Trojaner-Board
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Minianwendungen werden nicht mehr richtig angezeigt (https://www.trojaner-board.de/131756-minianwendungen-mehr-richtig-angezeigt.html)

duddl 03.03.2013 12:32
Minianwendungen werden nicht mehr richtig angezeigt
 
Hallo zusammen,
seit kurzem werden bei mir die Minianwendungen nicht mehr richtig angezeigt. Meist nur ein kleiner schwarzer und weißer fleck. Handelt es sich hier möglicherweise um einen Virus?
Vielleicht kennt sich einer von euch damit aus. :)

duddl

markusg 03.03.2013 18:15
Hi,

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

duddl 03.03.2013 21:01
Bitdefender sagt mir dass otl eine bösartige anwendung sei, soll ich sie also nicht ausführen?

markusg 03.03.2013 21:12
doch ist n Fehlalarm

duddl 03.03.2013 21:28
Zitat:
Kopiere nun den Inhalt in die Benutzerdefinierte Scans/Fixes Textbox.
Welchen Inhalt in welche Textbox?

OTL Logfile:
Code:
OTL logfile created on: 03.03.2013 21:30:20 - Run 3
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Info\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free
5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS
 
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found
SRV - (SDWSCService) -- C:\Program Files\Spybot File not found
SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found
SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found
DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found
DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found
DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found
DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found
DRV - (massfilter) -- system32\drivers\massfilter.sys File not found
DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found
DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found
DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found
DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found
DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found
DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found
DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found
DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found
DRV - (40517705) -- system32\drivers\04373023.sys File not found
DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software)
DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender)
DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender)
DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software)
DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation)
DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation)
DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.)
DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender)
DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.)
DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab)
DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC)
DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC)
DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab)
DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros)
DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC)
DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab)
DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated)
DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC)
DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek)
DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic)
DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia!
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia!
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms}
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia!
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Google
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = Google
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia!
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = Google
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r=
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = 22Find Tapak Portal - My Homepage - navigasi terbaik dan paling lengkap laman Malaysia!
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M]
 
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
[2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml
[2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: Google
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\
CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        ???,????,????cr67com,????,??????,?????112scg,tt???8bc8,?????
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ
O1 - Hosts: 127.0.0.1        100sexlinks.com - Informationen zum Thema Sex links. Diese Website steht zum Verkauf!
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 127.0.0.1        www.123fporn.info
O1 - Hosts: 15307 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found.
O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found.
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software)
O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present
O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}  (ExentInf Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius
[2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software
[2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337
[2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner
[2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite
[2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
[2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
[2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys
[2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys
[2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys
[2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys
[2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys
[2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys
[2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys
[2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics
[2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys
[2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb
[2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH
[2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys
[2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker
[2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd
[2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd
[2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
[2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd
[2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE
[2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll
[2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers
[2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys
[2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros
[2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon
[2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell
[2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll
[2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll
[2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat
[2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
[2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys
[2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys
[2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll
[2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL
[2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL
[2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL
[2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll
[2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll
[2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware
[2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll
[2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent
[2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS
[2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius
[2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions
[2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar
[2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions
[2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox
[2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe
[2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch
[2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch
[2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave
[2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages
[2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData
[2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2
[2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop
[2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite
[2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe
[2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys
[2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations
[2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp
[2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner
[2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905
[2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung
[2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013
[2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL
[2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL
[2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL
[2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL
[2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine
[2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater
[2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express
[2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811
[2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark
[2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml
[2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe
[2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp
[2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll
[2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc
[2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc
[2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc
[2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll
[2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll
[2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
[2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp
[2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp
[2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp
[2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
[2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc
[2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
[2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc
[2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc
[2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc
[2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc
[2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc
[2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc
[2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc
[2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
[2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll
[2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll
[2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc
[2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc
[2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
[2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll
[2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl
[2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll
[2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
[2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll
[2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll
[2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe
[2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
[2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config
[2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll
[2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources
[2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources
[2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources
[2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys
[2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll
[2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini
[2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk
[2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini
[2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup
[2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe
[2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr
[2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll
[2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe
[2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe
[2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini
[2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini
[2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF
[2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll
[2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys
[2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys
[2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL
[2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin
[2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll
[2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll
[2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS
[2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin
[2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin
[2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml
[2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys
[2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html
[2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link
[2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll
[2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin
[2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin
[2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin
[2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin
[2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat
[2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH
[2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten
[2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch
[2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging
[2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender
[2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp
[2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files
[2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente
[2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius
[2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps
[2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts
[2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten
[2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters
[2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake
[2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg
[2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions
[2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic
[2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters
[2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros
[2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü
[2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics
[2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP
[2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software
[2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue
[2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen
[2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten
[2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop
[2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites
[2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent
[2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten
[2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies
[2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop
[2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents
[2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung
[2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien
[2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites
[2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere
[2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen
[2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung
[2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark
[2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games
[2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo
[2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü
[2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing
[2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen
[2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop
[2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop
[2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads
[2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites
[2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries
[2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures
[2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos
 
========== Purity Check ==========
 
 

< End of report >
--- --- ---

Wie kann man nochmal die Texte zitieren bzw. einfügen. also mit welchen Zeichen?

hallo?

duddl 04.03.2013 14:20
Code:
OTL logfile created on: 03.03.2013 21:30:20 - Run 3
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Info\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free
5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS
 
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found
SRV - (SDWSCService) -- C:\Program Files\Spybot File not found
SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found
SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found
DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found
DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found
DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found
DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found
DRV - (massfilter) -- system32\drivers\massfilter.sys File not found
DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found
DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found
DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found
DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found
DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found
DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found
DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found
DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found
DRV - (40517705) -- system32\drivers\04373023.sys File not found
DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software)
DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender)
DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender)
DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software)
DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation)
DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation)
DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.)
DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender)
DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.)
DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab)
DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC)
DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC)
DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab)
DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros)
DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC)
DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab)
DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated)
DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC)
DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek)
DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic)
DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms}
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r=
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M]
 
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
[2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml
[2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\
CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.0scan.com
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        www.1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        www.1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.1-2005-search.com
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 127.0.0.1        www.123fporn.info
O1 - Hosts: 15307 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found.
O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found.
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software)
O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present
O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}  (ExentInf Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius
[2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software
[2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337
[2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner
[2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite
[2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
[2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
[2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys
[2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys
[2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys
[2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys
[2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys
[2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys
[2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys
[2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics
[2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys
[2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb
[2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH
[2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys
[2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker
[2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd
[2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd
[2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
[2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd
[2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE
[2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll
[2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers
[2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys
[2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros
[2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon
[2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell
[2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll
[2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll
[2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat
[2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
[2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys
[2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys
[2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll
[2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL
[2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL
[2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL
[2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll
[2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll
[2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware
[2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll
[2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent
[2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS
[2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius
[2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions
[2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar
[2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions
[2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox
[2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe
[2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch
[2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch
[2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave
[2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages
[2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData
[2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2
[2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop
[2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite
[2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe
[2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys
[2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations
[2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp
[2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner
[2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905
[2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung
[2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013
[2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL
[2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL
[2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL
[2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL
[2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine
[2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater
[2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express
[2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811
[2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark
[2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml
[2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe
[2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp
[2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll
[2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc
[2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc
[2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc
[2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll
[2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll
[2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
[2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp
[2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp
[2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp
[2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
[2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc
[2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
[2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc
[2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc
[2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc
[2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc
[2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc
[2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc
[2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc
[2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
[2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll
[2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll
[2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc
[2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc
[2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
[2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll
[2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl
[2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll
[2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
[2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll
[2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll
[2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe
[2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
[2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config
[2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll
[2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources
[2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources
[2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources
[2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys
[2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll
[2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini
[2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk
[2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini
[2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup
[2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe
[2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr
[2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll
[2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe
[2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe
[2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini
[2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini
[2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF
[2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll
[2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys
[2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys
[2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL
[2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin
[2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll
[2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll
[2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS
[2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin
[2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin
[2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml
[2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys
[2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html
[2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link
[2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll
[2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin
[2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin
[2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin
[2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin
[2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat
[2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH
[2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten
[2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch
[2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging
[2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender
[2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp
[2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files
[2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente
[2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius
[2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps
[2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts
[2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten
[2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters
[2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake
[2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg
[2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions
[2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic
[2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters
[2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros
[2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü
[2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics
[2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP
[2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software
[2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue
[2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen
[2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten
[2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop
[2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites
[2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent
[2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten
[2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies
[2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop
[2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents
[2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung
[2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien
[2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites
[2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere
[2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen
[2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung
[2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark
[2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games
[2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo
[2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü
[2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing
[2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen
[2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop
[2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop
[2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads
[2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites
[2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries
[2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures
[2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos
 
========== Purity Check ==========
 
 

< End of report >

duddl 04.03.2013 14:21
Code:
OTL logfile created on: 03.03.2013 21:30:20 - Run 3
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Info\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free
5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS
 
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found
SRV - (SDWSCService) -- C:\Program Files\Spybot File not found
SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found
SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found
DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found
DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found
DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found
DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found
DRV - (massfilter) -- system32\drivers\massfilter.sys File not found
DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found
DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found
DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found
DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found
DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found
DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found
DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found
DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found
DRV - (40517705) -- system32\drivers\04373023.sys File not found
DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software)
DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender)
DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender)
DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software)
DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation)
DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation)
DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.)
DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender)
DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.)
DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab)
DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC)
DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC)
DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab)
DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros)
DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC)
DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab)
DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated)
DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC)
DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek)
DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic)
DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms}
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245663
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r=
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M]
 
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
[2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml
[2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\
CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.0scan.com
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        www.1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        www.1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.1-2005-search.com
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 127.0.0.1        www.123fporn.info
O1 - Hosts: 15307 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O2 - BHO: (WEB.DE MailCheck BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found.
O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O3 - HKLM\..\Toolbar: (WEB.DE MailCheck) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found.
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (WEB.DE MailCheck) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [MailCheck IE Broker] C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Spybot-S&D Cleaning] C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software)
O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present
O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}  (ExentInf Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27 - HKLM IFEO\drivereasy.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\drivermax.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius
[2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software
[2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337
[2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner
[2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite
[2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
[2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
[2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys
[2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys
[2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys
[2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys
[2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys
[2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys
[2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys
[2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics
[2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys
[2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb
[2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH
[2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys
[2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013.02.26 19:48:53 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 19:48:53 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 19:48:53 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 19:48:53 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013.02.26 19:48:53 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013.02.26 19:48:53 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 19:48:53 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 19:48:53 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 19:48:53 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 19:48:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 19:48:53 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 19:48:53 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 19:48:53 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 19:48:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013.02.26 19:48:53 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 19:48:53 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 19:48:53 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 19:48:53 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 19:48:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 19:48:53 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 19:48:53 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 19:48:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 19:48:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 19:48:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 19:48:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 19:48:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 19:48:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 19:48:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 19:48:53 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 19:48:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 19:48:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 19:48:53 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 19:48:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 19:48:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 19:48:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 19:47:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013.02.26 19:47:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013.02.26 19:47:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013.02.26 19:47:11 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.02.26 19:47:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 19:47:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 19:47:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013.02.26 19:47:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 19:47:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013.02.26 19:47:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 19:47:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013.02.26 19:47:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013.02.26 19:47:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013.02.26 19:47:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013.02.26 19:47:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013.02.26 19:47:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 19:47:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker
[2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd
[2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd
[2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
[2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd
[2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE
[2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll
[2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers
[2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys
[2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros
[2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon
[2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell
[2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2013.02.24 19:16:40 | 002,486,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2013.02.24 19:16:40 | 001,592,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2013.02.24 19:16:40 | 000,658,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2013.02.24 19:16:40 | 000,105,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll
[2013.02.24 19:16:40 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll
[2013.02.24 19:16:39 | 011,929,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat
[2013.02.24 19:16:39 | 003,220,112 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2013.02.24 19:16:35 | 000,176,736 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2013.02.24 19:16:35 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
[2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2013.02.24 19:16:31 | 002,079,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2013.02.24 14:38:24 | 000,526,392 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorA.sys
[2013.02.24 14:38:24 | 000,025,656 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorF.sys
[2013.02.24 14:29:29 | 009,888,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsPStorIcon.dll
[2013.02.24 13:28:41 | 001,028,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42.DLL
[2013.02.24 13:28:41 | 000,929,844 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MFC42D.DLL
[2013.02.24 13:28:41 | 000,385,100 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\MSVCRTD.DLL
[2013.02.24 13:28:41 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MFDLL\msvcrt.dll
[2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2013.02.24 11:47:03 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll
[2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware
[2013.02.24 11:00:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\IntelMEFWVer.dll
[2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent
[2013.02.24 10:59:29 | 000,055,104 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\HECI.sys
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS
[2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius
[2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions
[2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar
[2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions
[2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox
[2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe
[2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch
[2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch
[2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave
[2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages
[2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData
[2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2
[2013.02.12 22:00:58 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013.02.12 22:00:57 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013.02.12 22:00:47 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013.02.12 22:00:46 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2013.02.12 22:00:34 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop
[2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite
[2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2013.02.11 18:51:50 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe
[2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys
[2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations
[2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp
[2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner
[2013.02.08 19:04:33 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905
[2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung
[2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013
[2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013.02.04 17:34:12 | 002,023,424 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCL50.BPL
[2013.02.04 17:34:12 | 000,248,832 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\VCLX50.BPL
[2013.02.04 17:34:12 | 000,025,600 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\BORLNDMM.DLL
[2013.02.04 17:34:11 | 001,496,064 | ---- | C] (Inprise Corporation) -- C:\Windows\System32\CC3250MT.DLL
[2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine
[2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater
[2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express
[2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811
[2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark
[2013.02.02 12:31:21 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634954050811576309
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.03.03 21:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.03 21:06:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 20:56:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 20:26:09 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 17:06:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.02.27 17:06:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml
[2013.02.27 15:36:27 | 000,277,640 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IntelCpHeciSvc.exe
[2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp
[2013.02.27 15:36:25 | 000,519,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhsip32.dll
[2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc
[2013.02.27 15:36:25 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrom.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc
[2013.02.27 15:36:25 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc
[2013.02.27 15:36:25 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc
[2013.02.27 15:36:25 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc
[2013.02.27 15:36:25 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll
[2013.02.27 15:36:25 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iglhcp32.dll
[2013.02.27 15:36:25 | 000,059,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
[2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp
[2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp
[2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp
[2013.02.27 15:36:24 | 009,023,488 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
[2013.02.27 15:36:24 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc
[2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
[2013.02.27 15:36:24 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhrv.lrc
[2013.02.27 15:36:24 | 000,436,736 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc
[2013.02.27 15:36:24 | 000,436,224 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc
[2013.02.27 15:36:24 | 000,435,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc
[2013.02.27 15:36:24 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc
[2013.02.27 15:36:24 | 000,430,080 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc
[2013.02.27 15:36:24 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc
[2013.02.27 15:36:24 | 000,427,008 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc
[2013.02.27 15:36:24 | 000,284,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc
[2013.02.27 15:36:23 | 011,049,472 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
[2013.02.27 15:36:23 | 003,121,152 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmjit32.dll
[2013.02.27 15:36:23 | 000,640,512 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcmrt32.dll
[2013.02.27 15:36:23 | 000,433,664 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc
[2013.02.27 15:36:23 | 000,426,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc
[2013.02.27 15:36:23 | 000,313,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
[2013.02.27 15:36:23 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll
[2013.02.27 15:36:23 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl
[2013.02.27 15:36:23 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll
[2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2013.02.27 15:36:20 | 011,174,912 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
[2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll
[2013.02.27 15:36:19 | 010,812,416 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll
[2013.02.27 15:36:18 | 006,232,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe
[2013.02.27 15:36:18 | 000,096,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
[2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config
[2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2013.02.27 15:36:17 | 000,175,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll
[2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources
[2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources
[2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources
[2013.02.27 15:36:15 | 000,289,792 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\drivers\IntcDAud.sys
[2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2013.02.27 15:36:15 | 000,014,848 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\IntcDAuC.dll
[2013.02.26 19:48:53 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.02.26 19:48:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.02.26 19:48:53 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013.02.26 19:48:53 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013.02.26 19:48:53 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013.02.26 19:48:53 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013.02.26 19:48:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.02.26 19:48:53 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.02.26 19:48:53 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013.02.26 19:48:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013.02.26 19:48:53 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013.02.26 19:48:53 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.02.26 19:48:53 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013.02.26 19:48:53 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013.02.26 19:48:53 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013.02.26 19:48:53 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013.02.26 19:48:53 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013.02.26 19:48:53 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013.02.26 19:48:53 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.02.26 19:48:53 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013.02.26 19:48:53 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013.02.26 19:48:53 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.02.26 19:48:53 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013.02.26 19:48:53 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013.02.26 19:48:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.02.26 19:48:53 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.02.26 19:48:53 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013.02.26 19:48:53 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013.02.26 19:48:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.02.26 19:48:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013.02.26 19:48:53 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.02.26 19:48:53 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013.02.26 19:48:53 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.02.26 19:48:53 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013.02.26 19:48:53 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013.02.26 19:47:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013.02.26 19:47:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013.02.26 19:47:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013.02.26 19:47:11 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.02.26 19:47:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013.02.26 19:47:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013.02.26 19:47:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013.02.26 19:47:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013.02.26 19:47:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013.02.26 19:47:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013.02.26 19:47:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013.02.26 19:47:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013.02.26 19:47:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013.02.26 19:47:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013.02.26 19:47:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013.02.26 19:47:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013.02.26 19:47:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.26 19:47:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.26 19:47:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.26 19:47:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini
[2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk
[2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini
[2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup
[2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.12 13:42:20 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Desktop\TDSSKiller.exe
[2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.08 19:04:33 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr
[2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll
[2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe
[2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe
[2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini
[2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini
[2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF
[2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll
[2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys
[2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys
[2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL
[2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin
[2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll
[2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll
[2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS
[2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin
[2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin
[2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml
[2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys
[2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html
[2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link
[2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll
[2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin
[2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin
[2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin
[2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin
[2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat
[2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH
[2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten
[2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch
[2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging
[2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender
[2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp
[2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files
[2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente
[2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius
[2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps
[2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts
[2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten
[2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters
[2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake
[2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg
[2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions
[2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic
[2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters
[2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros
[2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü
[2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics
[2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP
[2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software
[2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue
[2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen
[2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten
[2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop
[2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites
[2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent
[2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten
[2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies
[2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop
[2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents
[2013.03.03 20:59:10 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung
[2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien
[2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites
[2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere
[2013.01.05 19:27:44 | 000,000,000 | R--D | M] -- C:\Users\Info\Links
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen
[2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung
[2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark
[2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games
[2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo
[2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü
[2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing
[2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen
[2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop
[2013.03.02 21:29:37 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop
[2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads
[2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites
[2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries
[2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures
[2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos
 
========== Purity Check ==========
 
 

< End of report >

duddl 04.03.2013 14:24
Code:
OTL Extras logfile created on: 03.03.2013 21:30:20 - Run 3
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Info\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,61 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 36,26% Memory free
5,21 Gb Paging File | 3,40 Gb Available in Paging File | 65,27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 512,99 Gb Free Space | 86,06% Space Free | Partition Type: NTFS
 
