Hallo,
danke für die schnelle Antwort!
Hier die Logfiles: Code:
Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org
Datenbank Version: 6758
Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514
03.06.2011 09:36:40
mbam-log-2011-06-03 (09-36-40).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|G:\|)
Durchsuchte Objekte: 274023
Laufzeit: 9 Minute(n), 26 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden) OTL Logfile: Code:
OTL logfile created on: 03.06.2011 09:42:08 - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Maklsan\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
5,98 Gb Total Physical Memory | 4,33 Gb Available Physical Memory | 72,50% Memory free
11,95 Gb Paging File | 9,99 Gb Available in Paging File | 83,54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 29,72 Gb Free Space | 53,26% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 896,31 Gb Free Space | 96,22% Space Free | Partition Type: NTFS
Drive E: | 7,39 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: MAKLSAN-PC | User Name: Maklsan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Maklsan\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
========== Modules (SafeList) ==========
MOD - C:\Users\Maklsan\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV:64bit: - (Intel® PROSet Monitoring Service) -- C:\Windows\SysNative\IPROSetMonitor.exe (Intel Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (MEIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (e1cexpress) Intel(R) -- C:\Windows\SysNative\drivers\e1c62x64.sys (Intel Corporation)
DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netr28x) -- C:\Windows\SysNative\drivers\netr28x.sys (Ralink Technology, Corp.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (speedfan) -- C:\Windows\SysWOW64\speedfan.sys (Almico Software)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.31 16:15:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2011.05.31 17:38:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maklsan\AppData\Roaming\mozilla\Extensions
[2011.05.31 16:15:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
File not found (No name found) --
[2011.04.14 18:40:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010.01.01 10:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.01.01 10:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 10:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 10:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.04.21 01:28:31 | 000,475,998 | R--- | M] () - E:\autorun.ico -- [ UDF ]
O32 - AutoRun File - [2010.02.12 04:58:58 | 000,000,047 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{1d3eaff3-8b8d-11e0-aa0d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{1d3eaff3-8b8d-11e0-aa0d-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Setup.exe -- [2011.04.19 09:45:14 | 000,738,688 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011.06.03 09:40:57 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\Maklsan\Desktop\OTL.exe
[2011.06.03 09:26:13 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Malwarebytes
[2011.06.03 09:26:08 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.06.03 09:26:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.06.03 09:26:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.06.03 09:26:05 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.06.03 09:26:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.06.03 09:19:46 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011.06.03 09:19:46 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011.06.03 09:19:46 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011.06.03 09:19:46 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011.06.01 17:19:44 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2011.06.01 17:19:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2011.06.01 17:19:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan
[2011.06.01 16:49:49 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Unigraphics Solutions
[2011.06.01 16:49:30 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Local\Femap
[2011.06.01 16:49:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solid Edge ST2
[2011.06.01 16:48:16 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2011.06.01 16:48:16 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2011.06.01 16:48:16 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2011.06.01 16:48:16 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2011.06.01 16:48:16 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2011.06.01 16:48:16 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2011.06.01 16:48:15 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2011.06.01 16:48:15 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2011.06.01 16:48:15 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2011.06.01 16:48:15 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2011.06.01 16:48:15 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2011.06.01 16:48:15 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2011.06.01 16:48:15 | 000,091,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2011.06.01 16:48:15 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2011.06.01 16:48:15 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2011.06.01 16:48:15 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2011.06.01 16:48:15 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2011.06.01 16:48:14 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2011.06.01 16:48:14 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2011.06.01 16:48:14 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2011.06.01 16:48:14 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2011.06.01 16:48:14 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2011.06.01 16:48:14 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2011.06.01 16:48:11 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2011.06.01 16:48:11 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2011.06.01 16:48:11 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2011.06.01 16:48:11 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2011.06.01 16:48:11 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2011.06.01 16:48:11 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2011.06.01 16:48:11 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2011.06.01 16:48:11 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2011.06.01 16:48:11 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2011.06.01 16:48:11 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2011.06.01 16:48:10 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2011.06.01 16:48:10 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2011.06.01 16:48:10 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2011.06.01 16:48:10 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2011.06.01 16:48:10 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2011.06.01 16:48:10 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2011.06.01 16:48:10 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2011.06.01 16:48:10 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2011.06.01 16:46:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005
