API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Nov 21st, 2012
56
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 42.86 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 21.11.2012 18:13:50 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Taso\Downloads
  3. Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 2,25 Gb Total Physical Memory | 1,33 Gb Available Physical Memory | 58,98% Memory free
  8. 4,50 Gb Paging File | 3,46 Gb Available in Paging File | 76,96% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 931,51 Gb Total Space | 864,06 Gb Free Space | 92,76% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: TASO-PC | User Name: Taso | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2012.11.21 18:12:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Taso\Downloads\OTL.exe
  21. PRC - [2012.11.10 18:28:14 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
  22. PRC - [2012.10.27 10:53:05 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
  23. PRC - [2012.10.09 09:53:36 | 004,441,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Taso\AppData\Local\Akamai\netsession_win.exe
  24. PRC - [2012.07.27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
  25. PRC - [2011.04.06 19:29:22 | 000,026,624 | ---- | M] () -- C:\Users\Taso\AppData\Roaming\Windows Taskbar\UserTile.exe
  26. PRC - [2011.03.28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
  27. PRC - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
  28. PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  29. PRC - [2011.01.17 18:50:34 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.exe
  30. PRC - [2011.01.17 18:50:34 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.bin
  31. PRC - [2010.11.20 22:29:49 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
  32. PRC - [2009.07.14 02:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
  33. PRC - [2009.04.14 07:43:42 | 000,604,704 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SOUNDMAN.EXE
  34.  
  35.  
  36. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  37.  
  38. MOD - [2012.11.13 14:06:32 | 000,158,624 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl
  39. MOD - [2012.11.13 14:06:30 | 000,108,960 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl
  40. MOD - [2012.11.13 14:06:28 | 000,554,400 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
  41. MOD - [2012.11.13 14:06:28 | 000,528,288 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy 2\JSDialogPack150.bpl
  42. MOD - [2012.11.13 14:06:28 | 000,416,160 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl
  43. MOD - [2012.11.10 18:28:14 | 014,586,808 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_110.dll
  44. MOD - [2012.10.27 10:53:05 | 002,295,264 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
  45. MOD - [2012.04.23 23:35:09 | 000,630,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
  46. MOD - [2012.03.22 16:04:02 | 000,985,088 | ---- | M] () -- C:\Programme\OpenOffice.org 3\program\libxml2.dll
  47. MOD - [2012.03.22 16:04:02 | 000,170,496 | ---- | M] () -- C:\Programme\OpenOffice.org 3\program\libxslt.dll
  48. MOD - [2012.03.21 23:32:36 | 005,025,792 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
  49. MOD - [2012.02.11 00:31:40 | 004,218,880 | ---- | M] () -- C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
  50. MOD - [2012.01.08 14:41:12 | 000,093,696 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll
  51. MOD - [2012.01.04 03:51:03 | 003,190,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
  52. MOD - [2012.01.04 03:50:59 | 004,550,656 | ---- | M] () -- C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
  53. MOD - [2011.07.18 22:04:08 | 000,296,448 | ---- | M] () -- C:\Programme\Notepad++\NppShell_04.dll
  54. MOD - [2011.04.06 19:29:22 | 000,026,624 | ---- | M] () -- C:\Users\Taso\AppData\Roaming\Windows Taskbar\UserTile.exe
  55. MOD - [2011.04.06 16:36:12 | 000,061,440 | ---- | M] () -- C:\Users\Taso\AppData\Roaming\Windows Taskbar\AxInterop.WMPLib.dll
  56. MOD - [2011.04.06 14:56:00 | 000,010,752 | ---- | M] () -- C:\Users\Taso\AppData\Roaming\Windows Taskbar\UserTileLib.dll
  57. MOD - [2010.11.13 00:19:05 | 000,434,176 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
  58. MOD - [2010.11.13 00:19:04 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
  59. MOD - [2009.06.10 22:22:40 | 000,010,752 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
  60.  
  61.  
  62. [color=#E56717]========== Services (SafeList) ==========[/color]
  63.  
