9c70f846762e\CLI.Component.Runtime.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2589.34833__90ba9c70f846762e\LOG.Foundation.Implementation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2589.34533__90ba9c70f846762e\ATIDEMOS.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2560.25970__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2560.25980__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2560.25964__90ba9c70f846762e\LOG.Foundation.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2560.26010__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2560.25982__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2560.25966__90ba9c70f846762e\CLI.Foundation.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2560.25981__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2560.26004__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2589.34834__90ba9c70f846762e\CCC.Implementation.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2589.34532__90ba9c70f846762e\AEM.Server.dll ()

MOD - C:\WINDOWS\system32\skypdfmonpro.dll ()

MOD - c:\Programme\ATI Technologies\ATI.ACE\Branding\Branding.dll ()

MOD - C:\WINDOWS\ATK0100\HControl.exe ()

MOD - C:\Program Files\ASUS\WLAN Card Utilities\AsAuthen.dll ()

MOD - C:\WINDOWS\ATK0100\ASUSNet.dll ()

MOD - C:\WINDOWS\ATK0100\ATKOSD.exe ()

MOD - C:\Programme\ASUS\PowerForPhone\PowerForPhone.exe ()

MOD - C:\Programme\Wireless Console 2\wcourier.exe ()

MOD - C:\WINDOWS\system32\redmonnt.dll ()

MOD - C:\WINDOWS\ATK0100\CMSSC.dll ()

 

 
 ========== Services (SafeList) ==========

 

SRV - (JavaQuickStarterService) -- C:\Programme\Java\jre7\bin\jqs.exe (Oracle Corporation)

SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)

SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)

SRV - (AntiVirWebService) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)

SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)

SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)

SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)

SRV - (HRService) -- C:\Programme\Haufe\iDesk\iDeskService\ideskservice.exe ()

SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)

SRV - (DatevPrintService) -- D:\DATEV\PROGRAMM\B0001442\PSNTServ.exe (DATEV eG)

SRV - (DATEV Update-Service) -- D:\DATEV\PROGRAMM\Install\DvInesASDSvc.Exe (DATEV eG)

SRV - (SCardService) -- D:\DATEV\PROGRAMM\B0000347\ScMgmt\SCardService.exe (DATEV eG)

SRV - (Dcmanag) -- D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DcManag.exe (DATEV eG)

SRV - (DVckService) -- D:\DATEV\PROGRAMM\B0000150\ScServer\DVckService.exe (DATEV eG)

SRV - (KOBIL Container Encryption Control1) -- D:\DATEV\PROGRAMM\B0001356\SpdyScProcessSrv.exe (KOBIL Systems)

SRV - (DVSmartCardLogon) -- D:\DATEV\PROGRAMM\B0001364\DTVSCSer.exe (DATEV eG)

SRV - (KOBIL_MSDI) -- C:\Programme\Kobil Systems\Kobil mIDentity\msdisrv.exe (KOBIL Systems GmbH)

SRV - (hasplms) -- C:\WINDOWS\system32\hasplms.exe (Aladdin Knowledge Systems Ltd.)

SRV - (LightScribeService) -- c:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)

SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - (WDICA) --  File not found

DRV - (PDRFRAME) --  File not found

DRV - (PDRELI) --  File not found

DRV - (PDFRAME) --  File not found

DRV - (PDCOMP) --  File not found

DRV - (PCIDump) --  File not found

DRV - (lbrtfdc) --  File not found

DRV - (i2omgmt) --  File not found

DRV - (Changer) --  File not found

DRV - (SSLDrv) -- C:\WINDOWS\system32\drivers\SSLDrv.sys (Cavium Networks)

DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)

DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)

DRV - (avkmgr) -- C:\WINDOWS\system32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)

DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)

DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)

DRV - (hwdatacard) -- C:\WINDOWS\system32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)

DRV - (ACEDRV07) -- C:\WINDOWS\system32\drivers\ACEDRV07.sys (Protect Software GmbH)

DRV - (SC_Serv3D) -- C:\WINDOWS\system32\drivers\d3_kafm.sys (KOBIL Systems)

DRV - (SymEvent) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)

DRV - (aksfridge) -- C:\WINDOWS\system32\drivers\aksfridge.sys (Aladdin Knowledge Systems Ltd.)

DRV - (Hardlock) -- C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)

DRV - (SCR3XX2K) -- C:\WINDOWS\system32\drivers\SCR3XX2K.sys (SCM Microsystems Inc.)

DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)

DRV - (STCFUx32) -- C:\WINDOWS\system32\drivers\STCFUx32.sys (SCM Microsystems Inc.)

DRV - (aksusb) -- C:\WINDOWS\system32\drivers\aksusb.sys (Aladdin Knowledge Systems Ltd.)

DRV - (akshasp) -- C:\WINDOWS\system32\drivers\akshasp.sys (Aladdin Knowledge Systems Ltd.)

DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys (Realtek Semiconductor Corp.)

DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)

DRV - (AtcL002) -- C:\WINDOWS\system32\drivers\atl02_xp.sys (Attansic Technology corporation.)

DRV - (FWLANUSB) -- C:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH)

DRV - (smserial) -- C:\WINDOWS\system32\drivers\smserial.sys (Motorola Inc.)

DRV - (ipswuio) -- C:\WINDOWS\system32\drivers\ipswuio.sys (Windows (R) 2000 DDK provider)

DRV - (KOBCCEX) -- C:\WINDOWS\system32\drivers\KOBCCEX.sys (KOBIL Systems GmbH)

DRV - (KOBCCID) -- C:\WINDOWS\system32\drivers\KOBCCID.sys (KOBIL Systems GmbH)

DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ATKACPI.sys ()

DRV - (ASNDIS5) -- C:\WINDOWS\ATK0100\ASNDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://87.139.200.94/

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"

FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20131008

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - user.js - File not found

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@siz.de/SIZCHIP,version=2.0.0.4: C:\Programme\SIZ\SIZCHIP-Plugin\Mozilla-20\npSIZCHIP-Plugin-Mozilla-2004.dll (SIZ Informatikzentrum der Sparkassenorganisation GmbH)

FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2013.10.27 10:10:20 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2013.10.27 10:10:20 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{d591241b-9967-418c-9b7d-ee128131d60d}: C:\Programme\GMX\GMX MultiMessenger\ThunderbirdSyncProxy [2008.06.06 18:04:06 | 000,000,000 | ---D | M]

 

[2008.11.03 19:01:22 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Mozilla\Extensions

[2011.02.01 16:04:40 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Mozilla\Extensions\ideskbrowser@haufe.de

[2008.11.03 19:01:22 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Mozilla\Firefox\Profiles\1g1g8awh.default\extensions

[2013.10.27 10:13:28 | 000,000,000 | ---D | M] (WOT) -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Mozilla\Firefox\Profiles\1g1g8awh.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

[2012.05.01 14:00:02 | 000,020,591 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Mozilla\Firefox\Profiles\1g1g8awh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi

[2013.10.27 11:01:58 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2013.10.27 10:10:28 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions

[2013.10.27 10:10:30 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2009.10.29 13:37:24 | 000,348,160 | ---- | M] (SIZ GmbH, Bonn, Germany) -- C:\Programme\mozilla firefox\plugins\npSIZCHIP_PLUGIN_MOZ_1702.dll

[2013.10.25 11:20:40 | 000,171,584 | ---- | M] (Tracker Software Products (Canada) Ltd.) -- C:\Programme\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll

 

O1 HOSTS File: ([2006.02.28 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (SCardBHOEvent Class) - {AF8CD625-E04A-4A8F-A90A-0C74846C2E30} - D:\DATEV\SYSTEM\DVCCSASCardBHO002.dll (DATEV eG)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.

O4 - HKLM..\Run: [ACMON] C:\Programme\ASUS\Splendid\ACMON.exe (ATK)

O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [ATKMEDIA] C:\Programme\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe (ASUSTeK COMPUTER INC.)

O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)

O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()

O4 - HKLM..\Run: [LexwareInfoService] C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe (Haufe-Lexware GmbH & Co. KG)

O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)

O4 - HKLM..\Run: [Power_Gear] C:\Programme\ASUS\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.)

O4 - HKLM..\Run: [PowerForPhone] C:\Programme\ASUS\PowerForPhone\PowerForPhone.exe ()

O4 - HKLM..\Run: [RemoteControl] C:\Programme\ASUSTek\ASUSDVD\PDVDServ.exe (Cyberlink Corp.)

O4 - HKLM..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Oracle Corporation)

O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Programme\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)

O4 - HKLM..\Run: [Wireless Console 2] C:\Programme\Wireless Console 2\wcourier.exe ()

O4 - HKCU..\Run: []  File not found

O4 - HKCU..\Run: [ASUSTPE] C:\WINDOWS\system32\ASUSTPE.exe (ASUS)

O4 - HKCU..\Run: [StartCCC] c:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O15 - HKCU\..Trusted Domains: datev.at ([]http is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datev.at ([]https is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datev.com ([]http is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datev.com ([]https is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datev.de ([]http is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datev.de ([]https is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datev.de ([www] http is out of zone range -  5)

O15 - HKCU\..Trusted Domains: datev.de ([www] https is out of zone range -  5)

O15 - HKCU\..Trusted Domains: datevnet.de ([*.services] http is out of zone range -  5)

O15 - HKCU\..Trusted Domains: datevnet.de ([*.services] https is out of zone range -  5)

O15 - HKCU\..Trusted Domains: datevstadt.de ([]http is out of zone range - 5)

O15 - HKCU\..Trusted Domains: datevstadt.de ([]https is out of zone range - 5)

O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)

O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)

O16 - DPF: {19DFFB5D-E30A-4E3B-8524-0AD8F4D88D32} https://87.139.200.94/XTunnel.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 10.45.2)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 10.45.2)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C39372BA-EC02-4881-8D22-BC3A6664AC6E}: DhcpNameServer = 192.168.178.1

O18 - Protocol\Handler\haufereader - No CLSID value found

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O20 - Winlogon\Notify\DVCCSA: DllName - (DVCCSAnotify002.dll) - C:\WINDOWS\System32\DVCCSAnotify002.dll (DATEV eG)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2007.10.22 04:14:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]

O32 - AutoRun File - [2013.10.12 17:04:00 | 000,000,000 | ---D | M] - D:\AutoSicherung -- [ FAT32 ]

O33 - MountPoints2\{d1df9574-b42d-11de-93e0-001d60cc727f}\Shell - "" = AutoRun

O33 - MountPoints2\{d1df9574-b42d-11de-93e0-001d60cc727f}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{d1df9574-b42d-11de-93e0-001d60cc727f}\Shell\AutoRun\command - "" = G:\pushinst.exe

O33 - MountPoints2\{d207ce3e-e46a-11e1-977b-001d60cc727f}\Shell - "" = AutoRun

O33 - MountPoints2\{d207ce3e-e46a-11e1-977b-001d60cc727f}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{d207ce3e-e46a-11e1-977b-001d60cc727f}\Shell\AutoRun\command - "" = G:\AutoRun.exe

O33 - MountPoints2\{d207ce3f-e46a-11e1-977b-001d60cc727f}\Shell - "" = AutoRun

O33 - MountPoints2\{d207ce3f-e46a-11e1-977b-001d60cc727f}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{d207ce3f-e46a-11e1-977b-001d60cc727f}\Shell\AutoRun\command - "" = G:\AutoRun.exe

O33 - MountPoints2\{d8da8e62-153b-11e1-964d-001d60cc727f}\Shell - "" = AutoRun

O33 - MountPoints2\{d8da8e62-153b-11e1-964d-001d60cc727f}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{d8da8e62-153b-11e1-964d-001d60cc727f}\Shell\AutoRun\command - "" = G:\AutoRun.exe

O33 - MountPoints2\{d8da8e64-153b-11e1-964d-001d60cc727f}\Shell - "" = AutoRun

O33 - MountPoints2\{d8da8e64-153b-11e1-964d-001d60cc727f}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{d8da8e64-153b-11e1-964d-001d60cc727f}\Shell\AutoRun\command - "" = G:\AutoRun.exe

O33 - MountPoints2\{efcca24c-1476-11e1-964c-001d60cc727f}\Shell - "" = AutoRun

O33 - MountPoints2\{efcca24c-1476-11e1-964c-001d60cc727f}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{efcca24c-1476-11e1-964c-001d60cc727f}\Shell\AutoRun\command - "" = G:\AutoRun.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.10.28 19:58:17 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\chef\Desktop\OTL.exe

[2013.10.28 19:47:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood

[2013.10.27 21:03:42 | 001,089,097 | ---- | C] (Farbar) -- C:\Dokumente und Einstellungen\chef\Desktop\FRST.exe

[2013.10.27 13:25:37 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\chef\PrivacIE

[2013.10.27 13:17:36 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\chef\IETldCache

[2013.10.27 13:13:34 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll

[2013.10.27 13:12:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates

[2013.10.27 13:12:10 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll

[2013.10.27 13:09:37 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8

[2013.10.27 11:43:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\Tracker Software

[2013.10.27 11:25:33 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2013.10.27 11:09:50 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java

[2013.10.27 11:09:41 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe

[2013.10.27 11:09:41 | 000,145,408 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl

[2013.10.27 11:09:34 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll

[2013.10.27 11:09:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java

[2013.10.27 11:09:33 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe

[2013.10.27 11:09:33 | 000,174,504 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe

[2013.10.27 10:10:18 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox

[2013.10.26 22:46:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution

[2013.10.26 22:41:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2

[2013.10.26 20:16:12 | 000,116,736 | ---- | C] (Xerox) -- C:\WINDOWS\System32\dllcache\xrxwiadr.dll

[2013.10.26 20:16:08 | 000,023,040 | ---- | C] (Xerox Corporation) -- C:\WINDOWS\System32\dllcache\xrxwbtmp.dll

[2013.10.26 20:16:00 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xrxflnch.exe

[2013.10.26 20:15:52 | 000,099,865 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\xlog.exe

