(2x) Extreme PCVerlangsamung und gelegentliche Bluescreens
 

Guten Abend,

chronologischer Ablauf der Ereignisse (unter Umständen unwichtige Angaben):

1) Ende September nach ausgiebigem Arbeiten mit Microsoft Word erster Bluescreen nach normalen Hochladen von Windows.

2) Mitte Oktober nächster Bluescreen ohne ersichtlichen Grund

3) Nun vor einigen Tagen wieder Bluescreen und extreme Windowsverlangsamung.

Habe nun mehrmals versucht malwarebytes drüberlaufen zu lassen, aber es hängt immer an einer Stelle extrem/heute gabs beim mittlerweile 3. Versuch auch nen Bluescreen.

Hier die Files:

OTL logfile created on: 28.11.2012 20:34:35 - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\khelletrick\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,95 Gb Total Physical Memory | 2,51 Gb Available Physical Memory | 63,45% Memory free
7,90 Gb Paging File | 6,28 Gb Available in Paging File | 79,48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,78 Gb Total Space | 401,94 Gb Free Space | 88,97% Space Free | Partition Type: NTFS

Computer Name: KHELLETRICKPC | User Name: khelletrick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.11.28 20:33:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\khelletrick\Desktop\OTL (1).exe
PRC - [2012.11.14 03:11:00 | 001,242,728 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2012.07.27 13:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.10.01 08:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 08:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.04.29 17:20:18 | 000,146,592 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
PRC - [2011.03.05 16:42:36 | 000,180,928 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
PRC - [2011.03.05 16:42:36 | 000,064,704 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
PRC - [2011.02.23 14:05:04 | 000,105,024 | ---- | M] (ArcSoft, Inc.) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
PRC - [2011.02.15 11:47:02 | 002,757,312 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
PRC - [2011.02.01 13:20:48 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2011.02.01 13:20:46 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2011.01.29 05:36:18 | 000,081,016 | ---- | M] (Sony of America Corporation) -- C:\Programme\Sony\VAIO Care\listener.exe
PRC - [2011.01.28 06:15:33 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
PRC - [2011.01.28 06:13:43 | 004,538,368 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
PRC - [2010.11.27 00:55:42 | 000,648,032 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
PRC - [2010.11.27 00:55:42 | 000,398,176 | ---- | M] (Sony Corporation) -- c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
PRC - [2010.09.13 18:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010.09.13 18:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe


========== Modules (No Company Name) ==========

MOD - [2012.11.15 18:52:07 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\d1a34ee93168657925ce2cfc68d8b63c\IAStorUtil.ni.dll
MOD - [2012.11.15 18:52:07 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\54d19fac3bfc693f87db68571844895a\IAStorCommon.ni.dll
MOD - [2012.11.15 12:02:07 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\03cfab5534482e8fc313ead6edc19100\System.Web.ni.dll
MOD - [2012.11.15 12:02:00 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\413288993ff690e8251d2dbe32bee01f\System.Runtime.Remoting.ni.dll
MOD - [2012.11.15 12:01:30 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll
MOD - [2012.11.15 12:01:22 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll
MOD - [2012.11.15 12:01:07 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b311b783e1efaa9527f4c2c9680c44d1\WindowsBase.ni.dll
MOD - [2012.11.15 12:01:01 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll
MOD - [2012.11.15 12:00:56 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll
MOD - [2012.11.15 12:00:55 | 007,988,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll
MOD - [2012.11.15 12:00:05 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll
MOD - [2012.11.14 03:10:59 | 000,460,904 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\ppGoogleNaClPluginChrome.dll
MOD - [2012.11.14 03:10:58 | 012,456,040 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\PepperFlash\pepflashplayer.dll
MOD - [2012.11.14 03:10:57 | 004,008,040 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\pdf.dll
MOD - [2012.11.14 03:10:12 | 000,587,880 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\libglesv2.dll
MOD - [2012.11.14 03:10:11 | 000,124,520 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\libegl.dll
MOD - [2012.11.14 03:10:04 | 000,157,304 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\avutil-51.dll
MOD - [2012.11.14 03:10:03 | 000,275,576 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\avformat-54.dll
MOD - [2012.11.14 03:10:02 | 002,168,952 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\avcodec-54.dll
MOD - [2012.11.01 14:03:54 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2011.03.17 00:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2010.11.13 00:26:08 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll


========== Services (SafeList) ==========

SRV:64bit: - [2011.01.29 05:36:18 | 000,259,192 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe -- (SampleCollector)
SRV - [2012.09.12 21:21:48 | 000,368,896 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Programme\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012.09.12 21:21:48 | 000,022,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012.07.27 13:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.11 16:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe -- (BBUpdate)
SRV - [2012.06.11 16:22:16 | 000,193,616 | ---- | M] (Microsoft Corporation.) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe -- (BBSvc)
SRV - [2012.03.12 05:07:58 | 002,429,544 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2012.01.13 10:55:10 | 001,256,040 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Programme\Sony\VAIO Update Common\VUAgent.exe -- (VUAgent)
SRV - [2011.10.01 08:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 08:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.08.12 16:35:30 | 000,971,704 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Programme\Sony\VAIO Smart Network\VSNService.exe -- (VSNService)
SRV - [2011.07.19 04:45:52 | 000,104,096 | ---- | M] (Atheros Communication Inc.) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe -- (DCDhcpService)
SRV - [2011.05.19 19:15:44 | 000,549,616 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr)
SRV - [2011.04.29 17:20:18 | 000,146,592 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (Atheros Bt&Wlan Coex Agent)
SRV - [2011.04.29 17:19:22 | 000,091,296 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
SRV - [2011.03.05 16:42:36 | 000,064,704 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service)
SRV - [2011.02.23 14:05:04 | 000,105,024 | ---- | M] (ArcSoft, Inc.) [Auto | Running] -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe -- (uCamMonitor)
SRV - [2011.02.21 12:55:08 | 000,113,824 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe -- (SOHCImp)
SRV - [2011.02.21 12:55:08 | 000,067,232 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe -- (SOHDs)
SRV - [2011.02.18 22:15:06 | 000,099,104 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe -- (VcmXmlIfHelper)
SRV - [2011.02.18 22:02:08 | 000,385,336 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe -- (VcmINSMgr)
SRV - [2011.02.14 13:23:50 | 000,044,736 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Programme\Sony\VAIO Care\VCService.exe -- (VCService)
SRV - [2011.02.01 13:20:48 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2011.02.01 13:20:46 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2011.01.28 06:15:33 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe -- (postgresql-8.4)
SRV - [2011.01.20 12:27:18 | 000,286,936 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe -- (SpfService)
SRV - [2011.01.20 12:16:26 | 000,887,000 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe -- (VCFw)
SRV - [2010.11.27 00:55:42 | 000,398,176 | ---- | M] (Sony Corporation) [Auto | Running] -- c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)
SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010.09.21 14:49:00 | 002,286,976 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.09.13 18:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010.03.18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2010.01.09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.08.30 22:03:48 | 000,128,456 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.03.12 05:08:08 | 000,340,072 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.01 08:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011.10.01 08:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011.10.01 08:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011.10.01 08:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011.09.20 16:23:40 | 000,317,776 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2011.06.21 01:03:42 | 002,753,536 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2011.04.29 17:19:36 | 000,288,416 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2011.04.29 17:19:36 | 000,283,296 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:64bit: - [2011.04.29 17:19:36 | 000,166,048 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:64bit: - [2011.04.29 17:19:36 | 000,109,216 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
DRV:64bit: - [2011.04.29 17:19:36 | 000,059,040 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:64bit: - [2011.04.29 17:19:36 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:64bit: - [2011.04.29 17:19:36 | 000,029,344 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:64bit: - [2011.04.29 17:19:34 | 000,259,232 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:64bit: - [2011.03.29 10:00:53 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2011.03.29 09:55:05 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011.03.29 07:51:30 | 000,425,064 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.03.29 04:57:20 | 001,581,184 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.22 16:27:05 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.11.21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.10.19 16:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010.04.26 21:20:29 | 000,012,032 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SFEP.sys -- (SFEP)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:35:02 | 000,281,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\e1y60x64.sys -- (e1yexpress)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.26 14:32:04 | 000,019,968 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://vaioportal.sony.eu
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{756DCAA0-C4A5-4305-99D4-88F5A1C60510}: "URL" = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms}
IE - HKCU\..\SearchScopes\{DA5D379A-9481-4CD8-B01B-CE6CD5E3B6C6}: "URL" = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)



========== Chrome ==========

CHR - homepage: hxxp://vaioportal.sony.eu/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:se archFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: hxxp://vaioportal.sony.eu/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.91\pdf.dll
CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Enabled) = c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll
CHR - Extension: Summer Fields = C:\Users\khelletrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\lioedaeelokfajcbbdbbljmcjadfbngf\1_0\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Programme\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F5CA5DC-1F5E-489D-9A4E-FBD7BEA9C02E}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.11.28 20:33:31 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\khelletrick\Desktop\OTL (1).exe
[2012.11.27 22:32:50 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.11.23 18:20:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2012.11.23 18:20:27 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012.11.23 18:03:54 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2012.11.23 18:00:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros
[2012.11.22 21:31:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.11.22 21:31:38 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.11.22 12:45:29 | 002,753,536 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2012.11.22 12:45:29 | 002,753,536 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys
[2012.11.22 12:45:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros WiFi Driver Installation
[2012.11.22 12:43:48 | 000,000,000 | -H-D | C] -- C:\SPLASH.SYS
[2012.11.22 12:32:42 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
[2012.11.22 12:28:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2012.11.22 12:12:26 | 000,000,000 | ---D | C] -- C:\Update
[2012.11.21 15:56:12 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.11.21 15:44:35 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Malwarebytes
[2012.11.21 15:44:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.11.21 15:44:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.11.21 14:54:45 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2012.11.21 14:54:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.11.21 14:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2012.11.20 13:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
[2012.11.16 14:57:31 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\Desktop\JURA
[2012.11.09 13:15:05 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\Documents\HandHistory
[2012.11.08 20:03:54 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Roaming
[2012.11.08 18:05:32 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\cache
[2012.11.08 16:11:32 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\Desktop\Chirurgie 2012
[2012.11.08 11:13:35 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\skypePM
[2012.11.08 11:09:27 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Skype
[2012.11.07 07:29:49 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\BMExplorer
[2012.11.07 07:29:49 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\Documents\Bluetooth Folder
[2012.11.07 07:04:37 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Jumblo
[2012.11.07 07:04:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jumblo
[2012.11.07 07:04:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Jumblo.com
[2012.11.06 20:07:57 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\FullTiltPoker
[2012.11.06 20:07:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Full Tilt Poker
[2012.11.06 20:07:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Full Tilt Poker
[2012.11.05 17:47:34 | 000,000,000 | ---D | C] -- C:\ProgramData\VirtualizedApplications
[2012.11.05 15:59:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2012.11.05 15:59:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
[2012.11.05 15:21:18 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
[2012.11.05 15:21:18 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\IrfanView
[2012.11.05 15:21:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView
[2012.11.05 14:09:47 | 000,000,000 | ---D | C] -- C:\ÖRAG
[2012.11.04 20:25:18 | 000,000,000 | ---D | C] -- C:\Pictures
[2012.11.04 20:16:48 | 000,000,000 | ---D | C] -- C:\Music
[2012.11.02 13:23:04 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Adobe
[2012.11.02 13:17:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2012.11.02 13:17:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2012.11.02 13:17:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services
[2012.11.02 13:16:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Sync Framework
[2012.11.02 13:15:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2012.11.02 13:14:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2012.11.02 13:13:43 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Microsoft Help
[2012.11.02 13:13:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2012.11.02 13:13:11 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2012.11.02 12:55:25 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\SoftGrid Client
[2012.11.02 12:55:25 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\SoftGrid Client
[2012.11.02 12:54:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2012.11.02 12:54:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2012.11.02 12:54:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Application Virtualization Client
[2012.11.02 12:54:35 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\TP
[2012.11.02 01:47:16 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\CrashDumps
[2012.11.01 20:34:15 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\In The Money
[2012.11.01 20:34:15 | 000,000,000 | ---D | C] -- C:\HMArchive
[2012.11.01 20:33:47 | 000,000,000 | ---D | C] -- C:\ProgramData\XHEO INC
[2012.11.01 20:32:59 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\IsolatedStorage
[2012.11.01 20:32:57 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\HEM Data
[2012.11.01 20:31:30 | 000,000,000 | ---D | C] -- C:\Poker
[2012.11.01 20:28:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4
[2012.11.01 20:27:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PostgreSQL
[2012.11.01 20:26:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Holdem Manager
[2012.11.01 20:26:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RVG Software
[2012.11.01 20:26:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PSQLINSTALL
[2012.11.01 16:09:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012.11.01 16:07:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2012.11.01 16:07:16 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Google
[2012.11.01 16:06:52 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Apps
[2012.11.01 16:06:51 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Deployment
[2012.11.01 16:05:50 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Adobe
[2012.11.01 16:02:08 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Diagnostics
[2012.11.01 15:10:42 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Intel Corporation
[2012.11.01 15:10:34 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Atheros
[2012.11.01 15:10:09 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012.11.01 15:10:09 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Searches
[2012.11.01 15:10:09 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012.11.01 15:10:00 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Identities
[2012.11.01 15:09:57 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Contacts
[2012.11.01 15:09:54 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\VirtualStore
[2012.11.01 15:09:40 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\VAIO Startup Setting Tool
[2012.11.01 15:09:39 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2012.11.01 15:09:29 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Sony Corporation
[2012.11.01 15:08:51 | 000,000,000 | --SD | C] -- C:\Users\khelletrick\AppData\Roaming\Microsoft
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Videos
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Saved Games
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Pictures
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Music
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Links
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Favorites
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Downloads
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Documents
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\Desktop
[2012.11.01 15:08:51 | 000,000,000 | R--D | C] -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Vorlagen
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\AppData\Local\Verlauf
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\AppData\Local\Temporary Internet Files
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Startmenü
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\SendTo
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Recent
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Netzwerkumgebung
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Lokale Einstellungen
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Documents\Eigene Videos
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Documents\Eigene Musik
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Eigene Dateien
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Documents\Eigene Bilder
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Druckumgebung
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Cookies
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\AppData\Local\Anwendungsdaten
[2012.11.01 15:08:51 | 000,000,000 | -HSD | C] -- C:\Users\khelletrick\Anwendungsdaten
[2012.11.01 15:08:51 | 000,000,000 | -H-D | C] -- C:\Users\khelletrick\AppData
[2012.11.01 15:08:51 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Temp
[2012.11.01 15:08:51 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Local\Microsoft
[2012.11.01 15:08:51 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Media Center Programs
[2012.11.01 15:08:51 | 000,000,000 | ---D | C] -- C:\Users\khelletrick\AppData\Roaming\Macromedia
[2012.11.01 15:08:20 | 000,000,000 | -HSD | C] -- C:\Programme
[2012.11.01 15:08:20 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2012.11.01 15:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2012.11.01 15:08:19 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2012.11.01 15:05:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2012.11.01 15:05:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2012.11.01 15:01:25 | 000,000,000 | ---D | C] -- C:\VAIO Sample Contents
[2012.11.01 15:01:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
[2012.11.01 15:00:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2012.11.01 15:00:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nascom
[2012.11.01 15:00:01 | 097,167,020 | ---- | C] (Axialis Software) -- C:\Windows\SysNative\VAIO Hero Screensaver - Summer 2011.scr
[2012.11.01 14:58:00 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayStation Extras
[2012.11.01 14:57:32 | 000,000,000 | -H-D | C] -- C:\SPLASH.000
[2012.11.01 14:57:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Downloaded Installations
[2012.11.01 14:51:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2012.11.01 14:51:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB
[2012.11.01 14:50:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2012.11.01 14:45:42 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Windows\SysWow64\PCDLIB32.DLL
[2012.11.01 14:45:39 | 000,055,808 | ---- | C] (ArcSoft, Inc.) -- C:\Windows\System\ArcSoftKsUFilter.dll
[2012.11.01 14:45:39 | 000,019,968 | ---- | C] (ArcSoft, Inc.) -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys
[2012.11.01 14:45:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Webcam Suite
[2012.11.01 14:45:32 | 000,000,000 | ---D | C] -- C:\ProgramData\ArcSoft
[2012.11.01 14:45:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ArcSoft
[2012.11.01 14:45:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ArcSoft
[2012.11.01 14:45:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2012.11.01 14:44:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2012.11.01 14:44:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2012.11.01 14:44:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2012.11.01 14:44:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2012.11.01 14:44:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2012.11.01 14:43:25 | 000,000,000 | ---D | C] -- C:\Windows\en
[2012.11.01 14:42:01 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
[2012.11.01 14:41:58 | 000,000,000 | ---D | C] -- C:\Windows\uk
[2012.11.01 14:41:54 | 000,000,000 | ---D | C] -- C:\Windows\tr
[2012.11.01 14:41:51 | 000,000,000 | ---D | C] -- C:\Windows\sv
[2012.11.01 14:41:48 | 000,000,000 | ---D | C] -- C:\Windows\sk
[2012.11.01 14:41:44 | 000,000,000 | ---D | C] -- C:\Windows\ru
[2012.11.01 14:41:41 | 000,000,000 | ---D | C] -- C:\Windows\ro
[2012.11.01 14:41:38 | 000,000,000 | ---D | C] -- C:\Windows\pt-pt
[2012.11.01 14:41:34 | 000,000,000 | ---D | C] -- C:\Windows\pl
[2012.11.01 14:41:31 | 000,000,000 | ---D | C] -- C:\Windows\no
[2012.11.01 14:41:28 | 000,000,000 | ---D | C] -- C:\Windows\it
[2012.11.01 14:41:24 | 000,000,000 | ---D | C] -- C:\Windows\hu
[2012.11.01 14:41:21 | 000,000,000 | ---D | C] -- C:\Windows\el
[2012.11.01 14:41:18 | 000,000,000 | ---D | C] -- C:\Windows\de
[2012.11.01 14:41:14 | 000,000,000 | ---D | C] -- C:\Windows\fr
[2012.11.01 14:41:11 | 000,000,000 | ---D | C] -- C:\Windows\fi
[2012.11.01 14:41:07 | 000,000,000 | ---D | C] -- C:\Windows\nl
[2012.11.01 14:41:04 | 000,000,000 | ---D | C] -- C:\Windows\da
[2012.11.01 14:41:00 | 000,000,000 | ---D | C] -- C:\Windows\cs
[2012.11.01 14:40:57 | 000,000,000 | ---D | C] -- C:\Windows\bg
[2012.11.01 14:40:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2012.11.01 14:36:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2012.11.01 14:35:39 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2012.11.01 14:35:33 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2012.11.01 14:35:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2012.11.01 14:34:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2012.11.01 14:34:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
[2012.11.01 14:33:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2012.11.01 14:33:12 | 000,000,000 | ---D | C] -- C:\temp
[2012.11.01 14:32:50 | 000,000,000 | ---D | C] -- C:\Documentation
[2012.11.01 14:32:50 | 000,000,000 | ---D | C] -- C:\_FS_SWRINFO
[2012.11.01 14:32:02 | 000,000,000 | ---D | C] -- C:\Windows\Sonysys
[2012.11.01 14:30:16 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2012.11.01 14:29:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2012.11.01 14:29:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.11.01 14:29:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012.11.01 14:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012.11.01 14:29:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Sony Shared
[2012.11.01 14:29:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sony Shared
[2012.11.01 14:28:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony
[2012.11.01 14:26:57 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint
[2012.11.01 14:26:43 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda
[2012.11.01 14:26:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
[2012.11.01 14:26:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2012.11.01 14:26:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2012.11.01 14:21:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
[2012.11.01 14:21:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Atheros
[2012.11.01 14:21:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bluetooth Suite
[2012.11.01 14:20:26 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2012.11.01 14:19:06 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
[2012.11.01 14:18:51 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2012.11.01 14:17:12 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2012.11.01 14:17:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2012.11.01 14:17:09 | 000,000,000 | ---D | C] -- C:\Intel
[2012.11.01 14:14:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Corporation
[2012.11.01 14:11:23 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012.11.01 14:07:58 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2012.11.01 14:07:30 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
[2012.11.01 14:05:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\winrm
[2012.11.01 14:05:20 | 000,000,000 | ---D | C] -- C:\Windows\de-DE
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\winrm
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\WCN
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sysprep
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\slmgr
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Printing_Admin_Scripts
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF\de-DE
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de
[2012.11.01 14:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407
[2012.11.01 14:05:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WCN
[2012.11.01 14:05:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\slmgr
[2012.11.01 14:05:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Printing_Admin_Scripts
[2012.11.01 14:05:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE
[2012.11.01 14:05:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407
[2012.11.01 14:05:16 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de
[2012.11.01 14:04:17 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui
[2012.11.01 14:04:17 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui
[2012.11.01 14:04:15 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui
[2012.11.01 14:04:15 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.11.28 20:38:40 | 000,020,992 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.28 20:38:40 | 000,020,992 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.28 20:34:49 | 000,845,670 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.11.28 20:34:49 | 000,700,870 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.11.28 20:34:49 | 000,149,376 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.11.28 20:34:49 | 000,004,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.28 20:34:49 | 000,004,272 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.11.28 20:33:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\khelletrick\Desktop\OTL (1).exe
[2012.11.28 20:30:30 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.28 20:30:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.28 20:29:57 | 3180,220,416 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.28 20:17:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.28 20:02:10 | 000,000,000 | ---- | M] () -- C:\Users\khelletrick\defogger_reenable
[2012.11.28 20:01:41 | 000,050,477 | ---- | M] () -- C:\Users\khelletrick\Desktop\Defogger.exe
[2012.11.28 01:28:54 | 000,033,350 | ---- | M] () -- C:\test.xml
[2012.11.23 18:39:24 | 000,009,922 | ---- | M] () -- C:\Users\khelletrick\Documents\cc_20121123_183904.reg
[2012.11.23 18:20:39 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.11.22 16:40:00 | 000,086,164 | ---- | M] () -- C:\Users\khelletrick\Documents\cc_20121122_163951.reg
[2012.11.22 12:44:04 | 000,000,074 | -H-- | M] () -- C:\splash.idx
[2012.11.21 14:58:35 | 001,650,478 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.11.17 11:12:48 | 000,437,880 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.11.08 11:13:41 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2012.11.07 07:30:08 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_btath_hcrp_01009.Wdf
[2012.11.05 14:51:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.11.04 20:16:00 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.11.02 15:45:04 | 000,481,860 | ---- | M] () -- C:\AG Fr. Föllmer.rar
[2012.11.01 20:34:56 | 000,000,000 | ---- | M] () -- C:\Windows\HMHud.INI
[2012.11.01 18:46:26 | 000,136,180 | ---- | M] () -- C:\Windows\SysNative\s000000.dat
[2012.11.01 18:30:22 | 000,000,040 | ---- | M] () -- C:\Windows\SysNative\sstate_prev.sdt
[2012.11.01 18:30:20 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\sstates.sdt
[2012.11.01 15:09:52 | 000,000,000 | RH-- | M] () -- C:\Windows\SysWow64\drivers\104D_Sony_VPCEJ2E1E.mrk
[2012.11.01 15:09:52 | 000,000,000 | RH-- | M] () -- C:\Windows\SysNative\drivers\104D_Sony_VPCEJ2E1E.mrk
[2012.11.01 15:08:07 | 000,159,772 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012.11.01 15:08:07 | 000,159,772 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012.11.01 15:01:59 | 000,131,072 | ---- | M] () -- C:\Windows\ocsetup_install_OEMHelpCustomization.etl
[2012.11.01 15:00:02 | 097,167,020 | ---- | M] (Axialis Software) -- C:\Windows\SysNative\VAIO Hero Screensaver - Summer 2011.scr
[2012.11.01 14:28:47 | 000,014,954 | ---- | M] () -- C:\Windows\SysNative\results.xml
[2012.11.01 14:26:58 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2012.11.01 14:21:41 | 000,246,804 | ---- | M] () -- C:\Windows\SysNative\drivers\AtherosBt.bin
[2012.11.01 14:21:41 | 000,001,274 | ---- | M] () -- C:\Windows\SysNative\drivers\ramps_0x01020200_26.dfu
[2012.11.01 14:21:41 | 000,001,204 | ---- | M] () -- C:\Windows\SysNative\drivers\ramps_0x01020200_40_0x02.dfu
[2012.11.01 14:21:41 | 000,001,204 | ---- | M] () -- C:\Windows\SysNative\drivers\ramps_0x01020200_40.dfu
[2012.11.01 14:05:02 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat
[2012.11.01 14:05:02 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat
[2012.11.01 14:04:17 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui
[2012.11.01 14:04:17 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui
[2012.11.01 14:04:15 | 000,004,096 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui
[2012.11.01 14:04:15 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.11.28 20:02:10 | 000,000,000 | ---- | C] () -- C:\Users\khelletrick\defogger_reenable
[2012.11.28 20:01:59 | 000,050,477 | ---- | C] () -- C:\Users\khelletrick\Desktop\Defogger.exe
[2012.11.23 18:39:07 | 000,009,922 | ---- | C] () -- C:\Users\khelletrick\Documents\cc_20121123_183904.reg
[2012.11.23 18:20:34 | 000,002,117 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012.11.22 16:39:54 | 000,086,164 | ---- | C] () -- C:\Users\khelletrick\Documents\cc_20121122_163951.reg
[2012.11.22 16:34:13 | 000,001,912 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012.11.22 12:45:29 | 000,434,654 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf
[2012.11.22 12:45:29 | 000,066,623 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat
[2012.11.22 12:32:41 | 000,002,017 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care.lnk
[2012.11.22 12:14:48 | 000,001,155 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk
[2012.11.21 15:17:39 | 000,033,350 | ---- | C] () -- C:\test.xml
[2012.11.15 11:53:45 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012.11.15 03:00:50 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012.11.08 11:13:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2012.11.07 20:34:59 | 000,000,802 | ---- | C] () -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\William Hill Poker.lnk
[2012.11.07 07:30:08 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_btath_hcrp_01009.Wdf
[2012.11.05 14:51:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.11.05 14:09:47 | 000,481,860 | ---- | C] () -- C:\AG Fr. Föllmer.rar
[2012.11.04 20:16:00 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.11.01 20:34:56 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI
[2012.11.01 18:46:26 | 000,136,180 | ---- | C] () -- C:\Windows\SysNative\s000000.dat
[2012.11.01 18:30:20 | 000,000,040 | ---- | C] () -- C:\Windows\SysNative\sstate_prev.sdt
[2012.11.01 18:30:20 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\sstates.sdt
[2012.11.01 16:07:25 | 000,001,120 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.01 16:07:24 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.01 15:10:16 | 000,001,405 | ---- | C] () -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012.11.01 15:10:11 | 000,001,439 | ---- | C] () -- C:\Users\khelletrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.11.01 15:09:52 | 000,000,000 | RH-- | C] () -- C:\Windows\SysWow64\drivers\104D_Sony_VPCEJ2E1E.mrk
[2012.11.01 15:09:52 | 000,000,000 | RH-- | C] () -- C:\Windows\SysNative\drivers\104D_Sony_VPCEJ2E1E.mrk
[2012.11.01 15:09:45 | 000,001,961 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music Unlimited powered by Qriocity.lnk
[2012.11.01 15:03:08 | 3180,220,416 | -HS- | C] () -- C:\hiberfil.sys
[2012.11.01 15:02:13 | 000,002,197 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Smart Network.lnk
[2012.11.01 15:01:45 | 000,131,072 | ---- | C] () -- C:\Windows\ocsetup_install_OEMHelpCustomization.etl
[2012.11.01 15:01:36 | 000,001,275 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Transfer.lnk
[2012.11.01 15:01:05 | 000,002,072 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gate.lnk
[2012.11.01 15:00:33 | 000,002,679 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Easy Connect.lnk
[2012.11.01 15:00:29 | 000,002,269 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Data Restore Tool.lnk
[2012.11.01 14:58:02 | 000,001,189 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Keyboard.lnk
[2012.11.01 14:51:40 | 000,001,139 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB.lnk
[2012.11.01 14:50:18 | 000,002,435 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
[2012.11.01 14:47:22 | 000,001,303 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Gallery.lnk
[2012.11.01 14:44:54 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012.11.01 14:40:52 | 000,001,305 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[2012.11.01 14:40:44 | 000,001,374 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[2012.11.01 14:39:18 | 000,001,458 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
[2012.11.01 14:37:02 | 000,002,486 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
[2012.11.01 14:32:51 | 000,001,995 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Manual.lnk
[2012.11.01 14:32:27 | 000,001,531 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Control Center.lnk
[2012.11.01 14:28:47 | 000,014,954 | ---- | C] () -- C:\Windows\SysNative\results.xml
[2012.11.01 14:26:58 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2012.11.01 14:26:26 | 000,008,192 | ---- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll
[2012.11.01 14:11:43 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.11.01 14:11:40 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012.11.01 14:05:49 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat
[2012.11.01 14:05:48 | 000,700,870 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat
[2012.11.01 14:05:48 | 000,149,376 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat
[2012.11.01 14:05:48 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat
[2011.03.30 02:46:48 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.03.30 02:46:47 | 000,213,332 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.03.30 02:46:46 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.02.11 00:03:27 | 001,650,478 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012.11.27 01:39:42 | 000,000,000 | ---D | M] -- C:\Users\khelletrick\AppData\Roaming\HEM Data
[2012.11.05 15:21:18 | 000,000,000 | ---D | M] -- C:\Users\khelletrick\AppData\Roaming\IrfanView
[2012.11.07 07:16:57 | 000,000,000 | ---D | M] -- C:\Users\khelletrick\AppData\Roaming\Jumblo
[2012.11.08 20:03:54 | 000,000,000 | ---D | M] -- C:\Users\khelletrick\AppData\Roaming\Roaming
[2012.11.25 12:59:32 | 000,000,000 | ---D | M] -- C:\Users\khelletrick\AppData\Roaming\SoftGrid Client
[2012.11.02 12:55:33 | 000,000,000 | ---D | M] -- C:\Users\khelletrick\AppData\Roaming\TP

========== Purity Check ==========



< End of report >





Interessanterweise gibts keine "extra.txt"-Datei wie in den Anleitungen beschrieben. Hab ein x64-System, deshalb kein gamerscan.

Nach den Bluescreens wurde übrigens immer das System neu aufgesetzt, aber das dauernde Problem mit Bluescreens ist sehr nervenaufreibend und dem soll ein Ende gesetzt werden...

mfg

Sollte ich unter Umständen noch einen Scan machen? :o

OTL Logfile:
--- --- ---
[/code]

OTL Logfile:
--- --- ---
[/code]


Hoffe nun ist alles richtig so. Mbam hängt wie gesagt.

mfg