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
 
[HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
 
[HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
Directory [AddToPlaylistApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Key error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01DBE142-27E9-4773-A0CD-B304003A5DF7}" = lport=137 | protocol=17 | dir=in | app=system |
"{12F58715-4624-4FD1-B010-BDBB1E7B080E}" = rport=137 | protocol=17 | dir=out | app=system |
"{1D2089B8-89D0-4BA7-A5B4-8F155E15D214}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{32A2271E-7150-4DA8-8C6D-BEE0170453F2}" = lport=138 | protocol=17 | dir=in | app=system |
"{37CFFEA8-E16F-43E4-BF1A-F88551A92DE4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39748B89-9815-4550-B841-532E2154ACF6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3D59763D-1ED3-4C74-BDFA-8A8FCC9FC525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3EB7CAEB-87BB-4EA0-B067-ACC73089BC53}" = rport=139 | protocol=6 | dir=out | app=system |
"{4361BAA7-7834-412A-9E44-1BA065BD74E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4839B456-FDA6-4BEB-8D20-3376989267D7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{49BABFCE-DC11-4F95-ACBC-9C8BE5EDC36D}" = lport=139 | protocol=6 | dir=in | app=system |
"{4DE142EE-3AC5-4683-A93D-73C964D0A799}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{56A0396B-6F40-4055-A5C3-5063299FB17E}" = rport=138 | protocol=17 | dir=out | app=system |
"{66F5B08D-0A57-46B4-AA17-F10C3C22F759}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8C8F29E3-63A1-4816-81E5-EE4150655CFB}" = lport=445 | protocol=6 | dir=in | app=system |
"{90695147-1B32-4BF1-929C-80FA22015799}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A86F6B4F-9E54-4DB3-AA76-A0A683C3E610}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AFC82FD5-38F0-4F3E-9E7D-057741979768}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4066647-0930-4F92-AED6-7BFA6D998905}" = lport=10243 | protocol=6 | dir=in | app=system |
"{EAB4A630-A4D2-4BD4-8678-B51E957BE3FC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EFE6FD3C-175A-4490-963E-25D99B7C8EA2}" = rport=445 | protocol=6 | dir=out | app=system |
"{F48DB664-08F0-4795-9171-196F48F7B1D2}" = lport=80 | protocol=6 | dir=in | name=www |
"{F5167275-B910-4332-8B20-73F7A0B8BBCF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FFA4C39C-5201-4494-9C67-A43E86E58075}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06D07C9B-2AD0-4369-AB48-298D5D18296B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{0AF7B335-6CF4-4D3E-8667-438F4A4EADDA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{1253855C-B82A-4533-A923-299F385CEE73}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{15EA55BC-0D82-4443-B1D0-D1D174C8B98A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{31EF75E5-69F3-4986-A494-697A2D4B0B79}" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{3367344A-00FA-45DB-846E-477E214F9D96}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{36C659E4-9313-4E22-A9CA-B5B3FE55F6F6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{47A7770A-CDF0-42BE-B810-BC82EC215190}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4CF43D84-0084-43ED-B110-3D63EDF671BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4E9C997D-58B2-4974-9A3B-5B3FBC9FBDDD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{55224F95-277E-482D-BC14-B97F8D85E435}" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{5E76D313-567F-495F-8B8C-24A65DD02DA5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6156A7B9-18E4-4FF5-AF53-F97D16C2D1AF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{664CA150-E671-4567-90EC-299E6D3B4035}" = protocol=6 | dir=out | app=system |
"{791C8FDF-21B4-4874-B18A-F02E0285293E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{80C8EE46-FD19-483A-B00E-A9CCE3000760}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{8CC52C5F-AA3B-41D7-A1B7-203AA9B2C047}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{94D74F6B-79F1-46DB-A69A-A8B39BE3639D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB6B0AAB-C44F-418A-969C-D4712E88839F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ACE84729-F7CE-40F2-BBFE-1E21659DB267}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C95F78A8-49C0-44EC-99C4-940067C828E7}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{DAD0094F-D544-4CED-A3C4-ECC5FD4C9F36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E72A7411-CB21-440F-B894-74A43100BFD3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E9182B6C-9065-48DF-8991-4E7BE3001FE6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{5AE05BC8-C5D2-4583-AED7-24C58FC6768E}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"TCP Query User{6C914251-2626-430D-84DE-5249E13427AF}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{0DF4C5BA-CE9D-4847-A7DD-9D84929383D0}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"UDP Query User{3669F7DB-5032-4F4F-AA0A-01C4A71BADEC}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{152A537F-45E9-4B15-8847-2E3E5BE61859}" = Intel® Trusted Connect Service Client
"{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 6.1
"{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{23C3F5C0-566B-478B-AAB6-197ADAD0C945}" = Uniblue SpeedUpMyPC 2009
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program
"{2C26B97F-698E-4E04-B398-8203B147859B}_is1" = TOPP Vorlagen-Druckstudio (5156)
"{33FFD86B-569C-9E8D-6659-A1F84D07CAD0}" = AMD Catalyst Install Manager
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53B17A98-5BF0-40BC-AAFF-850A357975AC}" = HP Quick Launch
"{5F32D89B-D3A0-4562-AC03-F6DE4614AE1A}" = DVB-T USB DEVICE
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74292F90-895A-4FC6-A692-9641532B1B63}" = ArcSoft TotalMedia 3.5
"{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{BBBA20E0-D9F3-4C6F-83AC-D66EFC0BFA93}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE
"{E2E7A0E8-77C4-495F-8FA3-63DAEDAA2DB3}" = F-Secure PSC Prerequisites
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}" = Uniblue RegistryBooster 2009
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung
"1&1 Mail & Media GmbH Toolbar IE8" = WEB.DE MailCheck für Internet Explorer
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12
"Bitdefender" = Bitdefender Internet Security 2013
"BitTorrent" = BitTorrent
"DMX5_is1" = DriverMax 6
"DriverEasy_is1" = DriverEasy 4.4.2
"Finale NotePad 2012" = Finale NotePad 2012
"Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128
"Freemake Video Converter_is1" = Freemake Video Converter Version 3.2.0
"freeocr_is1" = FreeOCR v4.2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"SynTPDeinstKey" = Synaptics TouchPad Driver
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"WinPcapInst" = WinPcap 4.1.2
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1&1 Mail & Media WEB.DE MailCheck GC" = WEB.DE MailCheck für Google Chrome
"Google Chrome" = Google Chrome
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 02.03.2013 04:40:40 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 04:47:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Error - 02.03.2013 04:47:24 | Computer Name = Alexander-HP630 | Source = Application
 Error | ID = 1000
 
Error - 02.03.2013 05:09:33 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 07:46:25 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
 13.0.3020.2, Zeitstempel: 0x51067abd  Name des fehlerhaften Moduls: unknown, Version:
 0.0.0.0, Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00000000
ID
 des fehlerhaften Prozesses: 0x8c0  Startzeit der fehlerhaften Anwendung: 0x01ce1723c5213387
Pfad
 der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: cf90084a-832e-11e2-8f0e-e4115bf9b2f0
 
Error - 02.03.2013 07:47:41 | Computer Name = Alexander-HP630 | Source = Microsoft-Windows-CAPI2 | ID = 512
Description = Vom Kryptografiedienst konnte das VSS-Sicherungsobjekt "System Writer"
 nicht initialisiert werden.  Details: Could not query the status of the EventSystem
 service.  System Error: Der Computer wird heruntergefahren.  .
 
Error - 02.03.2013 07:51:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 07:57:20 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 07:58:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
 13.0.3020.2, Zeitstempel: 0x51067abd  Name des fehlerhaften Moduls: ntdll.dll, Version:
 6.1.7601.17725, Zeitstempel: 0x4ec49b60  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0003224d
ID
 des fehlerhaften Prozesses: 0x8b0  Startzeit der fehlerhaften Anwendung: 0x01ce173d14bd2c26
Pfad
 der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
Pfad
 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: 7c1d470b-8330-11e2-8fd3-e4115bf9b2f0
 
Error - 02.03.2013 08:02:06 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 09:38:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
[ Media Center Events ]
Error - 03.12.2012 14:10:35 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:35 - Fehler beim Herstellen der Internetverbindung.  19:10:35
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 03.12.2012 14:10:44 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:40 - Fehler beim Herstellen der Internetverbindung.  19:10:40
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 04.12.2012 09:37:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:39 - Fehler beim Herstellen der Internetverbindung.  14:37:39
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 04.12.2012 09:37:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:44 - Fehler beim Herstellen der Internetverbindung.  14:37:44
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 05.12.2012 12:09:49 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 17:09:49 - Directory konnte nicht abgerufen werden (Fehler: Timeout
 für Vorgang überschritten) 
 
Error - 06.12.2012 11:54:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:39 - Fehler beim Herstellen der Internetverbindung.  16:54:39
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 06.12.2012 11:54:48 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:44 - Fehler beim Herstellen der Internetverbindung.  16:54:44
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 14.12.2012 10:40:37 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:37 - Fehler beim Herstellen der Internetverbindung.  15:40:37
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 14.12.2012 10:40:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:43 - Fehler beim Herstellen der Internetverbindung.  15:40:43
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 15.12.2012 15:52:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 20:52:47 - Fehler beim Herstellen der Internetverbindung.  20:52:47
-    Serververbindung konnte nicht hergestellt werden.. 
 
[ Spybot - Search and Destroy Events ]
Error - 14.01.2013 13:49:32 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 16.01.2013 13:50:00 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 14.02.2013 10:55:06 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 19.02.2013 09:38:05 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 21.02.2013 13:14:11 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 23.02.2013 05:17:13 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 23.02.2013 16:11:47 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 01.03.2013 12:07:35 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 01.03.2013 14:53:53 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 03.03.2013 04:36:59 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
[ System Events ]
Error - 17.02.2013 04:31:32 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
 von Dienst IPBusEnum erreicht.
 
Error - 17.02.2013 04:32:26 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
 und wird nicht verwendet. Der Treiber wurde entladen.
 
Error - 17.02.2013 15:52:04 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
Error - 17.02.2013 16:30:21 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
Error - 18.02.2013 09:10:09 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
 und wird nicht verwendet. Der Treiber wurde entladen.
 
Error - 18.02.2013 12:49:33 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  40517705
 
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
 
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
 
Error - 18.02.2013 12:56:23 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
Error - 18.02.2013 13:34:45 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
 
< End of report >
Entschuldigung dass ich das erste mehrmals reingepostet hab. kenn mich noch nicht so richtig aus. War keine Absicht. :)

markusg 04.03.2013 19:31
steht doch oben groß und breit, in der codebox und dass in die otl eingabebox

duddl 04.03.2013 20:14
Code:
OTL logfile created on: 04.03.2013 19:40:08 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Info\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,61 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 35,42% Memory free
5,21 Gb Paging File | 2,84 Gb Available in Paging File | 54,48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 513,40 Gb Free Space | 86,13% Space Free | Partition Type: NTFS
 
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Info\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
PRC - C:\Programme\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (1und1 Mail und Media GmbH)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Programme\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
PRC - C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
PRC - C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libglesv2.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\libegl.dll ()
MOD - C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\txmlutil.dll ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl ()
MOD - C:\Programme\Bitdefender\Bitdefender 2013\bdmetrics.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (WatAdminSvc) -- C:\Windows\system32\Wat\WatAdminSvc.exe File not found
SRV - (SDWSCService) -- C:\Program Files\Spybot File not found
SRV - (SDUpdateService) -- C:\Program Files\Spybot File not found
SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
SRV - (BdDesktopParental) -- C:\Programme\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (RtkAudioService) -- C:\Programme\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
SRV - (IconMan_R) -- C:\Programme\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
SRV - (UNS) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (ICCS) -- C:\Programme\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV - (HPWMISVC) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (AERTFilters) -- C:\Programme\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found
DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found
DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found
DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found
DRV - (MEMSWEEP2) -- C:\Windows\system32\C541.tmp File not found
DRV - (massfilter) -- system32\drivers\massfilter.sys File not found
DRV - (esgiguard) -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys File not found
DRV - (BTATH_RCP) -- system32\DRIVERS\btath_rcp.sys File not found
DRV - (BTATH_LWFLT) -- system32\DRIVERS\btath_lwflt.sys File not found
DRV - (BTATH_HCRP) -- system32\DRIVERS\btath_hcrp.sys File not found
DRV - (BTATH_BUS) -- system32\DRIVERS\btath_bus.sys File not found
DRV - (BTATH_A2DP) -- system32\drivers\btath_a2dp.sys File not found
DRV - (avkmgr) -- system32\DRIVERS\avkmgr.sys File not found
DRV - (AVFSFilter) -- system32\DRIVERS\avfsfilter.sys File not found
DRV - (AthBTPort) -- system32\DRIVERS\btath_flt.sys File not found
DRV - (40517705) -- system32\drivers\04373023.sys File not found
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (IntcDAud) -- C:\Windows\System32\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV - (gfibto) -- C:\Windows\System32\drivers\gfibto.sys (GFI Software)
DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender)
DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender)
DRV - (gfiark) -- C:\Windows\System32\drivers\gfiark.sys (GFI Software)
DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation)
DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation)
DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.)
DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender)
DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.)
DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab)
DRV - (bdselfpr) -- C:\Programme\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC)
DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC)
DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab)
DRV - (BtFilter) -- C:\Windows\System32\drivers\btfilter.sys (Atheros)
DRV - (RSPCIESTOR) -- C:\Windows\System32\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
DRV - (BdfNdisf) -- c:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys (BitDefender LLC)
DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (kl1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab)
DRV - (SmbDrv) -- C:\Windows\System32\drivers\Smb_driver.sys (Synaptics Incorporated)
DRV - (bdfwfpf) -- C:\Programme\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC)
DRV - (RTL2832U_IRHID) -- C:\Windows\System32\drivers\RTL2832U_IRHID.sys (Realtek)
DRV - (GeneStor) -- C:\Windows\System32\drivers\GeneStor.sys (GenesysLogic)
DRV - (RTL2832UBDA) -- C:\Windows\System32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (RTL2832UUSB) -- C:\Windows\System32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (npf) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (ebinfiltr) -- C:\Windows\System32\drivers\ebinfiltr.sys (SR Research Ltd.)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKLM\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = ${SEARCH_URL}{searchTerms}
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&r=
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=WDCXWD6400BPVT-00HXZT1_WD-WXD1EC0EL115EL115&ts=1362245667
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{442F2447-0259-4E83-A694-BB132990BBA8}: "URL" = hxxp://search.easylifeapp.com/?q={searchTerms}&abc=ie&pid=724&r=2013/02/15&hid=4095452143&lg=EN&cc=DE
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{649041DE-18B4-47FD-86BD-87083B1A78B7}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{79460462-BE1D-44D9-BEB5-8F3635156721}: "URL" = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{86AEB91E-A7FB-4FE6-9B06-55574E9AF728}: "URL" = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{8CC77132-5A12-403D-BC17-3C9EFBA76E99}: "URL" = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=394
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{9961BF31-9CCC-4D28-88B7-BB30137CE397}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=33AEA8D2-0C95-4F29-9D70-B3155A83F187&apn_sauid=E46F4EB1-1B8C-45C9-ACE4-A4DEA1A35778
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B0E0A740-E869-436E-8FD7-58BEA90AF721}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{B40F2A28-1A34-4C68-85BF-A86C79D3B79D}: "URL" = hxxp://searchab.com/?aff=7&uid=3cb40b44-7c36-11e2-831f-e4115bf9b2f0&q={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\SearchScopes\{F1F81558-1E2D-41FA-8E9C-656F1DAAABEC}: "URL" = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Info\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.12.18 16:27:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.02 21:29:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.02.28 18:07:33 | 000,000,000 | ---D | M]
 
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] (No name found) -- \mozilla\Firefox\extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2013.03.02 21:29:21 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
[2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.12.18 14:54:52 | 000,003,195 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Complitly.xml
[2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Info\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - Extension: Google Drive = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: WEB.DE MailCheck = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.0.1_0\
CHR - Extension: Google Mail-Checker = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Google Mail = C:\Users\Info\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2013.02.18 21:04:08 | 000,445,760 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.0scan.com
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        www.1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        www.1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.1-2005-search.com
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 127.0.0.1        www.123fporn.info
O1 - Hosts: 15307 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (KeyDownload Class) - {C1EA4179-A319-4c6a-A3E5-67FF3592A12E} - C:\Programme\KeyDownload-Addon\KeyDownload.dll (KeyDownload)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {E33CF602-D945-461A-83F0-819F76A199F8} - No CLSID value found.
O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No CLSID value found.
O3 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\..\Toolbar\WebBrowser: (no name) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Bdagent] C:\Programme\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [HP Quick Launch] C:\Programme\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [DriverMax_RESTART] C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\Run: [Uniblue RegistryBooster 2009] c:\Programme\Uniblue\RegistryBooster\StartRegistryBooster.exe (Uniblue Software)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000..\RunOnce: [RegistryDefrag Success Message] C:\Program Files\TuneUp Utilities 2013\TUMessages.exe (TuneUp Software)
O4 - Startup: C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Programme\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present
O8 - Extra context menu item: Free YouTube Download - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Programme\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}  (ExentInf Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1442A48A-A5DF-411E-9A01-E478F1A8202E}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E70BA11-C8F2-4E5A-AE19-2A1638EC9218}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
O20 - AppInit_DLLs: (c:\progra~2\wincert\win32c~1.dll) - c:\ProgramData\Wincert\win32cert.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a59db7fb-088d-11e2-a4a2-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *autocheck turegopt)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{E21663EC-B5F9-4842-8303-EE4FDADFEF6D} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
MsConfig - StartUpReg: avgnt - hkey= - key= -  File not found
MsConfig - StartUpReg: Spybot-S&D Cleaning - hkey= - key= - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2
 