[2013.10.26 20:15:48 | 000,016,970 | ---- | C] (US Robotics MCD (Megahertz)) -- C:\WINDOWS\System32\dllcache\xem336n5.sys

[2013.10.26 20:15:47 | 000,019,455 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\wvchntxx.sys

[2013.10.26 20:15:45 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys

[2013.10.26 20:15:44 | 000,012,063 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\wsiintxx.sys

[2013.10.26 20:15:42 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wshirda.dll

[2013.10.26 20:15:33 | 000,008,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiacpi.sys

[2013.10.26 20:15:31 | 000,154,624 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\wlluc48.sys

[2013.10.26 20:15:28 | 000,035,402 | ---- | C] (Raytheon Corp.) -- C:\WINDOWS\System32\dllcache\wlandrv2.sys

[2013.10.26 20:15:18 | 000,771,581 | ---- | C] (Rockwell) -- C:\WINDOWS\System32\dllcache\winacisa.sys

[2013.10.26 20:15:13 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wiamsmud.dll

[2013.10.26 20:15:10 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wiafbdrv.dll

[2013.10.26 20:15:09 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll

[2013.10.26 20:15:09 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys

[2013.10.26 20:15:05 | 000,701,386 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\wdhaalba.sys

[2013.10.26 20:15:04 | 000,023,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\wch7xxnt.sys

[2013.10.26 20:15:03 | 000,032,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wceusbsh.sys

[2013.10.26 20:14:59 | 000,035,871 | ---- | C] (Winbond Electronics Corp.) -- C:\WINDOWS\System32\dllcache\wbfirdma.sys

[2013.10.26 20:14:57 | 000,033,599 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\watv04nt.sys

[2013.10.26 20:14:56 | 000,019,551 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\watv02nt.sys

[2013.10.26 20:14:55 | 000,029,311 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\watv01nt.sys

[2013.10.26 20:14:55 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll

[2013.10.26 20:14:54 | 000,011,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\wadv05nt.sys

[2013.10.26 20:14:53 | 000,012,127 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\wadv02nt.sys

[2013.10.26 20:14:52 | 000,012,415 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\wadv01nt.sys

[2013.10.26 20:14:47 | 000,016,925 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w940nd.sys

[2013.10.26 20:14:44 | 000,019,016 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w926nd.sys

[2013.10.26 20:14:40 | 000,019,528 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w840nd.sys

[2013.10.26 20:14:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll

[2013.10.26 20:14:39 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll

[2013.10.26 20:14:39 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll

[2013.10.26 20:14:39 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll

[2013.10.26 20:14:35 | 000,064,605 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\vvoice.sys

[2013.10.26 20:14:31 | 000,397,502 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\vpctcom.sys

[2013.10.26 20:14:27 | 000,604,253 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\vmodem.sys

[2013.10.26 20:14:23 | 000,249,402 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\vinwm.sys

[2013.10.26 20:14:20 | 000,024,576 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\viairda.sys

[2013.10.26 20:14:19 | 000,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\viaide.sys

[2013.10.26 20:14:17 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll

[2013.10.26 20:14:13 | 000,687,999 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usrwdxjs.sys

[2013.10.26 20:14:09 | 000,765,884 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usrti.sys

[2013.10.26 20:14:05 | 000,113,762 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usrpda.sys

[2013.10.26 20:14:01 | 000,007,556 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usroslba.sys

[2013.10.26 20:13:58 | 000,224,802 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usr1807a.sys

[2013.10.26 20:13:54 | 000,794,399 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1806v.sys

[2013.10.26 20:13:51 | 000,793,598 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1806.sys

[2013.10.26 20:13:47 | 000,794,654 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1801.sys

[2013.10.26 20:13:45 | 000,020,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbuhci.sys

[2013.10.26 20:13:44 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbser.sys

[2013.10.26 20:13:43 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys

[2013.10.26 20:13:41 | 000,032,384 | ---- | C] (KLSI USA, Inc.) -- C:\WINDOWS\System32\dllcache\usb101et.sys

[2013.10.26 20:13:36 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxud32.dll

[2013.10.26 20:13:33 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu40.dll

[2013.10.26 20:13:30 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu22.dll

[2013.10.26 20:13:26 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu12.dll

[2013.10.26 20:13:23 | 000,050,688 | ---- | C] (UMAX DATA SYSTEMS INC.) -- C:\WINDOWS\System32\dllcache\umaxscan.dll

[2013.10.26 20:13:19 | 000,022,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxpcls.sys

[2013.10.26 20:13:16 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxp60.dll

[2013.10.26 20:13:12 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxcam.dll

[2013.10.26 20:13:09 | 000,212,480 | ---- | C] (UMAX Data Systems Inc.) -- C:\WINDOWS\System32\dllcache\um54scan.dll

[2013.10.26 20:13:05 | 000,216,576 | ---- | C] (UMAX Data Systems Inc.) -- C:\WINDOWS\System32\dllcache\um34scan.dll

[2013.10.26 20:13:02 | 000,036,736 | ---- | C] (Promise Technology, Inc.) -- C:\WINDOWS\System32\dllcache\ultra.sys

[2013.10.26 20:12:58 | 000,011,520 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\twotrack.sys

[2013.10.26 20:12:57 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe

[2013.10.26 20:12:53 | 000,166,784 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridxpm.sys

[2013.10.26 20:12:49 | 000,525,568 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridxp.dll

[2013.10.26 20:12:46 | 000,159,232 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridkbm.sys

[2013.10.26 20:12:42 | 000,440,576 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridkb.dll

[2013.10.26 20:12:39 | 000,222,336 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\trid3dm.sys

[2013.10.26 20:12:35 | 000,315,520 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\trid3d.dll

[2013.10.26 20:12:32 | 000,034,375 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\tpro4.sys

[2013.10.26 20:12:28 | 000,043,520 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\tp4res.dll

[2013.10.26 20:12:27 | 000,082,944 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\tp4mon.exe

[2013.10.26 20:12:24 | 000,031,744 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\tp4.dll

[2013.10.26 20:12:20 | 000,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\toside.sys

[2013.10.26 20:12:17 | 000,230,912 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tosdvd03.sys

[2013.10.26 20:12:13 | 000,241,664 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tosdvd02.sys

[2013.10.26 20:12:10 | 000,028,232 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\dllcache\tos4mo.sys

[2013.10.26 20:12:06 | 000,123,995 | ---- | C] (Tiger Jet Network) -- C:\WINDOWS\System32\dllcache\tjisdn.sys

[2013.10.26 20:12:03 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll

[2013.10.26 20:11:59 | 000,138,528 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tgiulnt5.sys

[2013.10.26 20:11:56 | 000,081,408 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tgiul50.dll

[2013.10.26 20:11:55 | 000,149,376 | ---- | C] (M-Systems) -- C:\WINDOWS\System32\dllcache\tffsport.sys

[2013.10.26 20:11:54 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys

[2013.10.26 20:11:51 | 000,017,129 | ---- | C] (TDK Corporation) -- C:\WINDOWS\System32\dllcache\tdkcd31.sys

[2013.10.26 20:11:48 | 000,037,961 | ---- | C] (TDK Corporation) -- C:\WINDOWS\System32\dllcache\tdk100b.sys

[2013.10.26 20:11:48 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys

[2013.10.26 20:11:47 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys

[2013.10.26 20:11:44 | 000,030,464 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tbatm155.sys

[2013.10.26 20:11:40 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tandqic.sys

[2013.10.26 20:11:37 | 000,036,640 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\t2r4mini.sys

[2013.10.26 20:11:33 | 000,172,768 | ---- | C] (Number Nine Visual Technology) -- C:\WINDOWS\System32\dllcache\t2r4disp.dll

[2013.10.26 20:11:28 | 000,032,640 | ---- | C] (LSI Logic) -- C:\WINDOWS\System32\dllcache\symc8xx.sys

[2013.10.26 20:11:25 | 000,016,256 | ---- | C] (Symbios Logic Inc.) -- C:\WINDOWS\System32\dllcache\symc810.sys

[2013.10.26 20:11:22 | 000,030,688 | ---- | C] (LSI Logic) -- C:\WINDOWS\System32\dllcache\sym_u3.sys

[2013.10.26 20:11:19 | 000,028,384 | ---- | C] (LSI Logic) -- C:\WINDOWS\System32\dllcache\sym_hi.sys

[2013.10.26 20:11:16 | 000,094,293 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\sxports.dll

[2013.10.26 20:11:13 | 000,103,936 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\sx.sys

[2013.10.26 20:11:10 | 000,003,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swusbflt.sys

[2013.10.26 20:11:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swpidflt.dll

[2013.10.26 20:11:03 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swpdflt2.dll

[2013.10.26 20:11:00 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sw_wheel.dll

[2013.10.26 20:10:57 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sw_effct.dll

[2013.10.26 20:10:56 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys

[2013.10.26 20:10:52 | 000,159,744 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlnprop.dll

[2013.10.26 20:10:49 | 000,053,248 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlncoin.dll

[2013.10.26 20:10:46 | 000,287,232 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlnata.sys

[2013.10.26 20:10:42 | 000,017,152 | ---- | C] (SCM Microsystems, Inc.) -- C:\WINDOWS\System32\dllcache\stcusb.sys

[2013.10.26 20:10:42 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll

[2013.10.26 20:10:38 | 000,048,736 | ---- | C] (3Com) -- C:\WINDOWS\System32\dllcache\srwlnd5.sys

[2013.10.26 20:10:34 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll

[2013.10.26 20:10:34 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusd.dll

[2013.10.26 20:10:30 | 000,024,660 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxupchk.dll

[2013.10.26 20:10:26 | 000,061,824 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\speed.sys

[2013.10.26 20:10:23 | 000,110,680 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spdports.dll

[2013.10.26 20:10:20 | 000,019,072 | ---- | C] (Adaptec, Inc.) -- C:\WINDOWS\System32\dllcache\sparrow.sys

[2013.10.26 20:10:16 | 000,007,552 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypvu1.sys

[2013.10.26 20:10:13 | 000,037,040 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypi.sys

[2013.10.26 20:10:10 | 000,114,688 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypi.dll

[2013.10.26 20:10:07 | 000,020,752 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonync.sys

[2013.10.26 20:10:04 | 000,009,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sonymc.sys

[2013.10.26 20:10:03 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll

[2013.10.26 20:10:03 | 000,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sonyait.sys

[2013.10.26 20:09:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll

[2013.10.26 20:09:59 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll

[2013.10.26 20:09:59 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snyaitmc.sys

[2013.10.26 20:09:57 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll

[2013.10.26 20:09:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll

[2013.10.26 20:09:53 | 000,058,368 | ---- | C] (Silicon Motion Inc.) -- C:\WINDOWS\System32\dllcache\smiminib.sys

[2013.10.26 20:09:53 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll

[2013.10.26 20:09:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll

[2013.10.26 20:09:50 | 000,147,200 | ---- | C] (Silicon Motion Inc.) -- C:\WINDOWS\System32\dllcache\smidispb.dll

[2013.10.26 20:09:46 | 000,025,034 | ---- | C] (SMC Networks, Inc.) -- C:\WINDOWS\System32\dllcache\smcpwr2n.sys

[2013.10.26 20:09:43 | 000,035,913 | ---- | C] (SMC) -- C:\WINDOWS\System32\dllcache\smcirda.sys

[2013.10.26 20:09:40 | 000,024,576 | ---- | C] (SMC Networks, Inc.) -- C:\WINDOWS\System32\dllcache\smc8000n.sys

[2013.10.26 20:09:37 | 000,006,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbhc.sys

[2013.10.26 20:09:36 | 000,006,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbclass.sys

[2013.10.26 20:09:35 | 000,016,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbbatt.sys

[2013.10.26 20:09:34 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll

[2013.10.26 20:09:31 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb3w.dll

[2013.10.26 20:09:28 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb0w.dll

[2013.10.26 20:09:28 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll

[2013.10.26 20:09:25 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll

[2013.10.26 20:09:25 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma0w.dll

[2013.10.26 20:09:24 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll

[2013.10.26 20:09:24 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll

[2013.10.26 20:09:21 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll

[2013.10.26 20:09:21 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm91w.dll

[2013.10.26 20:09:21 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll

[2013.10.26 20:09:21 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll

[2013.10.26 20:09:20 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll

[2013.10.26 20:09:20 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll

[2013.10.26 20:09:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll

[2013.10.26 20:09:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll

[2013.10.26 20:09:19 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll

[2013.10.26 20:09:18 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys

[2013.10.26 20:09:17 | 000,063,547 | ---- | C] (Symbol Technologies) -- C:\WINDOWS\System32\dllcache\sla30nd5.sys

[2013.10.26 20:09:14 | 000,091,294 | ---- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) -- C:\WINDOWS\System32\dllcache\skfpwin.sys

[2013.10.26 20:09:11 | 000,095,178 | ---- | C] (SysKonnect GmbH.) -- C:\WINDOWS\System32\dllcache\sk98xwin.sys

[2013.10.26 20:09:08 | 000,157,696 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisv256.dll

[2013.10.26 20:09:05 | 000,050,432 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisv.sys

[2013.10.26 20:09:04 | 000,032,768 | ---- | C] (SiS Corporation) -- C:\WINDOWS\System32\dllcache\sisnic.sys

[2013.10.26 20:09:01 | 000,238,592 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrv.dll

[2013.10.26 20:08:57 | 000,104,064 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrp.sys

[2013.10.26 20:08:54 | 000,150,144 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis6306v.dll

[2013.10.26 20:08:51 | 000,068,608 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis6306p.sys

[2013.10.26 20:08:48 | 000,252,032 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis300iv.dll

[2013.10.26 20:08:45 | 000,101,760 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis300ip.sys

[2013.10.26 20:08:45 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll

[2013.10.26 20:08:39 | 000,161,888 | ---- | C] (Micro Systemation) -- C:\WINDOWS\System32\dllcache\sgsmusb.sys

[2013.10.26 20:08:35 | 000,018,400 | ---- | C] (Micro Systemation) -- C:\WINDOWS\System32\dllcache\sgsmld.sys