  64. SRV - [2012.11.21 16:53:44 | 000,539,984 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  65. SRV - [2012.11.10 18:28:14 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  66. SRV - [2012.10.27 10:53:05 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  67. SRV - [2012.07.27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  68. SRV - [2012.07.17 15:15:01 | 004,419,392 | ---- | M] () [Disabled | Stopped] -- c:\program files\common files\akamai/netsession_win_4f7fccd.dll -- (Akamai)
  69. SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
  70. SRV - [2012.03.19 12:38:47 | 002,666,880 | ---- | M] (TeamViewer GmbH) [Disabled | Stopped] -- C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
  71. SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
  72. SRV - [2010.11.20 22:29:49 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
  73. SRV - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
  74. SRV - [2009.07.14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
  75. SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  76. SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
  77. SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
  78.  
  79.  
  80. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  81.  
  82. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
  83. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
  84. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
  85. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
  86. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
  87. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
  88. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva390.sys -- (XDva390)
  89. DRV - [2012.11.21 18:15:35 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
  90. DRV - [2012.09.07 17:04:46 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
  91. DRV - [2011.04.20 03:06:02 | 001,570,304 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athur.sys -- (athur)
  92. DRV - [2010.11.20 22:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  93. DRV - [2010.11.20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
  94. DRV - [2010.11.20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
  95. DRV - [2010.11.20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
  96. DRV - [2010.11.20 22:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  97. DRV - [2010.11.20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
  98. DRV - [2010.11.20 22:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
  99. DRV - [2010.11.20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
  100. DRV - [2010.11.20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
  101. DRV - [2010.07.01 14:21:14 | 000,034,896 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
  102. DRV - [2009.08.18 03:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
  103. DRV - [2009.07.14 01:18:07 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
  104. DRV - [2009.07.14 01:14:49 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDScan.sys -- (WSDScan)
  105. DRV - [2009.06.18 19:45:02 | 004,172,832 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVAC.SYS -- (ALCXWDM)
  106. DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
  107.  
  108.  
  109. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  110.  
  111.  
  112. [color=#E56717]========== Internet Explorer ==========[/color]
  113.  
  114. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  115. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  116.  
  117. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultNetworkProfile = 510039857
  118. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
  119. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
  120. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B5 98 03 3A 09 B5 CD 01 [binary data]
  121. IE - HKCU\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No CLSID value found
  122. IE - HKCU\..\SearchScopes,DefaultScope = {6CCB1D31-6522-4FA5-BABB-AA0C1276EB5F}
  123. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  124. IE - HKCU\..\SearchScopes\{6CCB1D31-6522-4FA5-BABB-AA0C1276EB5F}: "URL" = http://search.softonic.com/MON1203T14/tb_v1?q={searchTerms}&SearchSource=4&cc=
  125. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  126. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
  127.  
  128. [color=#E56717]========== FireFox ==========[/color]
  129.  
  130. FF - prefs.js..browser.startup.homepage: "about:home"
  131. FF - prefs.js..extensions.enabledAddons: youtubeunblocker@unblocker.yt:0.1.0
  132. FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}:6.0.35
  133. FF - prefs.js..network.proxy.type: 0
  134.  
  135.  
  136. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
  137. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
  138. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  139. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
  140. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
  141. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll File not found
  142. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  143. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  144.  
  145. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.27 10:53:05 | 000,000,000 | ---D | M]
  146. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  147. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.27 10:53:05 | 000,000,000 | ---D | M]
  148. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  149.  