CREATERESTOREPOINT
System Restore Service not available.
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.03.04 18:51:52 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2013.03.04 18:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.03.04 18:28:01 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.03.04 18:28:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.03.04 18:19:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.03.04 16:33:53 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2013.03.03 20:58:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 13:04:40 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\DriverGenius
[2013.03.02 20:00:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013.03.02 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.03.02 18:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Petrax Software
[2013.03.02 18:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337
[2013.03.02 16:37:58 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Neuer Ordner
[2013.03.02 15:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite
[2013.03.01 20:37:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
[2013.03.01 20:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
[2013.02.28 19:00:43 | 000,587,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2013.02.28 19:00:43 | 000,075,096 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys
[2013.02.28 18:38:31 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:07:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2013.02.28 18:07:33 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys
[2013.02.28 18:07:33 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys
[2013.02.28 18:07:20 | 000,482,928 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys
[2013.02.28 18:07:19 | 000,625,128 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys
[2013.02.28 18:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2013.02.28 18:05:09 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys
[2013.02.28 18:05:08 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys
[2013.02.27 21:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Synaptics
[2013.02.27 19:37:48 | 000,014,400 | ---- | C] (SR Research Ltd.) -- C:\Windows\System32\drivers\ebinfiltr.sys
[2013.02.27 18:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb
[2013.02.27 18:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\1&1 Mail & Media GmbH
[2013.02.27 15:58:17 | 000,469,120 | ---- | C] (Atheros) -- C:\Windows\System32\drivers\btfilter.sys
[2013.02.26 20:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013.02.26 16:32:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2013.02.26 16:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2013.02.26 16:25:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2013.02.26 16:17:06 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Checker
[2013.02.26 16:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2013.02.26 13:54:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd
[2013.02.26 13:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2013.02.26 13:46:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd
[2013.02.25 20:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
[2013.02.25 19:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd
[2013.02.25 17:29:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK DVB-T USB DEVICE
[2013.02.25 17:27:41 | 008,323,072 | ---- | C] (Genesys) -- C:\Windows\System32\GeneIcon.dll
[2013.02.25 17:27:31 | 000,054,784 | ---- | C] (GenesysLogic) -- C:\Windows\System32\drivers\GeneStor.sys
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- C:\Drivers
[2013.02.25 16:47:37 | 000,000,000 | ---D | C] -- \Drivers
[2013.02.25 16:24:57 | 003,078,656 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys
[2013.02.25 16:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros
[2013.02.25 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\KeyDownload-Addon
[2013.02.25 16:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- C:\Dell
[2013.02.24 20:23:38 | 000,000,000 | ---D | C] -- \Dell
[2013.02.24 20:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Innovative Solutions
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:53:09 | 000,000,000 | ---D | C] -- \HP_LaserJet_Enterprise_500_color_M551
[2013.02.24 19:17:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2013.02.24 19:16:41 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2013.02.24 19:16:41 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2013.02.24 19:16:39 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2013.02.24 19:16:39 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2013.02.24 19:16:39 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2013.02.24 19:16:39 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2013.02.24 19:16:39 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2013.02.24 19:16:35 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
[2013.02.24 19:16:32 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2013.02.24 13:28:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\MFDLL
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2013.02.24 13:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2013.02.24 11:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware
[2013.02.24 10:59:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- C:\Driver_allOS
[2013.02.24 10:59:28 | 000,000,000 | ---D | C] -- \Driver_allOS
[2013.02.23 18:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius
[2013.02.23 11:35:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Innovative Solutions
[2013.02.21 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UpdateStar
[2013.02.21 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Innovative Solutions
[2013.02.21 15:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftSafe
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- C:\Sandbox
[2013.02.19 14:41:41 | 000,000,000 | R--D | C] -- \Sandbox
[2013.02.18 20:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2013.02.18 20:56:45 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\Windows\System32\sdnclean.exe
[2013.02.18 17:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2013.02.16 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\bdch
[2013.02.16 20:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch
[2013.02.16 17:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013.02.16 16:36:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.02.16 16:36:19 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.02.15 22:29:27 | 000,000,000 | ---D | C] -- C:\Program Files\BrowseToSave
[2013.02.15 22:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\EasyLife
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- C:\toolbarImages
[2013.02.15 12:43:10 | 000,000,000 | ---D | C] -- \toolbarImages
[2013.02.14 16:53:20 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\ProgramData
[2013.02.14 14:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2
[2013.02.12 16:54:47 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013.02.12 16:53:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2013.02.12 16:49:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\desktop
[2013.02.12 15:13:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Toolkit Suite
[2013.02.12 15:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2013.02.10 20:04:18 | 000,033,616 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfiark.sys
[2013.02.10 17:44:46 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\Downloaded Installations
[2013.02.10 17:44:42 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.10 17:36:40 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\adawarebp
[2013.02.10 17:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner
[2013.02.08 18:54:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.02.06 16:17:09 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634957642292763905
[2013.02.05 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\1und1Softwareaktualisierung
[2013.02.05 14:27:45 | 000,029,984 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2013.02.05 14:13:39 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2013.02.05 14:13:39 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2013.02.05 14:12:55 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013
[2013.02.05 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\Info\AppData\Local\1&1 Mail & Media
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.02.04 19:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.02.04 19:12:22 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013.02.04 17:33:32 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\Windows\uninst.exe
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013.02.04 16:40:44 | 000,000,000 | ---D | C] -- \TDSSKiller_Quarantine
[2013.02.04 16:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\Smart Driver Updater
[2013.02.04 16:16:25 | 002,128,984 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 20:22:43 | 000,000,000 | ---D | C] -- C:\Users\Info\Documents\Add-in Express
[2013.02.03 18:30:00 | 000,000,000 | -H-D | C] -- C:\Users\Info\Documents\Freemake_do_not_remove_this_folder634955130001352811
[2013.02.03 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Info\Pavark
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.03.04 19:12:05 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.04 19:12:04 | 000,009,904 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.04 18:51:52 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2013.03.04 18:28:06 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.03.04 16:20:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.04 16:17:23 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.04 16:16:51 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.03 20:58:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Info\Desktop\OTL.exe
[2013.03.03 19:56:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.03 19:20:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.03 13:16:57 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.03.02 21:29:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:39:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.02 20:39:18 | 2099,662,848 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.02 20:00:32 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:56 | 000,002,403 | ---- | M] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 18:58:05 | 000,048,612 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:58:05 | 000,045,705 | ---- | M] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 14:37:38 | 000,026,369 | ---- | M] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 14:37:38 | 000,003,799 | ---- | M] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.02 13:45:56 | 000,663,052 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.03.02 13:45:56 | 000,624,894 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.03.02 13:45:56 | 000,134,184 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.03.02 13:45:56 | 000,110,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.03.02 13:41:51 | 000,042,439 | ---- | M] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | M] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:37:04 | 000,055,309 | ---- | M] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:24 | 000,001,735 | ---- | M] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.01 20:37:37 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.03.01 16:23:10 | 000,025,635 | ---- | M] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:50:17 | 000,032,404 | ---- | M] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:38:31 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.02.28 18:08:46 | 000,485,664 | ---- | M] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2013.02.28 18:08:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2013.02.28 18:08:06 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 17:46:01 | 000,218,299 | ---- | M] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | M] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | M] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | M] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 16:03:25 | 000,000,787 | ---- | M] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.27 15:44:15 | 000,015,456 | ---- | M] () -- C:\Windows\System32\results.xml
[2013.02.27 15:36:26 | 000,067,904 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp
[2013.02.27 15:36:25 | 000,059,594 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp
[2013.02.27 15:36:25 | 000,058,781 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp
[2013.02.27 15:36:25 | 000,058,684 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp
[2013.02.27 15:36:23 | 000,009,728 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2013.02.27 15:36:20 | 000,064,512 | ---- | M] () -- C:\Windows\System32\igdde32.dll
[2013.02.27 15:36:18 | 000,000,268 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config
[2013.02.27 15:36:17 | 000,223,492 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2013.02.27 15:36:17 | 000,194,121 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2013.02.27 15:36:17 | 000,145,974 | ---- | M] () -- C:\Windows\System32\Gfxres.ro-RO.resources
[2013.02.27 15:36:17 | 000,144,637 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2013.02.27 15:36:17 | 000,143,249 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2013.02.27 15:36:17 | 000,142,876 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2013.02.27 15:36:17 | 000,141,833 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2013.02.27 15:36:17 | 000,137,880 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2013.02.27 15:36:17 | 000,126,294 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2013.02.27 15:36:17 | 000,124,662 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2013.02.27 15:36:16 | 000,209,986 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2013.02.27 15:36:16 | 000,163,379 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2013.02.27 15:36:16 | 000,158,986 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2013.02.27 15:36:16 | 000,149,649 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2013.02.27 15:36:16 | 000,148,018 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2013.02.27 15:36:16 | 000,147,269 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2013.02.27 15:36:16 | 000,145,470 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2013.02.27 15:36:16 | 000,144,235 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2013.02.27 15:36:16 | 000,143,989 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2013.02.27 15:36:16 | 000,143,916 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2013.02.27 15:36:16 | 000,142,682 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2013.02.27 15:36:16 | 000,141,998 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2013.02.27 15:36:16 | 000,141,038 | ---- | M] () -- C:\Windows\System32\Gfxres.hr-HR.resources
[2013.02.27 15:36:16 | 000,137,793 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2013.02.27 15:36:16 | 000,132,623 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources
[2013.02.27 15:36:15 | 000,166,124 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2013.02.27 15:36:15 | 000,147,360 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2013.02.27 15:36:15 | 000,142,267 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2013.02.27 15:36:15 | 000,137,132 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2013.02.26 16:33:20 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.26 15:43:17 | 000,000,480 | ---- | M] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.25 20:43:23 | 000,001,196 | ---- | M] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.24 14:20:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:38 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini
[2013.02.24 13:25:05 | 000,001,264 | ---- | M] () -- C:\Users\Info\Desktop\Free YouTube Download.lnk
[2013.02.23 12:08:57 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:54 | 000,000,189 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:47:15 | 000,001,996 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2013.02.19 14:38:04 | 000,000,929 | ---- | M] () -- C:\Windows\wininit.ini
[2013.02.18 21:04:08 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013.02.18 20:56:53 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 16:27:31 | 025,898,021 | ---- | M] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.14 16:02:38 | 000,445,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20130218-210408.backup
[2013.02.12 22:07:56 | 000,320,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.12 19:30:31 | 000,007,606 | ---- | M] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.02.12 13:48:17 | 000,001,188 | ---- | M] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.10 17:44:42 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013.02.08 19:04:33 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013.02.05 14:13:36 | 000,002,159 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | M] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:42 | 000,552,152 | ---- | M] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 16:16:26 | 002,128,984 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Info\Documents\TDSSKiller.exe
[2013.02.03 17:30:58 | 000,001,656 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.03.04 18:28:06 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.03.02 21:29:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.03.02 20:00:32 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013.03.02 19:10:57 | 000,002,403 | ---- | C] () -- C:\Users\Info\Desktop\Google Chrome.lnk
[2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
[2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.02 18:54:36 | 000,048,612 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedCS.skm
[2013.03.02 18:54:36 | 000,045,705 | ---- | C] () -- C:\Windows\System32\ExampleCodeGeneratedVB.skm
[2013.03.02 13:41:51 | 000,042,439 | ---- | C] () -- C:\ProgramData\1362228095.bdinstall.bin
[2013.03.02 13:37:08 | 000,087,212 | ---- | C] () -- C:\ProgramData\1362227762.bdinstall.bin
[2013.03.02 13:36:12 | 000,055,309 | ---- | C] () -- C:\ProgramData\1362227762.3824.bin
[2013.03.02 13:36:12 | 000,001,735 | ---- | C] () -- C:\ProgramData\1362227762.5612.bin
[2013.03.02 13:36:02 | 000,026,369 | ---- | C] () -- C:\ProgramData\1362227762.5144.bin
[2013.03.02 13:36:02 | 000,003,799 | ---- | C] () -- C:\ProgramData\1362227762.5916.bin
[2013.03.01 21:16:49 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[2013.03.01 16:26:57 | 000,025,635 | ---- | C] () -- C:\Users\Info\Documents\Charakterisierung.odt
[2013.03.01 15:44:17 | 000,032,404 | ---- | C] () -- C:\Users\Info\Documents\1asdfghjkolüäasdfghjkopüsdfghjklö.odt
[2013.02.28 18:08:46 | 000,485,664 | ---- | C] () -- C:\ProgramData\1362071103.bdinstall.bin
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01
[2013.02.28 18:08:06 | 000,000,308 | -H-- | C] () -- \bdr-cf01
[2013.02.28 18:07:53 | 000,002,134 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz
[2013.02.28 18:07:07 | 035,184,777 | -H-- | C] () -- \bdr-im01.gz
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01
[2013.02.28 18:07:07 | 002,294,848 | -H-- | C] () -- \bdr-bz01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2013.02.28 18:07:07 | 000,253,404 | -H-- | C] () -- \bdr-ld01
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2013.02.28 18:07:07 | 000,009,216 | -H-- | C] () -- \bdr-ld01.mbr
[2013.02.28 17:46:01 | 000,218,299 | ---- | C] () -- C:\ProgramData\1362069898.bdinstall.bin
[2013.02.28 17:44:23 | 000,619,268 | ---- | C] () -- C:\ProgramData\1362069438.bdinstall.bin
[2013.02.28 17:30:56 | 000,053,422 | ---- | C] () -- C:\ProgramData\1362069055.bdinstall.bin
[2013.02.28 17:20:56 | 000,229,328 | ---- | C] () -- C:\ProgramData\1362068248.bdinstall.bin
[2013.02.27 16:03:25 | 000,000,787 | ---- | C] () -- C:\Users\Info\Desktop\adwcleaner.lnk
[2013.02.26 16:33:20 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2013.02.26 16:27:06 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue SpeedUpMyPC 2009.lnk
[2013.02.25 20:36:15 | 000,001,196 | ---- | C] () -- C:\Users\Info\Desktop\DriverMax.lnk
[2013.02.25 18:50:23 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk
[2013.02.25 17:27:41 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ustor.dll
[2013.02.25 17:27:41 | 000,049,152 | ---- | C] () -- C:\Windows\System32\UMonit.exe
[2013.02.25 17:27:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_GeneStor_01009.Wdf
[2013.02.25 17:27:31 | 000,172,097 | ---- | C] () -- C:\Windows\System32\NoMSGuninstall.exe
[2013.02.25 17:27:31 | 000,000,840 | ---- | C] () -- C:\Windows\System32\ProductName.ini
[2013.02.25 17:27:29 | 000,000,187 | ---- | C] () -- C:\Windows\System32\IconCfg0.ini
[2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
[2013.02.25 17:20:17 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2013.02.25 16:47:44 | 000,020,315 | ---- | C] () -- C:\Windows\System32\GeneStor.INF
[2013.02.24 20:24:07 | 006,416,928 | ---- | C] () -- C:\Windows\System\DriveIcon.dll
[2013.02.24 19:16:39 | 000,394,185 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2013.02.24 14:20:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_Smb_driver_01009.Wdf
[2013.02.24 13:28:41 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys
[2013.02.24 13:28:41 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys
[2013.02.24 13:28:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013.02.23 11:57:39 | 000,000,830 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog
[2013.02.21 15:33:49 | 000,000,189 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.02.19 14:37:40 | 000,001,996 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2013.02.18 20:56:53 | 000,002,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2013.02.18 20:56:53 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013.02.16 17:12:13 | 025,898,021 | ---- | C] () -- C:\Users\Info\Documents\Box_BD2013.rar
[2013.02.12 13:48:17 | 000,001,188 | ---- | C] () -- C:\Windows\System32\ServiceConfig.xml
[2013.02.08 19:04:33 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013.02.08 18:08:15 | 000,320,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.05 17:38:41 | 000,000,480 | ---- | C] () -- C:\Windows\System32\checkdnsid.xml
[2013.02.05 14:13:36 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2013.02.05 14:13:35 | 000,002,157 | ---- | C] () -- C:\Users\Info\Desktop\TuneUp Utilities 2013.lnk
[2013.02.05 14:13:35 | 000,002,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk
[2013.02.04 19:04:41 | 000,552,152 | ---- | C] () -- C:\Users\Info\Documents\partypass.pdf
[2013.02.04 17:34:12 | 000,147,456 | ---- | C] () -- C:\Windows\System32\BCBSMP50.BPL
[2013.02.02 19:42:23 | 000,001,656 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2013.01.28 18:07:16 | 001,553,496 | ---- | C] () -- C:\ProgramData\1359390656.bdinstall.bin
[2013.01.14 15:49:03 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll
[2013.01.13 12:56:09 | 000,007,606 | ---- | C] () -- C:\Users\Info\AppData\Local\resmon.resmoncfg
[2013.01.01 14:37:00 | 005,746,780 | ---- | C] ( ) -- C:\Windows\System32\RTKISDBT.dll
[2012.12.29 19:05:53 | 000,000,929 | ---- | C] () -- C:\Windows\wininit.ini
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \MSDOS.SYS
[2012.12.18 14:54:52 | 000,000,000 | RHS- | C] () -- \IO.SYS
[2012.12.12 16:41:24 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2012.12.12 16:40:08 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2012.12.12 16:38:48 | 000,000,268 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2012.10.22 17:40:04 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin
[2012.10.22 17:39:46 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin
[2012.10.22 17:39:44 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2012.10.03 17:15:43 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2012.10.03 17:14:43 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012.09.29 10:40:45 | 000,000,557 | ---- | C] () -- \NetworkCfg.xml
[2012.09.27 11:25:26 | 2099,662,848 | -HS- | C] () -- \hiberfil.sys
[2012.08.13 10:08:08 | 000,014,217 | ---- | C] () -- C:\Program Files\readme.html
[2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.05.08 13:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link
[2012.04.20 13:57:00 | 000,001,536 | ---- | C] () -- C:\Windows\System32\IusEventLog.dll
[2012.01.10 14:17:06 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin
[2012.01.10 14:17:04 | 000,221,264 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin
[2012.01.10 14:17:00 | 000,963,884 | ---- | C] () -- C:\Windows\System32\igkrng600.bin
[2011.09.15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin
[2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- \autoexec.bat
[2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- \config.sys
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.02.27 18:40:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\1&1 Mail & Media GmbH
[2013.02.03 21:34:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Anwendungsdaten
[2013.02.16 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\bdch
[2013.01.31 16:34:47 | 000,000,000 | ---D | M] -- C:\Users\All Users\BDLogging
[2013.02.28 18:08:32 | 000,000,000 | ---D | M] -- C:\Users\All Users\Bitdefender
[2013.02.12 15:13:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\clp
[2012.12.18 16:34:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Common Files
[2013.02.12 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\All Users\Common Toolkit Suite
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Desktop
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Dokumente
[2013.03.03 12:56:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\DriverGenius
[2013.01.31 16:39:30 | 000,000,000 | ---D | M] -- C:\Users\All Users\Dumps
[2013.01.21 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\All Users\Electronic Arts
[2013.01.14 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\All Users\f-secure
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Favoriten
[2013.02.12 23:04:17 | 000,000,000 | ---D | M] -- C:\Users\All Users\Fighters
[2012.12.28 22:58:50 | 000,000,000 | ---D | M] -- C:\Users\All Users\Freemake
[2013.01.13 11:01:55 | 000,000,000 | ---D | M] -- C:\Users\All Users\fssg
[2013.02.23 11:35:00 | 000,000,000 | ---D | M] -- C:\Users\All Users\Innovative Solutions
[2012.10.20 13:20:59 | 000,000,000 | ---D | M] -- C:\Users\All Users\MakeMusic
[2012.12.28 21:13:22 | 000,000,000 | ---D | M] -- C:\Users\All Users\PC Drivers HeadQuarters
[2013.02.25 16:25:49 | 000,000,000 | ---D | M] -- C:\Users\All Users\Qualcomm Atheros
[2013.02.21 15:56:28 | 000,000,000 | ---D | M] -- C:\Users\All Users\SoftSafe
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Startmenü
[2013.02.27 21:21:46 | 000,000,000 | ---D | M] -- C:\Users\All Users\Synaptics
[2012.12.18 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\All Users\TEMP
[2012.12.18 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\All Users\TuneUp Software
[2013.02.26 16:09:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\Uniblue
[2013.02.27 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\All Users\UUdb
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Vorlagen
[2013.02.15 18:37:12 | 000,000,000 | ---D | M] -- C:\Users\All Users\Wincert
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2013.02.26 16:51:50 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[2013.02.05 14:22:06 | 000,000,000 | -HSD | M] -- C:\Users\All Users\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013.02.26 16:23:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Anwendungsdaten
[2009.07.14 03:37:05 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Cookies
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Desktop
[2012.09.27 11:32:36 | 000,000,000 | R--D | M] -- C:\Users\Default\Documents
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Downloads
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Druckumgebung
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Eigene Dateien
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Favorites
[2013.01.12 21:29:16 | 000,000,000 | R--D | M] -- C:\Users\Default\Links
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Lokale Einstellungen
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Music
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Netzwerkumgebung
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Pictures
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Recent
[2009.07.14 03:04:25 | 000,000,000 | ---D | M] -- C:\Users\Default\Saved Games
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\SendTo
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Startmenü
[2009.07.14 03:04:25 | 000,000,000 | R--D | M] -- C:\Users\Default\Videos
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Users\Default\Vorlagen
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Anwendungsdaten
[2013.02.16 17:09:07 | 000,000,000 | -H-D | M] -- C:\Users\Info\AppData
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Contacts
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Cookies
[2013.03.04 19:36:17 | 000,000,000 | R--D | M] -- C:\Users\Info\Desktop
[2013.03.03 13:04:40 | 000,000,000 | R--D | M] -- C:\Users\Info\Documents
[2013.03.04 18:25:39 | 000,000,000 | R--D | M] -- C:\Users\Info\Downloads
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Druckumgebung
[2012.09.27 11:34:15 | 000,000,000 | -HSD | M] -- C:\Users\Info\Eigene Dateien
[2013.02.01 18:52:18 | 000,000,000 | R--D | M] -- C:\Users\Info\Favorites
[2012.09.29 08:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Info\InstallAnywhere
[2013.03.04 16:21:39 | 000,000,000 | R--D | M] -- C:\Users\Info\Links
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Lokale Einstellungen
[2013.01.09 17:20:50 | 000,000,000 | R--D | M] -- C:\Users\Info\Music
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Netzwerkumgebung
[2013.02.03 15:14:43 | 000,000,000 | ---D | M] -- C:\Users\Info\Pavark
[2013.02.26 15:48:58 | 000,000,000 | R--D | M] -- C:\Users\Info\Pictures
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Recent
[2012.10.03 17:47:55 | 000,000,000 | R--D | M] -- C:\Users\Info\Saved Games
[2013.02.05 16:05:22 | 000,000,000 | R--D | M] -- C:\Users\Info\Searches
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\SendTo
[2013.02.16 17:08:31 | 000,000,000 | R--D | M] -- C:\Users\Info\SkyDrive
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Startmenü
[2013.01.19 10:08:21 | 000,000,000 | ---D | M] -- C:\Users\Info\Tracing
[2013.03.01 15:49:38 | 000,000,000 | R--D | M] -- C:\Users\Info\Videos
[2012.09.27 11:34:16 | 000,000,000 | -HSD | M] -- C:\Users\Info\Vorlagen
[2012.11.17 16:39:29 | 000,000,000 | ---D | M] -- C:\Users\Malisa\Desktop
[2013.03.04 18:28:06 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop
[2013.02.26 13:54:06 | 000,000,000 | R--D | M] -- C:\Users\Public\Documents
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Downloads
[2009.07.14 03:04:25 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites
[2012.09.27 11:54:46 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries
[2012.10.01 13:20:41 | 000,000,000 | R--D | M] -- C:\Users\Public\Music
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Pictures
[2012.10.02 13:02:43 | 000,000,000 | R--D | M] -- C:\Users\Public\Recorded TV
[2009.07.14 05:41:57 | 000,000,000 | R--D | M] -- C:\Users\Public\Videos
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*. >
[2012.10.01 13:20:42 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2013.02.24 20:23:38 | 000,000,000 | ---D | M] -- C:\Dell
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2013.02.25 16:47:38 | 000,000,000 | ---D | M] -- C:\Drivers
[2013.02.24 10:59:28 | 000,000,000 | ---D | M] -- C:\Driver_allOS
[2012.10.26 22:06:06 | 000,000,000 | ---D | M] -- C:\FreeOCR
[2012.09.27 15:10:41 | 000,000,000 | ---D | M] -- C:\HP
[2013.02.24 19:54:29 | 000,000,000 | ---D | M] -- C:\HP_LaserJet_Enterprise_500_color_M551
[2013.01.05 21:30:37 | 000,000,000 | ---D | M] -- C:\Macromedia
[2012.12.29 13:41:45 | 000,000,000 | ---D | M] -- C:\Mozilla
[2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2013.03.04 18:28:01 | 000,000,000 | R--D | M] -- C:\Program Files
[2013.03.04 18:27:08 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Programme
[2012.10.20 13:20:56 | 000,000,000 | ---D | M] -- C:\PSFONTS
[2012.09.27 11:32:36 | 000,000,000 | -HSD | M] -- C:\Recovery
[2013.02.19 14:41:41 | 000,000,000 | R--D | M] -- C:\Sandbox
[2012.09.29 08:39:29 | 000,000,000 | ---D | M] -- C:\SiLabs
[2013.02.26 21:15:24 | 000,000,000 | ---D | M] -- C:\swsetup
[2013.03.04 18:19:23 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2013.02.04 20:26:37 | 000,000,000 | ---D | M] -- C:\TDSSKiller_Quarantine
[2013.02.15 12:43:10 | 000,000,000 | ---D | M] -- C:\toolbarImages
[2012.09.29 10:40:45 | 000,000,000 | ---D | M] -- C:\UserData
[2012.11.17 16:39:29 | 000,000,000 | R--D | M] -- C:\Users
[2013.03.03 13:09:44 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
< C:\Windows\system32\*.tsp >
[2009.07.14 02:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp
[2009.07.14 02:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp
[2009.07.14 02:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp
[2009.07.14 02:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp
[2010.11.20 13:16:53 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp
[4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
[2009.07.14 05:53:46 | 000,032,630 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2012.10.03 17:01:17 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.01.09 20:46:10 | 000,001,090 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.01.09 20:46:10 | 000,001,094 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.02.25 17:20:18 | 000,000,404 | ---- | C] () -- C:\Windows\Tasks\DriverEasy Scheduled Scan.job
[2013.03.02 19:10:17 | 000,001,064 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
[2013.03.02 19:10:19 | 000,001,116 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16552_none_dd2bf0ef82c7be83\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16593_none_dd01b18982e7479e\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.20669_none_ddb1bfd49be72b9f\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.20713_none_dde1cf9a9bc40507\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
[2012.11.13 14:07:52 | 003,906,584 | ---- | M] (Safer-Networking Ltd.) MD5=E4A0900CF535888DDD85B10040CA3E34 -- C:\Program Files\Spybot - Search & Destroy 2\explorer.exe
 