[2011.06.01 16:45:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2011.06.01 16:45:08 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.06.01 16:45:05 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SQL Server
[2011.06.01 16:45:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
[2011.05.31 23:59:08 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.05.31 18:06:32 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\Documents\Games for Windows - LIVE Demos
[2011.05.31 18:01:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
[2011.05.31 18:01:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2011.05.31 18:01:46 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\Documents\My Games
[2011.05.31 18:01:31 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2011.05.31 18:01:31 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2011.05.31 18:01:21 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2011.05.31 18:01:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011.05.31 18:01:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2011.05.31 18:00:27 | 019,087,360 | ---- | C] (Intel Corporation / Blue Ripple Sound Limited) -- C:\Windows\SysWow64\mkl_blueripple.dll
[2011.05.31 18:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
[2011.05.31 18:00:26 | 001,417,216 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll
[2011.05.31 18:00:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS
[2011.05.31 18:00:25 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2011.05.31 18:00:25 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2011.05.31 18:00:25 | 000,122,904 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2011.05.31 18:00:25 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2011.05.31 18:00:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2011.05.31 18:00:10 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2011.05.31 18:00:10 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2011.05.31 18:00:10 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2011.05.31 18:00:10 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
[2011.05.31 18:00:10 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2011.05.31 18:00:10 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2011.05.31 18:00:10 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
[2011.05.31 18:00:10 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2011.05.31 18:00:10 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
[2011.05.31 17:39:21 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Macromedia
[2011.05.31 17:39:21 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Adobe
[2011.05.31 17:38:32 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Mozilla
[2011.05.31 17:38:32 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Local\Mozilla
[2011.05.31 17:36:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2011.05.31 17:35:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2011.05.31 17:35:34 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\DAEMON Tools Lite
[2011.05.31 17:35:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2011.05.31 16:51:22 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.05.31 16:19:34 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Avira
[2011.05.31 16:18:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2011.05.31 16:18:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2011.05.31 16:18:08 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\WinRAR
[2011.05.31 16:18:08 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.05.31 16:18:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.05.31 16:18:06 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR
[2011.05.31 16:17:05 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2011.05.31 16:17:05 | 000,083,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2011.05.31 16:17:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.05.31 16:17:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2011.05.31 16:15:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2011.05.31 16:15:41 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011.05.31 16:15:41 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2011.05.31 16:15:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011.05.31 16:15:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.05.31 16:15:16 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Local\Adobe
[2011.05.31 16:15:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2011.05.31 16:13:23 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2011.05.31 16:13:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2011.05.31 16:13:00 | 002,871,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.05.31 16:13:00 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2011.05.31 16:13:00 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2011.05.31 16:13:00 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2011.05.31 16:13:00 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011.05.31 16:13:00 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2011.05.31 16:13:00 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011.05.31 16:13:00 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.05.31 16:13:00 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.05.31 16:12:59 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2011.05.31 16:12:59 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2011.05.31 16:12:59 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2011.05.31 16:12:56 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2011.05.31 16:12:46 | 020,700,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2011.05.31 16:12:46 | 018,578,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2011.05.31 16:12:46 | 015,227,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2011.05.31 16:12:46 | 013,007,464 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2011.05.31 16:12:46 | 012,934,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2011.05.31 16:12:46 | 010,071,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2011.05.31 16:12:46 | 008,411,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2011.05.31 16:12:46 | 006,974,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2011.05.31 16:12:46 | 006,299,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2011.05.31 16:12:46 | 005,183,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2011.05.31 16:12:46 | 002,893,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2011.05.31 16:12:46 | 002,765,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2011.05.31 16:12:46 | 002,273,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2011.05.31 16:12:46 | 002,204,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2011.05.31 16:12:46 | 002,074,216 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2011.05.31 16:12:46 | 002,034,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2011.05.31 16:12:46 | 001,619,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6420140.dll