[2013.10.26 20:08:32 | 000,098,080 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\sgiulnt5.sys

[2013.10.26 20:08:29 | 000,386,560 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\sgiul50.dll

[2013.10.26 20:08:26 | 000,036,480 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\sfmanm.sys

[2013.10.26 20:08:22 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\serscan.sys

[2013.10.26 20:08:19 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll

[2013.10.26 20:08:19 | 000,018,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sermouse.sys

[2013.10.26 20:08:15 | 000,006,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seaddsmc.sys

[2013.10.26 20:08:14 | 000,011,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scsiscan.sys

[2013.10.26 20:08:11 | 000,011,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scsiprnt.sys

[2013.10.26 20:08:10 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll

[2013.10.26 20:08:07 | 000,017,792 | ---- | C] (SCM Microsystems) -- C:\WINDOWS\System32\dllcache\scr111.sys

[2013.10.26 20:08:04 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scmstcs.sys

[2013.10.26 20:08:01 | 000,023,936 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\sccmusbm.sys

[2013.10.26 20:07:58 | 000,024,192 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\sccmn50m.sys

[2013.10.26 20:07:56 | 000,043,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sbp2port.sys

[2013.10.26 20:07:53 | 000,495,616 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\sblfx.dll

[2013.10.26 20:07:50 | 000,075,392 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\dllcache\s3savmxm.sys

[2013.10.26 20:07:47 | 000,245,632 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\dllcache\s3savmx.dll

[2013.10.26 20:07:44 | 000,077,824 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav4m.sys

[2013.10.26 20:07:40 | 000,198,400 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav4.dll

[2013.10.26 20:07:37 | 000,061,504 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav3dm.sys

[2013.10.26 20:07:34 | 000,179,264 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav3d.dll

[2013.10.26 20:07:31 | 000,210,496 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mvirge.dll

[2013.10.26 20:07:28 | 000,062,496 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mtrio.dll

[2013.10.26 20:07:25 | 000,041,216 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mt3d.sys

[2013.10.26 20:07:22 | 000,182,272 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mt3d.dll

[2013.10.26 20:07:19 | 000,166,720 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3m.sys

[2013.10.26 20:07:16 | 000,065,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\s3legacy.sys

[2013.10.26 20:07:13 | 000,083,968 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia450.dll

[2013.10.26 20:07:10 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia430.dll

[2013.10.26 20:07:10 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll

[2013.10.26 20:07:09 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll

[2013.10.26 20:07:09 | 000,029,696 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw450ext.dll

[2013.10.26 20:07:08 | 000,027,648 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw430ext.dll

[2013.10.26 20:07:06 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\rtl8139.sys

[2013.10.26 20:07:03 | 000,019,017 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\rtl8029.sys

[2013.10.26 20:07:00 | 000,030,720 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\rthwcls.sys

[2013.10.26 20:06:56 | 000,010,752 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\rsmgrstr.dll

[2013.10.26 20:06:52 | 000,003,840 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\rpfun.sys

[2013.10.26 20:06:51 | 000,079,360 | ---- | C] (Comtrol Corporation) -- C:\WINDOWS\System32\dllcache\rocket.sys

[2013.10.26 20:06:47 | 000,037,563 | ---- | C] (RadioLAN) -- C:\WINDOWS\System32\dllcache\rlnet5.sys

[2013.10.26 20:06:43 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe

[2013.10.26 20:06:43 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe

[2013.10.26 20:06:38 | 000,019,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rasirda.sys

[2013.10.26 20:06:34 | 000,715,242 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\r2mdmkxx.sys

[2013.10.26 20:06:31 | 000,899,658 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\r2mdkxga.sys

[2013.10.26 20:06:28 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qvusd.dll

[2013.10.26 20:06:25 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe

[2013.10.26 20:06:25 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qv2kux.sys

[2013.10.26 20:06:24 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe

[2013.10.26 20:06:18 | 000,049,024 | ---- | C] (QLogic Corporation) -- C:\WINDOWS\System32\dllcache\ql1280.sys

[2013.10.26 20:06:15 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ql1240.sys

[2013.10.26 20:06:12 | 000,045,312 | ---- | C] (QLogic Corporation) -- C:\WINDOWS\System32\dllcache\ql12160.sys

[2013.10.26 20:06:09 | 000,033,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ql10wnt.sys

[2013.10.26 20:06:06 | 000,040,320 | ---- | C] (QLogic Corporation) -- C:\WINDOWS\System32\dllcache\ql1080.sys

[2013.10.26 20:06:05 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qic157.sys

[2013.10.26 20:06:01 | 000,130,942 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserlv.sys

[2013.10.26 20:05:58 | 000,112,574 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserlp.sys

[2013.10.26 20:05:55 | 000,128,286 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserli.sys

[2013.10.26 20:05:54 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ptpusd.dll

[2013.10.26 20:05:51 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ptpusb.dll

[2013.10.26 20:05:47 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\psisload.dll

[2013.10.26 20:05:43 | 000,016,384 | ---- | C] (SCM Microsystems, Inc.) -- C:\WINDOWS\System32\dllcache\pscr.sys

[2013.10.26 20:05:40 | 000,017,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ppa3.sys

[2013.10.26 20:05:37 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ppa.sys

[2013.10.26 20:05:37 | 000,008,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\powerfil.sys

[2013.10.26 20:05:33 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll

[2013.10.26 20:05:33 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll

[2013.10.26 20:05:33 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pnrmc.sys

[2013.10.26 20:05:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll

[2013.10.26 20:05:28 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phvfwext.dll

[2013.10.26 20:05:25 | 000,019,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philtune.sys

[2013.10.26 20:05:22 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phildec.sys

[2013.10.26 20:05:19 | 000,173,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam2.sys

[2013.10.26 20:05:16 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam1.sys

[2013.10.26 20:05:13 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam1.dll

[2013.10.26 20:05:10 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phdsext.ax

[2013.10.26 20:05:10 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll

[2013.10.26 20:05:09 | 000,259,328 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm3dd.dll

[2013.10.26 20:05:08 | 000,028,032 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm3.sys

[2013.10.26 20:05:07 | 000,211,584 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm2dll.dll

[2013.10.26 20:05:06 | 000,027,904 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm2.sys

[2013.10.26 20:05:03 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\perc2hib.sys

[2013.10.26 20:05:00 | 000,027,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\perc2.sys

[2013.10.26 20:04:59 | 000,169,984 | ---- | C] (Cisco Systems) -- C:\WINDOWS\System32\dllcache\pcx500.sys

[2013.10.26 20:04:56 | 000,086,016 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\pctspk.exe

[2013.10.26 20:04:53 | 000,035,328 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntpci5.sys

[2013.10.26 20:04:50 | 000,029,769 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntn5m.sys

[2013.10.26 20:04:47 | 000,030,282 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntn5hl.sys

[2013.10.26 20:04:44 | 000,026,153 | ---- | C] (Linksys) -- C:\WINDOWS\System32\dllcache\pcmlm56.sys

[2013.10.26 20:04:43 | 000,029,502 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\pca200e.sys

[2013.10.26 20:04:40 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll

[2013.10.26 20:04:40 | 000,030,495 | ---- | C] (Linksys) -- C:\WINDOWS\System32\dllcache\pc100nds.sys

[2013.10.26 20:04:39 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll

[2013.10.26 20:04:39 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll

[2013.10.26 20:04:35 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovui2rc.dll

[2013.10.26 20:04:32 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovui2.dll

[2013.10.26 20:04:29 | 000,025,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovsound2.sys

[2013.10.26 20:04:27 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcoms.exe

[2013.10.26 20:04:24 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcomc.dll

[2013.10.26 20:04:21 | 000,351,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcodek2.sys

[2013.10.26 20:04:18 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcodec2.dll

[2013.10.26 20:04:15 | 000,031,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovce.sys

[2013.10.26 20:04:12 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcd.sys

[2013.10.26 20:04:09 | 000,048,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcam2.sys

[2013.10.26 20:04:06 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovca.sys

[2013.10.26 20:04:03 | 000,054,730 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otcsercb.sys

[2013.10.26 20:03:57 | 000,027,209 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otc06x5.sys

[2013.10.26 20:03:54 | 000,054,528 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\opl3sax.sys

[2013.10.26 20:03:51 | 000,061,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ohci1394.sys

[2013.10.26 20:03:45 | 000,198,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv3.sys

[2013.10.26 20:03:42 | 000,123,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv3.dll

[2013.10.26 20:03:37 | 000,051,552 | ---- | C] (Kensington Technology Group) -- C:\WINDOWS\System32\dllcache\ntgrip.sys

[2013.10.26 20:03:37 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll

[2013.10.26 20:03:34 | 000,009,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntapm.sys

[2013.10.26 20:03:31 | 000,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsmmc.sys

[2013.10.26 20:03:30 | 000,028,672 | ---- | C] (National Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\nscirda.sys

[2013.10.26 20:03:26 | 000,087,040 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\nm6wdm.sys

[2013.10.26 20:03:23 | 000,126,080 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\nm5a2wdm.sys

[2013.10.26 20:03:20 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll

[2013.10.26 20:03:20 | 000,032,840 | ---- | C] (NETGEAR Corporation.) -- C:\WINDOWS\System32\dllcache\ngrpci.sys

[2013.10.26 20:03:19 | 000,132,695 | ---- | C] (802.11b) -- C:\WINDOWS\System32\dllcache\netwlan5.sys

[2013.10.26 20:03:12 | 000,065,406 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\netflx3.sys

[2013.10.26 20:03:09 | 000,039,264 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\neo20xx.sys

[2013.10.26 20:03:06 | 000,060,480 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\neo20xx.dll

[2013.10.26 20:03:03 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ne2000.sys

[2013.10.26 20:03:02 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys

[2013.10.26 20:03:01 | 000,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys

[2013.10.26 20:02:58 | 000,091,488 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i3disp.dll

[2013.10.26 20:02:55 | 000,027,936 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i3d.sys

[2013.10.26 20:02:52 | 000,033,088 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128v2.sys

[2013.10.26 20:02:50 | 000,059,104 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128v2.dll

[2013.10.26 20:02:47 | 000,013,664 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128.sys

[2013.10.26 20:02:44 | 000,035,392 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128.dll

[2013.10.26 20:02:41 | 000,130,048 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\n100325.sys

[2013.10.26 20:02:38 | 000,053,279 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\n1000nt5.sys

[2013.10.26 20:02:36 | 000,076,288 | ---- | C] (Moxa Technologies Co., Ltd.) -- C:\WINDOWS\System32\dllcache\mxport.sys

[2013.10.26 20:02:33 | 000,007,168 | ---- | C] (Moxa Technologies Co., Ltd) -- C:\WINDOWS\System32\dllcache\mxport.dll

[2013.10.26 20:02:30 | 000,019,968 | ---- | C] (Macronix International Co., Ltd.                                               ) -- C:\WINDOWS\System32\dllcache\mxnic.sys

[2013.10.26 20:02:27 | 000,020,480 | ---- | C] (Moxa Technologies Co., Ltd) -- C:\WINDOWS\System32\dllcache\mxicfg.dll

[2013.10.26 20:02:24 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll

[2013.10.26 20:02:24 | 000,022,144 | ---- | C] (Moxa Technologies Co., Ltd.) -- C:\WINDOWS\System32\dllcache\mxcard.sys

[2013.10.26 20:02:21 | 000,103,296 | ---- | C] (Matrox Graphics Inc) -- C:\WINDOWS\System32\dllcache\mtxvideo.sys

[2013.10.26 20:02:16 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys

[2013.10.26 20:02:15 | 000,049,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstape.sys

[2013.10.26 20:02:11 | 000,012,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msriffwv.sys

[2013.10.26 20:02:06 | 000,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msmpu401.sys

[2013.10.26 20:02:05 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex

[2013.10.26 20:02:05 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msircomm.sys

[2013.10.26 20:02:04 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll

[2013.10.26 20:01:54 | 000,035,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgame.sys

[2013.10.26 20:01:51 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfsio.sys

[2013.10.26 20:01:50 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdv.sys

[2013.10.26 20:01:44 | 000,017,280 | ---- | C] (American Megatrends Inc.) -- C:\WINDOWS\System32\dllcache\mraid35x.sys

[2013.10.26 20:01:35 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys

[2013.10.26 20:01:29 | 000,006,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\miniqic.sys

[2013.10.26 20:01:27 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migisol.exe

[2013.10.26 20:01:24 | 000,320,384 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\mgaum.sys

[2013.10.26 20:01:21 | 000,235,648 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\mgaud.dll

[2013.10.26 20:01:21 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys

[2013.10.26 20:01:21 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll

[2013.10.26 20:01:20 | 000,026,112 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\memstpci.sys

[2013.10.26 20:01:17 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\memgrp.dll

[2013.10.26 20:01:14 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll

[2013.10.26 20:01:14 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\memcard.sys

[2013.10.26 20:01:11 | 000,164,970 | ---- | C] (Madge Networks Ltd) -- C:\WINDOWS\System32\dllcache\mdgndis5.sys

[2013.10.26 20:01:07 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll

[2013.10.26 20:01:07 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mammoth.sys

[2013.10.26 20:01:04 | 000,048,768 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\maestro.sys

[2013.10.26 20:01:01 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\m3092dc.dll

[2013.10.26 20:00:58 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\m3091dc.dll

[2013.10.26 20:00:56 | 000,022,848 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\dllcache\lwusbhid.sys

[2013.10.26 20:00:55 | 000,020,864 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\dllcache\lwadihid.sys

[2013.10.26 20:00:53 | 000,797,500 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltsmt.sys

[2013.10.26 20:00:50 | 000,802,683 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\ltsm.sys

[2013.10.26 20:00:50 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ltotape.sys

[2013.10.26 20:00:49 | 000,422,016 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntt.sys

[2013.10.26 20:00:46 | 000,607,196 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmnt.sys

[2013.10.26 20:00:46 | 000,577,226 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntl.sys