< MD5 for: IASTOR.SYS  >
[2011.05.20 08:43:02 | 000,461,592 | ---- | M] (Intel Corporation) MD5=DB81F413FA4E3F328CAD7B5D59EF3F21 -- C:\Windows\System32\drivers\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2010.05.12 10:05:35 | 000,332,168 | ---- | M] (Intel Corporation) MD5=2D2918606673C46769FB516A5ACE958E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_aed9db9de9265a3a\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2010.05.12 10:20:41 | 000,332,160 | ---- | M] (Intel Corporation) MD5=FE8186428F0AB44F0E500C7AA33E9B51 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_afb9f9af020317a3\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2010.05.12 10:05:45 | 000,143,752 | ---- | M] (NVIDIA Corporation) MD5=1D8B6A440DFF2BDEAA4EB209FCBA21BF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_39a34c4d205d0412\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
[2010.05.12 10:20:52 | 000,143,752 | ---- | M] (NVIDIA Corporation) MD5=F3596C8A63D3871890B0D3A0DFFEF0D0 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_3a836a5e3939c17b\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2012.12.14 16:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2012.08.29 17:24:08 | 000,161,312 | ---- | M] (BitDefender LLC) Unable to obtain MD5 -- C:\Windows\system32\drivers\gzflt.sys
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
[4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
 
< %USERPROFILE%\*.* >
[2013.03.04 20:05:26 | 007,340,032 | ---- | M] () -- C:\Users\Info\NTUSER.DAT
[2013.02.03 17:27:53 | 006,815,744 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.bak
[2013.03.04 20:05:26 | 000,262,144 | -HS- | M] () -- C:\Users\Info\ntuser.dat.LOG1
[2012.09.27 11:34:15 | 000,000,000 | -HS- | M] () -- C:\Users\Info\ntuser.dat.LOG2
[2013.02.03 17:30:51 | 000,000,000 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.sav.LOG1
[2013.02.03 17:30:51 | 000,000,000 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT.sav.LOG2
[2012.09.27 12:04:28 | 000,065,536 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2012.09.27 12:04:28 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2012.09.27 12:04:28 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2013.02.03 21:33:02 | 000,065,536 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TM.blf
[2013.02.03 21:33:02 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2013.02.03 21:33:02 | 000,524,288 | -HS- | M] () -- C:\Users\Info\NTUSER.DAT{c4d67762-6e1e-11e2-b922-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2012.09.27 11:34:16 | 000,000,020 | -HS- | M] () -- C:\Users\Info\ntuser.ini
[2012.11.07 17:24:01 | 000,019,449 | ---- | M] () -- C:\Users\Info\return.txt
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

< End of report >

duddl 04.03.2013 20:15
Code:
OTL Extras logfile created on: 04.03.2013 19:40:08 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Info\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,61 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 35,42% Memory free
5,21 Gb Paging File | 2,84 Gb Available in Paging File | 54,48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 596,07 Gb Total Space | 513,40 Gb Free Space | 86,13% Space Free | Partition Type: NTFS
 
Computer Name: ALEXANDER-HP630 | User Name: Info | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)
 
[HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
 
[HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)
Directory [AddToPlaylistApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithApplianMP] -- "C:\Program Files\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Key error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01DBE142-27E9-4773-A0CD-B304003A5DF7}" = lport=137 | protocol=17 | dir=in | app=system |
"{12F58715-4624-4FD1-B010-BDBB1E7B080E}" = rport=137 | protocol=17 | dir=out | app=system |
"{1D2089B8-89D0-4BA7-A5B4-8F155E15D214}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{32A2271E-7150-4DA8-8C6D-BEE0170453F2}" = lport=138 | protocol=17 | dir=in | app=system |
"{37CFFEA8-E16F-43E4-BF1A-F88551A92DE4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39748B89-9815-4550-B841-532E2154ACF6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3D59763D-1ED3-4C74-BDFA-8A8FCC9FC525}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3EB7CAEB-87BB-4EA0-B067-ACC73089BC53}" = rport=139 | protocol=6 | dir=out | app=system |
"{4361BAA7-7834-412A-9E44-1BA065BD74E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4839B456-FDA6-4BEB-8D20-3376989267D7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{49BABFCE-DC11-4F95-ACBC-9C8BE5EDC36D}" = lport=139 | protocol=6 | dir=in | app=system |
"{4DE142EE-3AC5-4683-A93D-73C964D0A799}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{56A0396B-6F40-4055-A5C3-5063299FB17E}" = rport=138 | protocol=17 | dir=out | app=system |
"{66F5B08D-0A57-46B4-AA17-F10C3C22F759}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8C8F29E3-63A1-4816-81E5-EE4150655CFB}" = lport=445 | protocol=6 | dir=in | app=system |
"{90695147-1B32-4BF1-929C-80FA22015799}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A86F6B4F-9E54-4DB3-AA76-A0A683C3E610}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AFC82FD5-38F0-4F3E-9E7D-057741979768}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4066647-0930-4F92-AED6-7BFA6D998905}" = lport=10243 | protocol=6 | dir=in | app=system |
"{EAB4A630-A4D2-4BD4-8678-B51E957BE3FC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EFE6FD3C-175A-4490-963E-25D99B7C8EA2}" = rport=445 | protocol=6 | dir=out | app=system |
"{F48DB664-08F0-4795-9171-196F48F7B1D2}" = lport=80 | protocol=6 | dir=in | name=www |
"{F5167275-B910-4332-8B20-73F7A0B8BBCF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FFA4C39C-5201-4494-9C67-A43E86E58075}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06D07C9B-2AD0-4369-AB48-298D5D18296B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{0AF7B335-6CF4-4D3E-8667-438F4A4EADDA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{1253855C-B82A-4533-A923-299F385CEE73}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{15EA55BC-0D82-4443-B1D0-D1D174C8B98A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{31EF75E5-69F3-4986-A494-697A2D4B0B79}" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{3367344A-00FA-45DB-846E-477E214F9D96}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{36C659E4-9313-4E22-A9CA-B5B3FE55F6F6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{47A7770A-CDF0-42BE-B810-BC82EC215190}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4CF43D84-0084-43ED-B110-3D63EDF671BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4E9C997D-58B2-4974-9A3B-5B3FBC9FBDDD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{55224F95-277E-482D-BC14-B97F8D85E435}" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"{5E76D313-567F-495F-8B8C-24A65DD02DA5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6156A7B9-18E4-4FF5-AF53-F97D16C2D1AF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{664CA150-E671-4567-90EC-299E6D3B4035}" = protocol=6 | dir=out | app=system |
"{791C8FDF-21B4-4874-B18A-F02E0285293E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{80C8EE46-FD19-483A-B00E-A9CCE3000760}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{8CC52C5F-AA3B-41D7-A1B7-203AA9B2C047}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{94D74F6B-79F1-46DB-A69A-A8B39BE3639D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB6B0AAB-C44F-418A-969C-D4712E88839F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ACE84729-F7CE-40F2-BBFE-1E21659DB267}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C95F78A8-49C0-44EC-99C4-940067C828E7}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3.5\totalmedia.exe |
"{DAD0094F-D544-4CED-A3C4-ECC5FD4C9F36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E72A7411-CB21-440F-B894-74A43100BFD3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E9182B6C-9065-48DF-8991-4E7BE3001FE6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{5AE05BC8-C5D2-4583-AED7-24C58FC6768E}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"TCP Query User{6C914251-2626-430D-84DE-5249E13427AF}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{0DF4C5BA-CE9D-4847-A7DD-9D84929383D0}C:\users\info\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\info\appdata\roaming\bittorrent\bittorrent.exe |
"UDP Query User{3669F7DB-5032-4F4F-AA0A-01C4A71BADEC}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{152A537F-45E9-4B15-8847-2E3E5BE61859}" = Intel® Trusted Connect Service Client
"{1845470B-EB14-4ABC-835B-E36C693DC07D}" = Skype™ 6.1
"{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{23C3F5C0-566B-478B-AAB6-197ADAD0C945}" = Uniblue SpeedUpMyPC 2009
"{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program
"{2C26B97F-698E-4E04-B398-8203B147859B}_is1" = TOPP Vorlagen-Druckstudio (5156)
"{33FFD86B-569C-9E8D-6659-A1F84D07CAD0}" = AMD Catalyst Install Manager
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53B17A98-5BF0-40BC-AAFF-850A357975AC}" = HP Quick Launch
"{5F32D89B-D3A0-4562-AC03-F6DE4614AE1A}" = DVB-T USB DEVICE
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74292F90-895A-4FC6-A692-9641532B1B63}" = ArcSoft TotalMedia 3.5
"{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{BBBA20E0-D9F3-4C6F-83AC-D66EFC0BFA93}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE
"{E2E7A0E8-77C4-495F-8FA3-63DAEDAA2DB3}" = F-Secure PSC Prerequisites
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}" = Uniblue RegistryBooster 2009
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12
"Bitdefender" = Bitdefender Internet Security 2013
"BitTorrent" = BitTorrent
"DMX5_is1" = DriverMax 6
"DriverEasy_is1" = DriverEasy 4.4.2
"Finale NotePad 2012" = Finale NotePad 2012
"Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128
"Freemake Video Converter_is1" = Freemake Video Converter Version 3.2.0
"freeocr_is1" = FreeOCR v4.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"SynTPDeinstKey" = Synaptics TouchPad Driver
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"WinPcapInst" = WinPcap 4.1.2
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1&1 Mail & Media WEB.DE MailCheck GC" = WEB.DE MailCheck für Google Chrome
"Google Chrome" = Google Chrome
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 02.03.2013 07:58:24 | Computer Name = Alexander-HP630 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
 13.0.3020.2, Zeitstempel: 0x51067abd  Name des fehlerhaften Moduls: ntdll.dll, Version:
 6.1.7601.17725, Zeitstempel: 0x4ec49b60  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0003224d
ID
 des fehlerhaften Prozesses: 0x8b0  Startzeit der fehlerhaften Anwendung: 0x01ce173d14bd2c26
Pfad
 der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
Pfad
 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: 7c1d470b-8330-11e2-8fd3-e4115bf9b2f0
 
Error - 02.03.2013 08:02:06 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 09:38:01 | Computer Name = Alexander-HP630 | Source = Winlogon | ID = 4103
Description = Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error - 02.03.2013 11:37:49 | Computer Name = Alexander-HP630 | Source = VSS | ID = 8194
Description =
 
Error - 02.03.2013 12:26:37 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\innovative
 solutions\drivermax\DPInst\amd64\dpinst.exe".  Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.03.2013 12:26:37 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\innovative
 solutions\drivermax\DPInst\ia64\dpinst.exe".  Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.03.2013 12:26:46 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\MaxxAudioControl64.exe".
Die
 abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.03.2013 12:26:47 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\RAVBg64.exe".
Die
 abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.03.2013 12:26:47 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\RAVCpl64.exe".
Die
 abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.03.2013 12:26:50 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\Vista64\vncutil64.exe".
Die
 abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.03.2013 12:26:52 | Computer Name = Alexander-HP630 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\Easeware\drivereasy\aud_allos_6.0.1.6804_pv\WDM\vncutil64.exe".
Die
 abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
[ Media Center Events ]
Error - 03.12.2012 14:10:35 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:35 - Fehler beim Herstellen der Internetverbindung.  19:10:35
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 03.12.2012 14:10:44 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 19:10:40 - Fehler beim Herstellen der Internetverbindung.  19:10:40
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 04.12.2012 09:37:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:39 - Fehler beim Herstellen der Internetverbindung.  14:37:39
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 04.12.2012 09:37:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 14:37:44 - Fehler beim Herstellen der Internetverbindung.  14:37:44
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 05.12.2012 12:09:49 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 17:09:49 - Directory konnte nicht abgerufen werden (Fehler: Timeout
 für Vorgang überschritten) 
 
Error - 06.12.2012 11:54:39 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:39 - Fehler beim Herstellen der Internetverbindung.  16:54:39
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 06.12.2012 11:54:48 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 16:54:44 - Fehler beim Herstellen der Internetverbindung.  16:54:44
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 14.12.2012 10:40:37 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:37 - Fehler beim Herstellen der Internetverbindung.  15:40:37
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 14.12.2012 10:40:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 15:40:43 - Fehler beim Herstellen der Internetverbindung.  15:40:43
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 15.12.2012 15:52:47 | Computer Name = Alexander-PC | Source = MCUpdate | ID = 0
Description = 20:52:47 - Fehler beim Herstellen der Internetverbindung.  20:52:47
-    Serververbindung konnte nicht hergestellt werden.. 
 
[ Spybot - Search and Destroy Events ]
Error - 14.01.2013 13:49:32 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 16.01.2013 13:50:00 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 14.02.2013 10:55:06 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 19.02.2013 09:38:05 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 21.02.2013 13:14:11 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 23.02.2013 05:17:13 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 23.02.2013 16:11:47 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 01.03.2013 12:07:35 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 01.03.2013 14:53:53 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
Error - 03.03.2013 04:36:59 | Computer Name = Alexander-HP630 | Source = SDCleaner | ID = 100
Description = LoadCleaningInstructions
 
[ System Events ]
Error - 17.02.2013 04:31:32 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
 von Dienst IPBusEnum erreicht.
 
Error - 17.02.2013 04:32:26 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
 und wird nicht verwendet. Der Treiber wurde entladen.
 
Error - 17.02.2013 15:52:04 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
Error - 17.02.2013 16:30:21 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
Error - 18.02.2013 09:10:09 | Computer Name = Alexander-HP630 | Source = BTHUSB | ID = 327697
Description = Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen
 und wird nicht verwendet. Der Treiber wurde entladen.
 
Error - 18.02.2013 12:49:33 | Computer Name = Alexander-HP630 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  40517705
 
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
 
Error - 18.02.2013 12:51:45 | Computer Name = Alexander-HP630 | Source = WMPNetworkSvc | ID = 866306
Description =
 
Error - 18.02.2013 12:56:23 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
Error - 18.02.2013 13:34:45 | Computer Name = Alexander-HP630 | Source = DCOM | ID = 10010
Description =
 
 
< End of report >

markusg 04.03.2013 21:05
Hi,
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

duddl 04.03.2013 21:26
Er hat keine Bedrohungen gefunden:

