| jan.vermont | 26.02.2013 22:46 |
Mit dem code für den Benutzdefinierten Scans7Fixes hat es nicht Funktioniert da kam am ende keine Datei bei raus. Habs mit einer anderen anleitung probiert. vielleicht könnt ihr was sehen!ich habe die beiden datein mit angefügt. Extra.Txt:OTL Logfile: Code:
OTL Extras logfile created on: 26.02.2013 21:14:36 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = D:\MEINE EMPFANGENEN DATEIN\Programme
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,50 Gb Total Physical Memory | 2,25 Gb Available Physical Memory | 64,20% Memory free
7,00 Gb Paging File | 5,58 Gb Available in Paging File | 79,79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 145,91 Gb Free Space | 62,65% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 414,27 Gb Free Space | 88,95% Space Free | Partition Type: NTFS
Drive K: | 6,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive M: | 14,90 Gb Total Space | 13,64 Gb Free Space | 91,52% Space Free | Partition Type: FAT32
Computer Name: JAN-PC | User Name: Jan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-4116731109-272305140-3655404429-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06A6A9CE-1E33-4266-9902-AE9A0B91FE6A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{07A19498-2BB2-48B9-B635-E2ADCAA0BD13}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{09FE9CF1-0C8D-40C6-8F2A-4D472692DD5D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1222EEEE-DC2C-4371-A057-3C13C8933523}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1F056AEA-56D9-432D-B103-47A4ED46326B}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2876C794-76C5-4A84-82D3-7FEAF397D24C}" = lport=139 | protocol=6 | dir=in | app=system |
"{505B17CD-5471-4350-A91E-728E1A1D2D27}" = lport=138 | protocol=17 | dir=in | app=system |
"{5C72E669-4D14-49B2-8B64-331441F234B1}" = rport=10243 | protocol=6 | dir=out | app=system |
"{6D5A8DC3-AB0B-473A-96D9-E147F6AA22FD}" = lport=10243 | protocol=6 | dir=in | app=system |
"{70E22F5E-2C62-4971-A5F4-9D07C344358C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{7C529320-4B91-4539-804B-979EFE479228}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{7E00008B-B64B-41B4-8C1B-E5C4D7A911C2}" = rport=137 | protocol=17 | dir=out | app=system |
"{7FDC67FC-316C-4F24-BE39-B8C08B64A778}" = rport=445 | protocol=6 | dir=out | app=system |
"{8B7A1990-E765-467B-B86F-943E61D0FB95}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8E7CE338-1274-46A9-B651-79DEB14C9C79}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8F30976A-1983-4F74-AF19-2EADB108D553}" = rport=139 | protocol=6 | dir=out | app=system |
"{9758FF5A-6A91-433D-810A-1FF09A8267E3}" = lport=137 | protocol=17 | dir=in | app=system |
"{97CCE363-D573-472E-BA28-8AAD973B0719}" = rport=138 | protocol=17 | dir=out | app=system |
"{990F4A36-0C3B-4339-9AB5-D172D8A9B1C4}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{CF101BD6-3529-4C04-BAE0-C42BB5EDBAA7}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D1862016-C431-4222-B609-E8A59CB466B6}" = lport=445 | protocol=6 | dir=in | app=system |
"{E4622704-7797-4D79-B1C8-D1F581E91E9D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F4299D4E-D2FE-4963-A192-64A220971A80}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F851094C-FB4D-4AD7-84B0-645BBFF95F4B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05787A25-6CF9-472C-B131-F141458225B3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3B5C98BD-47C2-4CF8-8501-3D686031BFD8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{46B4D04E-9AD2-4BF3-AA1C-A88D944CD8AB}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{59A38A11-E3B4-4C05-B33D-27C034B828B6}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{6657CEE5-6250-4F89-9D4A-39D4A002A7F8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7128136F-CB3B-428B-8F79-D0A84A5BD3B1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8299095C-CF4F-44F4-8F7D-C7472EA6B4FA}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{8D7DE85D-0E6C-47B4-AF1C-A79FB783F08B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{9BC3E63E-514D-4AB1-93C1-003E8E11B334}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9F3A05F3-3A75-4E64-83AD-48DC36F1A1A7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B83B858C-4735-43CB-9A5E-D13B308C5A0D}" = protocol=6 | dir=out | app=system |
"{C68600D5-0903-43EF-9BC4-8F3B0E55212F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E3C93D61-EA83-4905-8E17-C382CE7B70C7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{ECE74588-4B80-46B3-8FE9-3107AF890F16}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{ED77E5AF-5DA6-422C-B942-FAA17DE893AE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{F649E86B-8AB7-492C-BA1A-64064786F66D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"TCP Query User{7C5762BF-AC8E-493D-970B-A2E7336B61DF}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{7D8709D4-07B1-4D0C-A468-2463F7E24BC8}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}" = CCC Help French
"{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}" = CCC Help Czech
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX310_series" = Canon MX310 series
"{1DE2BD51-0300-772D-5E18-F337D95D5687}" = CCC Help German
"{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}" = CCC Help Danish
"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = Media Player Classic - Home Cinema v1.5.2.3456
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java(TM) 6 Update 25