[2013.10.26 20:00:43 | 000,728,298 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ltck000c.sys

[2013.10.26 20:00:40 | 000,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\loop.sys

[2013.10.26 20:00:39 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll

[2013.10.26 20:00:36 | 000,070,730 | ---- | C] (Linksys Group, Inc.) -- C:\WINDOWS\System32\dllcache\lne100tx.sys

[2013.10.26 20:00:33 | 000,020,573 | ---- | C] (The Linksts Group ) -- C:\WINDOWS\System32\dllcache\lne100.sys

[2013.10.26 20:00:31 | 000,025,065 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\lmndis3.sys

[2013.10.26 20:00:28 | 000,016,256 | ---- | C] (Litronic Industries) -- C:\WINDOWS\System32\dllcache\lit220p.sys

[2013.10.26 20:00:27 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\dllcache\lbrtfdc.sys

[2013.10.26 20:00:25 | 000,026,506 | ---- | C] (SMSC) -- C:\WINDOWS\System32\dllcache\lanepic5.sys

[2013.10.26 20:00:22 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax

[2013.10.26 20:00:22 | 000,019,016 | ---- | C] (Kingston Technology Company                                                             ) -- C:\WINDOWS\System32\dllcache\ktc111.sys

[2013.10.26 20:00:21 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax

[2013.10.26 20:00:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax

[2013.10.26 20:00:18 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kousd.dll

[2013.10.26 20:00:17 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll

[2013.10.26 20:00:16 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kdsusd.dll

[2013.10.26 20:00:16 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kdsui.dll

[2013.10.26 20:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll

[2013.10.26 20:00:11 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll

[2013.10.26 20:00:11 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll

[2013.10.26 20:00:11 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll

[2013.10.26 20:00:08 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkor.dll

[2013.10.26 20:00:05 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdjpn.dll

[2013.10.26 19:59:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106.dll

[2013.10.26 19:59:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd103.dll

[2013.10.26 19:59:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101c.dll

[2013.10.26 19:59:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101b.dll

[2013.10.26 19:59:50 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll

[2013.10.26 19:59:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll

[2013.10.26 19:59:49 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll

[2013.10.26 19:59:49 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll

[2013.10.26 19:59:46 | 000,026,624 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\dllcache\irstusb.sys

[2013.10.26 19:59:44 | 000,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irsir.sys

[2013.10.26 19:59:43 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irmon.dll

[2013.10.26 19:59:41 | 000,023,552 | ---- | C] (MKNet Corporation) -- C:\WINDOWS\System32\dllcache\irmk7.sys

[2013.10.26 19:59:40 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irftp.exe

[2013.10.26 19:59:40 | 000,088,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irda.sys

[2013.10.26 19:59:39 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax

[2013.10.26 19:59:34 | 000,045,632 | ---- | C] (Interphase (R) Corporation a Windows (R) 2000 DDK Driver Provider) -- C:\WINDOWS\System32\dllcache\ip5515.sys

[2013.10.26 19:59:32 | 000,090,200 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\io8ports.dll

[2013.10.26 19:59:30 | 000,038,784 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\io8.sys

[2013.10.26 19:59:29 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\intelide.sys

[2013.10.26 19:59:26 | 000,013,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inport.sys

[2013.10.26 19:59:24 | 000,016,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ini910u.sys

[2013.10.26 19:59:23 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll

[2013.10.26 19:59:21 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll

[2013.10.26 19:59:21 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe

LOG2 OTL.txt:

Code:

[2013.10.26 19:59:20 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe

[2013.10.26 19:59:19 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe

[2013.10.26 19:59:17 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe

[2013.10.26 19:59:17 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll

[2013.10.26 19:59:17 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe

[2013.10.26 19:59:16 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe

[2013.10.26 19:59:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll

[2013.10.26 19:59:15 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll

[2013.10.26 19:59:15 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll

[2013.10.26 19:59:09 | 000,372,824 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\iconf32.dll

[2013.10.26 19:59:06 | 000,100,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5usb.sys

[2013.10.26 19:59:04 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5ext.dll

[2013.10.26 19:59:01 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5com.dll

[2013.10.26 19:58:59 | 000,154,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4usb.sys

[2013.10.26 19:58:56 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4ext.dll

[2013.10.26 19:58:54 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4com.dll

[2013.10.26 19:58:52 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam3ext.dll

[2013.10.26 19:58:49 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam3.sys

[2013.10.26 19:58:47 | 000,038,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ibmvcap.sys

[2013.10.26 19:58:44 | 000,109,085 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmtrp.sys

[2013.10.26 19:58:42 | 000,100,936 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmtok.sys

[2013.10.26 19:58:40 | 000,010,240 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmsgnet.dll

[2013.10.26 19:58:37 | 000,028,700 | ---- | C] (IBM Corp.) -- C:\WINDOWS\System32\dllcache\ibmexmp.sys

[2013.10.26 19:58:36 | 000,702,845 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\i81xdnt5.dll

[2013.10.26 19:58:36 | 000,161,020 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\dllcache\i81xnt5.sys

[2013.10.26 19:58:33 | 000,058,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\i740nt5.sys

[2013.10.26 19:58:31 | 000,353,184 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\i740dnt5.dll

[2013.10.26 19:58:31 | 000,018,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\i2omp.sys

[2013.10.26 19:58:30 | 000,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\i2omgmt.sys

[2013.10.26 19:58:29 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll

[2013.10.26 19:58:28 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll

[2013.10.26 19:58:24 | 000,488,383 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_v124.sys

[2013.10.26 19:58:22 | 000,050,751 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_tone.sys

[2013.10.26 19:58:19 | 000,073,279 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_spkp.sys

[2013.10.26 19:58:17 | 000,044,863 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_soar.sys

[2013.10.26 19:58:15 | 000,057,471 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_samp.sys

[2013.10.26 19:58:12 | 000,542,879 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_msft.sys

[2013.10.26 19:58:10 | 000,391,199 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_k56k.sys

[2013.10.26 19:58:08 | 000,009,759 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_inst.dll

[2013.10.26 19:58:05 | 000,115,807 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_fsks.sys

[2013.10.26 19:58:03 | 000,199,711 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_faxx.sys

[2013.10.26 19:58:01 | 000,289,887 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_fall.sys

[2013.10.26 19:57:58 | 000,067,167 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_bsc2.sys

[2013.10.26 19:57:56 | 000,150,239 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_amos.sys

[2013.10.26 19:57:53 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hr1w.dll

[2013.10.26 19:57:51 | 000,005,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpt4qic.sys

[2013.10.26 19:57:49 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpsjmcro.dll

[2013.10.26 19:57:47 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpojwia.dll

[2013.10.26 19:57:44 | 000,025,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpn.sys

[2013.10.26 19:57:42 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgtmcro.dll

[2013.10.26 19:57:40 | 000,068,608 | ---- | C] (Avisioin) -- C:\WINDOWS\System32\dllcache\hpgt53tk.dll

[2013.10.26 19:57:35 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt42tk.dll

[2013.10.26 19:57:31 | 000,126,976 | ---- | C] (Hewlett Packard) -- C:\WINDOWS\System32\dllcache\hpgt34tk.dll

[2013.10.26 19:57:26 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt33tk.dll

[2013.10.26 19:57:22 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt21tk.dll

[2013.10.26 19:57:18 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpdigwia.dll

[2013.10.26 19:57:15 | 000,002,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidswvd.sys

[2013.10.26 19:57:12 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidbatt.sys

[2013.10.26 19:57:12 | 000,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidgame.sys

[2013.10.26 19:57:09 | 000,908,352 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hcf_msft.sys

[2013.10.26 19:57:09 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll

[2013.10.26 19:57:07 | 000,028,672 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grserial.sys

[2013.10.26 19:57:05 | 000,082,560 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grclass.sys

[2013.10.26 19:57:03 | 000,017,792 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\gpr400.sys

[2013.10.26 19:57:00 | 000,059,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gckernel.sys

[2013.10.26 19:57:00 | 000,010,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gameenum.sys

[2013.10.26 19:56:58 | 000,322,432 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g400m.sys

[2013.10.26 19:56:56 | 001,733,120 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g400d.dll

[2013.10.26 19:56:54 | 000,320,384 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g200m.sys

[2013.10.26 19:56:52 | 000,470,144 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g200d.dll

[2013.10.26 19:56:50 | 000,454,912 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fxusbase.sys

[2013.10.26 19:56:48 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll

[2013.10.26 19:56:48 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe

[2013.10.26 19:56:46 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll

[2013.10.26 19:56:45 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll

[2013.10.26 19:56:43 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fuusd.dll

[2013.10.26 19:56:41 | 000,455,296 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fusbbase.sys

[2013.10.26 19:56:39 | 000,455,680 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fus2base.sys

[2013.10.26 19:56:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll

[2013.10.26 19:56:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll

[2013.10.26 19:56:36 | 000,442,240 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpnpbase.sys

[2013.10.26 19:56:34 | 000,441,728 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcmbase.sys

[2013.10.26 19:56:32 | 000,444,416 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcibase.sys

[2013.10.26 19:56:31 | 000,034,173 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\forehe.sys

[2013.10.26 19:56:29 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fnfilter.dll

[2013.10.26 19:56:28 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe

[2013.10.26 19:56:26 | 000,027,165 | ---- | C] (VIA Technologies, Inc.              ) -- C:\WINDOWS\System32\dllcache\fetnd5.sys

[2013.10.26 19:56:20 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll

[2013.10.26 19:56:20 | 000,022,090 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\fem556n5.sys

[2013.10.26 19:56:18 | 000,024,618 | ---- | C] (NETGEAR) -- C:\WINDOWS\System32\dllcache\fa410nd5.sys

[2013.10.26 19:56:16 | 000,016,074 | ---- | C] (NETGEAR Corp.) -- C:\WINDOWS\System32\dllcache\fa312nd5.sys

[2013.10.26 19:56:14 | 000,011,850 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xj.sys

[2013.10.26 19:56:12 | 000,012,362 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xi.sys

[2013.10.26 19:56:09 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exabyte2.sys

[2013.10.26 19:56:07 | 000,016,998 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\ex10.sys

[2013.10.26 19:56:06 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll

[2013.10.26 19:56:06 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys

[2013.10.26 19:56:04 | 000,046,080 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunib.dll

[2013.10.26 19:56:02 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll

[2013.10.26 19:56:02 | 000,046,080 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuni.dll

[2013.10.26 19:56:00 | 000,034,816 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimg.dll

[2013.10.26 19:56:00 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll

[2013.10.26 19:55:58 | 000,137,088 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\essm2e.sys

[2013.10.26 19:55:58 | 000,043,008 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucm.dll

[2013.10.26 19:55:56 | 000,063,360 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\ess.sys

[2013.10.26 19:55:54 | 000,347,870 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56tpi.sys

[2013.10.26 19:55:52 | 000,594,558 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56hpi.sys

[2013.10.26 19:55:50 | 000,595,999 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56cvmp.sys

[2013.10.26 19:55:48 | 000,174,464 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es198x.sys

[2013.10.26 19:55:46 | 000,072,192 | ---- | C] (ESS Technology Inc.) -- C:\WINDOWS\System32\dllcache\es1969.sys

[2013.10.26 19:55:44 | 000,040,704 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\es1371mp.sys

[2013.10.26 19:55:43 | 000,037,120 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\es1370mp.sys

[2013.10.26 19:55:41 | 000,062,464 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnloop.exe

[2013.10.26 19:55:39 | 000,052,224 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnlogr.exe

[2013.10.26 19:55:37 | 000,053,760 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqndiag.exe

[2013.10.26 19:55:35 | 000,629,952 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqn.sys

[2013.10.26 19:55:33 | 000,114,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\epstw2k.sys

[2013.10.26 19:55:31 | 000,018,503 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\epro4.sys

[2013.10.26 19:55:30 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\epcfw2k.sys

[2013.10.26 19:55:29 | 000,006,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\enum1394.sys

[2013.10.26 19:55:27 | 000,283,904 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\emu10k1m.sys

[2013.10.26 19:55:23 | 000,019,996 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\em556n4.sys

[2013.10.26 19:55:22 | 000,025,159 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\elnk3.sys

[2013.10.26 19:55:21 | 000,007,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\elmsmc.sys

[2013.10.26 19:55:19 | 000,176,128 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el99xn51.sys

[2013.10.26 19:55:18 | 000,070,174 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el98xn5.sys

[2013.10.26 19:55:17 | 000,455,711 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el985n51.sys

[2013.10.26 19:55:15 | 000,153,631 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el90xnd5.sys

[2013.10.26 19:55:14 | 000,066,591 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el90xbc5.sys

[2013.10.26 19:55:13 | 000,241,270 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656se5.sys

[2013.10.26 19:55:11 | 000,077,386 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656nd5.sys

[2013.10.26 19:55:10 | 000,634,198 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656ct5.sys

[2013.10.26 19:55:09 | 000,069,194 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656cd5.sys

[2013.10.26 19:55:07 | 000,026,141 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el589nd5.sys

[2013.10.26 19:55:06 | 000,069,692 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el575nd5.sys

[2013.10.26 19:55:05 | 000,024,653 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el574nd4.sys

[2013.10.26 19:55:04 | 000,055,999 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el556nd5.sys

[2013.10.26 19:55:02 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll

[2013.10.26 19:55:02 | 000,044,103 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el515.sys

[2013.10.26 19:55:00 | 000,019,594 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e100isa4.sys

[2013.10.26 19:54:59 | 000,117,760 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e100b325.sys

[2013.10.26 19:54:58 | 000,051,743 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e1000nt5.sys

[2013.10.26 19:54:56 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dshowext.ax

[2013.10.26 19:54:54 | 000,334,208 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\ds1wdm.sys

[2013.10.26 19:54:53 | 000,020,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpti2o.sys

[2013.10.26 19:54:51 | 000,028,062 | ---- | C] (National Semiconductor Coproration) -- C:\WINDOWS\System32\dllcache\dp83820.sys