Code:
21:23:45.0711 2816  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:23:46.0142 2816  ============================================================
21:23:46.0142 2816  Current date / time: 2013/03/04 21:23:46.0142
21:23:46.0142 2816  SystemInfo:
21:23:46.0142 2816 
21:23:46.0142 2816  OS Version: 6.1.7601 ServicePack: 1.0
21:23:46.0142 2816  Product type: Workstation
21:23:46.0143 2816  ComputerName: ALEXANDER-HP630
21:23:46.0143 2816  UserName: Info
21:23:46.0143 2816  Windows directory: C:\Windows
21:23:46.0143 2816  System windows directory: C:\Windows
21:23:46.0143 2816  Processor architecture: Intel x86
21:23:46.0143 2816  Number of processors: 2
21:23:46.0143 2816  Page size: 0x1000
21:23:46.0143 2816  Boot type: Normal boot
21:23:46.0143 2816  ============================================================
21:23:49.0736 2816  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
21:23:49.0738 2816  ============================================================
21:23:49.0738 2816  \Device\Harddisk0\DR0:
21:23:49.0739 2816  MBR partitions:
21:23:49.0739 2816  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:23:49.0739 2816  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x4A825800
21:23:49.0739 2816  ============================================================
21:23:49.0782 2816  C: <-> \Device\Harddisk0\DR0\Partition2
21:23:49.0782 2816  ============================================================
21:23:49.0782 2816  Initialize success
21:23:49.0782 2816  ============================================================
21:24:12.0623 3544  ============================================================
21:24:12.0623 3544  Scan started
21:24:12.0623 3544  Mode: Manual; SigCheck; TDLFS;
21:24:12.0623 3544  ============================================================
21:24:13.0761 3544  ================ Scan system memory ========================
21:24:13.0761 3544  System memory - ok
21:24:13.0762 3544  ================ Scan services =============================
21:24:13.0987 3544  [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
21:24:14.0139 3544  1394ohci - ok
21:24:14.0178 3544  40517705 - ok
21:24:14.0292 3544  [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon        C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
21:24:14.0689 3544  ACDaemon - ok
21:24:14.0730 3544  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:24:14.0758 3544  ACPI - ok
21:24:14.0793 3544  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
21:24:14.0860 3544  AcpiPmi - ok
21:24:14.0956 3544  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
21:24:16.0846 3544  AdobeARMservice - ok
21:24:16.0885 3544  [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:24:16.0987 3544  AdobeFlashPlayerUpdateSvc - ok
21:24:17.0019 3544  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
21:24:17.0066 3544  adp94xx - ok
21:24:17.0101 3544  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
21:24:17.0170 3544  adpahci - ok
21:24:17.0203 3544  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
21:24:17.0238 3544  adpu320 - ok
21:24:17.0287 3544  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
21:24:17.0340 3544  AeLookupSvc - ok
21:24:17.0425 3544  [ A6CE73469591554279DA63BE715DBC93 ] AERTFilters    C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
21:24:17.0560 3544  AERTFilters - ok
21:24:17.0606 3544  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD            C:\Windows\system32\drivers\afd.sys
21:24:17.0662 3544  AFD - ok
21:24:17.0717 3544  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\Windows\system32\drivers\agp440.sys
21:24:17.0738 3544  agp440 - ok
21:24:17.0773 3544  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx        C:\Windows\system32\DRIVERS\djsvs.sys
21:24:17.0798 3544  aic78xx - ok
21:24:17.0829 3544  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG            C:\Windows\System32\alg.exe
21:24:17.0896 3544  ALG - ok
21:24:17.0920 3544  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\Windows\system32\drivers\aliide.sys
21:24:17.0952 3544  aliide - ok
21:24:17.0978 3544  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
21:24:18.0024 3544  amdagp - ok
21:24:18.0043 3544  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\Windows\system32\drivers\amdide.sys
21:24:18.0064 3544  amdide - ok
21:24:18.0094 3544  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
21:24:18.0189 3544  AmdK8 - ok
21:24:18.0220 3544  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
21:24:18.0261 3544  AmdPPM - ok
21:24:18.0294 3544  [ E7F4D42D8076EC60E21715CD11743A0D ] amdsata        C:\Windows\system32\drivers\amdsata.sys
21:24:18.0318 3544  amdsata - ok
21:24:18.0352 3544  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
21:24:18.0393 3544  amdsbs - ok
21:24:18.0417 3544  [ 146459D2B08BFDCBFA856D9947043C81 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
21:24:18.0439 3544  amdxata - ok
21:24:18.0478 3544  [ AEA177F783E20150ACE5383EE368DA19 ] AppID          C:\Windows\system32\drivers\appid.sys
21:24:18.0647 3544  AppID - ok
21:24:18.0678 3544  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:24:18.0761 3544  AppIDSvc - ok
21:24:18.0806 3544  [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo        C:\Windows\System32\appinfo.dll
21:24:18.0859 3544  Appinfo - ok
21:24:18.0879 3544  [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt        C:\Windows\System32\appmgmts.dll
21:24:18.0927 3544  AppMgmt - ok
21:24:18.0946 3544  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc            C:\Windows\system32\DRIVERS\arc.sys
21:24:18.0969 3544  arc - ok
21:24:18.0989 3544  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
21:24:19.0029 3544  arcsas - ok
21:24:19.0057 3544  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:24:19.0270 3544  AsyncMac - ok
21:24:19.0308 3544  [ 338C86357871C167A96AB976519BF59E ] atapi          C:\Windows\system32\drivers\atapi.sys
21:24:19.0367 3544  atapi - ok
21:24:19.0371 3544  AthBTPort - ok
21:24:19.0475 3544  [ E573045DFBEAD298A8DFCD11CAC71B93 ] athr            C:\Windows\system32\DRIVERS\athr.sys
21:24:19.0713 3544  athr - ok
21:24:19.0785 3544  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:24:19.0879 3544  AudioEndpointBuilder - ok
21:24:19.0911 3544  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
21:24:19.0961 3544  Audiosrv - ok
21:24:20.0003 3544  [ F3D3B0AFFD227AA2BFC80C1A4536BAA0 ] avc3            C:\Windows\system32\DRIVERS\avc3.sys
21:24:20.0305 3544  avc3 - ok
21:24:20.0350 3544  [ 7F9B99B564E7C9FBB6729ED95B5BBB24 ] avchv          C:\Windows\system32\DRIVERS\avchv.sys
21:24:20.0469 3544  avchv - ok
21:24:20.0495 3544  [ C7BE750843A8A39167187FD28634A25E ] avckf          C:\Windows\system32\DRIVERS\avckf.sys
21:24:20.0673 3544  avckf - ok
21:24:20.0682 3544  AVFSFilter - ok
21:24:20.0714 3544  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:24:20.0809 3544  AxInstSV - ok
21:24:20.0852 3544  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbdx.sys
21:24:20.0898 3544  b06bdrv - ok
21:24:20.0931 3544  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
21:24:20.0996 3544  b57nd60x - ok
21:24:21.0114 3544  [ 0FB5160737E1027936425C1E5FF2AEF9 ] BdDesktopParental C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe
21:24:21.0230 3544  BdDesktopParental - ok
21:24:21.0294 3544  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:24:21.0358 3544  BDESVC - ok
21:24:21.0453 3544  [ 2C8F82DC54215B2FE064EFF996F39D9B ] BdfNdisf        c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys
21:24:21.0577 3544  BdfNdisf - ok
21:24:21.0615 3544  [ 2F66C9DF34134419928BAC00E21E2679 ] bdfwfpf        C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys
21:24:21.0839 3544  bdfwfpf - ok
21:24:21.0871 3544  [ B6CBFC9D825BB2D955620CD4D8EF07F9 ] BDSandBox      C:\Windows\system32\drivers\bdsandbox.sys
21:24:21.0986 3544  BDSandBox - ok
21:24:22.0071 3544  [ A7478F77584F8DB6AD74B2BBE1144886 ] bdselfpr        C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys
21:24:22.0295 3544  bdselfpr - ok
21:24:22.0340 3544  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:24:22.0399 3544  Beep - ok
21:24:22.0483 3544  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE            C:\Windows\System32\bfe.dll
21:24:22.0556 3544  BFE - ok
21:24:22.0616 3544  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\Windows\System32\qmgr.dll
21:24:22.0683 3544  BITS - ok
21:24:22.0715 3544  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:24:22.0794 3544  blbdrive - ok
21:24:23.0151 3544  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:24:23.0353 3544  Bonjour Service - ok
21:24:23.0401 3544  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:24:23.0442 3544  bowser - ok
21:24:23.0483 3544  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:24:23.0559 3544  BrFiltLo - ok
21:24:23.0584 3544  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:24:23.0628 3544  BrFiltUp - ok
21:24:23.0665 3544  [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser        C:\Windows\System32\browser.dll
21:24:23.0708 3544  Browser - ok
21:24:23.0747 3544  [ 845B8CE732E67F3B4133164868C666EA ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
21:24:23.0821 3544  Brserid - ok
21:24:23.0842 3544  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:24:23.0869 3544  BrSerWdm - ok
21:24:23.0893 3544  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:24:23.0936 3544  BrUsbMdm - ok
21:24:23.0967 3544  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:24:24.0001 3544  BrUsbSer - ok
21:24:24.0007 3544  BTATH_A2DP - ok
21:24:24.0016 3544  BTATH_BUS - ok
21:24:24.0028 3544  BTATH_HCRP - ok
21:24:24.0039 3544  BTATH_LWFLT - ok
21:24:24.0049 3544  BTATH_RCP - ok
21:24:24.0117 3544  [ C840DFF077AA30FF64DEF169CBB49164 ] BtFilter        C:\Windows\system32\DRIVERS\btfilter.sys
21:24:24.0197 3544  BtFilter - ok
21:24:24.0230 3544  [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum        C:\Windows\system32\DRIVERS\BthEnum.sys
21:24:24.0294 3544  BthEnum - ok
21:24:24.0308 3544  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
21:24:24.0335 3544  BTHMODEM - ok
21:24:24.0406 3544  [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
21:24:24.0434 3544  BthPan - ok
21:24:24.0481 3544  [ C2FBF6D271D9A94D839C416BF186EAD9 ] BTHPORT        C:\Windows\system32\Drivers\BTHport.sys
21:24:24.0526 3544  BTHPORT - ok
21:24:24.0579 3544  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv        C:\Windows\system32\bthserv.dll
21:24:24.0657 3544  bthserv - ok
21:24:24.0685 3544  [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
21:24:24.0724 3544  BTHUSB - ok
21:24:24.0748 3544  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:24:24.0823 3544  cdfs - ok
21:24:24.0852 3544  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
21:24:24.0900 3544  cdrom - ok
21:24:24.0943 3544  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc    C:\Windows\System32\certprop.dll
21:24:25.0001 3544  CertPropSvc - ok
21:24:25.0029 3544  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
21:24:25.0083 3544  circlass - ok
21:24:25.0128 3544  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\Windows\system32\CLFS.sys
21:24:25.0171 3544  CLFS - ok
21:24:25.0237 3544  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:24:25.0258 3544  clr_optimization_v2.0.50727_32 - ok
21:24:25.0297 3544  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:24:25.0319 3544  clr_optimization_v4.0.30319_32 - ok
21:24:25.0341 3544  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:24:25.0389 3544  CmBatt - ok
21:24:25.0445 3544  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\Windows\system32\drivers\cmdide.sys
21:24:25.0465 3544  cmdide - ok
21:24:25.0530 3544  [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG            C:\Windows\system32\Drivers\cng.sys
21:24:25.0597 3544  CNG - ok
21:24:25.0631 3544  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:24:25.0657 3544  Compbatt - ok
21:24:25.0700 3544  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
21:24:25.0727 3544  CompositeBus - ok
21:24:25.0731 3544  COMSysApp - ok
21:24:25.0767 3544  [ 86E4082CF6991814E03FAB6DEA22C225 ] cphs            C:\Windows\system32\IntelCpHeciSvc.exe
21:24:25.0861 3544  cphs - ok
21:24:25.0913 3544  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
21:24:25.0934 3544  crcdisk - ok
21:24:25.0961 3544  [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:24:25.0989 3544  CryptSvc - ok
21:24:26.0039 3544  [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC            C:\Windows\system32\drivers\csc.sys
21:24:26.0105 3544  CSC - ok
21:24:26.0153 3544  [ 15F93B37F6801943360D9EB42485D5D3 ] CscService      C:\Windows\System32\cscsvc.dll
21:24:26.0224 3544  CscService - ok
21:24:26.0266 3544  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:24:26.0328 3544  DcomLaunch - ok
21:24:26.0365 3544  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc      C:\Windows\System32\defragsvc.dll
21:24:26.0430 3544  defragsvc - ok
21:24:26.0462 3544  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
21:24:26.0530 3544  DfsC - ok
21:24:26.0555 3544  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:24:26.0639 3544  Dhcp - ok
21:24:26.0676 3544  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\Windows\system32\drivers\discache.sys
21:24:26.0742 3544  discache - ok
21:24:26.0765 3544  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\Windows\system32\DRIVERS\disk.sys
21:24:26.0788 3544  Disk - ok
21:24:26.0893 3544  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:24:26.0930 3544  Dnscache - ok
21:24:26.0954 3544  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc        C:\Windows\System32\dot3svc.dll
21:24:27.0017 3544  dot3svc - ok
21:24:27.0051 3544  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS            C:\Windows\system32\dps.dll
21:24:27.0163 3544  DPS - ok
21:24:27.0204 3544  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
21:24:27.0261 3544  drmkaud - ok
21:24:27.0300 3544  [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
21:24:27.0342 3544  DXGKrnl - ok
21:24:27.0383 3544  [ 22EF8965101685ADD128F03A2B03CE16 ] E1G60          C:\Windows\system32\DRIVERS\E1G60I32.sys
21:24:27.0413 3544  E1G60 - ok
21:24:27.0451 3544  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost        C:\Windows\System32\eapsvc.dll
21:24:27.0522 3544  EapHost - ok
21:24:27.0881 3544  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv          C:\Windows\system32\DRIVERS\evbdx.sys
21:24:28.0002 3544  ebdrv - ok
21:24:28.0080 3544  [ A00B61CBF4015C1F04D2D66BCF1A6450 ] ebinfiltr      C:\Windows\system32\DRIVERS\ebinfiltr.sys
21:24:28.0141 3544  ebinfiltr - ok
21:24:28.0180 3544  [ 81951F51E318AECC2D68559E47485CC4 ] EFS            C:\Windows\System32\lsass.exe
21:24:28.0219 3544  EFS - ok
21:24:28.0303 3544  [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
21:24:28.0378 3544  ehRecvr - ok
21:24:28.0418 3544  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched        C:\Windows\ehome\ehsched.exe
21:24:28.0507 3544  ehSched - ok
21:24:28.0539 3544  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
21:24:28.0574 3544  elxstor - ok
21:24:28.0601 3544  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
21:24:28.0626 3544  ErrDev - ok
21:24:28.0691 3544  esgiguard - ok
21:24:28.0753 3544  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem    C:\Windows\system32\es.dll
21:24:28.0819 3544  EventSystem - ok
21:24:28.0847 3544  [ 2DC9108D74081149CC8B651D3A26207F ] exfat          C:\Windows\system32\drivers\exfat.sys
21:24:28.0908 3544  exfat - ok
21:24:28.0949 3544  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
21:24:29.0011 3544  fastfat - ok
21:24:29.0051 3544  [ 967EA5B213E9984CBE270205DF37755B ] Fax            C:\Windows\system32\fxssvc.exe
21:24:29.0101 3544  Fax - ok
21:24:29.0115 3544  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
21:24:29.0154 3544  fdc - ok
21:24:29.0203 3544  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost        C:\Windows\system32\fdPHost.dll
21:24:29.0263 3544  fdPHost - ok
21:24:29.0287 3544  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\Windows\system32\fdrespub.dll
21:24:29.0352 3544  FDResPub - ok
21:24:29.0400 3544  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:24:29.0425 3544  FileInfo - ok
21:24:29.0443 3544  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
21:24:29.0521 3544  Filetrace - ok
21:24:29.0558 3544  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
21:24:29.0583 3544  flpydisk - ok
21:24:29.0606 3544  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:24:29.0634 3544  FltMgr - ok
21:24:29.0714 3544  [ E12C4928B32ACE04610259647F072635 ] FontCache      C:\Windows\system32\FntCache.dll
21:24:29.0876 3544  FontCache - ok
21:24:29.0965 3544  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:24:29.0985 3544  FontCache3.0.0.0 - ok
21:24:30.0008 3544  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
21:24:30.0029 3544  FsDepends - ok
21:24:30.0062 3544  [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:24:30.0084 3544  Fs_Rec - ok
21:24:30.0125 3544  [ 8A73E79089B282100B9393B644CB853B ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:24:30.0155 3544  fvevol - ok
21:24:30.0195 3544  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
21:24:30.0223 3544  gagp30kx - ok
21:24:30.0267 3544  [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:24:30.0311 3544  GEARAspiWDM - ok
21:24:30.0370 3544  [ 34F8E8CCE094942282425ED937A9ECF1 ] GeneStor        C:\Windows\system32\DRIVERS\GeneStor.sys
21:24:30.0418 3544  GeneStor - ok
21:24:30.0473 3544  [ 01B2BE86C39752A0FFB30ED1FB4A141C ] gfiark          C:\Windows\system32\drivers\gfiark.sys
21:24:30.0579 3544  gfiark - ok
21:24:30.0657 3544  [ 483924F92E55A5F9423201EC635E2CED ] gfibto          C:\Windows\system32\drivers\gfibto.sys
21:24:30.0718 3544  gfibto - ok
21:24:30.0792 3544  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc          C:\Windows\System32\gpsvc.dll
21:24:30.0870 3544  gpsvc - ok
21:24:30.0939 3544  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate        C:\Program Files\Google\Update\GoogleUpdate.exe
21:24:31.0141 3544  gupdate - ok
21:24:31.0156 3544  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
21:24:31.0198 3544  gupdatem - ok
21:24:31.0265 3544  [ 479664FA3E1BD3E0B828971A0D500D4E ] gzflt          C:\Windows\system32\DRIVERS\gzflt.sys
21:24:31.0446 3544  gzflt - ok
21:24:31.0498 3544  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:24:31.0562 3544  hcw85cir - ok
21:24:31.0594 3544  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:24:31.0645 3544  HdAudAddService - ok
21:24:31.0670 3544  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
21:24:31.0723 3544  HDAudBus - ok
21:24:31.0757 3544  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
21:24:31.0795 3544  HidBatt - ok
21:24:31.0816 3544  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
21:24:31.0871 3544  HidBth - ok
21:24:31.0899 3544  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
21:24:31.0944 3544  HidIr - ok
21:24:31.0979 3544  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv        C:\Windows\system32\hidserv.dll
21:24:32.0043 3544  hidserv - ok
21:24:32.0085 3544  [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
21:24:32.0125 3544  HidUsb - ok
21:24:32.0168 3544  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:24:32.0289 3544  hkmsvc - ok
21:24:32.0340 3544  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:24:32.0396 3544  HomeGroupListener - ok
21:24:32.0433 3544  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:24:32.0490 3544  HomeGroupProvider - ok
21:24:32.0513 3544  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:24:32.0536 3544  HpSAMD - ok
21:24:32.0563 3544  [ 2BEC76BDCD1BC080210325E7B5094834 ] HPWMISVC        C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
21:24:32.0662 3544  HPWMISVC - ok
21:24:32.0719 3544  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:24:32.0773 3544  HTTP - ok
21:24:32.0815 3544  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:24:32.0835 3544  hwpolicy - ok