"{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15
"{275E9C49-C72F-D754-DEB7-77F10A9C00D8}" = CCC Help Japanese
"{30049739-BE95-6591-B504-E6D7057D49CC}" = CCC Help Spanish
"{3825F8BD-F784-6FBB-A5CD-857559148007}" = AMD Catalyst Install Manager
"{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}" = CCC Help English
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}" = CCC Help Italian
"{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}" = CCC Help Russian
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5AF23993-7152-1620-E43F-1B4542FB4F84}" = CCC Help Thai
"{63326924-3CAF-C858-3A8F-8598C87019D7}" = Catalyst Control Center
"{63822E89-11AA-F8EC-D433-F72A85799EC0}" = CCC Help Greek
"{66361420-4905-AEB8-17AE-172FDD164A7E}" = CCC Help Polish
"{73F96ACE-9249-D04D-E569-1D611D0982BB}" = ccc-utility
"{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}" = Catalyst Control Center InstallProxy
"{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}" = CCC Help Norwegian
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8A6EB60F-BC70-101B-CACE-9D7794767A3C}" = AMD Accelerated Video Transcoding
"{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}" = CCC Help Portuguese
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{A0A3CE05-96CB-52E9-434E-074F3BB7807E}" = CCC Help Turkish
"{A20A58C4-6784-4B4B-86CC-94E2E3671031}" = Nero 7 Premium
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A9C64319-932F-D02B-B14C-FFFC3EC49E77}" = CCC Help Chinese Standard
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) - Deutsch
"{AF1B3F09-B291-6F7D-DCE1-2899A6730428}" = AMD Drag and Drop Transcoding
"{C09DB932-7619-7B56-30E3-C0454811D6D7}" = CCC Help Korean
"{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}" = CCC Help Swedish
"{D4B457B2-260F-C561-CA87-703BD3B724CA}" = Catalyst Control Center Graphics Previews Common
"{D6CDB506-297D-AE70-0EF6-DE5185F961BE}" = CCC Help Chinese Traditional
"{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1" = FireJump
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{ECFD508E-68A2-91B2-46DD-1D03D783D94B}" = Catalyst Control Center Localization All
"{EDE361D5-35A5-DA7D-3462-C3DABD24029B}" = CCC Help Hungarian
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}" = CCC Help Finnish
"{F47F1D92-F4DF-4113-80B0-B58F2EB10F28}" = AMD Media Foundation Decoders
"{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}" = CCC Help Dutch
"1489-3350-5074-6281" = JDownloader 0.9
"abgx360" = abgx360 v1.0.6
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"Canon MX310 series Benutzerregistrierung" = Canon MX310 series Benutzerregistrierung
"CANONIJPLM100" = PIXMA Extended Survey Program
"CanonMyPrinter" = Canon My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"C-Media PCI Audio Driver" = Theatron Agrippa
"DesktopIconAmazon" = Desktop Icon für Amazon
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ImgBurn" = ImgBurn
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"MP Navigator EX 1.0" = Canon MP Navigator EX 1.0
"OpenAL" = OpenAL
"SearchAnonymizer" = SearchAnonymizer
"TomTom HOME" = TomTom HOME 2.6.4.1641
"WinRAR archiver" = WinRAR
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-4116731109-272305140-3655404429-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{206a7328-437f-4bd9-b53e-12bfee24d588}" = G-Filter
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 25.02.2013 21:25:22 | Computer Name = Jan-PC | Source = WinMgmt | ID = 10
Description =
Error - 25.02.2013 21:33:39 | Computer Name = Jan-PC | Source = VSS | ID = 8194
Description =
Error - 25.02.2013 22:59:53 | Computer Name = Jan-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "d:\meine empfangenen
datein\programme\theatron_agrippa-win7-7.12.8.17.41_er01\WIN7\Program\CmElv64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 25.02.2013 22:59:58 | Computer Name = Jan-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "d:\meine empfangenen
datein\programme\theatron_agrippa-win7-7.12.8.17.41_er01\WIN7\Program\CmElv64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 26.02.2013 06:33:53 | Computer Name = Jan-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "D:\MEINE EMPFANGENEN
DATEIN\Programme\Theatron_Agrippa-WIN7-7.12.8.17.41_ER01\WIN7\Program\CmElv64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 26.02.2013 08:52:47 | Computer Name = Jan-PC | Source = WinMgmt | ID = 10
Description =
Error - 26.02.2013 10:14:29 | Computer Name = Jan-PC | Source = WinMgmt | ID = 10
Description =
Error - 26.02.2013 10:31:12 | Computer Name = Jan-PC | Source = WinMgmt | ID = 10
Description =
Error - 26.02.2013 10:43:28 | Computer Name = Jan-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "D:\MEINE EMPFANGENEN
DATEIN\Programme\Theatron_Agrippa-WIN7-7.12.8.17.41_ER01\Theatron_Agrippa-WIN7-6.12.8.1738\Theatron_Agrippa-WIN7-6.12.8.1738\Program\CmElv64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 26.02.2013 10:50:31 | Computer Name = Jan-PC | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 25.02.2013 18:37:25 | Computer Name = 37L4247F27-08 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows-Zeitgeber" wurde mit folgendem Fehler beendet:
%%2
Error - 25.02.2013 18:50:29 | Computer Name = Jan-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Search" wurde mit folgendem Fehler beendet: %%6719
Error - 25.02.2013 20:59:44 | Computer Name = Jan-PC | Source = Service Control Manager | ID = 7030
Description = Der Dienst "NBService" ist als interaktiver Dienst gekennzeichnet.
Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich
sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error - 25.02.2013 21:57:52 | Computer Name = Jan-PC | Source = VDS Basic Provider | ID = 33554433
Description =
Error - 26.02.2013 10:14:04 | Computer Name = Jan-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler
beendet: %%16405
Error - 26.02.2013 10:16:33 | Computer Name = Jan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80242016 fehlgeschlagen: Update für die Kompatibilitätsansichtsliste für
Internet Explorer*8 für Windows*7 (KB2598845)
Error - 26.02.2013 10:16:33 | Computer Name = Jan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB2703157)
Error - 26.02.2013 10:16:33 | Computer Name = Jan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Internet Explorer 8 unter
Windows 7 (KB2797052)
< End of report >
--- --- ---
OTL:OTL Logfile: Code:
OTL logfile created on: 26.02.2013 22:36:20 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jan\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,50 Gb Total Physical Memory | 2,69 Gb Available Physical Memory | 76,87% Memory free
7,00 Gb Paging File | 5,80 Gb Available in Paging File | 82,89% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 146,47 Gb Free Space | 62,89% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 413,59 Gb Free Space | 88,80% Space Free | Partition Type: NTFS
Computer Name: JAN-PC | User Name: Jan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Jan\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\GFilterSvc.exe ()
PRC - C:\Windows\System32\msnftobj.exe ()
PRC - C:\Users\Jan\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe ()
PRC - C:\Windows\System32\WinMonitor.exe ()
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Users\Jan\AppData\Local\Temp\ToolbarUpdater.exe ()
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
PRC - C:\Windows\system\HsMgr.exe ()
PRC - C:\Programme\Canon\IJPLM\ijplmsvc.exe ()
========== Modules (No Company Name) ==========
MOD - C:\Windows\system\HsMgr.exe ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
========== Services (SafeList) ==========
SRV - (GFilterSvc) -- C:\Windows\System32\GFilterSvc.exe ()
SRV - (Locatord) -- C:\Windows\System32\msnftobj.exe ()
SRV - (SearchAnonymizer) -- C:\Users\Jan\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe ()
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (TolbarUpdater) -- C:\Users\Jan\AppData\Local\Temp\ToolbarUpdater.exe ()
SRV - (odserv) -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (TomTomHOMEService) -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (IJPLMSVC) -- C:\Programme\Canon\IJPLM\ijplmsvc.exe ()
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (agep4zjo) -- File not found
DRV - (sptd) -- C:\Windows\System32\drivers\sptd.sys ()
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) 2000 DDK provider)
DRV - (amdkmdag) -- C:\Windows\System32\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (AtiHDAudioService) -- C:\Windows\System32\drivers\AtihdW73.sys (Advanced Micro Devices)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (dmvsc) -- C:\Windows\System32\drivers\dmvsc.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (cmuda3) -- C:\Windows\System32\drivers\cmudax3.sys (C-Media Inc)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9D 41 48 83 B5 13 CE 01 [binary data]
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494538535243&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{29C0B979-4213-4B12-B870-5E3E11AE2D95}: "URL" = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&mode=bounce&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{6006DA45-1B6C-4EBF-8D8A-14326B8A8086}: "URL" = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&mode=bounce&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{97042326-83DA-4AE6-897B-A5A7E66A9C6E}: "URL" = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&mode=bounce&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{97C86002-2260-4B1B-9385-61E371F10A1D}: "URL" = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&mode=bounce&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{E50481CB-3A5E-4EA7-AB05-5AEF80A145D8}: "URL" = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&mode=bounce&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\..\SearchScopes\{F83E3DA4-1C9E-430A-BDD4-A43B91CC5D2F}: "URL" = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=cc03f079-8c0c-4216-8abb-acd463326478&pid=winsoftware&mode=bounce&k=0
IE - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "foxsearch"
FF - prefs.js..browser.search.order.1: "foxsearch"
FF - prefs.js..browser.search.selectedEngine: "foxsearch"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.freenet.de/"
FF - prefs.js..extensions.enabledAddons: amznUWL2@amazon.com:1.10
FF - prefs.js..extensions.enabledAddons: CompactMenuCE@Merci.chao:5.1.0
FF - prefs.js..extensions.enabledAddons: deletebutton@deletebutton.com:1.3.9
FF - prefs.js..extensions.enabledAddons: fastdial@telega.phpnet.us:4.3.1
FF - prefs.js..extensions.enabledAddons: guiconfig@slosd.net:1.2.2
FF - prefs.js..extensions.enabledAddons: trackerblock@privacychoice.org:2.2
FF - prefs.js..extensions.enabledAddons: {64161300-e22b-11db-8314-0800200c9a66}:0.9.6.14
FF - prefs.js..extensions.enabledAddons: firejump@firejump.net:1.0.2.5
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: fastdial@telega.phpnet.us:3.4
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}:6.0.25
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..keyword.URL: "hxxp://www.finduny.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_168.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.02.26 01:24:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\firejump@firejump.net: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3cfe0u19.default\extensions\firejump@firejump.net [2013.02.26 16:11:29 | 000,000,000 | ---D | M]
[2013.02.26 01:54:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\Extensions
[2013.02.26 01:54:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2013.02.26 16:11:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\3cfe0u19.default\extensions
[2013.02.26 02:11:39 | 000,000,000 | ---D | M] (Fast Dial) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\3cfe0u19.default\extensions\fastdial@telega.phpnet.us
[2013.02.26 02:06:06 | 000,000,000 | ---D | M] (Fast Dial Fx6) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\3cfe0u19.default\extensions\fastdialfx6@rouing3.addons.mozilla.org
[2013.02.26 16:11:29 | 000,000,000 | ---D | M] (FireJump) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\3cfe0u19.default\extensions\firejump@firejump.net
[2013.02.01 16:40:24 | 000,130,828 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\adblockpopups@jessehakanen.net.xpi
[2012.09.19 10:02:22 | 000,243,287 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\amznUWL2@amazon.com.xpi
[2012.06.24 20:35:24 | 000,073,806 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\CompactMenuCE@Merci.chao.xpi
[2012.05.26 09:49:38 | 000,013,171 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\deletebutton@deletebutton.com.xpi
[2012.07.07 01:02:58 | 000,123,385 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\elemhidehelper@adblockplus.org.xpi
[2012.01.13 01:47:48 | 000,174,405 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\guiconfig@slosd.net.xpi
[2011.06.29 22:08:06 | 000,061,647 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\sparweltgutscheine@sparwelt.de.xpi
[2012.02.17 14:19:26 | 000,049,540 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\trackerblock@privacychoice.org.xpi
[2013.02.13 00:28:58 | 000,281,921 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
[2012.07.11 10:42:34 | 000,052,184 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\{9D6218B8-03C7-4b91-AA43-680B305DD35C}.xpi
[2012.12.12 10:11:24 | 000,036,098 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2013.02.15 09:52:24 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.02.24 22:23:18 | 000,002,691 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\searchplugins\askcom.xml
[2013.02.26 16:11:32 | 000,002,189 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\searchplugins\{6D241F60-7CF4-42E6-A2F9-5E9208BAD709}.xml
[2013.02.26 16:11:32 | 000,002,078 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\searchplugins\{8333554D-B105-43D8-932D-E695DC5B7E41}.xml
[2013.02.26 16:11:32 | 000,001,871 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\mozilla\firefox\profiles\3cfe0u19.default\searchplugins\{9DD69811-5ED1-42A8-BE00-F7FDB45C964F}.xml
[2013.02.26 01:39:34 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.02.26 01:39:34 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
[2011.12.21 08:42:29 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.02.26 16:11:32 | 000,001,685 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.02.26 16:11:32 | 000,001,936 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2013.02.26 16:11:32 | 000,001,272 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2013.02.26 16:11:32 | 000,007,052 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.02.26 16:11:32 | 000,001,279 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.02.26 16:11:32 | 000,001,171 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Cmaudio8768GX] C:\Windows\system\HsMgr.exe ()