  150. [2012.03.05 14:38:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Taso\AppData\Roaming\mozilla\Extensions
  151. [2012.11.21 17:26:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Taso\AppData\Roaming\mozilla\Firefox\Profiles\4ur18ef3.default\extensions
  152. [2012.03.28 18:31:47 | 000,010,013 | ---- | M] () (No name found) -- C:\Users\Taso\AppData\Roaming\mozilla\firefox\profiles\4ur18ef3.default\extensions\youtubeunblocker@unblocker.yt.xpi
  153. [2012.11.21 17:26:20 | 000,035,785 | ---- | M] () (No name found) -- C:\Users\Taso\AppData\Roaming\mozilla\firefox\profiles\4ur18ef3.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
  154. [2012.07.27 20:20:20 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\Taso\AppData\Roaming\mozilla\firefox\profiles\4ur18ef3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  155. [2012.03.20 22:30:18 | 000,002,062 | ---- | M] () -- C:\Users\Taso\AppData\Roaming\mozilla\firefox\profiles\4ur18ef3.default\searchplugins\softonic.xml
  156. [2012.10.27 10:52:56 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
  157. [2012.10.27 10:52:56 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
  158. [2012.10.27 10:52:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
  159. [2012.10.27 10:52:56 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
  160. [2012.10.27 10:53:05 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
  161. [2012.02.16 12:02:53 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
  162. [2012.09.11 18:51:44 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
  163. [2012.02.16 12:02:53 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
  164. [2012.02.16 12:02:53 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
  165. [2012.02.16 12:02:53 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
  166. [2012.02.16 12:02:53 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
  167.  
  168. O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  169. O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  170. O4 - HKLM..\Run: [SoundMan] C:\Windows\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
  171. O4 - HKCU..\Run: [ads] C:\Windows\adsclick.exe (Chien)
  172. O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Taso\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
  173. O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
  174. O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
  175. O4 - HKCU..\Run: [Windows Taskbar] C:\Users\Taso\AppData\Roaming\Windows Taskbar\UserTile.exe ()
  176. O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
  177. O4 - Startup: C:\Users\Taso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
  178. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  179. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  180. O8 - Extra context menu item: Free YouTube Download - C:\Users\Taso\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
  181. O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Taso\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
  182. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
  183. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  184. O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  185. O13 - gopher Prefix: missing
  186. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
  187. O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
  188. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
  189. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  190. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  191. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{876573FD-6F55-464F-8F37-4533EC6A0014}: DhcpNameServer = 192.168.1.1
  192. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  193. O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
  194. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  195. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  196. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  197. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  198. O32 - HKLM CDRom: AutoRun - 1
  199. O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  200. O34 - HKLM BootExecute: (autocheck autochk *)
  201. O35 - HKLM\..comfile [open] -- "%1" %*
  202. O35 - HKLM\..exefile [open] -- "%1" %*
  203. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  204. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  205. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  206. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  207. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  208.  
  209. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  210.  
  211. [2012.11.21 18:15:17 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
  212. [2012.11.21 18:15:16 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Roaming\Malwarebytes
  213. [2012.11.21 18:15:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  214. [2012.11.21 18:15:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  215. [2012.11.21 18:15:04 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
  216. [2012.11.21 18:15:04 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
  217. [2012.11.21 17:47:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
  218. [2012.11.21 17:43:36 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy 2
  219. [2012.11.21 17:42:59 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Local\Programs
  220. [2012.11.21 16:58:28 | 000,000,000 | ---D | C] -- C:\26badbfb7e574f22077144a96ce29f
  221. [2012.11.18 23:48:33 | 000,000,000 | ---D | C] -- C:\2205ef480dc96d2e933c83
  222. [2012.11.18 23:47:59 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
  223. [2012.11.18 23:47:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
  224. [2012.11.18 23:47:36 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
  225. [2012.11.18 23:47:35 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
  226. [2012.11.18 23:47:35 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
  227. [2012.11.18 23:43:13 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
  228. [2012.11.18 23:43:12 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
  229. [2012.11.18 23:43:12 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
  230. [2012.11.18 23:43:12 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
  231. [2012.11.18 23:43:12 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
  232. [2012.11.18 23:43:10 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
  233. [2012.11.18 23:43:10 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