21:24:32.0884 3544  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
21:24:32.0923 3544  i8042prt - ok
21:24:32.0965 3544  [ DB81F413FA4E3F328CAD7B5D59EF3F21 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
21:24:33.0089 3544  iaStor - ok
21:24:33.0139 3544  [ 902F9086295B54B516B9664327079739 ] iaStorA        C:\Windows\system32\DRIVERS\iaStorA.sys
21:24:33.0197 3544  iaStorA - ok
21:24:33.0304 3544  [ 777788D9B63CCEEEF2DB353BA4EDD454 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:24:33.0570 3544  IAStorDataMgrSvc - ok
21:24:33.0592 3544  [ 13F98AAE8E9030C38A9DA7DADE6325A9 ] iaStorF        C:\Windows\system32\DRIVERS\iaStorF.sys
21:24:33.0640 3544  iaStorF - ok
21:24:33.0688 3544  [ A3CAE5D281DB4CFF7CFF8233507EE5AD ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
21:24:33.0720 3544  iaStorV - ok
21:24:33.0797 3544  [ 83FF82FE209E7997067B375DAD6CF23D ] ICCS            C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
21:24:33.0849 3544  ICCS - ok
21:24:34.0010 3544  [ 2B0EBB2199D71D79938998252BE8144E ] IconMan_R      C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
21:24:34.0271 3544  IconMan_R - ok
21:24:34.0366 3544  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc          C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:24:34.0576 3544  idsvc - ok
21:24:34.0706 3544  [ 8CC51204BCE551B90B45E97BE446C48B ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
21:24:34.0906 3544  igfx - ok
21:24:34.0945 3544  [ 4173FF5708F3236CF25195FECD742915 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
21:24:34.0969 3544  iirsp - ok
21:24:35.0020 3544  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\Windows\System32\ikeext.dll
21:24:35.0096 3544  IKEEXT - ok
21:24:35.0228 3544  [ BFD7663C508B6D6B20D2C15255EA7096 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
21:24:35.0396 3544  IntcAzAudAddService - ok
21:24:35.0444 3544  [ 6A6E1B319A47FA7AF2AE6B6815AE9854 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
21:24:35.0503 3544  IntcDAud - ok
21:24:35.0621 3544  [ AE2B75CD6C71F5706AD485FD6693CFF7 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
21:24:35.0749 3544  Intel(R) Capability Licensing Service Interface - ok
21:24:35.0778 3544  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\Windows\system32\drivers\intelide.sys
21:24:35.0799 3544  intelide - ok
21:24:35.0853 3544  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:24:35.0896 3544  intelppm - ok
21:24:35.0931 3544  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
21:24:36.0003 3544  IPBusEnum - ok
21:24:36.0037 3544  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:24:36.0121 3544  IpFilterDriver - ok
21:24:36.0195 3544  [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:24:36.0272 3544  iphlpsvc - ok
21:24:36.0324 3544  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
21:24:36.0367 3544  IPMIDRV - ok
21:24:36.0411 3544  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
21:24:36.0468 3544  IPNAT - ok
21:24:36.0520 3544  [ EF1C51222117B37AFBFF8F4642EA8C62 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
21:24:36.0616 3544  iPod Service - ok
21:24:36.0645 3544  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:24:36.0778 3544  IRENUM - ok
21:24:36.0801 3544  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:24:36.0825 3544  isapnp - ok
21:24:36.0856 3544  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
21:24:36.0887 3544  iScsiPrt - ok
21:24:36.0971 3544  [ 3C4002D339491AF73D663FFC7F6E5ECB ] jhi_service    C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
21:24:37.0050 3544  jhi_service - ok
21:24:37.0074 3544  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
21:24:37.0104 3544  kbdclass - ok
21:24:37.0136 3544  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
21:24:37.0161 3544  kbdhid - ok
21:24:37.0180 3544  [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso          C:\Windows\system32\lsass.exe
21:24:37.0215 3544  KeyIso - ok
21:24:37.0289 3544  [ EA26CB00F83686856F2C79673C00C686 ] kl1            C:\Windows\system32\DRIVERS\kl1.sys
21:24:37.0350 3544  kl1 - ok
21:24:37.0477 3544  [ 654BDF113971B6DFAEA21D5554EBF5F6 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys
21:24:37.0587 3544  KLIF - ok
21:24:37.0662 3544  [ 24AEBAD59D1DE8A7CC36E8F09F999362 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys
21:24:37.0731 3544  klkbdflt - ok
21:24:37.0762 3544  [ A58507C2827C3AE1D4CCB2746AAB349F ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys
21:24:37.0813 3544  klmouflt - ok
21:24:37.0863 3544  [ B20DB17BC4E54B78EAB16D15B058E75B ] kltdi          C:\Windows\system32\DRIVERS\kltdi.sys
21:24:37.0912 3544  kltdi - ok
21:24:37.0975 3544  [ 71A38C123600172511C26BFABD0EF579 ] kneps          C:\Windows\system32\DRIVERS\kneps.sys
21:24:38.0010 3544  kneps - ok
21:24:38.0040 3544  [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:24:38.0063 3544  KSecDD - ok
21:24:38.0086 3544  [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
21:24:38.0111 3544  KSecPkg - ok
21:24:38.0152 3544  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm          C:\Windows\system32\msdtckrm.dll
21:24:38.0219 3544  KtmRm - ok
21:24:38.0342 3544  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:24:38.0421 3544  LanmanServer - ok
21:24:38.0497 3544  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:24:38.0594 3544  LanmanWorkstation - ok
21:24:38.0700 3544  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:24:38.0780 3544  lltdio - ok
21:24:38.0887 3544  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
21:24:38.0974 3544  lltdsvc - ok
21:24:38.0993 3544  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts        C:\Windows\System32\lmhsvc.dll
21:24:39.0118 3544  lmhosts - ok
21:24:39.0277 3544  [ 4269D44BB47A6DA5D80B11F4C8536458 ] LMS            C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:24:39.0451 3544  LMS - ok
21:24:39.0473 3544  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
21:24:39.0495 3544  LSI_FC - ok
21:24:39.0541 3544  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
21:24:39.0609 3544  LSI_SAS - ok
21:24:39.0651 3544  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:24:39.0672 3544  LSI_SAS2 - ok
21:24:39.0689 3544  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:24:39.0713 3544  LSI_SCSI - ok
21:24:39.0730 3544  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv          C:\Windows\system32\drivers\luafv.sys
21:24:39.0788 3544  luafv - ok
21:24:39.0794 3544  massfilter - ok
21:24:39.0963 3544  [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
21:24:39.0989 3544  MBAMProtector - ok
21:24:40.0134 3544  [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler  C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
21:24:40.0185 3544  MBAMScheduler - ok
21:24:40.0382 3544  [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
21:24:40.0476 3544  MBAMService - ok
21:24:40.0633 3544  [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy  C:\Windows\system32\drivers\mbamswissarmy.sys
21:24:40.0747 3544  MBAMSwissArmy - ok
21:24:40.0786 3544  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
21:24:40.0852 3544  Mcx2Svc - ok
21:24:40.0910 3544  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
21:24:40.0930 3544  megasas - ok
21:24:40.0988 3544  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
21:24:41.0015 3544  MegaSR - ok
21:24:41.0110 3544  [ 9E0A56C77E9244D2CAAC3811F4B47FCB ] MEI            C:\Windows\system32\DRIVERS\HECI.sys
21:24:41.0185 3544  MEI - ok
21:24:41.0285 3544  MEMSWEEP2 - ok
21:24:41.0374 3544  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS          C:\Windows\system32\mmcss.dll
21:24:41.0419 3544  MMCSS - ok
21:24:41.0462 3544  [ F001861E5700EE84E2D4E52C712F4964 ] Modem          C:\Windows\system32\drivers\modem.sys
21:24:41.0517 3544  Modem - ok
21:24:41.0541 3544  [ 79D10964DE86B292320E9DFE02282A23 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
21:24:41.0585 3544  monitor - ok
21:24:41.0616 3544  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:24:41.0637 3544  mouclass - ok
21:24:41.0697 3544  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
21:24:41.0770 3544  mouhid - ok
21:24:41.0841 3544  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:24:41.0864 3544  mountmgr - ok
21:24:41.0965 3544  [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
21:24:42.0026 3544  MozillaMaintenance - ok
21:24:42.0066 3544  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\Windows\system32\drivers\mpio.sys
21:24:42.0089 3544  mpio - ok
21:24:42.0133 3544  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:24:42.0175 3544  mpsdrv - ok
21:24:42.0227 3544  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:24:42.0314 3544  MpsSvc - ok
21:24:42.0348 3544  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:24:42.0445 3544  MRxDAV - ok
21:24:42.0487 3544  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:24:42.0578 3544  mrxsmb - ok
21:24:42.0603 3544  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:24:42.0668 3544  mrxsmb10 - ok
21:24:42.0700 3544  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:24:42.0725 3544  mrxsmb20 - ok
21:24:42.0769 3544  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\Windows\system32\drivers\msahci.sys
21:24:42.0789 3544  msahci - ok
21:24:42.0868 3544  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
21:24:42.0892 3544  msdsm - ok
21:24:42.0930 3544  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC          C:\Windows\System32\msdtc.exe
21:24:42.0972 3544  MSDTC - ok
21:24:43.0025 3544  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:24:43.0069 3544  Msfs - ok
21:24:43.0105 3544  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
21:24:43.0171 3544  mshidkmdf - ok
21:24:43.0236 3544  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:24:43.0257 3544  msisadrv - ok
21:24:43.0304 3544  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
21:24:43.0383 3544  MSiSCSI - ok
21:24:43.0390 3544  msiserver - ok
21:24:43.0446 3544  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
21:24:43.0585 3544  MSKSSRV - ok
21:24:43.0642 3544  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:24:43.0744 3544  MSPCLOCK - ok
21:24:43.0790 3544  [ F456E973590D663B1073E9C463B40932 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
21:24:43.0833 3544  MSPQM - ok
21:24:43.0887 3544  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
21:24:43.0911 3544  MsRPC - ok
21:24:43.0952 3544  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
21:24:43.0973 3544  mssmbios - ok
21:24:44.0010 3544  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
21:24:44.0053 3544  MSTEE - ok
21:24:44.0083 3544  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
21:24:44.0147 3544  MTConfig - ok
21:24:44.0172 3544  [ 159FAD02F64E6381758C990F753BCC80 ] Mup            C:\Windows\system32\Drivers\mup.sys
21:24:44.0195 3544  Mup - ok
21:24:44.0262 3544  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\Windows\system32\qagentRT.dll
21:24:44.0344 3544  napagent - ok
21:24:44.0401 3544  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
21:24:44.0489 3544  NativeWifiP - ok
21:24:44.0572 3544  [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:24:44.0641 3544  NDIS - ok
21:24:44.0669 3544  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
21:24:44.0713 3544  NdisCap - ok
21:24:44.0740 3544  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:24:44.0825 3544  NdisTapi - ok
21:24:44.0857 3544  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
21:24:44.0946 3544  Ndisuio - ok
21:24:44.0992 3544  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
21:24:45.0060 3544  NdisWan - ok
21:24:45.0129 3544  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
21:24:45.0210 3544  NDProxy - ok
21:24:45.0248 3544  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
21:24:45.0303 3544  NetBIOS - ok
21:24:45.0350 3544  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
21:24:45.0436 3544  NetBT - ok
21:24:45.0468 3544  [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon        C:\Windows\system32\lsass.exe
21:24:45.0547 3544  Netlogon - ok
21:24:45.0610 3544  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\Windows\System32\netman.dll
21:24:45.0706 3544  Netman - ok
21:24:45.0745 3544  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\Windows\System32\netprofm.dll
21:24:45.0846 3544  netprofm - ok
21:24:45.0879 3544  [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:24:45.0900 3544  NetTcpPortSharing - ok
21:24:46.0000 3544  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
21:24:46.0021 3544  nfrd960 - ok
21:24:46.0074 3544  [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:24:46.0154 3544  NlaSvc - ok
21:24:46.0191 3544  [ B48DC6ABCD3AEFF8618350CCBDC6B09A ] npf            C:\Windows\system32\drivers\npf.sys
21:24:46.0219 3544  npf - ok
21:24:46.0248 3544  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:24:46.0304 3544  Npfs - ok
21:24:46.0339 3544  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi            C:\Windows\system32\nsisvc.dll
21:24:46.0408 3544  nsi - ok
21:24:46.0430 3544  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:24:46.0481 3544  nsiproxy - ok
21:24:46.0558 3544  [ 33C3093D09017CFE2E219F2472BFF6EB ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:24:46.0682 3544  Ntfs - ok
21:24:46.0728 3544  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\Windows\system32\drivers\Null.sys
21:24:46.0871 3544  Null - ok
21:24:46.0916 3544  [ AF2EEC9580C1D32FB7EAF105D9784061 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:24:46.0939 3544  nvraid - ok
21:24:46.0970 3544  [ 9283C58EBAA2618F93482EB5DABCEC82 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:24:47.0031 3544  nvstor - ok
21:24:47.0075 3544  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
21:24:47.0097 3544  nv_agp - ok
21:24:47.0142 3544  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
21:24:47.0202 3544  ohci1394 - ok
21:24:47.0240 3544  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:24:47.0296 3544  p2pimsvc - ok
21:24:47.0458 3544  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\Windows\system32\p2psvc.dll
21:24:47.0487 3544  p2psvc - ok
21:24:47.0597 3544  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
21:24:47.0621 3544  Parport - ok
21:24:47.0661 3544  [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr        C:\Windows\system32\drivers\partmgr.sys
21:24:47.0716 3544  partmgr - ok
21:24:47.0755 3544  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
21:24:47.0836 3544  Parvdm - ok
21:24:47.0892 3544  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:24:47.0940 3544  PcaSvc - ok
21:24:47.0964 3544  [ 673E55C3498EB970088E812EA820AA8F ] pci            C:\Windows\system32\drivers\pci.sys
21:24:47.0987 3544  pci - ok
21:24:48.0033 3544  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\Windows\system32\drivers\pciide.sys
21:24:48.0053 3544  pciide - ok
21:24:48.0091 3544  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
21:24:48.0118 3544  pcmcia - ok
21:24:48.0127 3544  [ 250F6B43D2B613172035C6747AEEB19F ] pcw            C:\Windows\system32\drivers\pcw.sys
21:24:48.0149 3544  pcw - ok
21:24:48.0192 3544  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:24:48.0249 3544  PEAUTH - ok
21:24:48.0355 3544  [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
21:24:48.0414 3544  PeerDistSvc - ok
21:24:48.0502 3544  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla            C:\Windows\system32\pla.dll
21:24:48.0568 3544  pla - ok
21:24:48.0608 3544  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:24:48.0636 3544  PlugPlay - ok
21:24:48.0672 3544  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
21:24:48.0705 3544  PNRPAutoReg - ok
21:24:48.0760 3544  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
21:24:48.0787 3544  PNRPsvc - ok
21:24:48.0825 3544  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
21:24:48.0905 3544  PolicyAgent - ok
21:24:48.0943 3544  [ F87D30E72E03D579A5199CCB3831D6EA ] Power          C:\Windows\system32\umpo.dll
21:24:48.0987 3544  Power - ok
21:24:49.0020 3544  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
21:24:49.0081 3544  PptpMiniport - ok
21:24:49.0098 3544  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor      C:\Windows\system32\DRIVERS\processr.sys
21:24:49.0122 3544  Processor - ok
21:24:49.0181 3544  [ 43CA4CCC22D52FB58E8988F0198851D0 ] ProfSvc        C:\Windows\system32\profsvc.dll
21:24:49.0227 3544  ProfSvc - ok
21:24:49.0245 3544  [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:24:49.0279 3544  ProtectedStorage - ok
21:24:49.0306 3544  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:24:49.0351 3544  Psched - ok
21:24:49.0391 3544  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
21:24:49.0470 3544  ql2300 - ok
21:24:49.0502 3544  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
21:24:49.0525 3544  ql40xx - ok
21:24:49.0559 3544  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE          C:\Windows\system32\qwave.dll
21:24:49.0590 3544  QWAVE - ok
21:24:49.0609 3544  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:24:49.0648 3544  QWAVEdrv - ok
21:24:49.0683 3544  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:24:49.0745 3544  RasAcd - ok
21:24:49.0794 3544  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
21:24:49.0848 3544  RasAgileVpn - ok
21:24:49.0887 3544  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto        C:\Windows\System32\rasauto.dll
21:24:49.0931 3544  RasAuto - ok
21:24:49.0956 3544  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
21:24:50.0021 3544  Rasl2tp - ok
21:24:50.0068 3544  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\Windows\System32\rasmans.dll
21:24:50.0150 3544  RasMan - ok
21:24:50.0172 3544  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:24:50.0217 3544  RasPppoe - ok
21:24:50.0254 3544  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
21:24:50.0386 3544  RasSstp - ok
21:24:50.0435 3544  [ D528BC58A489409BA40334EBF96A311B ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
21:24:50.0497 3544  rdbss - ok
21:24:50.0514 3544  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
21:24:50.0599 3544  rdpbus - ok
21:24:50.0653 3544  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
21:24:50.0766 3544  RDPCDD - ok
21:24:50.0808 3544  [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
21:24:50.0843 3544  RDPDR - ok
21:24:50.0852 3544  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
21:24:50.0893 3544  RDPENCDD - ok
21:24:51.0050 3544  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
21:24:51.0218 3544  RDPREFMP - ok
21:24:51.0258 3544  [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:24:51.0282 3544  RdpVideoMiniport - ok
21:24:51.0317 3544  [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
21:24:51.0379 3544  RDPWD - ok
21:24:51.0420 3544  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:24:51.0460 3544  rdyboost - ok
21:24:51.0504 3544  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:24:51.0546 3544  RemoteAccess - ok
21:24:51.0601 3544  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:24:51.0650 3544  RemoteRegistry - ok
21:24:51.0676 3544  [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
21:24:51.0753 3544  RFCOMM - ok
21:24:51.0827 3544  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:24:51.0905 3544  RpcEptMapper - ok
21:24:51.0935 3544  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\Windows\system32\locator.exe
21:24:51.0984 3544  RpcLocator - ok
21:24:52.0020 3544  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs          C:\Windows\system32\rpcss.dll
21:24:52.0068 3544  RpcSs - ok
21:24:52.0113 3544  [ D600D0C37E77CBAF0FDC409FAD6FFDCB ] RSPCIESTOR      C:\Windows\system32\DRIVERS\RtsPStor.sys
21:24:52.0182 3544  RSPCIESTOR - ok
21:24:52.0208 3544  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:24:52.0370 3544  rspndr - ok
21:24:52.0455 3544  [ D255C9B800D24380B0698AA03C6C4E80 ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
21:24:52.0523 3544  RtkAudioService - ok
21:24:52.0574 3544  [ 0085ADFE591291B219BADF2D3EBD0BEB ] RTL2832UBDA    C:\Windows\system32\drivers\RTL2832UBDA.sys