O4 - HKLM..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [Ocs_SM] C:\Users\Jan\AppData\Roaming\OCS\SM\SearchAnonymizer.exe (OCS)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-4116731109-272305140-3655404429-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 10.15.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E16CEC8F-7110-4998-B994-7F0555747D37}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{201e636d-7fb3-11e2-9154-001d7da5bc91}\Shell - "" = AutoRun
O33 - MountPoints2\{201e636d-7fb3-11e2-9154-001d7da5bc91}\Shell\AutoRun\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{201e636d-7fb3-11e2-9154-001d7da5bc91}\Shell\configure\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{201e636d-7fb3-11e2-9154-001d7da5bc91}\Shell\install\command - "" = F:\SETUP.EXE
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013.02.26 21:05:37 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jan\Desktop\OTL.exe
[2013.02.26 20:42:14 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\JPEGsnoop
[2013.02.26 19:23:49 | 000,000,000 | ---D | C] -- C:\Users\Jan\Desktop\Fond, Consommé
[2013.02.26 16:11:32 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Opera
[2013.02.26 16:11:29 | 000,493,056 | ---- | C] ( datenhaus GmbH) -- C:\Windows\System32\dhRichClient3.dll
[2013.02.26 16:11:28 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\OCS
[2013.02.26 16:11:28 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\DesktopIconForAmazon
[2013.02.26 15:47:21 | 000,122,880 | ---- | C] (CMedia Electronics Inc.) -- C:\Windows\System32\Cm_Oal.dll
[2013.02.26 15:47:21 | 000,000,000 | ---D | C] -- C:\Program Files\Theatron Agrippa
[2013.02.26 14:48:37 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2013.02.26 14:48:37 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2013.02.26 14:48:37 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2013.02.26 14:27:42 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2013.02.26 14:27:42 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2013.02.26 14:27:00 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2013.02.26 14:27:00 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2013.02.26 14:27:00 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2013.02.26 14:24:56 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.26 14:24:56 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 14:24:56 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 14:24:56 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 14:24:56 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 14:24:56 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 14:24:56 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 14:24:56 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 14:24:56 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 14:24:56 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 14:24:56 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2013.02.26 14:24:56 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 14:24:56 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 14:24:56 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2013.02.26 14:24:56 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 14:24:56 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 14:24:56 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 14:24:56 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 14:24:56 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 14:24:56 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2013.02.26 14:24:56 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 14:24:56 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 14:24:56 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2013.02.26 14:24:56 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 14:24:56 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 14:24:56 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 14:24:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 14:24:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 14:24:56 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 14:24:56 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 14:24:56 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 14:24:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 14:24:56 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 14:24:56 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 14:24:56 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 14:24:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 14:24:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 14:23:35 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2013.02.26 14:17:29 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2013.02.26 13:45:05 | 008,151,040 | ---- | C] (C-Media Corporation) -- C:\Windows\System\CMICNFG3.cpl
[2013.02.26 13:44:26 | 001,872,192 | ---- | C] (C-Media Inc) -- C:\Windows\System32\drivers\cmudax3.sys
[2013.02.26 13:44:26 | 000,036,864 | ---- | C] (C-Media Electronics Ins.) -- C:\Windows\System32\cmudax3.DLL
[2013.02.26 13:25:48 | 000,100,896 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
[2013.02.26 13:25:45 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2013.02.26 13:25:45 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2013.02.26 13:25:27 | 000,000,000 | ---D | C] -- C:\Program Files\Intel Desktop Board
[2013.02.26 12:44:19 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Canon
[2013.02.26 12:43:00 | 000,000,000 | ---D | C] -- C:\Users\Jan\Desktop\Mutti BMW
[2013.02.26 12:22:02 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\WinRAR
[2013.02.26 11:42:54 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Media Player Classic
[2013.02.26 11:41:35 | 000,000,000 | ---D | C] -- C:\ProgramData\CanonIJPLM
[2013.02.26 11:41:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX310 series Benutzerregistrierung
[2013.02.26 11:38:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\CANON
[2013.02.26 11:33:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
[2013.02.26 11:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX310 series Manual
[2013.02.26 11:31:59 | 000,000,000 | -H-D | C] -- C:\Windows\System32\CanonIJ Uninstaller Information
[2013.02.26 11:31:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX310 series
[2013.02.26 11:31:46 | 000,215,040 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMLM8Z.DLL
[2013.02.26 11:31:34 | 000,200,704 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC310L.DLL
[2013.02.26 11:31:34 | 000,188,416 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNC310O.DLL
[2013.02.26 11:31:34 | 000,098,304 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC310I.DLL
[2013.02.26 11:31:33 | 001,400,832 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC310C.DLL
[2013.02.26 11:31:25 | 000,106,496 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFMSd.EXE
[2013.02.26 11:31:25 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdUS.DLL
[2013.02.26 11:31:25 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdTW.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdTR.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdTH.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdSE.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdRU.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdPT.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdPL.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdNO.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdKR.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdIT.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdID.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdHU.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdGR.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdFR.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdFI.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdES.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdDK.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdDE.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdCZ.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdCN.DLL
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdAR.DLL
[2013.02.26 11:31:24 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLdJP.DLL
[2013.02.26 11:31:23 | 000,151,552 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCF2Ld.DLL
[2013.02.26 11:31:12 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2013.02.26 11:30:42 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2013.02.26 11:00:50 | 000,232,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2013.02.26 03:27:48 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013.02.26 03:27:45 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2013.02.26 03:27:16 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2013.02.26 03:27:08 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2013.02.26 03:26:42 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2013.02.26 03:26:38 | 000,000,000 | ---D | C] -- C:\Windows\System32\dictionaries
[2013.02.26 03:26:37 | 000,638,976 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\nss3.dll
[2013.02.26 03:26:37 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr80.dll
[2013.02.26 03:26:37 | 000,589,824 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\gkmedias.dll
[2013.02.26 03:26:37 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp80.dll