[2013.10.26 19:54:50 | 000,023,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4usb.sys

[2013.10.26 19:54:48 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4scan.sys

[2013.10.26 19:54:47 | 000,206,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4.sys

[2013.10.26 19:54:47 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4prt.sys

[2013.10.26 19:54:42 | 000,029,696 | ---- | C] (CNet Technology, Inc.                                                    ) -- C:\WINDOWS\System32\dllcache\dm9pci5.sys

[2013.10.26 19:54:42 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlttape.sys

[2013.10.26 19:54:41 | 000,026,698 | ---- | C] (D-Link Corporation) -- C:\WINDOWS\System32\dllcache\dlh5xnd5.sys

[2013.10.26 19:54:40 | 000,952,007 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\diwan.sys

[2013.10.26 19:54:35 | 000,236,060 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\ditrace.exe

[2013.10.26 19:54:34 | 000,038,985 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvsu.dll

[2013.10.26 19:54:32 | 000,006,729 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvci.dll

[2013.10.26 19:54:30 | 000,091,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\dimaint.sys

[2013.10.26 19:54:29 | 000,626,717 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiview.exe

[2013.10.26 19:54:28 | 000,042,880 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\digirlpt.sys

[2013.10.26 19:54:27 | 000,110,621 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\digirlpt.dll

[2013.10.26 19:54:26 | 000,021,606 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiisdn.sys

[2013.10.26 19:54:25 | 000,041,046 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiisdn.dll

[2013.10.26 19:54:24 | 000,102,484 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiinf.dll

[2013.10.26 19:54:23 | 000,159,828 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digihlc.dll

[2013.10.26 19:54:21 | 000,229,462 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digifwrk.dll

[2013.10.26 19:54:20 | 000,090,717 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digifep5.sys

[2013.10.26 19:54:19 | 000,103,524 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digidxb.sys

[2013.10.26 19:54:18 | 000,135,252 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digidbp.dll

[2013.10.26 19:54:17 | 000,038,087 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiasyn.sys

[2013.10.26 19:54:16 | 000,065,622 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiasyn.dll

[2013.10.26 19:54:14 | 000,424,477 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgconfig.dll

[2013.10.26 19:54:13 | 000,029,851 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\dgapci.sys

[2013.10.26 19:54:12 | 000,024,649 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650d.sys

[2013.10.26 19:54:11 | 000,024,648 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650.sys

[2013.10.26 19:54:10 | 000,024,064 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\devldr32.exe

[2013.10.26 19:54:08 | 000,256,512 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\devcon32.dll

[2013.10.26 19:54:07 | 000,020,928 | ---- | C] (Digital Networks, LLC) -- C:\WINDOWS\System32\dllcache\defpa.sys

[2013.10.26 19:54:06 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddsmc.sys

[2013.10.26 19:54:04 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc260usd.dll

[2013.10.26 19:54:03 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc240usd.dll

[2013.10.26 19:54:02 | 000,063,208 | ---- | C] (Intel Corporation.) -- C:\WINDOWS\System32\dllcache\dc21x4.sys

[2013.10.26 19:54:01 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc210usd.dll

[2013.10.26 19:54:00 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc210_32.dll

[2013.10.26 19:53:58 | 000,014,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dac960nt.sys

[2013.10.26 19:53:57 | 000,179,584 | ---- | C] (Mylex Corporation) -- C:\WINDOWS\System32\dllcache\dac2w2k.sys

[2013.10.26 19:53:55 | 000,117,760 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\d100ib5.sys

[2013.10.26 19:53:54 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzports.dll

[2013.10.26 19:53:53 | 000,050,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzport.sys

[2013.10.26 19:53:52 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzcoins.dll

[2013.10.26 19:53:51 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyyports.dll

[2013.10.26 19:53:50 | 000,051,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyyport.sys

[2013.10.26 19:53:49 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyycoins.dll

[2013.10.26 19:53:48 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyclom-y.sys

[2013.10.26 19:53:47 | 000,048,640 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwrwdm.sys

[2013.10.26 19:53:47 | 000,017,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyclad-z.sys

[2013.10.26 19:53:46 | 000,093,952 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcwdm.sys

[2013.10.26 19:53:45 | 000,111,872 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcspud.sys

[2013.10.26 19:53:43 | 000,003,584 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcosnt5.sys

[2013.10.26 19:53:42 | 000,072,832 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbwdm.sys

[2013.10.26 19:53:41 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbmidi.sys

[2013.10.26 19:53:40 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbase.sys

[2013.10.26 19:53:39 | 000,252,928 | ---- | C] (Comtrol® Corporation) -- C:\WINDOWS\System32\dllcache\ctmasetp.dll

[2013.10.26 19:53:39 | 000,004,096 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\ctwdm32.dll

[2013.10.26 19:53:38 | 000,096,256 | ---- | C] (Copyright (C) Creative Technology Ltd. 1994-2001) -- C:\WINDOWS\System32\dllcache\ctlsb16.sys

[2013.10.26 19:53:36 | 000,003,712 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\ctljystk.sys

[2013.10.26 19:53:35 | 000,006,912 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\ctlfacem.sys

[2013.10.26 19:53:33 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\csamsp.dll

[2013.10.26 19:53:32 | 000,042,112 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\crtaud.sys

[2013.10.26 19:53:31 | 000,216,576 | ---- | C] (COMPAQ Inc.) -- C:\WINDOWS\System32\dllcache\cpscan.dll

[2013.10.26 19:53:31 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe

[2013.10.26 19:53:30 | 000,061,130 | ---- | C] (Compaq Computer Corp.) -- C:\WINDOWS\System32\dllcache\cpqtrnd5.sys

[2013.10.26 19:53:29 | 000,022,045 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\cpqndis5.sys

[2013.10.26 19:53:28 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cpqarray.sys

[2013.10.26 19:53:27 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe

[2013.10.26 19:53:27 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll

[2013.10.26 19:53:27 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll

[2013.10.26 19:53:24 | 000,039,936 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\dllcache\cnxt1803.sys

[2013.10.26 19:53:23 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cnusd.dll

[2013.10.26 19:53:22 | 000,006,656 | ---- | C] (CMD Technology, Inc.) -- C:\WINDOWS\System32\dllcache\cmdide.sys

[2013.10.26 19:53:21 | 000,020,864 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\cmbp0wdm.sys

[2013.10.26 19:53:20 | 000,248,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cl546xm.sys

[2013.10.26 19:53:19 | 000,170,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cl546x.dll

[2013.10.26 19:53:19 | 000,111,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cl5465.dll

[2013.10.26 19:53:18 | 000,045,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cirrus.sys

[2013.10.26 19:53:17 | 000,091,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cirrus.dll

[2013.10.26 19:53:16 | 000,272,640 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\dllcache\cinemclc.sys

[2013.10.26 19:53:15 | 000,980,034 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\cicap.sys

[2013.10.26 19:53:14 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll

[2013.10.26 19:53:13 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll

[2013.10.26 19:53:13 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe

[2013.10.26 19:53:12 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe

[2013.10.26 19:53:12 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe

[2013.10.26 19:53:12 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\changer.sys

[2013.10.26 19:53:11 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe

[2013.10.26 19:53:10 | 000,049,182 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cem56n5.sys

[2013.10.26 19:53:09 | 000,022,556 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cem33n5.sys

[2013.10.26 19:53:09 | 000,022,556 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cem28n5.sys

[2013.10.26 19:53:08 | 000,027,164 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ce3n5.sys

[2013.10.26 19:53:07 | 000,021,530 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ce2n5.sys

[2013.10.26 19:53:06 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys

[2013.10.26 19:53:06 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cd20xrnt.sys

[2013.10.26 19:53:05 | 000,715,210 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cbmdmkxx.sys

[2013.10.26 19:53:04 | 000,046,108 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cben5.sys

[2013.10.26 19:53:04 | 000,039,680 | ---- | C] (Silicom Ltd.) -- C:\WINDOWS\System32\dllcache\cb325.sys

[2013.10.26 19:53:03 | 000,037,916 | ---- | C] (Fast Ethernet Controller Provider) -- C:\WINDOWS\System32\dllcache\cb102.sys

[2013.10.26 19:53:02 | 000,032,256 | ---- | C] (Eicon Technology Corporation) -- C:\WINDOWS\System32\dllcache\diapi2NT.dll

[2013.10.26 19:53:00 | 000,164,923 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\diapi2.sys

[2013.10.26 19:53:00 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camext30.dll

[2013.10.26 19:53:00 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys

[2013.10.26 19:52:59 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camext30.ax

[2013.10.26 19:52:58 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camext20.ax

[2013.10.26 19:52:58 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camext20.dll

[2013.10.26 19:52:57 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camexo20.dll

[2013.10.26 19:52:56 | 000,171,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camdrv30.sys

[2013.10.26 19:52:56 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camexo20.ax

[2013.10.26 19:52:55 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camdrv21.sys

[2013.10.26 19:52:54 | 000,314,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\camdro21.sys

[2013.10.26 19:52:54 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll

[2013.10.26 19:52:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll

[2013.10.26 19:52:34 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bulltlp3.sys

[2013.10.26 19:52:33 | 000,031,529 | ---- | C] (BreezeCOM) -- C:\WINDOWS\System32\dllcache\brzwlan.sys

[2013.10.26 19:52:33 | 000,010,368 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brusbscn.sys

[2013.10.26 19:52:32 | 000,011,008 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brusbmdm.sys

[2013.10.26 19:52:31 | 000,060,416 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brserwdm.sys

[2013.10.26 19:52:31 | 000,009,728 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brserif.dll

[2013.10.26 19:52:30 | 000,039,808 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brparwdm.sys

[2013.10.26 19:52:30 | 000,005,120 | ---- | C] (Brother Industries,Ltd.) -- C:\WINDOWS\System32\dllcache\brscnrsm.dll

[2013.10.26 19:52:29 | 000,003,168 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brparimg.sys

[2013.10.26 19:52:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll

[2013.10.26 19:52:28 | 000,041,472 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmfusb.dll

[2013.10.26 19:52:27 | 000,032,256 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmfrsmg.exe

[2013.10.26 19:52:27 | 000,029,696 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmflpt.dll

[2013.10.26 19:52:26 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brmfcwia.dll

[2013.10.26 19:52:25 | 000,015,360 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmfbidi.dll

[2013.10.26 19:52:25 | 000,003,968 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brfiltup.sys

[2013.10.26 19:52:24 | 000,012,160 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brfiltlo.sys

[2013.10.26 19:52:24 | 000,002,944 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brfilt.sys

[2013.10.26 19:52:23 | 000,012,800 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brevif.dll

[2013.10.26 19:52:22 | 000,019,456 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brbidiif.dll

[2013.10.26 19:52:22 | 000,009,728 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brcoinst.dll

[2013.10.26 19:52:20 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\binlsvc.dll

[2013.10.26 19:52:19 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys

[2013.10.26 19:52:18 | 000,871,388 | ---- | C] (BCM) -- C:\WINDOWS\System32\dllcache\bcmdm.sys

[2013.10.26 19:52:18 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax

[2013.10.26 19:52:17 | 000,054,271 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\dllcache\bcm42xx5.sys

[2013.10.26 19:52:17 | 000,026,568 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\dllcache\bcm4e5.sys

[2013.10.26 19:52:16 | 000,066,557 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\dllcache\bcm42u.sys

[2013.10.26 19:52:14 | 000,036,128 | ---- | C] (3Dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\banshee.sys

[2013.10.26 19:52:13 | 000,342,336 | ---- | C] (3Dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\banshee.dll

[2013.10.26 19:52:13 | 000,097,440 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\dllcache\b57xp32.sys

[2013.10.26 19:52:13 | 000,089,952 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\b1cbase.sys

[2013.10.26 19:52:12 | 000,037,568 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\avmwan.sys

[2013.10.26 19:52:12 | 000,036,992 | ---- | C] (Aztech Systems Ltd) -- C:\WINDOWS\System32\dllcache\aztw2320.sys

[2013.10.26 19:52:11 | 000,144,384 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\avmenum.dll

[2013.10.26 19:52:11 | 000,087,552 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\avmcoxp.dll

[2013.10.26 19:52:10 | 000,013,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avcstrm.sys

[2013.10.26 19:52:09 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avc.sys

[2013.10.26 19:52:09 | 000,036,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avcaudio.sys

[2013.10.26 19:52:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll

[2013.10.26 19:52:03 | 000,070,784 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atiragem.sys

[2013.10.26 19:52:02 | 000,104,832 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atiraged.dll

[2013.10.26 19:52:01 | 000,281,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atimtai.sys

[2013.10.26 19:52:01 | 000,075,392 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atimpae.sys

[2013.10.26 19:52:00 | 000,289,920 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atimpab.sys

[2013.10.26 19:52:00 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atievxx.exe

[2013.10.26 19:51:59 | 000,268,160 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atidvai.dll

[2013.10.26 19:51:59 | 000,137,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atidrae.dll

[2013.10.26 19:51:58 | 000,382,592 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\dllcache\atidrab.dll

[2013.10.26 19:51:57 | 000,077,824 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\ati.sys

[2013.10.26 19:51:56 | 000,096,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ati.dll

[2013.10.26 19:51:55 | 000,097,354 | ---- | C] (Bay Networks, Inc.) -- C:\WINDOWS\System32\dllcache\aspndis3.sys

[2013.10.26 19:51:55 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll

[2013.10.26 19:51:55 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll

[2013.10.26 19:51:54 | 000,014,848 | ---- | C] (Advanced System Products, Inc.) -- C:\WINDOWS\System32\dllcache\asc3550.sys

[2013.10.26 19:51:53 | 000,026,496 | ---- | C] (Advanced System Products, Inc.) -- C:\WINDOWS\System32\dllcache\asc.sys

[2013.10.26 19:51:53 | 000,022,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asc3350p.sys

[2013.10.26 19:51:52 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll

[2013.10.26 19:51:51 | 000,036,224 | ---- | C] (ADMtek Incorporated.) -- C:\WINDOWS\System32\dllcache\an983.sys