21:24:52.0649 3544  RTL2832UBDA - ok
21:24:52.0738 3544  [ 653347DBF9CE61B104F237D7B2B33CCF ] RTL2832UUSB    C:\Windows\system32\Drivers\RTL2832UUSB.sys
21:24:52.0767 3544  RTL2832UUSB - ok
21:24:52.0790 3544  [ 13AB7EC17C94ACFE93F96EC96BD6B05D ] RTL2832U_IRHID  C:\Windows\system32\DRIVERS\RTL2832U_IRHID.sys
21:24:52.0835 3544  RTL2832U_IRHID - ok
21:24:52.0889 3544  [ 9AA3A8EBB12201D24211AB003612BA04 ] RTL8167        C:\Windows\system32\DRIVERS\Rt86win7.sys
21:24:52.0937 3544  RTL8167 - ok
21:24:52.0985 3544  [ 9EA88492B1DAB90DCE43A6F2C0E133BD ] RTSTOR          C:\Windows\system32\drivers\RTSTOR.SYS
21:24:53.0151 3544  RTSTOR - ok
21:24:53.0198 3544  [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap          C:\Windows\system32\drivers\vms3cap.sys
21:24:53.0225 3544  s3cap - ok
21:24:53.0267 3544  [ 81951F51E318AECC2D68559E47485CC4 ] SamSs          C:\Windows\system32\lsass.exe
21:24:53.0289 3544  SamSs - ok
21:24:53.0325 3544  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:24:53.0348 3544  sbp2port - ok
21:24:53.0383 3544  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:24:53.0426 3544  SCardSvr - ok
21:24:53.0468 3544  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:24:53.0521 3544  scfilter - ok
21:24:53.0567 3544  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\Windows\system32\schedsvc.dll
21:24:53.0635 3544  Schedule - ok
21:24:53.0674 3544  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc    C:\Windows\System32\certprop.dll
21:24:53.0717 3544  SCPolicySvc - ok
21:24:53.0747 3544  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:24:53.0783 3544  SDRSVC - ok
21:24:53.0909 3544  [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
21:24:54.0093 3544  SDUpdateService - ok
21:24:54.0186 3544  [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService    C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
21:24:54.0252 3544  SDWSCService - ok
21:24:54.0287 3544  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:24:54.0355 3544  secdrv - ok
21:24:54.0394 3544  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\Windows\system32\seclogon.dll
21:24:54.0439 3544  seclogon - ok
21:24:54.0450 3544  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\Windows\System32\sens.dll
21:24:54.0496 3544  SENS - ok
21:24:54.0520 3544  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:24:54.0559 3544  SensrSvc - ok
21:24:54.0579 3544  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
21:24:54.0603 3544  Serenum - ok
21:24:54.0635 3544  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
21:24:54.0674 3544  Serial - ok
21:24:54.0755 3544  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
21:24:54.0815 3544  sermouse - ok
21:24:54.0870 3544  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\Windows\system32\sessenv.dll
21:24:54.0929 3544  SessionEnv - ok
21:24:54.0989 3544  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
21:24:55.0026 3544  sffdisk - ok
21:24:55.0044 3544  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
21:24:55.0087 3544  sffp_mmc - ok
21:24:55.0111 3544  [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
21:24:55.0151 3544  sffp_sd - ok
21:24:55.0191 3544  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
21:24:55.0244 3544  sfloppy - ok
21:24:55.0407 3544  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:24:55.0482 3544  SharedAccess - ok
21:24:55.0591 3544  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:24:55.0787 3544  ShellHWDetection - ok
21:24:55.0837 3544  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\Windows\system32\drivers\sisagp.sys
21:24:55.0869 3544  sisagp - ok
21:24:55.0891 3544  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:24:55.0915 3544  SiSRaid2 - ok
21:24:55.0940 3544  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
21:24:55.0963 3544  SiSRaid4 - ok
21:24:55.0998 3544  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb            C:\Windows\system32\DRIVERS\smb.sys
21:24:56.0062 3544  Smb - ok
21:24:56.0139 3544  [ 8E6E91BEB9545D412470FA2035373BD6 ] SmbDrv          C:\Windows\system32\DRIVERS\Smb_driver.sys
21:24:56.0195 3544  SmbDrv - ok
21:24:56.0268 3544  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:24:56.0341 3544  SNMPTRAP - ok
21:24:56.0433 3544  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr          C:\Windows\system32\drivers\spldr.sys
21:24:56.0493 3544  spldr - ok
21:24:56.0730 3544  [ 866A43013535DC8587C258E43579C764 ] Spooler        C:\Windows\System32\spoolsv.exe
21:24:56.0846 3544  Spooler - ok
21:24:57.0192 3544  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\Windows\system32\sppsvc.exe
21:24:57.0303 3544  sppsvc - ok
21:24:57.0361 3544  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
21:24:57.0412 3544  sppuinotify - ok
21:24:57.0449 3544  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv            C:\Windows\system32\DRIVERS\srv.sys
21:24:57.0497 3544  srv - ok
21:24:57.0561 3544  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:24:57.0604 3544  srv2 - ok
21:24:57.0628 3544  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:24:57.0664 3544  srvnet - ok
21:24:57.0722 3544  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
21:24:57.0787 3544  SSDPSRV - ok
21:24:57.0811 3544  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
21:24:57.0872 3544  SstpSvc - ok
21:24:57.0901 3544  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
21:24:57.0922 3544  stexstor - ok
21:24:57.0981 3544  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\Windows\System32\wiaservc.dll
21:24:58.0048 3544  StiSvc - ok
21:24:58.0073 3544  [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
21:24:58.0096 3544  storflt - ok
21:24:58.0145 3544  [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
21:24:58.0167 3544  storvsc - ok
21:24:58.0192 3544  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\Windows\system32\drivers\swenum.sys
21:24:58.0213 3544  swenum - ok
21:24:58.0296 3544  [ A28BD92DF340E57B024BA433165D34D7 ] swprv          C:\Windows\System32\swprv.dll
21:24:58.0345 3544  swprv - ok
21:24:58.0357 3544  Synth3dVsc - ok
21:24:58.0429 3544  [ 6DD49E1A5FA0F01824652F1A0A8866FB ] SynTP          C:\Windows\system32\DRIVERS\SynTP.sys
21:24:58.0484 3544  SynTP - ok
21:24:58.0554 3544  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain        C:\Windows\system32\sysmain.dll
21:24:58.0651 3544  SysMain - ok
21:24:58.0694 3544  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:24:58.0734 3544  TabletInputService - ok
21:24:58.0819 3544  [ 613BF4820361543956909043A265C6AC ] TapiSrv        C:\Windows\System32\tapisrv.dll
21:24:58.0864 3544  TapiSrv - ok
21:24:58.0919 3544  [ B799D9FDB26111737F58288D8DC172D9 ] TBS            C:\Windows\System32\tbssvc.dll
21:24:58.0984 3544  TBS - ok
21:24:59.0062 3544  [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
21:24:59.0147 3544  Tcpip - ok
21:24:59.0181 3544  [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:24:59.0250 3544  TCPIP6 - ok
21:24:59.0297 3544  [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:24:59.0352 3544  tcpipreg - ok
21:24:59.0403 3544  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
21:24:59.0440 3544  TDPIPE - ok
21:24:59.0473 3544  [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
21:24:59.0509 3544  TDTCP - ok
21:24:59.0555 3544  [ B459575348C20E8121D6039DA063C704 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
21:24:59.0597 3544  tdx - ok
21:24:59.0613 3544  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\Windows\system32\drivers\termdd.sys
21:24:59.0634 3544  TermDD - ok
21:24:59.0688 3544  [ 382C804C92811BE57829D8E550A900E2 ] TermService    C:\Windows\System32\termsrv.dll
21:24:59.0757 3544  TermService - ok
21:24:59.0796 3544  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\Windows\system32\themeservice.dll
21:24:59.0838 3544  Themes - ok
21:24:59.0872 3544  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER    C:\Windows\system32\mmcss.dll
21:24:59.0917 3544  THREADORDER - ok
21:24:59.0942 3544  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\Windows\System32\trkwks.dll
21:25:00.0000 3544  TrkWks - ok
21:25:00.0085 3544  [ F2AEE22231046CAD8D2F94D2C0F9BEFB ] trufos          C:\Windows\system32\DRIVERS\trufos.sys
21:25:00.0126 3544  trufos - ok
21:25:00.0264 3544  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:25:00.0366 3544  TrustedInstaller - ok
21:25:00.0394 3544  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
21:25:00.0453 3544  tssecsrv - ok
21:25:00.0517 3544  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
21:25:00.0540 3544  TsUsbFlt - ok
21:25:00.0552 3544  tsusbhub - ok
21:25:00.0732 3544  [ FC740E4FF236B72CA59B8F762D30C7F3 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
21:25:00.0842 3544  TuneUp.UtilitiesSvc - ok
21:25:00.0935 3544  [ 94C4CD2D19B8C4137A46261F229FEC24 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys
21:25:00.0963 3544  TuneUpUtilitiesDrv - ok
21:25:01.0004 3544  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:25:01.0064 3544  tunnel - ok
21:25:01.0114 3544  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
21:25:01.0135 3544  uagp35 - ok
21:25:01.0180 3544  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:25:01.0239 3544  udfs - ok
21:25:01.0299 3544  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
21:25:01.0333 3544  UI0Detect - ok
21:25:01.0384 3544  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
21:25:01.0406 3544  uliagpkx - ok
21:25:01.0449 3544  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
21:25:01.0490 3544  umbus - ok
21:25:01.0522 3544  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
21:25:01.0546 3544  UmPass - ok
21:25:01.0611 3544  [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService    C:\Windows\System32\umrdp.dll
21:25:01.0646 3544  UmRdpService - ok
21:25:01.0737 3544  [ DBE2E6388379D5CC78099650541E9566 ] UNS            C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
21:25:01.0823 3544  UNS - ok
21:25:01.0903 3544  [ 32BE9DFF9A8DFE2EACA30E0A63C523AE ] UPDATESRV      C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe
21:25:01.0967 3544  UPDATESRV - ok
21:25:02.0031 3544  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\Windows\System32\upnphost.dll
21:25:02.0096 3544  upnphost - ok
21:25:02.0148 3544  [ 7E72E7D7E0757D59481D530FD2B0BFAE ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
21:25:02.0172 3544  usbccgp - ok
21:25:02.0199 3544  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
21:25:02.0228 3544  usbcir - ok
21:25:02.0263 3544  [ CFBCE999C057D78979A181C9C60F208E ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
21:25:02.0304 3544  usbehci - ok
21:25:02.0332 3544  [ 9D22AAD9AC6A07C691A1113E5F860868 ] usbhub          C:\Windows\system32\drivers\usbhub.sys
21:25:02.0380 3544  usbhub - ok
21:25:02.0414 3544  [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
21:25:02.0469 3544  usbohci - ok
21:25:02.0512 3544  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
21:25:02.0559 3544  usbprint - ok
21:25:02.0613 3544  [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
21:25:02.0640 3544  usbscan - ok
21:25:02.0657 3544  [ BF63EBFC6979FEFB2BC03DF7989A0C1A ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:25:02.0682 3544  USBSTOR - ok
21:25:02.0706 3544  [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
21:25:02.0749 3544  usbuhci - ok
21:25:02.0783 3544  [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
21:25:02.0842 3544  usbvideo - ok
21:25:02.0908 3544  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms          C:\Windows\System32\uxsms.dll
21:25:02.0962 3544  UxSms - ok
21:25:03.0024 3544  [ 57324E62405EC114C6C1A6F1C9704E8F ] UxTuneUp        C:\Windows\System32\uxtuneup.dll
21:25:03.0054 3544  UxTuneUp - ok
21:25:03.0077 3544  [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc        C:\Windows\system32\lsass.exe
21:25:03.0111 3544  VaultSvc - ok
21:25:03.0158 3544  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:25:03.0253 3544  vdrvroot - ok
21:25:03.0393 3544  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds            C:\Windows\System32\vds.exe
21:25:03.0526 3544  vds - ok
21:25:03.0619 3544  [ 17C408214EA61696CEC9C66E388B14F3 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
21:25:03.0645 3544  vga - ok
21:25:03.0670 3544  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave        C:\Windows\System32\drivers\vga.sys
21:25:03.0715 3544  VgaSave - ok
21:25:03.0725 3544  VGPU - ok
21:25:03.0781 3544  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
21:25:03.0805 3544  vhdmp - ok
21:25:03.0824 3544  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
21:25:03.0847 3544  viaagp - ok
21:25:03.0890 3544  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7          C:\Windows\system32\DRIVERS\viac7.sys
21:25:03.0914 3544  ViaC7 - ok
21:25:03.0959 3544  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\Windows\system32\drivers\viaide.sys
21:25:03.0979 3544  viaide - ok
21:25:04.0027 3544  [ C2F2911156FDC7817C52829C86DA494E ] vmbus          C:\Windows\system32\drivers\vmbus.sys
21:25:04.0054 3544  vmbus - ok
21:25:04.0098 3544  [ D4D77455211E204F370D08F4963063CE ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
21:25:04.0163 3544  VMBusHID - ok
21:25:04.0195 3544  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:25:04.0225 3544  volmgr - ok
21:25:04.0265 3544  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
21:25:04.0291 3544  volmgrx - ok
21:25:04.0320 3544  [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
21:25:04.0348 3544  volsnap - ok
21:25:04.0377 3544  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
21:25:04.0401 3544  vsmraid - ok
21:25:04.0492 3544  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS            C:\Windows\system32\vssvc.exe
21:25:04.0568 3544  VSS - ok
21:25:04.0727 3544  [ 3951CAE99EDAF72193EA0F4C8A857BB0 ] VSSERV          C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
21:25:04.0859 3544  VSSERV - ok
21:25:04.0878 3544  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
21:25:04.0923 3544  vwifibus - ok
21:25:04.0937 3544  [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
21:25:04.0983 3544  vwififlt - ok
21:25:05.0020 3544  [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp        C:\Windows\system32\DRIVERS\vwifimp.sys
21:25:05.0047 3544  vwifimp - ok
21:25:05.0252 3544  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time        C:\Windows\system32\w32time.dll
21:25:05.0427 3544  W32Time - ok
21:25:05.0477 3544  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
21:25:05.0512 3544  WacomPen - ok
21:25:05.0605 3544  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
21:25:05.0647 3544  WANARP - ok
21:25:05.0671 3544  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:25:05.0712 3544  Wanarpv6 - ok
21:25:05.0773 3544  WatAdminSvc - ok
21:25:05.0863 3544  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\Windows\system32\wbengine.exe
21:25:05.0923 3544  wbengine - ok
21:25:05.0973 3544  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:25:06.0049 3544  WbioSrvc - ok
21:25:06.0088 3544  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc        C:\Windows\System32\wcncsvc.dll
21:25:06.0149 3544  wcncsvc - ok
21:25:06.0195 3544  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:25:06.0224 3544  WcsPlugInService - ok
21:25:06.0295 3544  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\Windows\system32\DRIVERS\wd.sys
21:25:06.0332 3544  Wd - ok
21:25:06.0437 3544  [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:25:06.0470 3544  Wdf01000 - ok
21:25:06.0496 3544  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:25:06.0595 3544  WdiServiceHost - ok
21:25:06.0619 3544  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost  C:\Windows\system32\wdi.dll
21:25:06.0647 3544  WdiSystemHost - ok
21:25:06.0697 3544  [ A9D880F97530D5B8FEE278923349929D ] WebClient      C:\Windows\System32\webclnt.dll
21:25:06.0729 3544  WebClient - ok
21:25:06.0787 3544  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:25:06.0834 3544  Wecsvc - ok
21:25:06.0858 3544  [ AC804569BB2364FB6017370258A4091B ] wercplsupport  C:\Windows\System32\wercplsupport.dll
21:25:06.0915 3544  wercplsupport - ok
21:25:06.0936 3544  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:25:06.0982 3544  WerSvc - ok
21:25:07.0002 3544  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
21:25:07.0064 3544  WfpLwf - ok
21:25:07.0112 3544  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:25:07.0132 3544  WIMMount - ok
21:25:07.0240 3544  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend      C:\Program Files\Windows Defender\mpsvc.dll
21:25:07.0300 3544  WinDefend - ok
21:25:07.0320 3544  WinHttpAutoProxySvc - ok
21:25:07.0417 3544  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
21:25:07.0479 3544  Winmgmt - ok
21:25:07.0558 3544  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM          C:\Windows\system32\WsmSvc.dll
21:25:07.0631 3544  WinRM - ok
21:25:07.0702 3544  [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
21:25:07.0729 3544  WinUsb - ok
21:25:07.0806 3544  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc        C:\Windows\System32\wlansvc.dll
21:25:07.0847 3544  Wlansvc - ok
21:25:07.0884 3544  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
21:25:07.0930 3544  WmiAcpi - ok
21:25:07.0983 3544  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:25:08.0038 3544  wmiApSrv - ok
21:25:08.0117 3544  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
21:25:08.0192 3544  WMPNetworkSvc - ok
21:25:08.0226 3544  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:25:08.0250 3544  WPCSvc - ok
21:25:08.0294 3544  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:25:08.0350 3544  WPDBusEnum - ok
21:25:08.0386 3544  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
21:25:08.0456 3544  ws2ifsl - ok
21:25:08.0502 3544  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\Windows\System32\wscsvc.dll
21:25:08.0548 3544  wscsvc - ok
21:25:08.0562 3544  WSearch - ok
21:25:08.0885 3544  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll
21:25:08.0950 3544  wuauserv - ok
21:25:08.0994 3544  [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:25:09.0062 3544  WudfPf - ok
21:25:09.0096 3544  [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
21:25:09.0164 3544  WUDFRd - ok
21:25:09.0224 3544  [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
21:25:09.0393 3544  wudfsvc - ok
21:25:09.0554 3544  [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc        C:\Windows\System32\wwansvc.dll
21:25:09.0599 3544  WwanSvc - ok
21:25:09.0617 3544  ZTEusbmdm6k - ok
21:25:09.0632 3544  ZTEusbnmea - ok
21:25:09.0648 3544  ZTEusbser6k - ok
21:25:09.0691 3544  ================ Scan global ===============================
21:25:09.0772 3544  [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
21:25:09.0813 3544  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
21:25:09.0825 3544  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
21:25:09.0862 3544  [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
21:25:09.0882 3544  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
21:25:09.0887 3544  [Global] - ok
21:25:09.0890 3544  ================ Scan MBR ==================================
21:25:09.0906 3544  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:25:10.0697 3544  \Device\Harddisk0\DR0 - ok
21:25:10.0698 3544  ================ Scan VBR ==================================
21:25:10.0737 3544  [ 54BA4C37D203C2B279E01A9F91269268 ] \Device\Harddisk0\DR0\Partition1
21:25:10.0756 3544  \Device\Harddisk0\DR0\Partition1 - ok
21:25:10.0775 3544  [ EC5907C4C3860910EB67263B34C7422C ] \Device\Harddisk0\DR0\Partition2
21:25:10.0777 3544  \Device\Harddisk0\DR0\Partition2 - ok
21:25:10.0778 3544  ============================================================
21:25:10.0778 3544  Scan finished
21:25:10.0778 3544  ============================================================
21:25:10.0793 3128  Detected object count: 0
21:25:10.0793 3128  Actual detected object count: 0