[2013.02.26 03:26:37 | 000,524,288 | ---- | C] (sqlite.org) -- C:\Windows\System32\mozsqlite3.dll
[2013.02.26 03:26:37 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcm80.dll
[2013.02.26 03:26:37 | 000,458,752 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\libGLESv2.dll
[2013.02.26 03:26:37 | 000,364,544 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\nssckbi.dll
[2013.02.26 03:26:37 | 000,262,144 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\freebl3.dll
[2013.02.26 03:26:37 | 000,167,936 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\nspr4.dll
[2013.02.26 03:26:37 | 000,102,400 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\nssdbm3.dll
[2013.02.26 03:26:37 | 000,102,400 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\libEGL.dll
[2013.02.26 03:26:37 | 000,098,304 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\nssutil3.dll
[2013.02.26 03:26:37 | 000,026,624 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\IA2Marshal.dll
[2013.02.26 03:26:37 | 000,026,112 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\mozglue.dll
[2013.02.26 03:26:37 | 000,014,848 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\plc4.dll
[2013.02.26 03:26:37 | 000,012,288 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\AccessibleMarshal.dll
[2013.02.26 03:26:37 | 000,011,776 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\plds4.dll
[2013.02.26 03:26:37 | 000,009,728 | ---- | C] (Mozilla Corporation) -- C:\Windows\System32\plugin-container.exe
[2013.02.26 03:26:37 | 000,009,216 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\mozalloc.dll
[2013.02.26 03:26:37 | 000,008,192 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\redit.exe
[2013.02.26 03:26:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\profile
[2013.02.26 03:26:36 | 014,446,592 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\xul.dll
[2013.02.26 03:26:36 | 000,163,840 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\softokn3.dll
[2013.02.26 03:26:36 | 000,151,552 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\ssl3.dll
[2013.02.26 03:26:36 | 000,098,304 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\smime3.dll
[2013.02.26 03:26:36 | 000,030,720 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\xpcshell.exe
[2013.02.26 03:26:36 | 000,012,288 | ---- | C] (Mozilla Foundation) -- C:\Windows\System32\xpcom.dll
[2013.02.26 03:26:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\plugins
[2013.02.26 03:26:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\components
[2013.02.26 03:26:12 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2013.02.26 03:26:05 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2013.02.26 03:26:05 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2013.02.26 03:26:04 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2013.02.26 03:25:58 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013.02.26 03:25:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013.02.26 03:25:57 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2013.02.26 03:25:40 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2013.02.26 03:25:37 | 000,240,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2013.02.26 03:25:37 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
[2013.02.26 03:25:37 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2013.02.26 03:25:37 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2013.02.26 03:25:35 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2013.02.26 03:25:30 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2013.02.26 03:25:29 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013.02.26 03:25:29 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013.02.26 03:25:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013.02.26 03:25:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013.02.26 03:25:22 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2013.02.26 03:25:21 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2013.02.26 03:25:21 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2013.02.26 03:25:21 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2013.02.26 03:25:21 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2013.02.26 03:25:21 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2013.02.26 03:25:20 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2013.02.26 03:25:14 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2013.02.26 03:25:13 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2013.02.26 03:25:12 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2013.02.26 03:25:11 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2013.02.26 03:25:10 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 03:25:08 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 03:25:07 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013.02.26 03:25:06 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2013.02.26 03:25:06 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2013.02.26 03:25:06 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2013.02.26 03:25:05 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2013.02.26 03:25:05 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2013.02.26 03:24:58 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2013.02.26 03:24:49 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 03:24:38 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2013.02.26 03:24:38 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2013.02.26 03:24:38 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2013.02.26 03:24:38 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2013.02.26 03:24:38 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2013.02.26 03:24:38 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2013.02.26 03:24:38 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2013.02.26 03:24:37 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2013.02.26 03:24:37 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2013.02.26 03:24:37 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2013.02.26 03:24:37 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2013.02.26 03:24:37 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2013.02.26 03:24:37 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2013.02.26 03:24:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2013.02.26 03:24:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2013.02.26 03:24:37 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2013.02.26 03:24:32 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2013.02.26 03:24:31 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2013.02.26 03:24:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2013.02.26 03:24:30 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2013.02.26 03:24:30 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2013.02.26 03:24:30 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2013.02.26 03:24:30 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2013.02.26 03:24:30 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2013.02.26 03:24:29 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 03:24:27 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2013.02.26 03:24:27 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2013.02.26 03:24:27 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2013.02.26 03:24:22 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2013.02.26 03:24:18 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2013.02.26 03:24:17 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 03:24:15 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
[2013.02.26 03:24:15 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2013.02.26 03:24:11 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2013.02.26 03:24:10 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2013.02.26 03:24:03 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2013.02.26 03:24:02 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2013.02.26 03:24:00 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2013.02.26 03:23:50 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013.02.26 03:13:45 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2013.02.26 02:38:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2013.02.26 02:37:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2013.02.26 02:37:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2013.02.26 02:37:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2013.02.26 02:37:09 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2013.02.26 02:37:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2013.02.26 02:35:44 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Microsoft Help
[2013.02.26 02:35:42 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013.02.26 02:35:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2013.02.26 02:16:49 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Adobe
[2013.02.26 02:10:50 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Macromedia
[2013.02.26 02:10:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2013.02.26 02:10:15 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2013.02.26 02:08:38 | 000,691,568 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.02.26 02:08:38 | 000,071,024 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.02.26 02:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