[2013.10.26 19:51:51 | 000,012,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\amsint.sys

[2013.10.26 19:51:51 | 000,006,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\apmbatt.sys

[2013.10.26 19:51:50 | 000,016,969 | ---- | C] (AmbiCom, Inc.) -- C:\WINDOWS\System32\dllcache\amb8002.sys

[2013.10.26 19:51:49 | 000,027,678 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\ali5261.sys

[2013.10.26 19:51:49 | 000,026,624 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\alifir.sys

[2013.10.26 19:51:49 | 000,005,248 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\aliide.sys

[2013.10.26 19:51:48 | 000,056,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aic78xx.sys

[2013.10.26 19:51:48 | 000,055,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aic78u2.sys

[2013.10.26 19:51:47 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aha154x.sys

[2013.10.26 19:51:44 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agcgauge.ax

[2013.10.26 19:51:40 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adpu160m.sys

[2013.10.26 19:51:40 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll

[2013.10.26 19:51:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll

[2013.10.26 19:51:39 | 000,046,112 | ---- | C] (Adaptec, Inc ) -- C:\WINDOWS\System32\dllcache\adptsf50.sys

[2013.10.26 19:51:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll

[2013.10.26 19:51:38 | 000,747,392 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8830.sys

[2013.10.26 19:51:38 | 000,010,880 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\admjoy.sys

[2013.10.26 19:51:37 | 000,584,448 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8810.sys

[2013.10.26 19:51:37 | 000,553,984 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8820.sys

[2013.10.26 19:51:37 | 000,020,160 | ---- | C] (ADMtek Incorporated) -- C:\WINDOWS\System32\dllcache\adm8511.sys

[2013.10.26 19:51:36 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adicvls.sys

[2013.10.26 19:51:35 | 000,297,728 | ---- | C] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\System32\dllcache\ac97sis.sys

[2013.10.26 19:51:35 | 000,084,480 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\ac97via.sys

[2013.10.26 19:51:35 | 000,061,952 | ---- | C] (Farb-Flachbett-Scanner) -- C:\WINDOWS\System32\dllcache\acerscad.dll

[2013.10.26 19:51:34 | 000,231,552 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\ac97ali.sys

[2013.10.26 19:51:34 | 000,096,256 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\ac97intc.sys

[2013.10.26 19:51:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\abp480n5.sys

[2013.10.26 19:51:33 | 000,462,848 | ---- | C] (Aureal Inc.) -- C:\WINDOWS\System32\dllcache\a3dapi.dll

[2013.10.26 19:51:33 | 000,098,304 | ---- | C] (Aureal Semiconductor) -- C:\WINDOWS\System32\dllcache\a3d.dll

[2013.10.26 19:51:33 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\8514a.dll

[2013.10.26 19:51:32 | 000,148,352 | ---- | C] (3dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\3dfxvsm.sys

[2013.10.26 19:51:32 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\61883.sys

[2013.10.26 19:51:32 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\4mmdat.sys

[2013.10.26 19:51:31 | 000,762,780 | ---- | C] (3Com, Inc.) -- C:\WINDOWS\System32\dllcache\3cwmcru.sys

[2013.10.26 19:51:31 | 000,689,216 | ---- | C] (3dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\3dfxvs.dll

[2013.10.26 19:51:31 | 000,053,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\1394bus.sys

[2013.10.26 19:51:31 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\1394vdbg.sys

[2013.10.26 19:51:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll

[2013.10.26 19:51:11 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\s3legacy.dll

[2013.10.26 19:51:01 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll

[2013.10.26 19:51:00 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll

[2013.10.26 19:51:00 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe

[2013.10.26 19:50:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe

[2013.10.26 19:50:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll

[2013.10.26 19:50:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll

[2013.10.26 19:50:52 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx

[2013.10.24 22:22:01 | 000,000,000 | ---D | C] -- C:\FRST

[2013.10.23 23:24:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT

[2013.10.23 22:47:22 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2013.10.23 21:31:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\Malwarebytes

[2013.10.23 21:29:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2013.10.23 21:29:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2013.10.23 21:29:18 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2013.10.23 21:29:18 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware

[2013.10.23 21:13:31 | 001,033,335 | ---- | C] (Thisisu) -- C:\Dokumente und Einstellungen\chef\Desktop\JRT.exe

[2013.10.21 22:54:22 | 000,000,000 | -HSD | C] -- C:\FOUND.018

[2013.10.21 20:59:06 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbaudio.sys

[2013.10.20 23:19:24 | 002,237,440 | R--- | C] (OldTimer Tools) -- C:\OTLPE.exe

[2013.10.19 23:11:31 | 000,000,000 | ---D | C] -- C:\_OTL

[2013.10.13 12:09:20 | 000,000,000 | -HSD | C] -- C:\FOUND.017

[2013.10.12 19:54:37 | 000,000,000 | ---D | C] -- C:\WINDOWS

[2013.10.12 19:23:32 | 000,000,000 | -HSD | C] -- C:\FOUND.016

[2013.10.12 19:01:05 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\chef\Eigene Dateien

[2013.10.11 22:26:10 | 000,000,000 | -HSD | C] -- C:\FOUND.015

[2013.10.02 20:10:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\StreamTransport

[2013.10.02 19:37:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\StreamTransport

[2013.10.02 19:37:16 | 003,982,240 | ---- | C] (Adobe Systems, Inc.) -- C:\WINDOWS\System32\Flash10d.ocx

[2013.10.02 19:37:16 | 000,000,000 | ---D | C] -- C:\Programme\StreamTransport

[2 C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp files -> C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.10.28 22:18:12 | 000,001,766 | -H-- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Default.rdp

[2013.10.28 19:58:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\chef\Desktop\OTL.exe

[2013.10.28 19:30:42 | 000,000,188 | ---- | M] () -- C:\ASWL2K.ini

[2013.10.28 19:30:28 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2013.10.28 19:28:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2013.10.28 19:28:18 | 938,725,376 | -HS- | M] () -- C:\hiberfil.sys

[2013.10.27 22:49:24 | 000,020,168 | ---- | M] (Cavium Networks) -- C:\WINDOWS\System32\drivers\SSLDrv.sys

[2013.10.27 21:03:38 | 001,089,097 | ---- | M] (Farbar) -- C:\Dokumente und Einstellungen\chef\Desktop\FRST.exe

[2013.10.27 13:15:02 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2013.10.27 11:46:20 | 000,000,742 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\PDF-Viewer.lnk

[2013.10.27 11:35:30 | 000,001,618 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader XI.lnk

[2013.10.27 11:29:26 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe

[2013.10.27 11:29:26 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl

[2013.10.27 11:09:22 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe

[2013.10.27 11:09:22 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe

[2013.10.27 11:09:22 | 000,174,504 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe

[2013.10.27 11:09:22 | 000,145,408 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl

[2013.10.27 11:09:22 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll

[2013.10.27 11:01:58 | 000,547,222 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2013.10.27 11:01:56 | 000,583,904 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat

[2013.10.27 11:01:56 | 000,130,270 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat

[2013.10.27 11:01:56 | 000,106,072 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2013.10.27 09:55:44 | 000,161,136 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2013.10.25 18:13:04 | 000,079,989 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\paulaner_bierkarte.pdf

[2013.10.25 13:02:28 | 000,891,167 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Desktop\SecurityCheck.exe

[2013.10.23 21:56:14 | 000,000,660 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2013.10.23 21:13:38 | 001,033,335 | ---- | M] (Thisisu) -- C:\Dokumente und Einstellungen\chef\Desktop\JRT.exe

[2013.10.23 21:12:06 | 001,060,070 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Desktop\adwcleaner.exe

[2013.10.10 22:13:10 | 000,002,393 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Quicken Jubiläumsversion.lnk

[2013.10.07 21:59:44 | 000,026,748 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\FRITZ!Box_Anrufliste.csv

[2013.10.06 22:45:14 | 001,115,416 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_unterwegs_zu_den_besten_weinlagen.pdf

[2013.10.06 22:40:20 | 001,068,382 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_kulturflyer_museen.pdf

[2013.10.06 21:02:48 | 364,389,376 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\outlook.pst

[2013.10.05 18:31:26 | 000,299,900 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\folge9.pdf

[2013.10.05 10:46:44 | 000,000,422 | ---- | M] () -- C:\WINDOWS\cdplayer.ini

[2013.10.02 22:35:18 | 004,529,935 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Video  Wahlkampffinale in Eschborn Schlammschlacht vor der Stichwahl  Nachrichten  hr-online.de.flv

[2013.10.02 22:30:06 | 018,408,182 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\2. Oktober 2013 Die Videos vom Mittwoch  Fernsehen  hr-online.de.flv

[2013.10.02 21:02:14 | 000,098,855 | ---- | M] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Readiris.DUS

[2013.10.02 19:37:20 | 000,000,584 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ StreamTransport.lnk

[2 C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp files -> C:\Dokumente und Einstellungen\chef\Eigene Dateien\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013.10.27 11:46:18 | 000,000,742 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\PDF-Viewer.lnk

[2013.10.27 11:35:28 | 000,001,804 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk

[2013.10.27 11:35:28 | 000,001,618 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader XI.lnk

[2013.10.26 20:16:07 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xrxscnui.dll

[2013.10.26 20:16:03 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xrxftplt.exe

[2013.10.26 20:06:44 | 000,086,097 | ---- | C] () -- C:\WINDOWS\System32\dllcache\reslog32.dll

[2013.10.26 20:05:50 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax

[2013.10.26 20:05:46 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll

[2013.10.26 20:04:00 | 000,044,105 | ---- | C] () -- C:\WINDOWS\System32\dllcache\otceth5.sys

[2013.10.26 20:01:51 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax

[2013.10.26 20:00:18 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex

[2013.10.26 19:59:16 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex

[2013.10.26 19:57:38 | 000,165,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt53.dll

[2013.10.26 19:57:33 | 000,093,696 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt42.dll

[2013.10.26 19:57:29 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt34.dll

[2013.10.26 19:57:24 | 000,089,088 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt33.dll

[2013.10.26 19:57:20 | 000,083,968 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt21.dll

[2013.10.26 19:57:08 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex

[2013.10.26 19:54:39 | 000,029,768 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divasu.dll

[2013.10.26 19:54:37 | 000,037,962 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaprop.dll

[2013.10.26 19:54:36 | 000,006,216 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaci.dll

[2013.10.26 19:54:33 | 000,031,817 | ---- | C] () -- C:\WINDOWS\System32\dllcache\disrvpp.dll

[2013.10.26 19:52:07 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atixbar.sys

[2013.10.26 19:52:06 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativxbar.sys

[2013.10.26 19:52:06 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativttxx.sys

[2013.10.26 19:52:05 | 000,009,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativmdcd.sys

[2013.10.26 19:52:04 | 000,026,880 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtsnd.sys

[2013.10.26 19:52:04 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitvsnd.sys

[2013.10.26 19:52:04 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitunep.sys

[2013.10.26 19:52:03 | 000,049,920 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtcap.sys

[2013.10.26 19:52:02 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atipcxxx.sys

[2013.10.26 19:51:58 | 000,046,464 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atibt829.sys

[2013.10.25 18:13:10 | 000,079,989 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\paulaner_bierkarte.pdf

[2013.10.25 13:02:32 | 000,891,167 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Desktop\SecurityCheck.exe

[2013.10.23 21:29:26 | 000,000,660 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2013.10.23 21:12:11 | 001,060,070 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Desktop\adwcleaner.exe

[2013.10.12 10:53:42 | 938,725,376 | -HS- | C] () -- C:\hiberfil.sys

[2013.10.07 21:59:49 | 000,026,748 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\FRITZ!Box_Anrufliste.csv

[2013.10.06 22:45:15 | 001,115,416 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_unterwegs_zu_den_besten_weinlagen.pdf

[2013.10.06 22:40:24 | 001,068,382 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\die_rheingaulinie_kulturflyer_museen.pdf

[2013.10.05 18:31:35 | 000,299,900 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\folge9.pdf

[2013.10.02 22:34:42 | 004,529,935 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\Video  Wahlkampffinale in Eschborn Schlammschlacht vor der Stichwahl  Nachrichten  hr-online.de.flv

[2013.10.02 22:27:11 | 018,408,182 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Eigene Dateien\2. Oktober 2013 Die Videos vom Mittwoch  Fernsehen  hr-online.de.flv

[2013.10.02 19:37:18 | 000,000,584 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ StreamTransport.lnk

[2013.09.14 22:45:29 | 000,089,032 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat

[2013.03.24 14:34:46 | 000,000,040 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\cdr.ini

[2013.03.23 13:21:14 | 000,000,422 | ---- | C] () -- C:\WINDOWS\cdplayer.ini

[2013.01.14 23:08:53 | 000,028,040 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat

[2012.03.29 10:52:10 | 000,138,608 | ---- | C] () -- C:\WINDOWS\System32\LxDNTvmc100.dll

[2012.03.29 10:52:10 | 000,074,608 | ---- | C] () -- C:\WINDOWS\System32\LxDNTvm100.dll

[2012.03.29 10:52:08 | 000,309,616 | ---- | C] () -- C:\WINDOWS\System32\LxDNT100.dll

[2012.02.15 11:39:40 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll

[2012.02.12 22:28:18 | 000,001,263 | ---- | C] () -- C:\WINDOWS\isxdlge2.ini

[2010.05.02 21:12:39 | 000,017,408 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db

[2009.11.09 20:03:44 | 000,000,023 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\.SIG_TYP_VOREINSTELLUNG

[2009.05.10 23:15:32 | 000,000,019 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Anwendungsdaten\mdbu.bin

[2009.02.18 23:22:47 | 000,005,632 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2007.11.10 21:31:55 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\chef\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat

 
 ========== ZeroAccess Check ==========

 

[2007.10.22 04:28:24 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 03:22:26 | 001,499,136 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 12:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 03:22:32 | 000,273,920 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 
 ========== Files - Unicode (All) ==========

[2013.10.28 19:35:38 | 103,792,972 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\汵呴6