markusg 04.03.2013 21:27
Sehr gut.
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

duddl 05.03.2013 13:58
Code:
ComboFix 13-03-04.01 - Info 05.03.2013  7:03.1.2 - x86
ausgeführt von:: c:\users\Info\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\337
c:\program files\Common Files\337\libcef\1.963.439\icudt.dll
c:\program files\Common Files\337\libcef\1.963.439\libcef.dll
c:\program files\Common Files\337\libcef\1.963.439\locales\en-US.pak
c:\program files\KeyDownload-Addon\KeYDownload.dll
c:\programdata\1359390656.bdinstall.bin
c:\programdata\1362068248.bdinstall.bin
c:\programdata\1362069055.bdinstall.bin
c:\programdata\1362069438.bdinstall.bin
c:\programdata\1362069898.bdinstall.bin
c:\programdata\1362071103.bdinstall.bin
c:\programdata\1362227762.3824.bin
c:\programdata\1362227762.5144.bin
c:\programdata\1362227762.5612.bin
c:\programdata\1362227762.5916.bin
c:\programdata\1362227762.bdinstall.bin
c:\programdata\1362228095.bdinstall.bin
c:\windows\system32\SET1641.tmp
c:\windows\system32\SET800.tmp
c:\windows\system32\SET8DB.tmp
c:\windows\system32\SET9D6.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-02-05 bis 2013-03-05  ))))))))))))))))))))))))))))))
.
.
2013-03-05 06:11 . 2013-03-05 06:11        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-03-04 17:28 . 2013-03-04 17:28        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware
2013-03-04 17:28 . 2012-12-14 15:49        21104        ----a-w-        c:\windows\system32\drivers\mbam.sys
2013-03-04 17:20 . 2013-03-04 17:20        --------        d-----w-        c:\users\Info\AppData\Roaming\Malwarebytes
2013-03-04 17:19 . 2013-03-04 17:19        --------        d-----w-        c:\programdata\Malwarebytes
2013-03-04 13:00 . 2013-03-04 12:59        94112        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll
2013-03-02 17:53 . 2013-03-02 17:53        --------        d-----w-        c:\users\Info\AppData\Roaming\Petrax Software
2013-03-02 17:53 . 2013-03-02 17:53        --------        d-----w-        c:\program files\Petrax Software
2013-03-02 17:01 . 2013-03-02 17:01        --------        d-----w-        c:\users\Info\AppData\Roaming\iPumper
2013-03-02 14:50 . 2013-03-02 14:50        --------        d-----w-        c:\program files\DLLSuite
2013-02-28 18:00 . 2012-08-13 17:24        75096        ----a-w-        c:\windows\system32\drivers\klflt.sys
2013-02-28 17:38 . 2013-02-28 17:38        72704        ----a-w-        c:\windows\system32\drivers\bdvedisk.sys
2013-02-28 17:07 . 2012-11-12 16:11        66392        ------w-        c:\windows\system32\drivers\bdsandbox.sys
2013-02-28 17:07 . 2012-07-06 13:13        77192        ----a-w-        c:\windows\system32\drivers\BdfNdisf6.sys
2013-02-28 17:07 . 2013-01-11 19:29        482928        ----a-w-        c:\windows\system32\drivers\avckf.sys
2013-02-28 17:07 . 2013-01-11 19:29        625128        ----a-w-        c:\windows\system32\drivers\avc3.sys
2013-02-28 17:07 . 2013-03-02 12:41        --------        d-----w-        c:\users\Info\AppData\Roaming\Bitdefender
2013-02-28 17:07 . 2013-02-28 17:08        --------        d-----w-        c:\programdata\Bitdefender
2013-02-28 17:05 . 2012-08-29 16:24        161312        ----a-w-        c:\windows\system32\drivers\gzflt.sys
2013-02-28 17:05 . 2012-10-31 11:13        343456        ----a-w-        c:\windows\system32\drivers\trufos.sys
2013-02-27 20:21 . 2013-02-27 20:21        --------        d-----w-        c:\programdata\Synaptics
2013-02-27 18:37 . 2010-03-16 09:58        14400        ----a-w-        c:\windows\system32\drivers\ebinfiltr.sys
2013-02-27 17:40 . 2013-02-27 17:40        --------        d-----w-        c:\programdata\UUdb
2013-02-27 17:40 . 2013-02-27 17:40        --------        d-----w-        c:\programdata\1&1 Mail & Media GmbH
2013-02-27 14:58 . 2012-08-10 11:09        469120        ----a-w-        c:\windows\system32\drivers\btfilter.sys
2013-02-26 19:03 . 2013-02-26 19:03        --------        d-----w-        c:\program files\ATI Technologies
2013-02-26 18:47 . 2013-02-26 18:47        9728        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-26 15:32 . 2013-02-26 15:51        --------        dc-h--w-        c:\programdata\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
2013-02-26 15:27 . 2013-02-26 15:33        --------        d-----w-        c:\program files\Uniblue
2013-02-26 15:25 . 2013-02-26 15:51        --------        dc-h--w-        c:\programdata\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
2013-02-26 15:23 . 2013-02-26 15:23        --------        dc-h--w-        c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2013-02-26 15:17 . 2013-02-26 15:47        --------        d-----w-        c:\program files\Driver Checker
2013-02-26 15:09 . 2013-02-26 15:09        --------        d-----w-        c:\programdata\Uniblue
2013-02-26 12:50 . 2013-02-26 12:50        --------        d-----w-        c:\users\Info\AppData\Roaming\Leadertech
2013-02-26 12:50 . 2013-02-26 12:50        53248        ----a-r-        c:\users\Info\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2013-02-26 12:47 . 2013-02-26 12:57        --------        d-----w-        c:\programdata\Logitech
2013-02-26 12:46 . 2013-02-26 12:57        --------        d-----w-        c:\programdata\Logishrd
2013-02-25 18:33 . 2013-02-26 12:57        --------        d-----w-        c:\program files\Common Files\LogiShrd
2013-02-25 18:33 . 2013-02-26 12:54        --------        d-----w-        c:\users\Info\AppData\Roaming\Logitech
2013-02-25 18:33 . 2013-02-25 18:33        --------        d-----w-        c:\users\Info\AppData\Roaming\Logishrd
2013-02-25 17:48 . 2013-03-04 17:29        --------        d-----w-        c:\users\Info\AppData\Roaming\BitTorrent
2013-02-25 17:43 . 2013-02-25 17:47        --------        d-----w-        c:\users\Info\AppData\Roaming\uTorrent
2013-02-25 16:27 . 2011-05-25 19:08        49152        ----a-w-        c:\windows\system32\UMonit.exe
2013-02-25 16:27 . 2011-05-25 16:57        8323072        ----a-w-        c:\windows\system32\GeneIcon.dll
2013-02-25 16:27 . 2009-10-26 14:52        139264        ----a-w-        c:\windows\system32\ustor.dll
2013-02-25 16:27 . 2011-05-18 12:49        54784        ------w-        c:\windows\system32\drivers\GeneStor.sys
2013-02-25 16:27 . 2008-02-04 14:43        172097        ----a-w-        c:\windows\system32\NoMSGuninstall.exe
2013-02-25 15:47 . 2004-04-18 22:40        69715        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\ctor.dll
2013-02-25 15:47 . 2004-04-18 22:39        266240        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iscript.dll
2013-02-25 15:47 . 2004-04-18 22:39        172032        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iuser.dll
2013-02-25 15:47 . 2004-04-18 22:39        5632        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\DotNetInstaller.exe
2013-02-25 15:47 . 2013-02-25 15:47        303236        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\setup.dll
2013-02-25 15:47 . 2013-02-25 15:47        180356        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iGdi.dll
2013-02-25 15:47 . 2004-04-18 22:42        733184        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iKernel.dll
2013-02-25 15:47 . 2013-02-25 15:47        --------        d-----w-        C:\Drivers
2013-02-25 15:24 . 2013-02-25 15:29        --------        d-----w-        c:\program files\Qualcomm Atheros
2013-02-25 15:24 . 2012-11-08 18:59        3078656        ----a-w-        c:\windows\system32\drivers\athr.sys
2013-02-25 15:16 . 2013-03-05 06:10        --------        d-----w-        c:\program files\KeyDownload-Addon
2013-02-25 15:11 . 2013-02-25 15:25        --------        d-----w-        c:\programdata\Qualcomm Atheros
2013-02-24 19:24 . 2008-08-12 12:33        61440        ----a-w-        c:\windows\system32\drivers\RTSTOR.sys
2013-02-24 19:24 . 2008-05-06 16:41        6416928        ----a-w-        c:\windows\system\DriveIcon.dll
2013-02-24 19:23 . 2013-02-24 19:23        --------        d-----w-        C:\Dell
2013-02-24 19:12 . 2013-02-24 19:12        --------        d-----w-        c:\program files\Innovative Solutions
2013-02-24 18:53 . 2013-02-24 18:54        --------        d-----w-        C:\HP_LaserJet_Enterprise_500_color_M551
2013-02-24 18:17 . 2013-02-24 18:17        --------        d-----w-        c:\windows\system32\RTCOM
2013-02-24 13:38 . 2012-11-19 11:10        526392        ----a-w-        c:\windows\system32\drivers\iaStorA.sys
2013-02-24 13:38 . 2012-11-19 11:10        25656        ----a-w-        c:\windows\system32\drivers\iaStorF.sys
2013-02-24 13:29 . 2012-08-03 16:55        9888400        ----a-w-        c:\windows\system32\RtsPStorIcon.dll
2013-02-24 12:28 . 2013-02-24 12:28        --------        d-----w-        c:\windows\system32\drivers\MFDLL
2013-02-24 12:28 . 2008-01-04 12:34        11832        ------w-        c:\windows\system32\drivers\AsInsHelp64.sys
2013-02-24 12:28 . 2008-01-04 12:34        10216        ------w-        c:\windows\system32\drivers\AsInsHelp32.sys
2013-02-24 12:24 . 2013-02-24 12:25        --------        d-----w-        c:\program files\DVDVideoSoft
2013-02-24 12:24 . 2013-02-24 12:25        --------        d-----w-        c:\program files\Common Files\DVDVideoSoft
2013-02-24 12:20 . 2013-02-24 12:25        --------        d-----w-        c:\users\Info\AppData\Roaming\DVDVideoSoft
2013-02-24 10:47 . 2012-12-27 00:26        80488        ----a-w-        c:\windows\system32\RtNicProp32.dll
2013-02-24 10:47 . 2012-12-27 00:26        614624        ----a-w-        c:\windows\system32\drivers\Rt86win7.sys
2013-02-24 10:43 . 2013-02-24 10:43        --------        d-----w-        c:\program files\Easeware
2013-02-24 10:00 . 2012-06-21 16:13        15168        ----a-w-        c:\windows\system32\drivers\IntelMEFWVer.dll
2013-02-24 09:59 . 2013-02-24 09:59        --------        d-----w-        c:\program files\Common Files\postureAgent
2013-02-24 09:59 . 2012-07-02 14:16        55104        ----a-w-        c:\windows\system32\drivers\HECI.sys
2013-02-24 09:59 . 2013-02-24 09:59        --------        d-----w-        C:\Driver_allOS
2013-02-23 17:48 . 2013-03-03 11:56        --------        d-----w-        c:\programdata\DriverGenius
2013-02-23 10:35 . 2013-02-23 10:35        --------        d-----w-        c:\programdata\Innovative Solutions
2013-02-22 20:20 . 2013-02-22 20:21        --------        d-----w-        c:\users\Info\AppData\Roaming\GetRightToGo
2013-02-21 18:07 . 2013-02-21 18:08        --------        d-----w-        c:\users\Info\AppData\Roaming\GoforFiles
2013-02-21 15:28 . 2013-02-21 15:28        --------        d-----w-        c:\users\Info\AppData\Local\Innovative Solutions
2013-02-21 14:56 . 2013-02-21 14:56        --------        d-----w-        c:\programdata\SoftSafe
2013-02-21 14:33 . 2013-02-21 14:33        189        ----a-w-        c:\windows\DeleteOnReboot.bat
2013-02-19 13:41 . 2013-02-19 13:41        --------        d-----r-        C:\Sandbox
2013-02-18 20:05 . 2013-01-08 04:57        6991832        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{56C844B3-F39D-4279-8A41-CBB5DB9AD805}\mpengine.dll
2013-02-18 19:56 . 2009-01-25 11:14        15224        ----a-w-        c:\windows\system32\sdnclean.exe
2013-02-18 16:43 . 2013-02-19 13:37        --------        d-----w-        c:\programdata\Spybot - Search & Destroy
2013-02-16 19:42 . 2013-02-16 19:42        --------        d-----w-        c:\users\Info\AppData\Local\bdch
2013-02-16 19:42 . 2013-02-16 19:42        --------        d-----w-        c:\programdata\bdch
2013-02-16 15:36 . 2013-02-16 15:36        --------        d-----w-        c:\program files\7-Zip
2013-02-15 21:29 . 2013-02-16 15:29        --------        d-----w-        c:\program files\BrowseToSave
2013-02-15 21:29 . 2013-02-16 15:29        --------        d-----w-        c:\program files\EasyLife
2013-02-15 11:43 . 2013-02-15 11:43        --------        d-----w-        C:\toolbarImages
2013-02-14 13:54 . 2013-02-18 19:56        --------        d-----w-        c:\program files\Spybot - Search & Destroy 2
2013-02-12 21:00 . 2013-01-05 05:00        3913064        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-02-12 21:00 . 2013-01-05 05:00        3967848        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2013-02-12 21:00 . 2013-01-04 03:00        2347008        ----a-w-        c:\windows\system32\win32k.sys
2013-02-12 21:00 . 2013-01-03 05:05        1293672        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-02-12 21:00 . 2013-01-03 05:04        187752        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-12 21:00 . 2013-01-04 04:50        169984        ----a-w-        c:\windows\system32\winsrv.dll
2013-02-12 15:54 . 2013-02-13 10:48        --------        d-----w-        c:\program files\Enigma Software Group
2013-02-12 15:53 . 2013-02-12 20:28        --------        d-----w-        c:\windows\D8167CA8236B4334B77DF388F494EE18.TMP
2013-02-12 15:53 . 2013-02-12 15:53        --------        d-----w-        c:\program files\Common Files\Wise Installation Wizard
2013-02-12 15:49 . 2013-02-12 15:49        --------        d-----w-        c:\windows\system32\desktop
2013-02-12 14:13 . 2013-02-12 14:13        --------        d-----w-        c:\programdata\Common Toolkit Suite
2013-02-12 14:12 . 2013-02-12 22:04        --------        d-----w-        c:\programdata\Fighters
2013-02-10 19:04 . 2012-12-17 05:43        33616        ------w-        c:\windows\system32\drivers\gfiark.sys
2013-02-10 17:58 . 2013-02-10 17:58        --------        d-----w-        c:\users\Info\AppData\Roaming\LavasoftStatistics
2013-02-10 16:44 . 2013-02-12 20:50        --------        d-----w-        c:\users\Info\AppData\Local\Downloaded Installations
2013-02-10 16:44 . 2013-02-10 16:44        13560        ----a-w-        c:\windows\system32\drivers\gfibto.sys
2013-02-10 16:36 . 2013-02-10 16:36        --------        d-----w-        c:\users\Info\AppData\Local\adawarebp
2013-02-10 16:36 . 2013-02-10 16:36        --------        d-----w-        c:\program files\Toolbar Cleaner
2013-02-08 18:04 . 2013-02-08 18:04        285080        ----a-w-        c:\program files\Internet Explorer\msdbg2.dll
2013-02-08 18:04 . 2013-02-08 18:04        392080        ----a-w-        c:\program files\Internet Explorer\pdm.dll
2013-02-08 18:04 . 2013-02-08 18:04        70568        ----a-w-        c:\program files\Internet Explorer\pdmproxy100.dll
2013-02-05 20:07 . 2013-02-27 17:40        --------        d-----w-        c:\program files\1und1Softwareaktualisierung
2013-02-05 13:27 . 2013-01-28 13:19        29984        ----a-w-        c:\windows\system32\uxtuneup.dll
2013-02-05 13:13 . 2013-01-28 13:19        32032        ----a-w-        c:\windows\system32\TURegOpt.exe
2013-02-05 13:13 . 2013-01-28 13:19        21792        ----a-w-        c:\windows\system32\authuitu.dll
2013-02-05 13:12 . 2013-02-12 14:29        --------        d-----w-        c:\program files\TuneUp Utilities 2013
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-04 12:59 . 2012-12-01 12:59        782240        ----a-w-        c:\windows\system32\deployJava1.dll
2013-03-04 12:59 . 2012-12-01 12:59        861088        ----a-w-        c:\windows\system32\npDeployJava1.dll
2013-02-27 16:06 . 2012-10-03 16:01        71024        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-27 16:06 . 2012-10-03 16:01        691568        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-02-27 14:36 . 2012-12-18 15:07        277640        ----a-w-        c:\windows\system32\IntelCpHeciSvc.exe
2013-02-27 14:36 . 2012-12-18 15:07        272008        ----a-w-        c:\windows\system32\igfxsrvc.exe
2013-02-27 14:36 . 2012-12-18 15:07        146056        ----a-w-        c:\windows\system32\igfxtray.exe
2013-02-27 14:36 . 2012-12-12 15:41        435712        ----a-w-        c:\windows\system32\igfxrtrk.lrc
2013-02-27 14:36 . 2012-12-12 15:41        435712        ----a-w-        c:\windows\system32\igfxrsve.lrc
2013-02-27 14:36 . 2012-12-12 15:41        435712        ----a-w-        c:\windows\system32\igfxrslv.lrc
2013-02-27 14:36 . 2012-12-12 15:41        435200        ----a-w-        c:\windows\system32\igfxrtha.lrc
2013-02-27 14:36 . 2012-12-12 15:41        437248        ----a-w-        c:\windows\system32\igfxrrus.lrc
2013-02-27 14:36 . 2012-12-12 15:41        437248        ----a-w-        c:\windows\system32\igfxrrom.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrsky.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrptg.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrplk.lrc
2013-02-27 14:36 . 2012-12-12 15:41        435712        ----a-w-        c:\windows\system32\igfxrptb.lrc
2013-02-27 14:36 . 2012-12-12 15:41        435712        ----a-w-        c:\windows\system32\igfxrnor.lrc
2013-02-27 14:36 . 2012-12-12 15:40        286720        ----a-w-        c:\windows\system32\igfxTMM.dll
2013-02-27 14:36 . 2012-12-12 15:38        519680        ----a-w-        c:\windows\system32\iglhsip32.dll
2013-02-27 14:36 . 2012-12-12 15:38        180224        ----a-w-        c:\windows\system32\iglhcp32.dll
2013-02-27 14:36 . 2012-01-10 12:15        59904        ----a-w-        c:\windows\system32\igfxsrvc.dll
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrnld.lrc
2013-02-27 14:36 . 2012-12-12 15:41        430080        ----a-w-        c:\windows\system32\igfxrjpn.lrc
2013-02-27 14:36 . 2012-12-12 15:41        429056        ----a-w-        c:\windows\system32\igfxrkor.lrc
2013-02-27 14:36 . 2012-12-12 15:41        438272        ----a-w-        c:\windows\system32\igfxrell.lrc
2013-02-27 14:36 . 2012-12-12 15:41        437760        ----a-w-        c:\windows\system32\igfxrfra.lrc
2013-02-27 14:36 . 2012-12-12 15:41        437760        ----a-w-        c:\windows\system32\igfxresn.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrita.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrhrv.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436736        ----a-w-        c:\windows\system32\igfxrdeu.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436224        ----a-w-        c:\windows\system32\igfxrhun.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436224        ----a-w-        c:\windows\system32\igfxrfin.lrc
2013-02-27 14:36 . 2012-12-12 15:41        435200        ----a-w-        c:\windows\system32\igfxrdan.lrc
2013-02-27 14:36 . 2012-12-12 15:41        433664        ----a-w-        c:\windows\system32\igfxrheb.lrc
2013-02-27 14:36 . 2012-12-12 15:41        436224        ----a-w-        c:\windows\system32\igfxrcsy.lrc
2013-02-27 14:36 . 2012-12-12 15:41        427008        ----a-w-        c:\windows\system32\igfxrcht.lrc
2013-02-27 14:36 . 2012-12-12 15:39        284160        ----a-w-        c:\windows\system32\igfxrenu.lrc
2013-02-27 14:36 . 2012-01-10 12:14        9023488        ------w-        c:\windows\system32\igfxress.dll
2013-02-27 14:36 . 2012-12-18 15:07        199304        ----a-w-        c:\windows\system32\igfxext.exe
2013-02-27 14:36 . 2012-12-18 15:07        190088        ----a-w-        c:\windows\system32\igfxpers.exe
2013-02-27 14:36 . 2012-12-12 15:41        433664        ----a-w-        c:\windows\system32\igfxrara.lrc
2013-02-27 14:36 . 2012-12-12 15:41        426496        ----a-w-        c:\windows\system32\igfxrchs.lrc
2013-02-27 14:36 . 2012-12-12 15:40        25088        ----a-w-        c:\windows\system32\igfxexps.dll
2013-02-27 14:36 . 2012-12-12 15:40        120320        ----a-w-        c:\windows\system32\igfxcpl.cpl
2013-02-27 14:36 . 2012-12-12 15:40        130048        ----a-w-        c:\windows\system32\igfxdo.dll
2013-02-27 14:36 . 2012-12-12 15:40        9728        ----a-w-        c:\windows\system32\IGFXDEVLib.dll
2013-02-27 14:36 . 2012-12-12 15:40        330752        ------w-        c:\windows\system32\igfxdev.dll
2013-02-27 14:36 . 2012-12-12 15:38        640512        ----a-w-        c:\windows\system32\igfxcmrt32.dll
2013-02-27 14:36 . 2012-12-12 15:38        3121152        ----a-w-        c:\windows\system32\igfxcmjit32.dll
2013-02-27 14:36 . 2012-01-10 13:18        11049472        ----a-w-        c:\windows\system32\igdumd32.dll
2013-02-27 14:36 . 2012-01-10 12:15        313344        ----a-w-        c:\windows\system32\igfxpph.dll
2013-02-27 14:36 . 2012-12-12 15:41        3759616        ----a-w-        c:\windows\system32\drivers\igdkmd32.sys
2013-02-27 14:36 . 2012-12-12 15:41        64512        ----a-w-        c:\windows\system32\igdde32.dll
2013-02-27 14:36 . 2012-01-10 12:55        11174912        ----a-w-        c:\windows\system32\igd10umd32.dll
2013-02-27 14:36 . 2012-12-12 15:39        10812416        ----a-w-        c:\windows\system32\ig4icd32.dll
2013-02-27 14:36 . 2012-12-18 15:07        181384        ----a-w-        c:\windows\system32\hkcmd.exe
2013-02-27 14:36 . 2012-12-18 15:07        6232200        ----a-w-        c:\windows\system32\GfxUI.exe
2013-02-27 14:36 . 2012-01-10 12:14        96256        ----a-w-        c:\windows\system32\hccutils.dll
2013-02-27 14:36 . 2012-12-12 15:40        175616        ----a-w-        c:\windows\system32\gfxSrvc.dll
2013-02-27 14:36 . 2012-12-13 15:23        289792        ----a-w-        c:\windows\system32\drivers\IntcDAud.sys
2013-02-27 14:36 . 2012-12-13 15:23        14848        ----a-w-        c:\windows\system32\IntcDAuC.dll
2012-12-27 00:26 . 2012-11-17 15:39        100896        ----a-w-        c:\windows\system32\RTNUninst32.dll
2012-12-16 14:13 . 2012-12-29 16:32        295424        ----a-w-        c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-29 16:32        34304        ----a-w-        c:\windows\system32\atmlib.dll
2012-12-14 15:42 . 2012-10-10 15:24        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2012-12-14 15:42 . 2012-10-01 16:04        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2012-12-14 15:42 . 2012-10-01 16:04        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-12-14 01:02 . 2012-12-14 01:02        102400        ----a-w-        c:\windows\system32\igfxCoIn_v2932.dll
2012-12-14 01:02 . 2012-12-14 01:02        459264        ----a-w-        c:\windows\system32\igfx11cmrt32.dll
2012-12-10 11:01 . 2013-01-06 15:07        18360        ----a-w-        c:\windows\system32\roboot.exe
2012-12-05 17:06 . 2012-10-01 16:08        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2012-12-05 17:00 . 2012-10-08 12:05        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2012-12-05 16:57 . 2012-10-10 15:15        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-02-16 00:34 . 2013-02-08 17:54        263064        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-01-30 14:49        281760        ------w-        c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-12-17 18:50        556648        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-12-17 18:50        556648        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-12-17 18:50        556648        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-12-17 18:50        556648        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2013-02-12 11325304]
"DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2013-02-12 11325304]
"Uniblue RegistryBooster 2009"="c:\program files\uniblue\registrybooster\StartRegistryBooster.exe" [2008-08-26 99624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"="c:\program files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI.exe" [2012-12-18 6106336]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-27 146056]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-27 181384]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"Bdagent"="c:\program files\Bitdefender\Bitdefender 2013\bdagent.exe" [2013-03-01 1614856]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"MailCheck IE Broker"="c:\program files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe" [2013-02-04 1513536]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *autocheck turegopt
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\01103601.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\40517705.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spybot-S&D Cleaning]
2012-11-13 13:07        3713032        ----a-w-        c:\program files\Spybot - Search & Destroy 2\SDCleaner.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"Google Update"="c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"Uniblue RegistryBooster 2009"=c:\program files\uniblue\registrybooster\StartRegistryBooster.exe
"DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" -agent
"DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" -RESTART
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"ArcSoft Connection Service"=c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"SDTray"="c:\program files\Spybot - Search & Destroy 2\SDTray.exe"
"UMonit"=c:\windows\system32\UMonit.exe
"IAStorIcon"=c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
.
R0 40517705;40517705;c:\windows\system32\drivers\04373023.sys [x]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [x]
R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]
R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 GeneStor;Genesys Logic Storage Driver;c:\windows\system32\DRIVERS\GeneStor.sys [x]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\C541.tmp [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [x]
R3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [x]
R3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys [x]
R3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSrv.exe [x]
R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]
R4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R4 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService.exe [x]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [x]
S2 HPWMISVC;HPWMISVC;c:\program files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 IconMan_R;IconMan_R;c:\program files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe [x]
S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys [x]
S3 ebinfiltr;SR Research Mouse Filter;c:\windows\system32\DRIVERS\ebinfiltr.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 68633480
*NewlyCreated* - MBAMPROTECTOR
*Deregistered* - 68633480
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation        REG_MULTI_SZ          SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - LocalService
FontCache
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-03-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-03 16:06]
.
2013-03-04 c:\windows\Tasks\DriverEasy Scheduled Scan.job
- c:\program files\Easeware\DriverEasy\DriverEasy.exe [2013-02-25 15:00]
.
2013-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-09 19:46]
.
2013-03-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-09 19:46]
.
2013-03-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000Core.job
- c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-02 18:10]
.
2013-03-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3437191235-2556486254-1160177188-1000UA.job
- c:\users\Info\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-02 18:10]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local;<local>
uSearchAssistant = hxxp://www.google.com
IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.2.1
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll
FF - ProfilePath - c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.easylifeapp.com/?pid=724&abc=ff1&r=2013/02/15&hid=4095452143&lg=EN&cc=DE&l=1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - google.com
FF - ExtSQL: 2013-01-10 16:52; toolbar@web.de; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\toolbar@web.de.xpi
FF - ExtSQL: 2013-02-05 14:34; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: 2013-02-06 14:27; {99B98C2C-7274-45a3-A640-D9DF1A1C8460}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi
FF - ExtSQL: 2013-02-10 17:36; {87934c42-161d-45bc-8cef-ef18abe2a30c}; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
FF - ExtSQL: 2013-02-10 17:36; jid1-yZwVFzbsyfMrqQ@jetpack; c:\users\Info\AppData\Roaming\Mozilla\Firefox\Profiles\pqp2dpcc.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
FF - user.js: nglayout.initialpaint.delay - 600
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - (no file)
WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file)
MSConfigStartUp-avgnt - c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\C541.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML.KJOE5CON4YSEURCOUTJD6SBO2M"
.
[HKEY_USERS\S-1-5-21-3437191235-2556486254-1160177188-1000\Software\Microsoft\Internet Explorer\Approved Extensions]
@DACL=(02 0000)
"{C424171E-592A-415A-9EB1-DFD6D95D3530}"=hex:51,66,7a,6c,4c,1d,3b,1b,0e,0a,32,
  de,1a,0b,3c,0d,80,b9,98,96,db,1b,75,2a
"{17166733-40EA-4432-A85C-AE672FF0E236}"=hex:51,66,7a,6c,4c,1d,3b,1b,23,7a,00,
  0d,da,12,54,08,b6,54,e9,27,2d,b6,a2,2c
"{BF42D4A8-016E-4FCD-B1EB-837659FD77C6}"=hex:51,66,7a,6c,4c,1d,3b,1b,b8,c9,54,
  a5,5e,53,ab,03,af,e3,c4,36,5b,bb,37,dc
"{4D2D3B0F-69BE-477A-90F5-FDDB05357975}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,26,3b,
  57,8e,3b,1c,0b,8e,fd,ba,9b,07,73,39,6f
"{5018CFD2-804D-4C99-9F81-25EAEA2769DE}"=hex:51,66,7a,6c,4c,1d,3b,1b,c2,d2,0e,
  4a,7d,d2,ff,00,81,89,62,aa,e8,61,29,c4
"{E87806B5-E908-45FD-AF5E-957D83E58E68}"=hex:51,66,7a,6c,4c,1d,3b,1b,a5,1b,6e,
  f2,38,bb,9b,09,b1,56,d2,3d,81,a3,ce,72
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-03-05  07:13:54
ComboFix-quarantined-files.txt  2013-03-05 06:13
.
Vor Suchlauf: 20 Verzeichnis(se), 555.930.079.232 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 555.789.787.136 Bytes frei
.
- - End Of File - - 71FF44815639D8957D341A3735BC349D


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:19 Uhr.
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131