[2013.02.26 02:05:35 | 000,000,000 | ---D | C] -- C:\Program Files\MozBackup
[2013.02.26 02:01:25 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adobe - Design Premium CS3
[2013.02.26 02:00:56 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Design Premium CS3
[2013.02.26 02:00:29 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Ahead
[2013.02.26 02:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Premium
[2013.02.26 01:59:52 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Ahead
[2013.02.26 01:59:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Ahead
[2013.02.26 01:59:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2013.02.26 01:59:19 | 000,000,000 | ---D | C] -- C:\Program Files\Nero
[2013.02.26 01:59:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
[2013.02.26 01:56:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player Classic - Home Cinema
[2013.02.26 01:56:31 | 000,000,000 | ---D | C] -- C:\Program Files\Media Player Classic - Home Cinema
[2013.02.26 01:55:46 | 000,413,696 | ---- | C] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2013.02.26 01:55:46 | 000,102,400 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2013.02.26 01:55:46 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2013.02.26 01:55:41 | 000,217,088 | ---- | C] (C-Media Electronics Inc.) -- C:\Windows\System\HsSrv2.dll
[2013.02.26 01:55:41 | 000,217,088 | ---- | C] (C-Media Electronics Inc.) -- C:\Windows\System\HsSrv.dll
[2013.02.26 01:54:51 | 000,000,000 | ---D | C] -- C:\Users\Jan\Documents\TomTom
[2013.02.26 01:54:40 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\TomTom
[2013.02.26 01:54:40 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\TomTom
[2013.02.26 01:54:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
[2013.02.26 01:54:03 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom International B.V
[2013.02.26 01:53:54 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom HOME 2
[2013.02.26 01:49:29 | 000,000,000 | ---D | C] -- C:\Program Files\VirtualDJPortable
[2013.02.26 01:47:40 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013.02.26 01:47:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013.02.26 01:47:29 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013.02.26 01:44:58 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Macromedia
[2013.02.26 01:44:57 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Adobe
[2013.02.26 01:43:05 | 000,000,000 | ---D | C] -- C:\Program Files\JDownloader
[2013.02.26 01:42:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013.02.26 01:41:53 | 000,861,088 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013.02.26 01:41:50 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013.02.26 01:40:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013.02.26 01:39:34 | 000,782,240 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013.02.26 01:39:34 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013.02.26 01:39:34 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013.02.26 01:39:34 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013.02.26 01:39:26 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013.02.26 01:38:41 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Avira
[2013.02.26 01:37:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2013.02.26 01:37:19 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2013.02.26 01:36:51 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\DAEMON Tools Lite
[2013.02.26 01:36:49 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2013.02.26 01:36:26 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2013.02.26 01:36:26 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll
[2013.02.26 01:36:26 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll
[2013.02.26 01:36:26 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
[2013.02.26 01:36:26 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll
[2013.02.26 01:36:26 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
[2013.02.26 01:36:26 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll
[2013.02.26 01:36:26 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
[2013.02.26 01:36:25 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll
[2013.02.26 01:36:25 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll
[2013.02.26 01:36:25 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll
[2013.02.26 01:36:25 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll
[2013.02.26 01:36:25 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll
[2013.02.26 01:36:25 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll
[2013.02.26 01:36:25 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll
[2013.02.26 01:36:25 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll
[2013.02.26 01:36:25 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll
[2013.02.26 01:36:24 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll
[2013.02.26 01:36:24 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
[2013.02.26 01:36:24 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
[2013.02.26 01:36:24 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
[2013.02.26 01:36:24 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll
[2013.02.26 01:36:24 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2013.02.26 01:36:24 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
[2013.02.26 01:36:24 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2013.02.26 01:36:24 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll
[2013.02.26 01:36:24 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll
[2013.02.26 01:36:24 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll
[2013.02.26 01:36:23 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2013.02.26 01:36:23 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
[2013.02.26 01:36:23 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll
[2013.02.26 01:36:23 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
[2013.02.26 01:36:23 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll
[2013.02.26 01:36:23 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll
[2013.02.26 01:36:23 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll
[2013.02.26 01:36:23 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll
[2013.02.26 01:36:23 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
[2013.02.26 01:36:23 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll
[2013.02.26 01:36:23 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll
[2013.02.26 01:36:23 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll
[2013.02.26 01:36:23 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll
[2013.02.26 01:36:23 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll
[2013.02.26 01:36:23 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll
[2013.02.26 01:36:23 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll
[2013.02.26 01:36:23 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll
[2013.02.26 01:36:23 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll
[2013.02.26 01:36:22 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll
[2013.02.26 01:36:22 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll
[2013.02.26 01:36:22 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll
[2013.02.26 01:36:22 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll
[2013.02.26 01:36:22 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll
[2013.02.26 01:36:22 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll
[2013.02.26 01:36:22 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll
[2013.02.26 01:36:22 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll
[2013.02.26 01:36:22 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll
[2013.02.26 01:36:22 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll
[2013.02.26 01:36:21 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
[2013.02.26 01:36:21 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
[2013.02.26 01:36:21 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll
[2013.02.26 01:36:21 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll
[2013.02.26 01:36:21 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll
[2013.02.26 01:36:21 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll
[2013.02.26 01:36:21 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll
[2013.02.26 01:36:21 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll
[2013.02.26 01:36:21 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll
[2013.02.26 01:36:21 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll
[2013.02.26 01:36:21 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll
[2013.02.26 01:36:21 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll
[2013.02.26 01:36:21 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll
[2013.02.26 01:36:21 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
[2013.02.26 01:36:21 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll
[2013.02.26 01:36:20 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2013.02.26 01:36:20 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
[2013.02.26 01:36:20 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll
[2013.02.26 01:36:20 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll
[2013.02.26 01:36:20 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll
[2013.02.26 01:36:20 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll
[2013.02.26 01:36:20 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll
[2013.02.26 01:36:20 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll
[2013.02.26 01:36:20 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll
[2013.02.26 01:36:20 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll
[2013.02.26 01:36:20 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll
[2013.02.26 01:36:17 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
[2013.02.26 01:36:17 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll
[2013.02.26 01:36:17 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll
[2013.02.26 01:36:17 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll
[2013.02.26 01:36:17 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll
[2013.02.26 01:36:17 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll
[2013.02.26 01:36:16 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll
[2013.02.26 01:36:16 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll
[2013.02.26 01:36:16 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll
[2013.02.26 01:34:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx
[2013.02.26 01:33:10 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2013.02.26 01:33:09 | 000,134,336 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2013.02.26 01:33:09 | 000,083,944 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2013.02.26 01:33:09 | 000,036,552 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avkmgr.sys
[2013.02.26 01:33:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2013.02.26 01:33:08 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2013.02.26 01:26:58 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\ImgBurn
[2013.02.26 01:26:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
[2013.02.26 01:26:30 | 000,000,000 | ---D | C] -- C:\Program Files\ImgBurn
[2013.02.26 01:25:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\abgx360
[2013.02.26 01:25:42 | 000,000,000 | ---D | C] -- C:\Program Files\abgx360
[2013.02.26 01:24:45 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Mozilla
[2013.02.26 01:24:45 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Mozilla
[2013.02.26 01:24:39 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.02.26 01:22:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013.02.26 01:22:12 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2013.02.26 01:16:48 | 000,000,000 | ---D | C] -- C:\Program Files\AMD AVT
[2013.02.26 01:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2013.02.26 01:16:44 | 000,000,000 | ---D | C] -- C:\Program Files\AMD APP
[2013.02.26 01:16:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2013.02.26 01:16:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2013.02.26 01:15:30 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2013.02.26 01:15:17 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013.02.26 01:15:13 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2013.02.26 01:05:14 | 000,319,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2013.02.26 01:04:45 | 000,315,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\HideWin.exe
[2013.02.26 01:04:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2013.02.26 01:02:25 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll
[2013.02.26 01:02:25 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2013.02.26 01:01:52 | 000,015,600 | ---- | C] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2013.02.26 00:43:57 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2013.02.26 00:40:28 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2013.02.26 00:40:28 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2013.02.26 00:40:11 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2013.02.26 00:40:11 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2013.02.26 00:40:11 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2013.02.26 00:39:57 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2013.02.26 00:39:57 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2013.02.26 00:39:53 | 000,000,000 | R--D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.02.26 00:39:53 | 000,000,000 | R--D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.02.26 00:39:52 | 000,000,000 | R--D | C] -- C:\Users\Jan\Searches
[2013.02.26 00:39:37 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Identities
[2013.02.26 00:39:34 | 000,000,000 | R--D | C] -- C:\Users\Jan\Contacts
[2013.02.26 00:39:25 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\VirtualStore
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Vorlagen
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\AppData\Local\Verlauf
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\AppData\Local\Temporary Internet Files
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Startmenü
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\SendTo
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Recent
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Netzwerkumgebung
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Lokale Einstellungen
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Documents\Eigene Videos
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Documents\Eigene Musik
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Eigene Dateien
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Documents\Eigene Bilder
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Druckumgebung
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Cookies
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\AppData\Local\Anwendungsdaten
[2013.02.26 00:39:20 | 000,000,000 | -HSD | C] -- C:\Users\Jan\Anwendungsdaten
[2013.02.26 00:39:19 | 000,000,000 | --SD | C] -- C:\Users\Jan\AppData\Roaming\Microsoft
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Videos
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Saved Games
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Pictures
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Music
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Links
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Favorites
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Downloads
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Documents
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\Desktop
[2013.02.26 00:39:19 | 000,000,000 | R--D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.02.26 00:39:19 | 000,000,000 | -H-D | C] -- C:\Users\Jan\AppData
[2013.02.26 00:39:19 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Temp
[2013.02.26 00:39:19 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Microsoft
[2013.02.26 00:39:19 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Media Center Programs
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2013.02.26 00:39:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2013.02.25 23:36:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2013.02.25 23:35:21 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013.02.25 23:32:35 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013.02.25 23:31:06 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2013.02.25 23:25:26 | 000,000,000 | ---D | C] -- C:\Windows.old.000
========== Files - Modified Within 30 Days ==========
[2013.02.26 21:05:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jan\Desktop\OTL.exe
[2013.02.26 21:00:28 | 000,001,597 | ---- | M] () -- C:\Windows\Cmicnfg3.ini.imi
[2013.02.26 20:40:27 | 000,000,020 | ---- | M] () -- C:\Windows\System32\time.dat
[2013.02.26 19:24:43 | 000,647,138 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.02.26 19:24:43 | 000,609,896 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.02.26 19:24:43 | 000,127,198 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.02.26 19:24:43 | 000,104,214 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.02.26 16:11:31 | 000,096,768 | ---- | M] () -- C:\Windows\System32\GFilterSvc.exe
[2013.02.26 16:11:30 | 000,067,584 | ---- | M] () -- C:\Windows\System32\msnftobj.exe
[2013.02.26 15:56:08 | 000,021,088 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.02.26 15:56:08 | 000,021,088 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.02.26 15:48:55 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.02.26 15:48:48 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys
[2013.02.26 15:47:26 | 000,413,696 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2013.02.26 15:47:26 | 000,102,400 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2013.02.26 15:47:21 | 000,000,253 | ---- | M] () -- C:\Windows\Cmicnfg3.ini.cfl
[2013.02.26 15:47:21 | 000,000,136 | ---- | M] () -- C:\Windows\System\Dlap.pfx
[2013.02.26 15:47:16 | 000,000,527 | ---- | M] () -- C:\Windows\System\Cmicnfg3.ini