[2011.05.31 16:12:46 | 001,404,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642060.dll
[2011.05.31 16:12:46 | 001,359,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco642040.dll
[2011.05.31 16:12:46 | 000,174,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2011.05.31 16:12:46 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011.05.31 16:12:46 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011.05.31 16:12:46 | 000,029,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2011.05.31 16:12:46 | 000,011,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvBridge.kmd
[2011.05.31 16:12:10 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation
[2011.05.31 16:11:55 | 000,919,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.05.31 16:11:55 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.05.31 16:11:55 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.05.31 16:11:55 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.05.31 16:11:55 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.05.31 16:11:54 | 005,562,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.05.31 16:11:54 | 003,967,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.05.31 16:11:54 | 003,912,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.05.31 16:11:54 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll
[2011.05.31 16:11:54 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll
[2011.05.31 16:11:54 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2011.05.31 16:11:54 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2011.05.31 16:11:53 | 001,465,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.05.31 16:11:53 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.05.31 16:11:53 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2011.05.31 16:11:52 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.05.31 16:11:52 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.05.31 16:11:52 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2011.05.31 16:11:52 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2011.05.31 16:11:52 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.05.31 16:11:52 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.05.31 16:11:50 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.05.31 16:11:50 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.05.31 16:11:49 | 000,642,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2011.05.31 16:11:49 | 000,605,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2011.05.31 16:11:49 | 000,566,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2011.05.31 16:11:49 | 000,518,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2011.05.31 16:11:49 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2011.05.31 16:11:49 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe
[2011.05.31 16:11:49 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2011.05.31 16:11:49 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.05.31 16:11:49 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll
[2011.05.31 16:11:49 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll
[2011.05.31 16:11:49 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll
[2011.05.31 16:11:47 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2011.05.31 16:11:47 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2011.05.31 16:11:47 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2011.05.31 16:07:45 | 000,133,800 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\IPROSetMonitor.exe
[2011.05.31 16:07:41 | 000,000,000 | ---D | C] -- C:\Programme\Intel
[2011.05.31 16:07:40 | 000,314,568 | R--- | C] (Intel Corporation) -- C:\Windows\SysNative\PROUnstl.exe
[2011.05.31 16:07:06 | 000,036,472 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\NicCo36.dll
[2011.05.31 16:07:05 | 000,313,520 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\e1c62x64.sys
[2011.05.31 16:07:05 | 000,068,264 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\e1cmsg.dll
[2011.05.31 16:07:04 | 000,091,840 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\NicInstC.dll
[2011.05.31 16:06:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
[2011.05.31 16:06:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011.05.31 16:06:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
[2011.05.31 16:06:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Renesas Electronics
[2011.05.31 16:04:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2011.05.31 16:04:11 | 000,000,000 | ---D | C] -- C:\Programme\Realtek
[2011.05.31 16:04:03 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2011.05.31 16:04:03 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2011.05.31 16:04:03 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2011.05.31 16:04:03 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2011.05.31 16:04:03 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2011.05.31 16:04:03 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2011.05.31 16:04:03 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2011.05.31 16:04:03 | 000,120,208 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
[2011.05.31 16:04:03 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2011.05.31 16:04:03 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2011.05.31 16:04:03 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2011.05.31 16:04:02 | 002,625,640 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2011.05.31 16:04:02 | 002,048,104 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2011.05.31 16:04:02 | 001,215,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2011.05.31 16:04:02 | 000,601,704 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2011.05.31 16:04:02 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2011.05.31 16:04:01 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2011.05.31 16:04:01 | 000,477,800 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2011.05.31 16:04:01 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2011.05.31 16:04:01 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2011.05.31 16:04:01 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2011.05.31 16:04:01 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2011.05.31 16:04:01 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2011.05.31 16:04:01 | 000,079,976 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2011.05.31 16:04:01 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2011.05.31 16:04:00 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2011.05.31 16:04:00 | 001,756,160 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2011.05.31 16:04:00 | 000,334,848 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2011.05.31 16:04:00 