  234. [2012.11.18 23:43:09 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
  235. [2012.11.18 17:57:56 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  236. [2012.11.18 17:52:40 | 000,040,960 | ---- | C] (Chien) -- C:\Windows\adsclick.exe
  237. [2012.11.18 16:45:13 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Local\{AA204C51-6CC6-4DD0-AD36-BA78C295C46B}
  238. [2012.11.18 16:29:24 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  239. [2012.11.18 16:29:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  240. [2012.11.18 16:29:19 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
  241. [2012.11.18 15:50:46 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
  242. [2012.11.18 15:50:45 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
  243. [2012.11.18 15:50:45 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
  244. [2012.11.18 15:50:41 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
  245. [2012.11.18 15:50:40 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
  246. [2012.11.18 15:50:38 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
  247. [2012.11.18 15:50:38 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
  248. [2012.11.15 13:04:38 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crossfire Europe
  249. [2012.11.15 13:04:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossfire Europe
  250. [2012.11.15 12:57:28 | 000,000,000 | ---D | C] -- C:\SG Interactive
  251. [2012.11.15 12:47:30 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
  252. [2012.11.15 12:40:54 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Local\MGTEK
  253. [2012.11.15 12:39:27 | 000,000,000 | ---D | C] -- C:\ProgramData\MGTEK
  254. [2012.11.14 20:23:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
  255. [2012.11.14 20:22:07 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Local\Deployment
  256. [2012.11.14 20:22:07 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Local\Apps
  257. [2012.11.10 18:27:27 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
  258. [2012.11.07 23:19:01 | 000,000,000 | -H-D | C] -- C:\Program Files\Common Files\EAInstaller
  259. [2012.11.07 23:19:00 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
  260. [2012.11.07 23:19:00 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll
  261. [2012.11.07 23:19:00 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
  262. [2012.11.07 23:18:59 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
  263. [2012.11.07 23:18:59 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll
  264. [2012.11.07 23:18:59 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll
  265. [2012.11.07 23:18:59 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
  266. [2012.11.07 23:18:58 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll
  267. [2012.11.07 23:18:58 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll
  268. [2012.11.07 23:18:58 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll
  269. [2012.11.07 23:18:58 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll
  270. [2012.11.07 23:18:58 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll
  271. [2012.11.07 23:18:57 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll
  272. [2012.11.07 23:18:57 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll
  273. [2012.11.07 23:18:57 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll
  274. [2012.11.07 23:18:56 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll
  275. [2012.11.07 23:18:56 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
  276. [2012.11.07 23:18:56 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll
  277. [2012.11.07 23:18:55 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
  278. [2012.11.07 23:18:54 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll
  279. [2012.11.07 23:18:54 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll
  280. [2012.11.07 23:18:54 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll
  281. [2012.11.07 23:18:54 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll
  282. [2012.11.07 23:18:54 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll
  283. [2012.11.07 23:18:53 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
  284. [2012.11.07 23:18:53 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
  285. [2012.11.07 23:18:53 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
  286. [2012.11.07 23:18:52 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll
  287. [2012.11.07 23:18:52 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll
  288. [2012.11.07 23:18:52 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll
  289. [2012.11.07 23:18:52 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll
  290. [2012.11.07 23:18:51 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
  291. [2012.11.07 23:18:51 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll
  292. [2012.11.07 23:18:51 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
  293. [2012.11.07 23:18:51 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll
  294. [2012.11.07 23:18:51 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll
  295. [2012.11.07 23:18:50 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
  296. [2012.11.07 23:18:49 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll
  297. [2012.11.07 23:18:49 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll
  298. [2012.11.07 23:18:49 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll
  299. [2012.11.07 23:18:49 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll
  300. [2012.11.07 23:18:49 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll
  301. [2012.11.07 23:18:49 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll
  302. [2012.11.07 23:18:48 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll
  303. [2012.11.07 23:18:47 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll
  304. [2012.11.07 23:18:47 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll
  305. [2012.11.07 23:18:47 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll
  306. [2012.11.07 23:18:47 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll
  307. [2012.11.07 23:18:47 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll
  308. [2012.11.07 23:18:46 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll
  309. [2012.11.07 23:18:46 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll
  310. [2012.11.07 23:18:45 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll
  311. [2012.11.07 23:18:45 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll
  312. [2012.11.07 23:18:44 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll
  313. [2012.11.07 23:18:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll
  314. [2012.11.07 23:18:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll
  315. [2012.11.07 23:18:44 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll
  316. [2012.11.07 23:18:43 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
  317. [2012.11.07 23:18:43 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll
  318. [2012.11.07 23:18:43 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll
  319. [2012.11.07 23:18:42 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
  320. [2012.11.07 23:18:42 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll
  321. [2012.11.07 23:18:42 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll
  322. [2012.11.07 23:18:41 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll
  323. [2012.11.07 23:18:41 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll
  324. [2012.11.07 23:18:41 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll
  325. [2012.11.07 23:18:41 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
  326. [2012.11.07 23:18:40 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll
  327. [2012.11.07 23:18:40 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll
  328. [2012.11.07 23:18:40 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll
  329. [2012.11.07 23:18:39 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
  330. [2012.11.07 23:18:39 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll
  331. [2012.11.07 23:18:39 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll
  332. [2012.11.07 23:18:39 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll
  333. [2012.11.07 23:18:38 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
  334. [2012.11.07 23:18:38 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll
  335. [2012.11.07 23:18:38 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll
  336. [2012.11.07 23:18:38 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll
  337. [2012.11.07 23:18:38 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll
  338. [2012.11.07 23:18:38 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll
  339. [2012.11.07 23:18:28 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
  340. [2012.11.07 23:18:27 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll
  341. [2012.11.07 23:18:27 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll
  342. [2012.11.07 23:18:27 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll
  343. [2012.11.07 23:18:26 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll
  344. [2012.11.07 23:18:25 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll
  345. [2012.11.07 23:18:24 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll
  346. [2012.11.07 23:18:24 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll
  347. [2012.11.07 23:18:23 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll
  348. [2012.11.07 22:56:01 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Local\{944A67F9-A732-4955-B37F-A72259E66DB3}
  349. [2012.11.07 22:53:07 | 000,000,000 | ---D | C] -- C:\Users\Taso\AppData\Roaming\Origin
  350. [2012.11.07 22:34:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
  351. [2012.11.07 22:34:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
  352. [2012.10.28 14:55:54 | 000,000,000 | ---D | C] -- C:\Users\Taso\SystemRequirementsLab
  353. [2012.10.27 10:52:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  354. [2012.10.27 09:29:21 | 000,000,000 | ---D | C] -- C:\Users\Taso\Desktop\Neuer Ordner
  355. [2012.10.23 20:00:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
  356. [2012.10.23 20:00:23 | 000,157,680 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
  357. [2012.10.23 20:00:23 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
  358. [2012.10.23 20:00:23 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
  359. [4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  360.  
  361. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  362.  
  363. [2012.11.21 18:15:06 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  364. [2012.11.21 18:06:23 | 000,019,608 | ---- | M] () -- C:\Users\Taso\Desktop\Erörterung für Deutsch.odt
  365. [2012.11.21 17:52:14 | 000,021,808 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  366. [2012.11.21 17:52:14 | 000,021,808 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  367. [2012.11.21 17:44:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  368. [2012.11.21 17:44:39 | 1810,747,392 | -HS- | M] () -- C:\hiberfil.sys
  369. [2012.11.21 17:31:19 | 000,000,216 | ---- | M] () -- C:\Users\Taso\Desktop\PlanetSide 2.url
  370. [2012.11.21 16:59:54 | 000,696,132 | ---- | M] () -- C:\Windows\System32\perfh007.dat
  371. [2012.11.21 16:59:54 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  372. [2012.11.21 16:59:54 | 000,147,428 | ---- | M] () -- C:\Windows\System32\perfc007.dat
  373. [2012.11.21 16:59:54 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  374. [2012.11.21 16:51:56 | 000,296,264 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
  375. [2012.11.18 18:56:34 | 000,011,333 | ---- | M] () -- C:\XTrapd11.vxd
  376. [2012.11.18 17:57:57 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  377. [2012.11.18 17:52:40 | 000,040,960 | ---- | M] (Chien) -- C:\Windows\adsclick.exe
  378. [2012.11.15 13:53:28 | 000,015,048 | ---- | M] () -- C:\Users\Taso\Desktop\Umstände Afrika.odt
  379. [2012.11.15 13:30:45 | 000,017,333 | ---- | M] () -- C:\Users\Taso\Desktop\Konsequenzen Wassermangel.odt
  380. [2012.11.15 12:57:17 | 000,001,197 | ---- | M] () -- C:\Users\Taso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
  381. [2012.11.10 18:28:14 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
  382. [2012.11.10 18:28:14 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
  383. [2012.11.10 18:28:14 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  384. [2012.11.07 23:17:44 | 072,907,101 | ---- | M] () -- C:\Users\Taso\Desktop\BF3_Premium_Guide01_EN.pdf
  385. [2012.11.07 23:17:37 | 071,831,387 | ---- | M] () -- C:\Users\Taso\Desktop\BF3_Premium_Guide02_EN_v2.pdf
  386. [2012.11.07 23:03:01 | 000,000,274 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{1F12691C-BC3E-440A-9774-8F5728A8C121}.job
  387. [2012.10.24 19:36:09 | 000,000,094 | -H-- | M] () -- C:\Users\Taso\Desktop\.~lock.Aborigines.odt#
  388. [2012.10.23 20:14:15 | 000,022,908 | ---- | M] () -- C:\Users\Taso\Desktop\OpenDocument Text (neu).odt
  389. [4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  390.  