[2013.10.28 19:35:37 | 103,792,972 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\汵呴6

[2013.10.27 20:46:48 | 103,533,600 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\둓呴6

[2013.10.27 20:46:47 | 103,533,600 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\둓呴6

[2013.10.26 21:01:54 | 103,214,166 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\꽋⍔呴6

[2013.10.26 21:01:53 | 103,214,166 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\꽋⍔呴6

[2013.10.26 18:00:10 | 103,108,672 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\臣䉰呴6

[2013.10.26 18:00:09 | 103,108,672 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\臣䉰呴6

[2013.10.25 15:19:26 | 102,975,063 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\挼翠呴6

[2013.10.25 15:19:25 | 102,975,063 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\挼翠呴6

[2013.10.24 01:41:52 | 102,749,940 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ፕᴇ呴6

[2013.10.24 01:41:50 | 102,749,940 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ፕᴇ呴6

[2013.10.23 19:42:50 | 102,674,996 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ഌ𥱴6

[2013.10.23 19:42:49 | 102,674,996 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ഌ𥱴6

[2013.10.13 12:13:12 | 533,921,792 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ਘ呴6

[2013.10.13 12:13:11 | 533,921,792 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ਘ呴6

[2013.10.10 21:01:56 | 100,332,977 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㾬呴6

[2013.10.10 21:01:54 | 100,332,977 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㾬呴6

[2013.10.08 18:56:20 | 099,859,239 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䊧៦呴6

[2013.10.08 18:56:19 | 099,859,239 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䊧៦呴6

[2013.10.06 21:01:56 | 099,477,982 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瞭ᥱ呴6

[2013.10.06 21:01:54 | 099,477,982 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瞭ᥱ呴6

[2013.10.02 19:25:18 | 098,834,313 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\喫疏呴6

[2013.10.02 19:25:18 | 098,834,313 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\喫疏呴6

[2013.09.25 21:01:40 | 097,858,179 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\󖁴6

[2013.09.25 19:20:29 | 097,858,179 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\󖁴6

[2013.09.24 21:02:06 | 097,540,783 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\鱃㨹呴6

[2013.09.24 18:37:01 | 097,540,783 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\鱃㨹呴6

[2013.09.20 17:21:04 | 098,481,651 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䐎𩁴6

[2013.09.20 17:21:03 | 098,481,651 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䐎𩁴6

[2013.09.19 19:27:32 | 098,395,704 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\֝山呴6

[2013.09.19 19:27:31 | 098,395,704 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\֝山呴6

[2013.09.17 11:08:40 | 097,931,385 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\龃ි呴6

[2013.09.17 11:08:38 | 097,931,385 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\龃ි呴6

[2013.09.13 10:54:50 | 097,446,370 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\𐉨⦊呴6

[2013.09.13 10:54:50 | 097,446,370 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\𐉨⦊呴6

[2013.09.11 19:21:40 | 097,170,353 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\煤䬧呴6

[2013.09.11 19:21:39 | 097,170,353 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\煤䬧呴6

[2013.09.08 18:27:18 | 096,566,691 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\𩿩呴6

[2013.09.08 18:27:16 | 096,566,691 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\𩿩呴6

[2013.09.06 20:58:20 | 096,462,459 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瘚呴6

[2013.09.06 20:58:18 | 096,462,459 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\瘚呴6

Log Extra.txt:

Code:

OTL Extras logfile created on: 28.10.2013 22:21:37 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Dokumente und Einstellungen\chef\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

895,17 Mb Total Physical Memory | 544,27 Mb Available Physical Memory | 60,80% Memory free

2,12 Gb Paging File | 1,43 Gb Available in Paging File | 67,60% Paging File free

Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 67,05 Gb Total Space | 15,19 Gb Free Space | 22,66% Space Free | Partition Type: FAT32

Drive D: | 40,79 Gb Total Space | 8,78 Gb Free Space | 21,52% Space Free | Partition Type: FAT32

 

Computer Name: ASUS | User Name: chef | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

.html [@ = OperaStable] -- Reg Error: Key error. File not found

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = OperaStable] -- Reg Error: Key error. File not found

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

http [open] -- "C:\Programme\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)

https [open] -- "C:\Programme\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 
 ========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 0

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

"1947:TCP" = 1947:TCP:*:Enabled:HASP SRM 

"1947:UDP" = 1947:UDP:*:Enabled:HASP SRM 

"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

"D:\DATEV\PROGRAMM\A0000008\Nhstw32.exe" = D:\DATEV\PROGRAMM\A0000008\Nhstw32.exe:*:Enabled:Nhstw32.exe

"D:\DATEV\PROGRAMM\Sws\LimaServer.exe" = D:\DATEV\PROGRAMM\Sws\LimaServer.exe:*:Enabled:LimaServer.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\LimaService.exe" = D:\DATEV\PROGRAMM\Sws\LimaService.exe:*:Enabled:LimaService.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0000195\ADDMAN\DATEVAddMan.exe" = D:\DATEV\PROGRAMM\B0000195\ADDMAN\DATEVAddMan.exe:*:Enabled:DATEVAddMan.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0001356\mIDentity.exe" = D:\DATEV\PROGRAMM\B0001356\mIDentity.exe:*:Enabled:mIDentity.exe -- (KOBIL Systems GmbH)

"D:\DATEV\PROGRAMM\Sws\LimaAdmin.exe" = D:\DATEV\PROGRAMM\Sws\LimaAdmin.exe:*:Enabled:LimaAdmin.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\LimaPing.exe" = D:\DATEV\PROGRAMM\Sws\LimaPing.exe:*:Enabled:LimaPing.exe -- ()

"D:\DATEV\PROGRAMM\Sws\StartCIOProfile.exe" = D:\DATEV\PROGRAMM\Sws\StartCIOProfile.exe:*:Enabled:StartCIOProfile.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\MasterSWM_Viewer.exe" = D:\DATEV\PROGRAMM\Sws\MasterSWM_Viewer.exe:*:Enabled:MasterSWM_Viewer.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\LimaLicFile.exe" = D:\DATEV\PROGRAMM\Sws\LimaLicFile.exe:*:Enabled:LimaLicFile.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DcManag.exe" = D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DcManag.exe:*:Enabled:DcManag.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DfueMan.exe" = D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DfueMan.exe:*:Enabled:DfueMan.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\DFUEISDN\SecClt\SecClt.exe" = D:\DATEV\PROGRAMM\DFUEISDN\SecClt\SecClt.exe:10.0.0.0/255.0.0.0,172.16.0.0/255.240.0.0,192.168.0.0/255.255.0.0:Enabled:SecClt.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\DFUEISDN\SSLClt\SSLClt.exe" = D:\DATEV\PROGRAMM\DFUEISDN\SSLClt\SSLClt.exe:10.0.0.0/255.0.0.0,172.16.0.0/255.240.0.0,192.168.0.0/255.255.0.0:Enabled:SSLClt.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\DFUEWS\MNTBNA\mntbna.exe" = D:\DATEV\PROGRAMM\DFUEWS\MNTBNA\mntbna.exe:10.0.0.0/255.0.0.0,172.16.0.0/255.240.0.0,192.168.0.0/255.255.0.0:Enabled:mntbna.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\ccsrv2.exe" = D:\DATEV\PROGRAMM\RZKOMM\ccsrv2.exe:*:Enabled:ccsrv2.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\callauferst.exe" = D:\DATEV\PROGRAMM\RZKOMM\callauferst.exe:*:Enabled:callauferst.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\DfueSammlerDienst.exe" = D:\DATEV\PROGRAMM\RZKOMM\DfueSammlerDienst.exe:*:Enabled:DfueSammlerDienst.exe -- ()

"D:\DATEV\PROGRAMM\RZKOMM\funktest.exe" = D:\DATEV\PROGRAMM\RZKOMM\funktest.exe:*:Enabled:funktest.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\funkt_fv.exe" = D:\DATEV\PROGRAMM\RZKOMM\funkt_fv.exe:*:Enabled:funkt_fv.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\empftest.exe" = D:\DATEV\PROGRAMM\RZKOMM\empftest.exe:*:Enabled:empftest.exe -- (DATEV eG)

"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

"D:\DATEV\PROGRAMM\A0000008\Nhstw32.exe" = D:\DATEV\PROGRAMM\A0000008\Nhstw32.exe:*:Enabled:Nhstw32.exe

"D:\DATEV\PROGRAMM\Sws\LimaServer.exe" = D:\DATEV\PROGRAMM\Sws\LimaServer.exe:*:Enabled:LimaServer.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\LimaService.exe" = D:\DATEV\PROGRAMM\Sws\LimaService.exe:*:Enabled:LimaService.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0000195\ADDMAN\DATEVAddMan.exe" = D:\DATEV\PROGRAMM\B0000195\ADDMAN\DATEVAddMan.exe:*:Enabled:DATEVAddMan.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0001356\mIDentity.exe" = D:\DATEV\PROGRAMM\B0001356\mIDentity.exe:*:Enabled:mIDentity.exe -- (KOBIL Systems GmbH)

"D:\DATEV\PROGRAMM\Sws\LimaAdmin.exe" = D:\DATEV\PROGRAMM\Sws\LimaAdmin.exe:*:Enabled:LimaAdmin.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\LimaPing.exe" = D:\DATEV\PROGRAMM\Sws\LimaPing.exe:*:Enabled:LimaPing.exe -- ()

"D:\DATEV\PROGRAMM\Sws\StartCIOProfile.exe" = D:\DATEV\PROGRAMM\Sws\StartCIOProfile.exe:*:Enabled:StartCIOProfile.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\MasterSWM_Viewer.exe" = D:\DATEV\PROGRAMM\Sws\MasterSWM_Viewer.exe:*:Enabled:MasterSWM_Viewer.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\Sws\LimaLicFile.exe" = D:\DATEV\PROGRAMM\Sws\LimaLicFile.exe:*:Enabled:LimaLicFile.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DcManag.exe" = D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DcManag.exe:*:Enabled:DcManag.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DfueMan.exe" = D:\DATEV\PROGRAMM\B0000000\DFUEMNGR\DfueMan.exe:*:Enabled:DfueMan.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\DFUEISDN\SecClt\SecClt.exe" = D:\DATEV\PROGRAMM\DFUEISDN\SecClt\SecClt.exe:10.0.0.0/255.0.0.0,172.16.0.0/255.240.0.0,192.168.0.0/255.255.0.0:Enabled:SecClt.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\DFUEISDN\SSLClt\SSLClt.exe" = D:\DATEV\PROGRAMM\DFUEISDN\SSLClt\SSLClt.exe:10.0.0.0/255.0.0.0,172.16.0.0/255.240.0.0,192.168.0.0/255.255.0.0:Enabled:SSLClt.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\DFUEWS\MNTBNA\mntbna.exe" = D:\DATEV\PROGRAMM\DFUEWS\MNTBNA\mntbna.exe:10.0.0.0/255.0.0.0,172.16.0.0/255.240.0.0,192.168.0.0/255.255.0.0:Enabled:mntbna.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\ccsrv2.exe" = D:\DATEV\PROGRAMM\RZKOMM\ccsrv2.exe:*:Enabled:ccsrv2.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\callauferst.exe" = D:\DATEV\PROGRAMM\RZKOMM\callauferst.exe:*:Enabled:callauferst.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\DfueSammlerDienst.exe" = D:\DATEV\PROGRAMM\RZKOMM\DfueSammlerDienst.exe:*:Enabled:DfueSammlerDienst.exe -- ()

"D:\DATEV\PROGRAMM\RZKOMM\funktest.exe" = D:\DATEV\PROGRAMM\RZKOMM\funktest.exe:*:Enabled:funktest.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\funkt_fv.exe" = D:\DATEV\PROGRAMM\RZKOMM\funkt_fv.exe:*:Enabled:funkt_fv.exe -- (DATEV eG)

"D:\DATEV\PROGRAMM\RZKOMM\empftest.exe" = D:\DATEV\PROGRAMM\RZKOMM\empftest.exe:*:Enabled:empftest.exe -- (DATEV eG)

"C:\Programme\Opera\opera.exe" = C:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)

"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

"C:\Dokumente und Einstellungen\CHEF\Anwendungsdaten\Dropbox\bin\Dropbox.exe" = C:\Dokumente und Einstellungen\CHEF\Anwendungsdaten\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)

"C:\Programme\Opera\pluginwrapper\opera_plugin_wrapper.exe" = C:\Programme\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper

"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)

"C:\Programme\Bonjour\mDNSResponder.exe" = C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Dienst "Bonjour" -- (Apple Inc.)