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2011.05.31 16:04:00 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2011.05.31 16:03:58 | 001,325,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2011.05.31 16:03:58 | 000,489,696 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2011.05.31 16:03:58 | 000,474,336 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2011.05.31 16:03:58 | 000,338,336 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2011.05.31 16:03:57 | 001,178,336 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2011.05.31 16:03:57 | 001,110,240 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2011.05.31 16:03:57 | 000,503,520 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2011.05.31 16:03:57 | 000,315,616 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2011.05.31 16:03:57 | 000,268,512 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2011.05.31 16:03:57 | 000,265,440 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2011.05.31 16:03:57 | 000,124,640 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2011.05.31 16:03:57 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2011.05.31 16:03:57 | 000,123,616 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2011.05.31 16:03:53 | 001,251,944 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011.05.31 16:03:53 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2011.05.31 16:03:53 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2011.05.31 16:03:53 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2011.05.31 16:03:53 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.05.31 16:03:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2011.05.31 16:03:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011.05.31 16:02:57 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2011.05.31 16:02:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2011.05.31 16:02:55 | 000,000,000 | ---D | C] -- C:\Intel
[2011.05.31 16:02:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2011.05.31 16:01:53 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.05.31 16:01:49 | 000,000,000 | ---D | C] -- C:\TempEI4
[2011.05.31 16:00:08 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.05.31 16:00:08 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Searches
[2011.05.31 16:00:08 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.05.31 16:00:03 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Contacts
[2011.05.31 16:00:03 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Identities
[2011.05.31 16:00:02 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Local\VirtualStore
[2011.05.31 16:00:00 | 000,000,000 | --SD | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Videos
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Saved Games
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Pictures
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Music
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Links
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Favorites
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Downloads
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Documents
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\Desktop
[2011.05.31 16:00:00 | 000,000,000 | R--D | C] -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Vorlagen
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\AppData\Local\Verlauf
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\AppData\Local\Temporary Internet Files
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Startmenü
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\SendTo
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Recent
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Netzwerkumgebung
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Lokale Einstellungen
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Documents\Eigene Videos
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Documents\Eigene Musik
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Eigene Dateien
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Documents\Eigene Bilder
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Druckumgebung
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Cookies
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\AppData\Local\Anwendungsdaten
[2011.05.31 16:00:00 | 000,000,000 | -HSD | C] -- C:\Users\Maklsan\Anwendungsdaten
[2011.05.31 16:00:00 | 000,000,000 | -H-D | C] -- C:\Users\Maklsan\AppData
[2011.05.31 16:00:00 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Local\Temp
[2011.05.31 16:00:00 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Local\Microsoft
[2011.05.31 16:00:00 | 000,000,000 | ---D | C] -- C:\Users\Maklsan\AppData\Roaming\Media Center Programs
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.05.31 15:59:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.05.31 15:59:01 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.05.31 15:51:54 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.05.31 15:51:44 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.06.03 09:40:58 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Maklsan\Desktop\OTL.exe
[2011.06.03 09:27:48 | 000,021,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.03 09:27:48 | 000,021,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.03 09:26:08 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.06.03 09:25:03 | 000,782,182 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.06.03 09:25:03 | 000,691,222 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.06.03 09:25:03 | 000,174,264 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.06.03 09:25:03 | 000,147,180 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.06.03 09:25:03 | 000,005,388 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.06.03 09:20:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.03 09:20:37 | 519,127,039 | -HS- | M] () -- C:\hiberfil.sys
[2011.06.02 11:15:18 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011.06.01 17:30:26 | 000,291,664 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.06.01 17:19:44 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
[2011.06.01 16:46:05 | 000,004,746 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.06.01 00:00:25 | 419,503,595 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011.05.31 18:00:25 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2011.05.31 18:00:25 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2011.05.31 18:00:25 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2011.05.31 18:00:25 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2011.05.31 17:36:00 | 000,513,080 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2011.05.31 16:15:41 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011.05.31 15:53:14 | 000,177,271 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.05.31 15:53:14 | 000,177,271 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.05.29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.06.03 09:26:08 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.06.02 11:15:18 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011.06.01 17:19:44 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo
[2011.06.01 16:46:05 | 000,004,746 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.06.01 00:00:25 | 419,503,595 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2011.05.31 18:01:18 | 000,001,338 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2011.05.31 17:36:00 | 000,513,080 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2011.05.31 16:15:54 | 000,001,154 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011.05.31 16:15:20 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011.05.31 16:12:46 | 000,007,771 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2011.05.31 16:07:40 | 000,001,904 | ---- | C] () -- C:\Windows\SysNative\SetupBD.din
[2011.05.31 16:07:05 | 000,003,114 | ---- | C] () -- C:\Windows\SysNative\e1c62x64.din
[2011.05.31 16:06:44 | 000,008,192 | R--- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2011.05.31 16:06:44 | 000,008,192 | R--- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll
[2011.05.31 16:00:10 | 000,001,409 | ---- | C] () -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011.05.31 16:00:09 | 000,001,443 | ---- | C] () -- C:\Users\Maklsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.05.31 15:53:11 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.05.31 15:53:09 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.05.31 15:51:44 | 519,127,039 | -HS- | C] () -- C:\hiberfil.sys
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
< End of report > --- --- ---
OTL Logfile: Code:
OTL Extras logfile created on: 03.06.2011 09:42:08 - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Maklsan\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
5,98 Gb Total Physical Memory | 4,33 Gb Available Physical Memory | 72,50% Memory free
11,95 Gb Paging File | 9,99 Gb Available in Paging File | 83,54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 29,72 Gb Free Space | 53,26% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 896,31 Gb Free Space | 96,22% Space Free | Partition Type: NTFS
Drive E: | 7,39 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: MAKLSAN-PC | User Name: Maklsan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{35A5B689-907E-4052-9855-A7A083B233E9}" = Solid Edge ST2
"{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}" = Microsoft SQL Server Native Client
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 270.61
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 270.61
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 270.61
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 270.61
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.1.34
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.22.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B636C9B9-A3F2-4DCE-ADCC-72E095018385}" = Microsoft SQL Server VSS Writer
"{BCCC97EE-E162-448C-8847-59718FF29B04}" = Intel(R) Network Connections 15.6.25.0
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"PROSetDX" = Intel(R) Network Connections 15.6.25.0
"WinRAR archiver" = WinRAR 4.00 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
"{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"{434D0FA0-AB8C-497F-B30A-7A1000018201}" = DiRT 3
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.4
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"DAEMON Tools Lite" = DAEMON Tools Lite
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.0.1200
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox 4.0.1 (x86 de)" = Mozilla Firefox 4.0.1 (x86 de)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"SpeedFan" = SpeedFan (remove only)
"VLC media player" = VLC media player 1.1.9
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 02.06.2011 12:48:23 | Computer Name = Maklsan-PC | Source = .NET Runtime | ID = 1023
Description =
Error - 02.06.2011 12:48:23 | Computer Name = Maklsan-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: mscorsvw.exe, Version: 4.0.30319.1,
Zeitstempel: 0x4ba21f5d Name des fehlerhaften Moduls: clr.dll, Version: 4.0.30319.225,
Zeitstempel: 0x4d5367b6 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000001d054e
ID
des fehlerhaften Prozesses: 0xe54 Startzeit der fehlerhaften Anwendung: 0x01cc2144db0aeb86
Pfad
der fehlerhaften Anwendung: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
Pfad
des fehlerhaften Moduls: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Berichtskennung:
209c66af-8d38-11e0-a4bf-e069952e8724
Error - 02.06.2011 12:48:25 | Computer Name = Maklsan-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =
Error - 02.06.2011 12:48:26 | Computer Name = Maklsan-PC | Source = .NET Runtime | ID = 1023
Description =
Error - 02.06.2011 12:48:26 | Computer Name = Maklsan-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: mscorsvw.exe, Version: 4.0.30319.1,
Zeitstempel: 0x4ba21f5d Name des fehlerhaften Moduls: clr.dll, Version: 4.0.30319.225,
Zeitstempel: 0x4d5367b6 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000008ed91
ID
des fehlerhaften Prozesses: 0xdf4 Startzeit der fehlerhaften Anwendung: 0x01cc2144e4502778
Pfad
der fehlerhaften Anwendung: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
Pfad
des fehlerhaften Moduls: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Berichtskennung:
221942db-8d38-11e0-a4bf-e069952e8724
Error - 02.06.2011 12:48:26 | Computer Name = Maklsan-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =
Error - 03.06.2011 03:22:34 | Computer Name = Maklsan-PC | Source = WinMgmt | ID = 10
Description =
Error - 03.06.2011 03:25:00 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error - 03.06.2011 03:25:00 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error - 03.06.2011 03:25:00 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren
für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
[ System Events ]
Error - 31.05.2011 18:00:52 | Computer Name = Maklsan-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?31.?05.?2011 um 23:58:39 unerwartet heruntergefahren.
Error - 01.06.2011 09:37:46 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2507618)
Error - 01.06.2011 09:37:46 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer
8 für Windows 7 für x64-Systeme (KB2497640)
Error - 01.06.2011 09:37:46 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Update für Windows 7 für x64-Systeme (KB2541014)
Error - 01.06.2011 09:37:46 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2509553)
Error - 01.06.2011 09:37:46 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2503658)
Error - 01.06.2011 09:37:46 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Update für Windows 7 für x64-Systeme (KB2506014)
Error - 01.06.2011 09:39:42 | Computer Name = Maklsan-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler
beendet: %%16405
Error - 01.06.2011 11:27:10 | Computer Name = Maklsan-PC | Source = Service Control Manager | ID = 7043
Description = Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements
nicht richtig heruntergefahren werden.
Error - 03.06.2011 03:19:18 | Computer Name = Maklsan-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Windows Internet Explorer 9 für Windows 7 für
x64-basierte Systeme
< End of report > --- --- --- Code:
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
º º
hjtscanlist v2.0
º º
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Microsoft Windows [Version 6.1.7601]
C:
03.06.2011 09:26 C:\ProgramData --------- 4096
03.06.2011 09:26 C:\Program Files (x86) --------- 8192
03.06.2011 09:21 C:\System Volume Information --------- 8192
C:\pagefile.sys ---------
C:\hiberfil.sys ---------
03.06.2011 09:19 C:\Windows --------- 16384
02.06.2011 13:31 C:\Config.Msi --------- 16384
01.06.2011 16:45 C:\Program Files --------- 8192
31.05.2011 16:13 C:\Users --------- 4096
31.05.2011 16:11 C:\NVIDIA --------- 0
31.05.2011 16:10 C:\TempEI4 --------- 0
31.05.2011 16:04 C:\RHDSetup.log --------- 2154
31.05.2011 16:04 C:\realtek.log --------- 206
31.05.2011 16:02 C:\Intel --------- 0
31.05.2011 16:00 C:\$Recycle.Bin --------- 0
31.05.2011 15:59 C:\Recovery --------- 0
31.05.2011 15:59 C:\Programme --------- 0
31.05.2011 15:59 C:\Dokumente und Einstellungen --------- 0
14.07.2009 07:08 C:\Documents and Settings --------- 0
14.07.2009 05:20 C:\PerfLogs --------- 0
----------------------------------------
C:\Windows
03.06.2011 09:22 C:\Windows\WindowsUpdate.log --------- 1956896
03.06.2011 09:20 C:\Windows\setupact.log --------- 25139
03.06.2011 09:20 C:\Windows\bootstat.dat --------- 67584
03.06.2011 09:19 C:\Windows\IE9_main.log --------- 2170
01.06.2011 16:48 C:\Windows\DirectX.log --------- 126109
01.06.2011 00:00 C:\Windows\MEMORY.DMP --------- 419503595
31.05.2011 17:36 C:\Windows\PFRO.log --------- 5188
31.05.2011 15:52 C:\Windows\DtcInstall.log --------- 2790
31.05.2011 15:52 C:\Windows\TSSysprep.log --------- 1355
25.02.2011 08:19 C:\Windows\explorer.exe --------- 2871808
21.11.2010 05:25 C:\Windows\twain_32.dll --------- 51200
21.11.2010 05:24 C:\Windows\bfsvc.exe --------- 71168
21.11.2010 05:24 C:\Windows\splwow64.exe --------- 67072
29.09.2010 07:11 C:\Windows\RtlExUpd.dll --------- 1251944
14.07.2009 07:09 C:\Windows\win.ini --------- 403
14.07.2009 06:54 C:\Windows\WindowsShell.Manifest --------- 749
14.07.2009 06:51 C:\Windows\setuperr.log --------- 0
14.07.2009 03:39 C:\Windows\write.exe --------- 10240
14.07.2009 03:39 C:\Windows\regedit.exe --------- 427008
14.07.2009 03:39 C:\Windows\notepad.exe --------- 193536
14.07.2009 03:39 C:\Windows\HelpPane.exe --------- 733696
14.07.2009 03:39 C:\Windows\hh.exe --------- 16896
14.07.2009 03:39 C:\Windows\fveupdate.exe --------- 15360
14.07.2009 03:14 C:\Windows\winhlp32.exe --------- 9728
14.07.2009 03:14 C:\Windows\twunk_32.exe --------- 31232
14.07.2009 01:06 C:\Windows\mib.bin --------- 43131
10.06.2009 23:41 C:\Windows\twunk_16.exe --------- 49680
10.06.2009 23:41 C:\Windows\twain.dll --------- 94784
10.06.2009 23:08 C:\Windows\system.ini --------- 219
10.06.2009 22:52 C:\Windows\WMSysPr9.prx --------- 316640
10.06.2009 22:36 C:\Windows\msdfmap.ini --------- 1405
10.06.2009 22:31 C:\Windows\Starter.xml --------- 48201
10.06.2009 22:30 C:\Windows\Professional.xml --------- 53551
----------------------------------------
C:\Windows\System
----------------------------------------
C:\Windows\System32
03.06.2011 09:31 C:\Windows\system32\config --------- 24576
03.06.2011 09:27 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 21808
03.06.2011 09:27 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 21808
03.06.2011 09:26 C:\Windows\system32\drivers --------- 65536
03.06.2011 09:25 C:\Windows\system32\perfc009.dat --------- 147180
03.06.2011 09:25 C:\Windows\system32\perfh009.dat --------- 691222
03.06.2011 09:25 C:\Windows\system32\perfh007.dat --------- 782182
03.06.2011 09:25 C:\Windows\system32\perfc007.dat --------- 174264
03.06.2011 09:25 C:\Windows\system32\PerfStringBackup.INI --------- 5388
03.06.2011 09:19 C:\Windows\system32\catroot2 --------- 32768
03.06.2011 09:19 C:\Windows\system32\catroot --------- 4096
02.06.2011 03:02 C:\Windows\system32\de-DE --------- 327680
02.06.2011 03:00 C:\Windows\system32\en-US --------- 4096
01.06.2011 17:30 C:\Windows\system32\FNTCACHE.DAT --------- 291664
01.06.2011 00:00 C:\Windows\system32\migration --------- 0
01.06.2011 00:00 C:\Windows\system32\Boot --------- 0
31.05.2011 18:00 C:\Windows\system32\wrap_oal.dll --------- 466456
31.05.2011 18:00 C:\Windows\system32\OpenAL32.dll --------- 122904
31.05.2011 17:36 C:\Windows\system32\Tasks --------- 0
31.05.2011 17:34 C:\Windows\system32\wdi --------- 4096
31.05.2011 17:34 C:\Windows\system32\LogFiles --------- 4096
31.05.2011 16:24 C:\Windows\system32\CodeIntegrity --------- 0
31.05.2011 16:13 C:\Windows\system32\DriverStore --------- 4096
31.05.2011 16:02 C:\Windows\system32\restore --------- 0
31.05.2011 15:59 C:\Windows\system32\Recovery --------- 0
31.05.2011 15:53 C:\Windows\system32\license.rtf --------- 177271
31.05.2011 15:52 C:\Windows\system32\sysprep --------- 0
24.05.2011 19:14 C:\Windows\system32\MpSigStub.exe --------- 270720
29.04.2011 11:54 C:\Windows\system32\MRT.exe --------- 44548040
09.04.2011 09:02 C:\Windows\system32\ntoskrnl.exe --------- 5562240
09.04.2011 08:58 C:\Windows\system32\poqexec.exe --------- 142336
08.04.2011 07:14 C:\Windows\system32\nvd3dumx.dll --------- 12934248
08.04.2011 07:14 C:\Windows\system32\nvdispco6420140.dll --------- 1619048
08.04.2011 07:14 C:\Windows\system32\nvcuvid.dll --------- 2893416
08.04.2011 07:14 C:\Windows\system32\nvwgf2umx.dll --------- 8411752
08.04.2011 07:14 C:\Windows\system32\nvinfo.pb --------- 7771
08.04.2011 07:14 C:\Windows\system32\nvcuda.dll --------- 6974056
08.04.2011 07:14 C:\Windows\system32\nvcuvenc.dll --------- 2204264
08.04.2011 07:14 C:\Windows\system32\nvoglv64.dll --------- 20700264
08.04.2011 07:14 C:\Windows\system32\nvgenco642060.dll --------- 1404008
08.04.2011 07:14 C:\Windows\system32\OpenCL.dll --------- 67176
08.04.2011 07:14 C:\Windows\system32\nvcompiler.dll --------- 18578536
08.04.2011 07:14 C:\Windows\system32\nvapi64.dll --------- 2273896
07.04.2011 23:19 C:\Windows\system32\nvsvcr.dll --------- 2582120
07.04.2011 23:19 C:\Windows\system32\nvvsvc.exe --------- 1012328
07.04.2011 23:19 C:\Windows\system32\nvshext.dll --------- 61032
07.04.2011 23:19 C:\Windows\system32\nvmctray.dll --------- 117864
07.04.2011 23:19 C:\Windows\system32\easyUpdatusAPIU64.dll --------- 797288
07.04.2011 23:19 C:\Windows\system32\nvcpl.dll --------- 6338152
07.04.2011 23:18 C:\Windows\system32\nvsvc64.dll --------- 3041384
12.03.2011 14:08 C:\Windows\system32\XpsPrint.dll --------- 1465344
11.03.2011 08:34 C:\Windows\system32\mfc42u.dll --------- 1359872
11.03.2011 08:34 C:\Windows\system32\mfc42.dll --------- 1395712
08.03.2011 08:29 C:\Windows\system32\inetcomm.dll --------- 976896
07.03.2011 08:31 C:\Windows\system32\wininet.dll --------- 1188864
07.03.2011 08:31 C:\Windows\system32\urlmon.dll --------- 1491456
07.03.2011 08:29 C:\Windows\system32\mshtml.dll --------- 8995328
07.03.2011 08:29 C:\Windows\system32\jsproxy.dll --------- 64512
07.03.2011 08:28 C:\Windows\system32\ieui.dll --------- 247808
07.03.2011 08:28 C:\Windows\system32\ieframe.dll --------- 12260352
07.03.2011 06:24 C:\Windows\system32\mshtml.tlb --------- 1638912
03.03.2011 17:59 C:\Windows\system32\nvhdap64.dll --------- 29288
03.03.2011 17:59 C:\Windows\system32\nvhdagenco642040.dll --------- 1359976
03.03.2011 08:24 C:\Windows\system32\dnsrslvr.dll --------- 183296
03.03.2011 08:24 C:\Windows\system32\dnsapi.dll --------- 357888
03.03.2011 08:21 C:\Windows\system32\dnscacheugc.exe --------- 30208
03.03.2011 05:52 C:\Windows\system32\win32k.sys --------- 3135488
24.02.2011 08:15 C:\Windows\system32\XpsGdiConverter.dll --------- 476160
19.02.2011 14:05 C:\Windows\system32\FntCache.dll --------- 1139200
19.02.2011 14:04 C:\Windows\system32\DWrite.dll --------- 1544192
19.02.2011 14:04 C:\Windows\system32\d2d1.dll --------- 902656
19.02.2011 14:03 C:\Windows\system32\atmlib.dll --------- 46080
19.02.2011 11:00 C:\Windows\system32\atmfd.dll --------- 367616
18.02.2011 12:56 C:\Windows\system32\vbscript.dll --------- 613376
18.02.2011 12:54 C:\Windows\system32\jscript.dll --------- 919040
18.02.2011 12:51 C:\Windows\system32\prevhost.exe --------- 31232
12.02.2011 13:34 C:\Windows\system32\FXSCOVER.exe --------- 267776
05.02.2011 19:10 C:\Windows\system32\winload.efi --------- 642944
05.02.2011 19:10 C:\Windows\system32\kdusb.dll --------- 20352
05.02.2011 19:10 C:\Windows\system32\kd1394.dll --------- 19328
05.02.2011 19:10 C:\Windows\system32\kdcom.dll --------- 17792
05.02.2011 19:06 C:\Windows\system32\winresume.exe --------- 518672
05.02.2011 19:06 C:\Windows\system32\winload.exe --------- 605552
05.02.2011 19:06 C:\Windows\system32\winresume.efi --------- 566208
23.12.2010 12:42 C:\Windows\system32\sbe.dll --------- 1118720
23.12.2010 12:42 C:\Windows\system32\CPFilters.dll --------- 961024
23.12.2010 12:42 C:\Windows\system32\EncDec.dll --------- 723968
23.12.2010 12:36 C:\Windows\system32\mpg2splt.ax --------- 259072
17.12.2010 13:40 C:\Windows\system32\kerberos.dll --------- 715776
10.12.2010 17:34 C:\Windows\system32\sqlncli.dll --------- 2882400
21.11.2010 09:00 C:\Windows\system32\wbem --------- 65536
21.11.2010 08:49 C:\Windows\system32\winrm --------- 0
21.11.2010 08:49 C:\Windows\system32\migwiz --------- 0
21.11.2010 08:49 C:\Windows\system32\oobe --------- 4096
21.11.2010 08:49 C:\Windows\system32\Setup --------- 0
21.11.2010 08:49 C:\Windows\system32\0407 --------- 0
21.11.2010 08:49 C:\Windows\system32\WinBioPlugIns --------- 0
21.11.2010 08:49 C:\Windows\system32\slmgr --------- 0
21.11.2010 08:49 C:\Windows\system32\WCN --------- 0
21.11.2010 08:49 C:\Windows\system32\MUI --------- 0
----------------------------------------
C:\Windows\Prefetch
----------------------------------------
C:\Windows\Tasks
03.06.2011 09:20 C:\Windows\Tasks\SA.DAT --------- 6
14.07.2009 07:08 C:\Windows\Tasks\SCHEDLGU.TXT --------- 5418
----------------------------------------
C:\Windows\Temp
----------------------------------------
C:\Users\Maklsan\AppData\Local\Temp
03.06.2011 09:37 C:\Users\Maklsan\AppData\Local\Temp\plugtmp --------- 0
03.06.2011 09:26 C:\Users\Maklsan\AppData\Local\Temp\~DF408EA55E193E0B3A.TMP --------- 147456
03.06.2011 09:26 C:\Users\Maklsan\AppData\Local\Temp\~DFC78D903BAE809251.TMP --------- 147456
03.06.2011 09:20 C:\Users\Maklsan\AppData\Local\Temp\WPDNSE --------- 0
03.06.2011 09:20 C:\Users\Maklsan\AppData\Local\Temp\AdobeARM.log --------- 15756
01.06.2011 17:50 C:\Users\Maklsan\AppData\Local\Temp\sfamcc00001.dll --------- 192512
01.06.2011 17:15 C:\Users\Maklsan\AppData\Local\Temp\cmdlog V102.txt --------- 1460
01.06.2011 17:15 C:\Users\Maklsan\AppData\Local\Temp\DCCACHE.tmp --------- 219136
01.06.2011 16:52 C:\Users\Maklsan\AppData\Local\Temp\~DFDB1068B86A1178B7.TMP --------- 65536
01.06.2011 16:49 C:\Users\Maklsan\AppData\Local\Temp\SEPrinterInstaller.log --------- 53
01.06.2011 16:49 C:\Users\Maklsan\AppData\Local\Temp\{76CE11D1-C8EE-4D5A-A575-CD6481E37767} --------- 0
31.05.2011 18:02 C:\Users\Maklsan\AppData\Local\Temp\Low --------- 0
31.05.2011 18:01 C:\Users\Maklsan\AppData\Local\Temp\dirt3_Data_DFE --------- 0
31.05.2011 16:16 C:\Users\Maklsan\AppData\Local\Temp\dd_vcredistUI50D7.txt --------- 14682
31.05.2011 16:16 C:\Users\Maklsan\AppData\Local\Temp\dd_vcredistMSI50D7.txt --------- 410190
31.05.2011 16:13 C:\Users\Maklsan\AppData\Local\Temp\MSI4d6af.LOG --------- 87312
31.05.2011 16:13 C:\Users\Maklsan\AppData\Local\Temp\{FDCAB081-C8EF-48DA-957F-6B33D6D66578} --------- 0
31.05.2011 16:13 C:\Users\Maklsan\AppData\Local\Temp\{1B921E8C-9AF1-4BC8-B40A-002F4D55B432} --------- 0
31.05.2011 16:06 C:\Users\Maklsan\AppData\Local\Temp\Rule.txt --------- 0
31.05.2011 16:06 C:\Users\Maklsan\AppData\Local\Temp\BootStrap.log --------- 0
31.05.2011 16:04 C:\Users\Maklsan\AppData\Local\Temp\_isdelet.ini --------- 244
31.05.2011 16:03 C:\Users\Maklsan\AppData\Local\Temp\isp4DB5.tmp --------- 0
31.05.2011 16:00 C:\Users\Maklsan\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0
31.05.2011 16:00 C:\Users\Maklsan\AppData\Local\Temp\wmsetup.log --------- 967
31.05.2011 16:00 C:\Users\Maklsan\AppData\Local\Temp\Maklsan.bmp --------- 49208
18.12.2010 13:20 C:\Users\Maklsan\AppData\Local\Temp\sfextra.dll --------- 55296
14.11.2005 10:24 C:\Users\Maklsan\AppData\Local\Temp\Set4C7A.tmp --------- 121064
----------------------------------------
C:\Program Files
01.06.2011 16:45 C:\Program Files\Microsoft SQL Server --------- 0
01.06.2011 00:00 C:\Program Files\Internet Explorer --------- 4096
31.05.2011 16:18 C:\Program Files\WinRAR --------- 4096
31.05.2011 16:13 C:\Program Files\NVIDIA Corporation --------- 4096
31.05.2011 16:07 C:\Program Files\Intel --------- 0
31.05.2011 16:04 C:\Program Files\Realtek --------- 0
31.05.2011 15:59 C:\Program Files\Gemeinsame Dateien --------- 0
31.05.2011 15:59 C:\Program Files\Windows NT --------- 4096
21.11.2010 09:01 C:\Program Files\DVD Maker --------- 4096
21.11.2010 09:01 C:\Program Files\Windows Journal --------- 4096
21.11.2010 08:50 C:\Program Files\Windows Sidebar --------- 4096
21.11.2010 08:50 C:\Program Files\Windows Mail --------- 4096
21.11.2010 08:50 C:\Program Files\Windows Media Player --------- 4096
21.11.2010 08:50 C:\Program Files\Windows Photo Viewer --------- 0
21.11.2010 08:50 C:\Program Files\Windows Defender --------- 4096
21.11.2010 05:31 C:\Program Files\Windows Portable Devices --------- 0
14.07.2009 07:32 C:\Program Files\Reference Assemblies --------- 0
14.07.2009 07:32 C:\Program Files\MSBuild --------- 0
14.07.2009 07:09 C:\Program Files\Uninstall Information --------- 0
14.07.2009 06:54 C:\Program Files\desktop.ini --------- 174
14.07.2009 05:20 C:\Program Files\Common Files --------- 4096
----------------------------------------
C:\ProgramData\..
UpdatusUser
Maklsan
Default
Public
Default User
All Users
desktop.ini
----------------------------------------
C:\Windows\system32\drivers\etc\hosts
----------------------------------------
Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 24 K
System 4 Services 0 2.156 K
smss.exe 276 Services 0 1.188 K
csrss.exe 440 Services 0 4.424 K
wininit.exe 508 Services 0 4.524 K
csrss.exe 520 Console 1 6.772 K
services.exe 572 Services 0 9.792 K
lsass.exe 580 Services 0 12.092 K
lsm.exe 588 Services 0 4.292 K
winlogon.exe 624 Console 1 7.008 K
svchost.exe 732 Services 0 9.392 K
nvvsvc.exe 828 Services 0 7.372 K
svchost.exe 868 Services 0 8.352 K
svchost.exe 964 Services 0 21.524 K
svchost.exe 1004 Services 0 24.260 K
svchost.exe 116 Services 0 44.064 K
svchost.exe 1068 Services 0 16.520 K
svchost.exe 1204 Services 0 30.012 K
spoolsv.exe 1336 Services 0 11.824 K
sched.exe 1368 Services 0 2.076 K
svchost.exe 1388 Services 0 19.484 K
avguard.exe 1488 Services 0 14.592 K
svchost.exe 1532 Services 0 16.888 K
IPROSetMonitor.exe 1564 Services 0 4.260 K
sqlservr.exe 1620 Services 0 3.148 K
avshadow.exe 1640 Services 0 4.276 K
conhost.exe 1648 Services 0 2.696 K
sqlbrowser.exe 1748 Services 0 4.216 K
sqlwriter.exe 1804 Services 0 6.496 K
nvSCPAPISvr.exe 1864 Services 0 5.608 K
svchost.exe 1904 Services 0 5.512 K
WLIDSVC.EXE 1940 Services 0 12.436 K
WLIDSVCM.EXE 2164 Services 0 3.336 K
SearchIndexer.exe 2384 Services 0 23.144 K
NvXDSync.exe 2592 Console 1 15.556 K
nvvsvc.exe 2604 Console 1 11.836 K
taskhost.exe 2776 Console 1 9.624 K
rundll32.exe 2860 Console 1 6.472 K
dwm.exe 2876 Console 1 41.260 K
explorer.exe 2948 Console 1 52.748 K
RAVCpl64.exe 2264 Console 1 10.880 K
DTLite.exe 2672 Console 1 13.592 K
sidebar.exe 3088 Console 1 28.244 K
nusb3mon.exe 3240 Console 1 5.236 K
avgnt.exe 3316 Console 1 2.732 K
nvtray.exe 3408 Console 1 12.256 K
DTShellHlp.exe 3432 Console 1 11.648 K
wmpnetwk.exe 3860 Services 0 10.824 K
svchost.exe 3304 Services 0 13.796 K
dllhost.exe 4180 Services 0 7.088 K
firefox.exe 4572 Console 1 178.376 K
plugin-container.exe 4896 Console 1 31.320 K
LMS.exe 5024 Services 0 4.700 K
daemonu.exe 896 Services 0 6.000 K
svchost.exe 3012 Services 0 28.132 K
UNS.exe 2792 Services 0 7.252 K
mbamservice.exe 4360 Services 0 25.560 K
OTL.exe 4220 Console 1 19.928 K
notepad.exe 4740 Console 1 6.136 K
audiodg.exe 2772 Services 0 17.152 K
cmd.exe 4000 Console 1 3.776 K
conhost.exe 4808 Console 1 5.252 K
notepad.exe 3924 Console 1 6.516 K
SearchProtocolHost.exe 3840 Services 0 8.300 K
SearchFilterHost.exe 3168 Services 0 6.820 K
dllhost.exe 4844 Console 1 5.896 K
tasklist.exe 3664 Console 1 5.680 K
WmiPrvSE.exe 4156 Services 0 6.280 K
***** Ende des Scans 03.06.2011 um 9:56:41,16 *** Code:
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 30.05.2011 6,00MB 10.3.181.14
Adobe Reader 9.4.4 Adobe Systems Incorporated 30.05.2011 143,8MB 9.4.4
Avira AntiVir Personal - Free Antivirus Avira GmbH 30.05.2011 70,6MB 10.0.0.648
CCleaner Piriform 02.06.2011 3.07
DAEMON Tools Lite DT Soft Ltd 30.05.2011 4.40.2.0131
DiRT 3 Codemasters 30.05.2011 1.0.0000.130
Intel(R) Management Engine Components Intel Corporation 31.05.2011 7.0.0.1118
Intel(R) Network Connections 15.6.25.0 Intel 30.05.2011 14,5MB 15.6.25.0
Malwarebytes' Anti-Malware Version 1.51.0.1200 Malwarebytes Corporation 02.06.2011 13,8MB 1.51.0.1200
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 01.06.2011 38,8MB 4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 01.06.2011 2,94MB 4.0.30319
Microsoft Games for Windows - LIVE Redistributable Microsoft Corporation 30.05.2011 31,3MB 3.5.88.0
Microsoft Games for Windows Marketplace Microsoft Corporation 30.05.2011 6,04MB 3.5.50.0
Microsoft SQL Server 2005 Microsoft Corporation 31.05.2011
Microsoft SQL Server Native Client Microsoft Corporation 01.06.2011 5,84MB 9.00.5000.00
Microsoft SQL Server Setup Support Files (English) Microsoft Corporation 01.06.2011 25,2MB 9.00.5000.00
Microsoft SQL Server VSS Writer Microsoft Corporation 01.06.2011 1,10MB 9.00.5000.00
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 30.05.2011 0,25MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 30.05.2011 0,55MB 8.0.50727.42
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 30.05.2011 0,58MB 9.0.30729.4148
Mozilla Firefox 4.0.1 (x86 de) Mozilla 30.05.2011 29,8MB 4.0.1
MSXML 4.0 SP2 Parser and SDK Microsoft Corporation 30.05.2011 1,23MB 4.20.9818.0
NVIDIA 3D Vision Controller Driver 270.61 NVIDIA Corporation 30.05.2011 270.61
NVIDIA 3D Vision Treiber 270.61 NVIDIA Corporation 30.05.2011 270.61
NVIDIA Grafiktreiber 270.61 NVIDIA Corporation 30.05.2011 270.61
NVIDIA HD-Audiotreiber 1.2.22.1 NVIDIA Corporation 30.05.2011 1.2.22.1
NVIDIA PhysX-Systemsoftware 9.10.0514 NVIDIA Corporation 30.05.2011 9.10.0514
NVIDIA Update 1.1.34 NVIDIA Corporation 30.05.2011 1.1.34
OpenAL 30.05.2011
Rapture3D 2.4.8 Game Blue Ripple Sound 30.05.2011
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 30.05.2011 6.0.1.6215
Renesas Electronics USB 3.0 Host Controller Driver Renesas Electronics Corporation 30.05.2011 1,03MB 2.0.4.0
Solid Edge ST2 SIEMENS 31.05.2011 2.945MB 102.00.00116
SpeedFan (remove only) 31.05.2011
VLC media player 1.1.9 VideoLAN 30.05.2011 1.1.9
Windows Live ID Sign-in Assistant Microsoft Corporation 30.05.2011 10,0MB 6.500.3165.0
WinRAR 4.00 (64-Bit) win.rar GmbH 30.05.2011 4.00.0 |