  391. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  392.  
  393. [2012.11.21 18:15:06 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  394. [2012.11.21 17:31:19 | 000,000,216 | ---- | C] () -- C:\Users\Taso\Desktop\PlanetSide 2.url
  395. [2012.11.18 23:48:01 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
  396. [2012.11.18 23:47:35 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
  397. [2012.11.18 20:51:47 | 000,019,608 | ---- | C] () -- C:\Users\Taso\Desktop\Erörterung für Deutsch.odt
  398. [2012.11.18 18:56:34 | 000,011,333 | ---- | C] () -- C:\XTrapd11.vxd
  399. [2012.11.18 17:57:57 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
  400. [2012.11.15 12:57:17 | 000,001,197 | ---- | C] () -- C:\Users\Taso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
  401. [2012.11.15 12:56:27 | 000,017,333 | ---- | C] () -- C:\Users\Taso\Desktop\Konsequenzen Wassermangel.odt
  402. [2012.11.15 12:56:27 | 000,015,048 | ---- | C] () -- C:\Users\Taso\Desktop\Umstände Afrika.odt
  403. [2012.11.07 23:17:41 | 072,907,101 | ---- | C] () -- C:\Users\Taso\Desktop\BF3_Premium_Guide01_EN.pdf
  404. [2012.11.07 23:17:33 | 071,831,387 | ---- | C] () -- C:\Users\Taso\Desktop\BF3_Premium_Guide02_EN_v2.pdf
  405. [2012.11.07 23:03:01 | 000,000,274 | -H-- | C] () -- C:\Windows\tasks\User_Feed_Synchronization-{1F12691C-BC3E-440A-9774-8F5728A8C121}.job
  406. [2012.10.24 19:36:09 | 000,000,094 | -H-- | C] () -- C:\Users\Taso\Desktop\.~lock.Aborigines.odt#
  407. [2012.09.12 15:32:04 | 000,007,605 | ---- | C] () -- C:\Users\Taso\AppData\Local\Resmon.ResmonCfg
  408. [2012.03.05 14:20:12 | 000,163,840 | ---- | C] () -- C:\Windows\System32\property.dll
  409. [2012.03.05 14:13:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  410. [2011.06.10 06:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
  411. [2011.04.12 02:30:05 | 000,696,132 | ---- | C] () -- C:\Windows\System32\perfh007.dat
  412. [2011.04.12 02:30:05 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
  413. [2011.04.12 02:30:05 | 000,147,428 | ---- | C] () -- C:\Windows\System32\perfc007.dat
  414. [2011.04.12 02:30:05 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
  415.  
  416. [color=#E56717]========== ZeroAccess Check ==========[/color]
  417.  
  418. [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  419.  
  420. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  421.  
  422. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  423.  
  424. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  425. "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  426. "ThreadingModel" = Apartment
  427.  
  428. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  429. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
  430. "ThreadingModel" = Free
  431.  
  432. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  433. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  434. "ThreadingModel" = Both
  435.  
  436. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!