[2013.02.26 15:13:04 | 000,343,000 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.26 14:24:56 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.26 14:24:56 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 14:24:56 | 001,800,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 14:24:56 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 14:24:56 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 14:24:56 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 14:24:56 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 14:24:56 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 14:24:56 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 14:24:56 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 14:24:56 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2013.02.26 14:24:56 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 14:24:56 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 14:24:56 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2013.02.26 14:24:56 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 14:24:56 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 14:24:56 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 14:24:56 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 14:24:56 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 14:24:56 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2013.02.26 14:24:56 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 14:24:56 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 14:24:56 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2013.02.26 14:24:56 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 14:24:56 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 14:24:56 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 14:24:56 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 14:24:56 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 14:24:56 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 14:24:56 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013.02.26 14:24:56 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 14:24:56 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 14:24:56 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 14:24:56 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 14:24:56 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 14:24:56 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 14:24:56 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 14:24:56 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 03:26:35 | 000,128,512 | ---- | M] () -- C:\Windows\System32\WinMonitor.exe
[2013.02.26 03:26:34 | 017,864,381 | ---- | M] () -- C:\Windows\System32\libs.exe
[2013.02.26 02:08:38 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.02.26 02:08:38 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.02.26 01:48:50 | 000,230,386 | RHS- | M] () -- C:\HWPXF
[2013.02.26 01:48:50 | 000,000,007 | RHS- | M] () -- C:\wedaolu
[2013.02.26 01:41:42 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013.02.26 01:41:41 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013.02.26 01:41:41 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013.02.26 01:41:41 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013.02.26 01:41:41 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013.02.26 01:41:41 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013.02.26 01:32:01 | 000,036,552 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avkmgr.sys
[2013.02.26 01:32:01 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2013.02.26 01:32:00 | 000,134,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2013.02.26 01:32:00 | 000,083,944 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2013.02.26 01:18:34 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2013.02.26 01:04:45 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\HideWin.exe
[2013.02.26 01:04:23 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2013.02.26 01:04:18 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2013.02.25 23:38:10 | 000,177,271 | ---- | M] () -- C:\Windows\System32\license.rtf
[2013.02.25 23:35:15 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013.02.25 23:30:53 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
========== Files Created - No Company Name ==========
[2013.02.26 20:40:27 | 000,000,020 | ---- | C] () -- C:\Windows\System32\time.dat
[2013.02.26 16:11:31 | 000,096,768 | ---- | C] () -- C:\Windows\System32\GFilterSvc.exe
[2013.02.26 16:11:30 | 000,338,432 | ---- | C] () -- C:\Windows\System32\sqlite36_engine.dll
[2013.02.26 16:11:30 | 000,067,584 | ---- | C] () -- C:\Windows\System32\msnftobj.exe
[2013.02.26 15:47:17 | 000,001,597 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.imi
[2013.02.26 15:47:16 | 000,003,518 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.cfg
[2013.02.26 14:27:43 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013.02.26 14:27:00 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013.02.26 14:24:56 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013.02.26 13:45:05 | 000,561,152 | ---- | C] () -- C:\Windows\System32\Cmeaupci.exe
[2013.02.26 13:45:05 | 000,000,253 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.cfl
[2013.02.26 13:25:48 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2013.02.26 12:24:22 | 000,002,754 | ---- | C] () -- C:\Windows\cmudax3.ini
[2013.02.26 12:24:22 | 000,000,527 | ---- | C] () -- C:\Windows\System\Cmicnfg3.ini
[2013.02.26 11:31:24 | 000,003,584 | ---- | C] () -- C:\Windows\System32\CNCFLdNL.DLL
[2013.02.26 03:26:37 | 004,380,384 | ---- | C] () -- C:\Windows\System32\omni.ja
[2013.02.26 03:26:37 | 002,002,944 | ---- | C] () -- C:\Windows\System32\js.exe
[2013.02.26 03:26:37 | 001,945,600 | ---- | C] () -- C:\Windows\System32\mozjs.dll
[2013.02.26 03:26:37 | 001,907,200 | ---- | C] () -- C:\Windows\System32\Skybound.Gecko.dll
[2013.02.26 03:26:37 | 000,001,221 | ---- | C] () -- C:\Windows\System32\precomplete
[2013.02.26 03:26:37 | 000,000,478 | ---- | C] () -- C:\Windows\System32\nssdbm3.chk
[2013.02.26 03:26:37 | 000,000,478 | ---- | C] () -- C:\Windows\System32\freebl3.chk
[2013.02.26 03:26:37 | 000,000,130 | ---- | C] () -- C:\Windows\System32\dependentlibs.list
[2013.02.26 03:26:36 | 000,000,478 | ---- | C] () -- C:\Windows\System32\softokn3.chk
[2013.02.26 03:26:35 | 000,128,512 | ---- | C] () -- C:\Windows\System32\WinMonitor.exe
[2013.02.26 03:26:34 | 017,864,381 | ---- | C] () -- C:\Windows\System32\libs.exe
[2013.02.26 02:10:23 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013.02.26 01:55:41 | 000,200,704 | ---- | C] () -- C:\Windows\System\HsMgr.exe
[2013.02.26 01:55:41 | 000,143,360 | ---- | C] () -- C:\Windows\System\VmixP6.dll
[2013.02.26 01:55:40 | 000,000,136 | ---- | C] () -- C:\Windows\System\Dlap.pfx
[2013.02.26 01:55:21 | 000,303,104 | ---- | C] () -- C:\Windows\System32\CmiInstallResAll.dll
[2013.02.26 01:48:50 | 000,230,386 | RHS- | C] () -- C:\HWPXF
[2013.02.26 01:48:50 | 000,000,007 | RHS- | C] () -- C:\wedaolu
[2013.02.26 01:43:17 | 000,001,932 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2013.02.26 01:43:17 | 000,001,911 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
[2013.02.26 01:43:17 | 000,001,890 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2013.02.26 01:26:30 | 000,001,843 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
[2013.02.26 01:18:34 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013.02.26 01:01:55 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2013.02.26 00:39:55 | 000,001,429 | ---- | C] () -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.02.25 23:37:45 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2013.02.25 23:37:37 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2013.02.25 23:35:15 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013.02.25 23:31:56 | 2817,384,448 | -HS- | C] () -- C:\hiberfil.sys
[2013.02.25 23:20:06 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2012.12.19 20:42:42 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2012.12.19 20:42:42 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2012.12.19 15:45:04 | 000,180,224 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.11.29 16:40:02 | 000,662,786 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012.09.19 20:09:40 | 000,076,660 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2012.09.04 16:20:18 | 000,228,528 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2012.09.04 16:20:18 | 000,228,528 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2012.05.02 13:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012.01.03 08:28:06 | 002,570,286 | ---- | C] () -- C:\Windows\System32\abgx360.exe
[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011.04.12 02:30:05 | 000,647,138 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2011.04.12 02:30:05 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2011.04.12 02:30:05 | 000,127,198 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2011.04.12 02:30:05 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
========== ZeroAccess Check ==========
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.02.26 19:26:47 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\Canon
[2013.02.26 02:32:04 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\DAEMON Tools Lite
[2013.02.26 16:11:28 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\DesktopIconForAmazon
[2013.02.26 01:26:58 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\ImgBurn
[2013.02.26 20:42:14 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\JPEGsnoop
[2013.02.26 16:11:28 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\OCS
[2013.02.26 16:11:32 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\Opera
[2013.02.26 01:54:40 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\TomTom
========== Purity Check ==========
< End of report >
--- --- --- |
TDSSKiller.exe und speichere diese Datei auf dem Desktop
WARNUNG an die MITLESER: