otl logfile chekcne bitte

Diskutiere und helfe bei otl logfile chekcne bitte im Bereich freie Fragen im SysProfile Forum bei einer Lösung; dankeschön :) habe den verdacht auf verseuchung daher die nachfrage. TL logfile created on: 25.10.2012 20:52:05 - Run 1 OTL by OldTimer - Version... Dieses Thema im Forum "freie Fragen" wurde erstellt von Unregistriert, 25. Oktober 2012.

  1. Unregistriert
    Unregistriert Gast

    dankeschön :) habe den verdacht auf verseuchung daher die nachfrage.

    TL logfile created on: 25.10.2012 20:52:05 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\*****\Desktop
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

    7,98 Gb Total Physical Memory | 6,83 Gb Available Physical Memory | 85,53% Memory free
    15,96 Gb Paging File | 14,71 Gb Available in Paging File | 92,19% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 465,54 Gb Total Space | 417,59 Gb Free Space | 89,70% Space Free | Partition Type: NTFS
    Drive D: | 7,59 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
    Drive E: | 999,53 Mb Total Space | 998,91 Mb Free Space | 99,94% Space Free | Partition Type: FAT

    Computer Name: *****-PC | User Name: ***** | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2012.10.25 20:46:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\*****\Desktop\OTL.exe
    PRC - [2010.10.22 02:00:00 | 000,376,832 | ---- | M] (AVM Berlin) -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe
    PRC - [2010.09.02 17:01:36 | 000,125,216 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\SmartView\SmartViewService.exe
    PRC - [2010.09.02 14:26:08 | 000,456,976 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\SmartView Software Updater\WCUService.exe
    PRC - [2009.07.14 03:14:47 | 000,254,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe


    ========== Modules (No Company Name) ==========


    ========== Services (SafeList) ==========

    SRV:64bit: - [2010.11.26 04:54:12 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
    SRV - [2012.10.22 17:53:51 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe -- (AdobeFlashPlayerUpdateSvc)
    SRV - [2012.10.11 03:04:37 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
    SRV - [2011.07.04 15:19:30 | 000,395,136 | R--- | M] (cFos Software GmbH) [Auto | Running] -- C:\Programme\ASRock\XFast LAN\spd.exe -- (cFosSpeedS)
    SRV - [2010.10.22 02:00:00 | 000,376,832 | ---- | M] (AVM Berlin) [Auto | Running] -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe -- (AVM WLAN Connection Service)
    SRV - [2010.09.02 17:01:36 | 000,125,216 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files (x86)\DeviceVM\SmartView\SmartViewService.exe -- (SmartViewService)
    SRV - [2010.09.02 14:26:08 | 000,456,976 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files (x86)\DeviceVM\SmartView Software Updater\WCUService.exe -- (WCUService)
    SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe -- (clr_optimization_v2.0.50727_32)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2012.10.19 21:52:58 | 000,015,936 | ---- | M] (FNet Co., Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\FNETURPX.SYS -- (FNETURPX)
    DRV:64bit: - [2012.03.01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
    DRV:64bit: - [2011.07.29 05:40:57 | 000,079,104 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
    DRV:64bit: - [2011.07.29 05:40:56 | 000,056,960 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
    DRV:64bit: - [2011.07.04 15:19:34 | 001,632,128 | ---- | M] (cFos Software GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cfosspeed6.sys -- (cFosSpeed)
    DRV:64bit: - [2011.05.10 16:28:48 | 000,017,192 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AsrAppCharger.sys -- (AsrAppCharger)
    DRV:64bit: - [2011.04.21 20:17:04 | 000,471,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
    DRV:64bit: - [2011.03.11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
    DRV:64bit: - [2011.03.11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
    DRV:64bit: - [2010.11.26 06:20:20 | 008,120,320 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
    DRV:64bit: - [2010.11.26 04:16:46 | 000,289,792 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
    DRV:64bit: - [2010.11.17 14:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
    DRV:64bit: - [2010.10.25 02:00:00 | 000,714,368 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fwlanusbn.sys -- (fwlanusbn)
    DRV:64bit: - [2010.10.25 02:00:00 | 000,014,120 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avmeject.sys -- (avmeject)
    DRV:64bit: - [2010.02.03 11:21:56 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
    DRV:64bit: - [2009.11.18 01:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
    DRV:64bit: - [2009.11.06 08:40:26 | 000,838,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmwlhigh664.sys -- (BCMH43XX)
    DRV:64bit: - [2009.10.19 14:45:54 | 000,039,480 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
    DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
    DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
    DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
    DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
    DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
    DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
    DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
    DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
    DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3D 49 73 39 61 AF CD 01 [binary data]
    IE - HKCU\..\URLSearchHook: {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\DeviceVM\SmartView\AddressBarSearch.dll (DeviceVM, Inc.)
    IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=ASRK
    IE - HKCU\..\SearchScopes\{713321C8-5AB6-4693-A097-B9F1F8977F77}: "URL" = - Google Search 3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AF FFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF %3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFO RID%3A1&hl=de&q={searchTerms}
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0

    ========== FireFox ==========

    FF - user.js - File not found

    FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_40 2_287.dll File not found
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_40 2_287.dll ()
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.20 18:13:52 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

    [2012.10.20 18:14:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\*****\AppData\Roaming\mozilla\Extensions
    [2012.10.25 20:04:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\*****\AppData\Roaming\mozilla\Firefox\Pr ofiles\s1t978lx.default\extensions
    [2012.10.20 18:13:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
    [2012.10.11 03:05:24 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
    [2012.10.11 04:10:32 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
    [2012.10.11 04:10:32 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
    [2012.10.11 04:10:32 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
    [2012.10.11 04:10:32 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
    [2012.10.11 04:10:32 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
    [2012.10.11 04:10:32 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

    ========== Chrome ==========

    CHR - homepage: Google
    CHR - default_search_provider: Google (Enabled)
    CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ }{google:acceptedSuggestion}{google riginalQueryF orSuggestion}{google:searchFieldtrialParameter}sou rceid=chrome&ie={inputEncoding}
    CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldt rialParameter}client=chrome&hl={language}&q={searc hTerms}
    CHR - homepage: Google

    O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
    O2 - BHO: (SmartView VisualBookmark) - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\DeviceVM\SmartView\SmartView.dll (DeviceVM, Inc.)
    O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
    O4:64bit: - HKLM..\Run: [THXCfg64] C:\Windows\SysNative\THXCfg64.DLL (Creative Technology Ltd.)
    O4:64bit: - HKLM..\Run: [XFast LAN] C:\Programme\ASRock\XFast LAN\cfosspeed.exe (cFos Software GmbH)
    O4 - HKLM..\Run: [AVMWlanClient] C:\Program Files (x86)\avmwlanstick\wlangui.exe (AVM Berlin)
    O4 - HKLM..\Run: [SmartViewAgent] C:\Program Files (x86)\DeviceVM\SmartView\SmartViewAgent.exe ()
    O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
    O4 - HKLM..\Run: [THX TruStudio NB Settings] C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe (Creative Technology Ltd)
    O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
    O4 - HKLM..\Run: [XFast USB] C:\Program Files (x86)\XFast USB\XFastUsb.exe (FNet Co., Ltd.)
    O4 - HKCU..\Run: [ASRockXTU] File not found
    O4 - HKCU..\Run: [zASRockInstantBoot] File not found
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktop = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktopChanges = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 5
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3
    O1364bit: - gopher Prefix: missing
    O13 - gopher Prefix: missing
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\{0674A90A-CDFC-4B02-AD0E-9375F32B43E9}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\{62D77606-7A3D-4FC2-BBB3-1A520EB48BD0}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\{AB6EC3A3-A492-42AB-881B-CF565A443C32}: DhcpNameServer = 192.168.0.1
    O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2011.12.01 13:15:56 | 000,206,657 | R--- | M] () - D:\Autorun.ico -- [ CDFS ]
    O32 - AutoRun File - [2012.05.14 15:03:14 | 000,000,106 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
    O33 - MountPoints2\{adea6460-1acf-11e2-bf7e-bc5ff41dc41d}\Shell - "" = AutoRun
    O33 - MountPoints2\{adea6460-1acf-11e2-bf7e-bc5ff41dc41d}\Shell\AutoRun\command - "" = E:\pushinst.exe
    O34 - HKLM BootExecute: (autocheck autochk *)
    O35:64bit: - HKLM\..comfile [open] -- "%1" %*
    O35:64bit: - HKLM\..exefile [open] -- "%1" %*
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
    O37 - HKLM\...com [@ = comfile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
    O38 - SubSystems\\Windows: (ServerDll=winsrv onServerDllInitialization,2)
    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

    ========== Files/Folders - Created Within 30 Days ==========

    [2012.10.25 20:51:29 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\*****\Desktop\OTL.exe
    [2012.10.22 17:54:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    [2012.10.22 17:54:17 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Google
    [2012.10.22 17:54:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
    [2012.10.21 12:02:17 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
    [2012.10.20 21:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
    [2012.10.20 18:28:35 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\CrashDumps
    [2012.10.20 18:27:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
    [2012.10.20 18:27:24 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Origin
    [2012.10.20 18:25:03 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Origin
    [2012.10.20 18:25:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
    [2012.10.20 18:25:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
    [2012.10.20 18:25:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
    [2012.10.20 18:23:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
    [2012.10.20 18:17:12 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Macromedia
    [2012.10.20 18:16:50 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
    [2012.10.20 18:16:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
    [2012.10.20 18:14:11 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Mozilla
    [2012.10.20 18:14:11 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Mozilla
    [2012.10.20 18:13:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
    [2012.10.20 18:13:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
    [2012.10.20 18:13:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
    [2012.10.20 18:08:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
    [2012.10.20 18:08:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\avmwlanstick
    [2012.10.20 18:07:33 | 000,714,368 | ---- | C] (AVM GmbH) -- C:\Windows\SysNative\drivers\fwlanusbn.sys
    [2012.10.20 18:07:33 | 000,099,328 | ---- | C] (AVM Berlin) -- C:\Windows\SysNative\fwusbnci.dll
    [2012.10.20 18:07:30 | 000,014,120 | ---- | C] (AVM Berlin) -- C:\Windows\SysNative\drivers\avmeject.sys
    [2012.10.20 18:07:30 | 000,000,000 | ---D | C] -- C:\Windows\AVM_Driver
    [2012.10.20 18:07:24 | 000,000,000 | ---D | C] -- C:\Users\*****\AVM_Driver
    [2012.10.19 22:59:04 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Diagnostics
    [2012.10.19 22:43:47 | 000,281,104 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysWow64\wpcap.dll
    [2012.10.19 22:43:47 | 000,096,784 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysWow64\Packet.dll
    [2012.10.19 22:43:47 | 000,047,632 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysNative\drivers\npf.sys
    [2012.10.19 22:43:31 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\InstallShield
    [2012.10.19 22:33:45 | 000,025,312 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\drivers\SCMNdisP.sys
    [2012.10.19 22:32:09 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Adobe
    [2012.10.19 22:26:48 | 000,000,000 | ---D | C] -- C:\Windows\Panther
    [2012.10.19 22:17:48 | 000,000,000 | ---D | C] -- C:\Users\*****\Desktop\Mainboard
    [2012.10.19 22:17:15 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\ATI
    [2012.10.19 22:17:15 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\ATI
    [2012.10.19 22:17:15 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
    [2012.10.19 22:14:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
    [2012.10.19 22:13:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
    [2012.10.19 22:12:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
    [2012.10.19 22:12:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
    [2012.10.19 22:12:05 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
    [2012.10.19 22:11:21 | 000,000,000 | ---D | C] -- C:\AMD
    [2012.10.19 22:02:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DeviceVM
    [2012.10.19 22:00:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
    [2012.10.19 21:59:10 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
    [2012.10.19 21:59:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
    [2012.10.19 21:59:02 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\DeviceVm
    [2012.10.19 21:58:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DeviceVM
    [2012.10.19 21:58:15 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
    [2012.10.19 21:58:14 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Cyberlink
    [2012.10.19 21:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp
    [2012.10.19 21:55:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
    [2012.10.19 21:55:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
    [2012.10.19 21:55:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
    [2012.10.19 21:55:07 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Macromedia
    [2012.10.19 21:55:07 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Adobe
    [2012.10.19 21:54:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
    [2012.10.19 21:54:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
    [2012.10.19 21:54:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
    [2012.10.19 21:53:14 | 001,632,128 | ---- | C] (cFos Software GmbH) -- C:\Windows\SysNative\drivers\cfosspeed6.sys
    [2012.10.19 21:53:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast LAN
    [2012.10.19 21:53:14 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\cFos
    [2012.10.19 21:53:14 | 000,000,000 | ---D | C] -- C:\Program Files\ASRock
    [2012.10.19 21:53:07 | 000,000,000 | ---D | C] -- C:\ProgramData\cFos
    [2012.10.19 21:52:58 | 000,015,936 | ---- | C] (FNet Co., Ltd.) -- C:\Windows\SysNative\drivers\FNETURPX.SYS
    [2012.10.19 21:52:58 | 000,000,000 | ---D | C] -- C:\ProgramData\FNET
    [2012.10.19 21:52:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast USB
    [2012.10.19 21:52:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XFast USB
    [2012.10.19 21:52:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASRock Utility
    [2012.10.19 21:52:29 | 000,017,192 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\AsrAppCharger.sys
    [2012.10.19 21:52:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
    [2012.10.19 21:52:29 | 000,000,000 | ---D | C] -- C:\Program Files\ASRock Utility
    [2012.10.19 21:52:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Etron Technology
    [2012.10.19 21:51:10 | 000,471,144 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
    [2012.10.19 21:50:33 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
    [2012.10.19 21:50:33 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
    [2012.10.19 21:50:08 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
    [2012.10.19 21:50:08 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
    [2012.10.19 21:50:08 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
    [2012.10.19 21:50:08 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
    [2012.10.19 21:50:08 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
    [2012.10.19 21:50:07 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
    [2012.10.19 21:50:07 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
    [2012.10.19 21:50:07 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
    [2012.10.19 21:50:07 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
    [2012.10.19 21:50:07 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
    [2012.10.19 21:50:07 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
    [2012.10.19 21:50:07 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
    [2012.10.19 21:50:07 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
    [2012.10.19 21:50:07 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
    [2012.10.19 21:50:06 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
    [2012.10.19 21:50:06 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
    [2012.10.19 21:50:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
    [2012.10.19 21:50:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
    [2012.10.19 21:49:30 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
    [2012.10.19 21:49:26 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
    [2012.10.19 21:49:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
    [2012.10.19 21:49:21 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
    [2012.10.19 21:48:47 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
    [2012.10.19 21:43:04 | 000,000,000 | R--D | C] -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Startup
    [2012.10.19 21:43:04 | 000,000,000 | R--D | C] -- C:\Users\*****\Searches
    [2012.10.19 21:43:04 | 000,000,000 | R--D | C] -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Administrative Tools
    [2012.10.19 21:42:49 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Identities
    [2012.10.19 21:42:29 | 000,000,000 | R--D | C] -- C:\Users\*****\Contacts
    [2012.10.19 21:42:19 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\VirtualStore
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Vorlagen
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\AppData\Local\Verlauf
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\AppData\Local\Temporary Internet Files
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Startmenü
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\SendTo
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Recent
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Netzwerkumgebung
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Lokale Einstellungen
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Druckumgebung
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Cookies
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\AppData\Local\Anwendungsdaten
    [2012.10.19 21:41:45 | 000,000,000 | -HSD | C] -- C:\Users\*****\Anwendungsdaten
    [2012.10.19 21:41:44 | 000,000,000 | --SD | C] -- C:\Users\*****\AppData\Roaming\Microsoft
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Videos
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Saved Games
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Pictures
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Music
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Maintenance
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Links
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Favorites
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Downloads
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Documents
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\Desktop
    [2012.10.19 21:41:44 | 000,000,000 | R--D | C] -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Accessories
    [2012.10.19 21:41:44 | 000,000,000 | -HSD | C] -- C:\Users\*****\Documents\Eigene Videos
    [2012.10.19 21:41:44 | 000,000,000 | -HSD | C] -- C:\Users\*****\Documents\Eigene Musik
    [2012.10.19 21:41:44 | 000,000,000 | -HSD | C] -- C:\Users\*****\Eigene Dateien
    [2012.10.19 21:41:44 | 000,000,000 | -HSD | C] -- C:\Users\*****\Documents\Eigene Bilder
    [2012.10.19 21:41:44 | 000,000,000 | -H-D | C] -- C:\Users\*****\AppData
    [2012.10.19 21:41:44 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Temp
    [2012.10.19 21:41:44 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Microsoft
    [2012.10.19 21:41:44 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Media Center Programs
    [2012.10.19 21:41:24 | 000,000,000 | -HSD | C] -- C:\Recovery
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\Programme
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
    [2012.10.19 21:41:23 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
    [2012.10.19 21:32:20 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
    [2012.10.19 21:28:36 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
    [2012.10.19 21:27:35 | 000,000,000 | -HSD | C] -- C:\System Volume Information
    [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

    ========== Files - Modified Within 30 Days ==========

    [2012.10.25 20:52:02 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
    [2012.10.25 20:52:02 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
    [2012.10.25 20:52:02 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
    [2012.10.25 20:52:02 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
    [2012.10.25 20:52:02 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
    [2012.10.25 20:50:58 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09 _00.Wdf
    [2012.10.25 20:46:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\*****\Desktop\OTL.exe
    [2012.10.25 20:43:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
    [2012.10.25 20:04:02 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2012.10.25 20:01:42 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2012.10.25 20:01:35 | 000,001,412 | ---- | M] () -- C:\Users\*****\Desktop\Games.lnk
    [2012.10.25 20:00:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2012.10.25 19:59:59 | 2131,468,287 | -HS- | M] () -- C:\hiberfil.sys
    [2012.10.25 18:51:30 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2012.10.25 18:51:30 | 000,009,584 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2012.10.25 13:29:32 | 000,002,374 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
    [2012.10.21 12:02:11 | 503,300,731 | ---- | M] () -- C:\Windows\MEMORY.DMP
    [2012.10.20 20:59:43 | 000,266,992 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
    [2012.10.20 19:58:08 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
    [2012.10.20 19:58:08 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
    [2012.10.20 18:25:03 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
    [2012.10.20 18:13:59 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
    [2012.10.19 22:37:04 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_bcmwlhigh 664_01009.Wdf
    [2012.10.19 22:16:00 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
    [2012.10.19 21:55:33 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc
    [2012.10.19 21:53:14 | 000,000,003 | ---- | M] () -- C:\Users\*****\AppData\Local\user_data.ini
    [2012.10.19 21:52:58 | 000,015,936 | ---- | M] (FNet Co., Ltd.) -- C:\Windows\SysNative\drivers\FNETURPX.SYS
    [2012.10.19 21:36:04 | 000,056,735 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
    [2012.10.19 21:36:04 | 000,056,735 | ---- | M] () -- C:\Windows\SysNative\license.rtf
    [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

    ========== Files Created - No Company Name ==========

    [2012.10.25 20:50:58 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09 _00.Wdf
    [2012.10.22 17:54:37 | 000,002,374 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
    [2012.10.22 17:54:22 | 000,001,110 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2012.10.22 17:54:21 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2012.10.21 12:02:11 | 503,300,731 | ---- | C] () -- C:\Windows\MEMORY.DMP
    [2012.10.20 21:03:48 | 000,001,439 | ---- | C] () -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Internet Explorer.lnk
    [2012.10.20 19:58:08 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
    [2012.10.20 19:58:08 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
    [2012.10.20 18:25:03 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
    [2012.10.20 18:16:55 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
    [2012.10.20 18:13:59 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    [2012.10.20 18:13:59 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
    [2012.10.20 18:07:34 | 000,013,202 | ---- | C] () -- C:\Windows\instwcli.inf
    [2012.10.20 18:07:33 | 000,015,565 | ---- | C] () -- C:\Windows\SysNative\drivers\fwlanusbn.bin
    [2012.10.20 18:04:56 | 000,001,412 | ---- | C] () -- C:\Users\*****\Desktop\Games.lnk
    [2012.10.19 22:43:47 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
    [2012.10.19 22:37:04 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_bcmwlhigh 664_01009.Wdf
    [2012.10.19 22:16:00 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
    [2012.10.19 21:59:02 | 000,001,412 | ---- | C] () -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Social Games.lnk
    [2012.10.19 21:55:34 | 000,007,195 | ---- | C] () -- C:\Windows\SysNative\THXCfgUninstall64.ini
    [2012.10.19 21:55:34 | 000,006,925 | ---- | C] () -- C:\Windows\SysNative\THXCfg64.ini
    [2012.10.19 21:55:34 | 000,001,424 | ---- | C] () -- C:\Windows\THXCfg_SP_APOIM.ini
    [2012.10.19 21:55:34 | 000,001,323 | ---- | C] () -- C:\Windows\THXCfg_HP_APOIM.ini
    [2012.10.19 21:55:34 | 000,001,323 | ---- | C] () -- C:\Windows\THXCfg_APOIM.ini
    [2012.10.19 21:55:33 | 000,246,784 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
    [2012.10.19 21:55:33 | 000,190,464 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
    [2012.10.19 21:55:33 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
    [2012.10.19 21:55:33 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
    [2012.10.19 21:55:33 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc
    [2012.10.19 21:55:17 | 000,001,009 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
    [2012.10.19 21:54:22 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
    [2012.10.19 21:53:14 | 000,000,003 | ---- | C] () -- C:\Users\*****\AppData\Local\user_data.ini
    [2012.10.19 21:51:10 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
    [2012.10.19 21:50:08 | 002,261,764 | ---- | C] () -- C:\Windows\SysNative\drivers\rtvienna.dat
    [2012.10.19 21:43:16 | 000,001,405 | ---- | C] () -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\ Start Menu\Programs\Internet Explorer (64-bit).lnk
    [2012.10.19 21:35:48 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
    [2012.10.19 21:35:44 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
    [2012.10.19 21:27:39 | 2131,468,287 | -HS- | C] () -- C:\hiberfil.sys

    ========== ZeroAccess Check ==========

    [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

    [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

    [HKEY_CURRENT_USER\Software\Classes\Wow6432node\cls id\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

    [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

    [HKEY_CURRENT_USER\Software\Classes\Wow6432node\cls id\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc8 7-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
    "" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Apartment

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\cl sid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
    "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Apartment

    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA 9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
    "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Free

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\cl sid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
    "" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Free

    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CD B-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
    "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Both

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\cl sid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

    ========== LOP Check ==========

    [2012.10.19 21:59:02 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\DeviceVm
    [2012.10.20 18:28:06 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Origin

    ========== Purity Check ==========



    < End of report >
     
    #1 Unregistriert, 25. Oktober 2012
  2. Unregistriert
    Unregistriert Gast

    wenn guru nicht gerade hier reinschaut ist es eher unwahrscheinlich dass dir hier mit dem nötigen fachlichen Wissen geholfen werden kann.

    da hast du besser du fragst direkt in diesem forum nach: Log-Analyse und Auswertung - Trojaner-Board

    da muss man sich zwar anmelden, dieses forum ist aber extra für solche fragen ausgelegt. :)
     
    #2 Unregistriert, 25. Oktober 2012
(Du musst angemeldet oder registriert sein, um Beiträge verfassen zu können. )
Thema:

otl logfile chekcne bitte

Die Seite wird geladen...

otl logfile chekcne bitte - Similar Threads - otl logfile chekcne

 Forum Datum

Logfile von Virenscan den ich mit Emisoft durchgeführt habe.

Logfile von Virenscan den ich mit Emisoft durchgeführt habe.: Hallo, bei mir hatte sich in den letzten Tagen immer folgende Seite von alleine geöffnet: http://e. ligatus. com/ Ligatus Fallback.gif?ids=34088 Ich hab jetzt einen Virenscan durchgeführt...
 freie Fragen 3. April 2013
otl logfile chekcne bitte solved
  1. Diese Seite verwendet Cookies. Wenn du dich weiterhin auf dieser Seite aufhältst, akzeptierst du unseren Einsatz von Cookies.
    Accept Weitere Informationen
    Information ausblenden