"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)

"C:\Programme\StarMoney Business 6.0\ouservice\StarMoneyOnlineUpdate.exe" = C:\Programme\StarMoney Business 6.0\ouservice\StarMoneyOnlineUpdate.exe:*:Enabled:StarMoney Business 6.0 OnlineUpdate

"C:\Programme\StarMoney Business 6.0\app\StarMoney.exe" = C:\Programme\StarMoney Business 6.0\app\StarMoney.exe:*:Enabled:StarMoney Business 6.0

"C:\Programme\Opera Mail\operamail.exe" = C:\Programme\Opera Mail\operamail.exe:*:Enabled:Opera Mail -- (Opera Software)

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00030407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 SR-1 Small Business

"{01FF2C26-DBCE-DADA-BEE5-0928E0F8F623}" = CCC Help German

"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (DATEV_CL_DE01)

"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center

"{05F4ABAC-8697-2291-16D8-4BFD7DD78B59}" = CCC Help Japanese

"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)

"{07C85A90-668F-A807-5C67-975E0777A9E8}" = Catalyst Control Center Localization Russian

"{0C3353EB-252A-419F-A34E-4546A098847C}" = Microsoft SQL Server Native Client

"{0EA06F05-4320-E4DC-4374-E6C0986C964D}" = Catalyst Control Center Localization Finnish

"{137C5C08-8B6F-497A-1529-502359B3BA88}" = Catalyst Control Center Localization Polish

"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media

"{17EE76BB-5264-8946-DA8F-D564ED25EDDD}" = CCC Help English

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F698102-5739-441E-96F0-74F4EA540F06}" = Attansic Giga Ethernet Utility

"{1FA1D596-1167-434D-A70B-B7A2E25B6687}" = Anti-Phishing Bar 2.0

"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = LG Power Tools

"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime

"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 45

"{27599825-6BD9-1081-D1CC-0BFC01157204}" = CCC Help Hungarian

"{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe  1.4.89.1

"{2C41394E-E15B-47DC-B33C-54D33EA85B68}" = Lexware online banking

"{2E13776F-DEAF-7C83-C2A9-3BF073D51BFD}" = Catalyst Control Center Localization Swedish

"{3482A5D0-F16D-A6C9-397F-8D85EA61BF93}" = Catalyst Control Center Localization Norwegian

"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{3C3CA756-9FB1-60D9-4435-6D9FEB42C637}" = Catalyst Control Center Localization Dutch

"{3E4039F8-5DA8-0414-B7E1-8DA8C8FC1565}" = Catalyst Control Center Localization Thai

"{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear

"{459699C3-9430-4381-964B-4248D87B49F9}" = Apple Mobile Device Support

"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis

"{48D4215F-414F-1554-8534-E3D8156C0666}" = Skins

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4A0FAC3C-852D-C0A3-1715-6F844C184CF0}" = CCC Help Portuguese

"{4B29B49E-F274-58CE-25D2-791570F1619A}" = CCC Help French

"{4B546AE5-DF17-6D39-A846-A9ECD0153C9A}" = Catalyst Control Center Localization Greek

"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun

"{57EF4BC7-0C52-1872-C0CE-AEAB996E5626}" = Catalyst Control Center Localization Korean

"{5A6DB7C1-E646-4842-A562-49C5EB8F2B47}" = StarMoney

"{5B701396-48C3-A3FA-43DB-FF975446759C}" = Catalyst Control Center Localization French

"{5C759B74-34F4-43C6-A5D9-039CB754C5E9}" = Microsoft SQL Server VSS Writer

"{5C9AA073-814D-4EB3-BE9C-4C1BACBC974C}" = Haufe Formular-Manager

"{5ECA8F33-8F8E-1042-2082-5F02E64D6140}" = CCC Help Polish

"{61150C85-DC0A-4976-922F-5575F388ADA6}" = Notation Player 2.6

"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = ASUSDVD

"{68B84920-CD46-8C5B-DABE-EC0FF6F0C703}" = Catalyst Control Center Localization German

"{6AF75C96-2093-51F4-0412-501CB317A7F9}" = CCC Help Thai

"{6D219284-A368-A0A5-AA55-8BAAE9EA60CC}" = Catalyst Control Center Localization Japanese

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{732442CA-AFFC-E75D-C586-2A3C71D8CFFE}" = CCC Help Finnish

"{735DEB9C-61BD-4D31-994B-92395BBB4E45}" = Microsoft XML Parser

"{767EE8DA-A2AA-00A9-1A21-9584E00867B8}" = Catalyst Control Center Core Implementation

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour

"{7C2B745A-E7F1-41F1-B9BB-3DDB8D52E4CE}" = Readiris Pro 11

"{815B5312-F7B5-EDD5-A899-B0228C3C7F3A}" = CCC Help Turkish

"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2

"{857D4360-762B-978B-76AD-491AA719E47A}" = ccc-core-static

"{86552A3A-0437-319B-46C5-569FC9F7ACA9}" = ccc-utility

"{87E248BA-643A-495C-8F8C-F7FB0D3779F1}" = Haufe iDesk-Service

"{89DDBCD4-B326-4545-9A05-26C7B16C1DEB}" = PowerForPhone

"{89EAD7B4-1CAC-CC9E-F040-FE041A2EA77C}" = Catalyst Control Center Localization Spanish

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8BE3174F-3BFE-8822-4493-A0519D1E4E94}" = Catalyst Control Center Localization Portuguese

"{8F722FA9-B994-4C9B-B292-FD32D6206EDF}" = ASUS WLAN Card Utilities/Driver

"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System

"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = Asus MultiFrame

"{9D6D7811-43B3-463C-BC79-5D1755269989}" = Net4Switch

"{9D7802F0-3C39-ED52-10D9-AE8A7FB5A94C}" = Catalyst Control Center Localization Hungarian

"{9F303CF8-2998-4541-C9F7-C3AAEC2B88B0}" = Catalyst Control Center Graphics Full Existing

"{A042FD6F-D051-ECE5-71C9-52ABFE36EBF9}" = Catalyst Control Center Localization Czech

"{A125DDDB-E0C0-08E0-F04C-7B5409DFFC79}" = Catalyst Control Center Graphics Light

"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A907A713-DA24-4352-8786-96C7A6944646}" = Quicken Jubiläumsversion

"{AB1E9EC2-42E4-E801-83BB-AAFF86DDEC7E}" = CCC Help Czech

"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Deutsch

"{B0261E53-B6F1-474A-864B-E7C3CBF468E0}" = iTunes

"{B02A3921-F7B7-C73F-395B-8172C9EE4006}" = Catalyst Control Center Localization Italian

"{B799318A-F231-4C26-BDA1-8E0452F5CA90}" = SCR3xx USB Smart Card Reader

"{BB3085D5-7D88-4AF2-B08E-226E26E2A169}" = Haufe iDesk-Browser

"{BD17DEF2-8970-E4F5-337A-C10DE4D33F29}" = CCC Help Korean

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology

"{C5A2542D-CF79-3EE6-7673-2CEDA2338172}" = CCC Help Greek

"{C69B9631-B617-B714-7FE2-6FCD5B891ACD}" = Catalyst Control Center Localization Chinese Traditional

"{C6D7BC96-A608-0908-F6E7-53C118423087}" = CCC Help Chinese Standard

"{C8A4038E-4DA5-879D-A353-7443FC3EE22C}" = CCC Help Spanish

"{C9B7D4A2-7A42-96BC-DE77-6EB23F1116A8}" = CCC Help Swedish

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CE344E77-B015-C6D0-9A1B-0EA0043E7A52}" = CCC Help Russian

"{D355B677-8813-4560-9EF7-B8FC99C08978}" = DATEV ProCheckViewer V.2.11

"{D765F1CE-5AE5-4C47-B134-AE58AC474740}" = OpenOffice.org 3.1

"{D9D45F79-D38C-9BCA-4023-6F3E365D5D25}" = CCC Help Dutch

"{DB891739-2EB3-45A8-9CBD-941C255CECD4}" = ASUS Touch Pad Extra

"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader

"{DCE907E3-4D72-4CD3-A08A-BEFC8C7A5869}" = Branding

"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash

"{E33AC7E7-43D7-457B-B944-436222E038BB}" = Haufe Steuer Office Premium

"{E4BCF2E7-B181-C240-B6EC-04A8FA633EEF}" = Catalyst Control Center Graphics Full New

"{E5BD02EF-36F1-478F-88B2-D3990C62C2CB}" = SQLXML4

"{E61A5CEE-AC48-45D4-9113-F170816790FF}" = DDBAC

"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update

"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack

"{E91EBA1F-DA25-58B2-365F-FB76BDC81F86}" = Catalyst Control Center Localization Turkish

"{EA2F03AD-BF9D-EECC-F24C-549046AEC17A}" = Catalyst Control Center Localization Danish

"{EE78C2A7-1413-105B-DC86-3F9FA6B10C2F}" = CCC Help Danish

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F2AAE965-966C-104E-ECCD-9F111A83139C}" = CCC Help Italian

"{F3AEE6A8-5FA3-F9AA-8CA7-D1AAD6352065}" = Catalyst Control Center Localization Chinese Standard

"{F3C2ECAA-1B4D-4B75-9105-106B0D03EF02}" = Lexware Info Service

"{F7F564DD-A790-D01A-5390-6D1386AA5621}" = CCC Help Norwegian

"{F902AB2B-7816-4CBD-A385-F2549F62956B}" = StarMoney

"{F932A61A-4FAD-4390-8163-AB50F5FDE61B}" = Lernspaß 4

"{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1" = StreamTransport version: 1.0.2.2171

"{FD9B0D38-7B82-5A3A-E046-D8DBF3F06A93}" = CCC Help Chinese Traditional

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Advanced Renamer_is1" = Advanced Renamer

"AFPL Ghostscript 8.53" = AFPL Ghostscript 8.53

"AFPL Ghostscript Fonts" = AFPL Ghostscript Fonts

"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software

"Allway Sync_is1" = Allway Sync version 11.1.37

"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver

"AtcL2" = Attansic L2 Fast Ethernet Driver

"ATI Display Driver" = ATI Display Driver

"Audiograbber" = Audiograbber 1.83 SE 

"Audiograbber-Lame" = Audiograbber MP3-Plugin

"Avira AntiVir Desktop" = Avira Free Antivirus

"CCleaner" = CCleaner

"Chipcardmaster_is1" = Chipcardmaster 6.86

"CHIPDRIVE Smartcard Commander_CDInst21" = CHIPDRIVE Smartcard Commander

"ElsterFormular" = ElsterFormular

"Free CD to MP3 Converter" = Free CD to MP3 Converter

"FreeFileSync" = FreeFileSync 5.10

"FreePDF_XP" = FreePDF XP (Remove only)

"GMX MultiMessenger" = GMX MultiMessenger

"Hardcopy(C__Programme_Hardcopy)" = Hardcopy (C:\Programme\Hardcopy)

"HControl" = ATK0100 ACPI UTILITY

"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs

"ie7" = Windows Internet Explorer 7

"ie8" = Windows Internet Explorer 8

"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = LG Power Tools

"IrfanView" = IrfanView (remove only)

"LearnLincClient" = Dialogseminar online

"LIDL Fotoservice_is1" = LIDL Fotoservice

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300

"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft SQL Server 2005" = Microsoft SQL Server 2005

"Mozilla Firefox 24.0 (x86 de)" = Mozilla Firefox 24.0 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Nero - Burning Rom!UninstallKey" = Nero OEM

"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs

"Opera 1.0.1040" = Opera Mail 1.0

"Opera 12.16.1860" = Opera 12.16

"Opera 17.0.1241.53" = Opera Stable 17.0.1241.53

"Recuva" = Recuva

"Redirection Port Monitor" = RedMon - Redirection Port Monitor

"SIZCHIP_PLUGIN_MOZ_1702" = SIZCHIP-Plugin 1.7.0.2 fuer Firefox, Seamonkey, Safari, Opera, Chrome

"SIZCHIP-Plugin-Mozilla-20" = SIZCHIP 2.0.0.4 NPAPI

"SMSERIAL" = Motorola SM56 Speakerphone Modem

"sofortbanking" = sofortbanking

"Surf & E-Mail-Stick" = Surf & E-Mail-Stick

"sv.net" = sv.net

"SynTPDeinstKey" = Synaptics Pointing Device Driver

"VLC media player" = VLC media player 2.0.5

"Windows Media Format Runtime" = Windows Media Format Runtime

"Windows Media Player" = Windows Media Player 10

"Windows XP Service Pack" = Windows XP Service Pack 3

"WinZip" = WinZip

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Dropbox" = Dropbox

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 27.10.2013 09:43:36 | Computer Name = ASUS | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 27.10.2013 09:43:36 | Computer Name = ASUS | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 1953

 

Error - 27.10.2013 09:43:36 | Computer Name = ASUS | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 1953

 

Error - 27.10.2013 16:05:40 | Computer Name = ASUS | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung frst.exe, Version 3.3.8.1, fehlgeschlagenes

 Modul ntdll.dll, Version 5.1.2600.6055, Fehleradresse 0x0002e613.

 

Error - 27.10.2013 16:53:16 | Computer Name = ASUS | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung virtualpassageexe.exe, Version 1.7.3.1, 

fehlgeschlagenes Modul msvcrt.dll, Version 7.0.2600.5512, Fehleradresse 0x00037fd4.

 

Error - 27.10.2013 17:10:06 | Computer Name = ASUS | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung frst.exe, Version 3.3.8.1, fehlgeschlagenes

 Modul ntdll.dll, Version 5.1.2600.6055, Fehleradresse 0x0002e613.

 

Error - 27.10.2013 17:13:02 | Computer Name = ASUS | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung mstsc.exe, Version 6.0.6001.18589, fehlgeschlagenes

 Modul msvcrt.dll, Version 7.0.2600.5512, Fehleradresse 0x00036fa3.

 

Error - 27.10.2013 17:50:42 | Computer Name = ASUS | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung virtualpassageexe.exe, Version 1.7.3.1, 

fehlgeschlagenes Modul msvcrt.dll, Version 7.0.2600.5512, Fehleradresse 0x00037fd4.

 

Error - 27.10.2013 17:59:31 | Computer Name = ASUS | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung frst.exe, Version 3.3.8.1, fehlgeschlagenes

 Modul ntdll.dll, Version 5.1.2600.6055, Fehleradresse 0x0002e613.

 

Error - 28.10.2013 14:28:50 | Computer Name = ASUS | Source = PerfNet | ID = 2004

Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen

werden

 nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

 

[ System Events ]

Error - 26.10.2013 16:37:56 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:38:26 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:39:14 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:39:45 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:40:17 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:40:47 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:42:16 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 26.10.2013 16:43:10 | Computer Name = ASUS | Source = DCOM | ID = 10010

Description = Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb

 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

 

Error - 27.10.2013 06:08:36 | Computer Name = ASUS | Source = Service Control Manager | ID = 7034

Description = Dienst "Java Quick Starter" wurde unerwartet beendet. Dies ist bereits

 1 Mal passiert.

 

Error - 27.10.2013 08:02:37 | Computer Name = ASUS | Source = Windows Update Agent | ID = 20

Description = Installationsfehler: Die Installation des folgenden Updates ist mit

 Fehler 0x80070643 fehlgeschlagen: Windows Genuine Advantage Notification (KB905474)

 

 

< End of report >

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Alles erledigt.
Super, vielen Dank für die umfangreiche Hilfe.
Habe mir die Tipps zur Sicherheit vermerkt.

gruß,
steff :)