OTL logfile created on: 09.06.2011 18:22:58 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Users\Tamox\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 53,19% Memory free
8,00 Gb Paging File | 5,91 Gb Available in Paging File | 73,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 149,05 Gb Total Space | 36,74 Gb Free Space | 24,65% Space Free | Partition Type: NTFS
Drive E: | 483,63 Mb Total Space | 3,56 Mb Free Space | 0,74% Space Free | Partition Type: FAT
Drive F: | 931,51 Gb Total Space | 85,50 Gb Free Space | 9,18% Space Free | Partition Type: NTFS
 
Computer Name: TAMOX-PC | User Name: Tamox | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Users\Tamox\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Programme\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\afwServ.exe (AVAST Software)
PRC - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
PRC - C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe ()
PRC - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe ()
PRC - C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)
PRC - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc.)
PRC - C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)
PRC - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.)
PRC - C:\Program Files (x86)\ALFA\AWUS036H Wireless LAN Utility\RtWlan.exe (Realtek Semiconductor Corp.)
PRC - C:\Program Files (x86)\ALFA\AWUS036H Wireless LAN Utility\RtlService.exe (Realtek)
PRC - C:\Program Files (x86)\Erinnerung\erinnerung.exe (P.....)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\Users\Tamox\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Programme\AVAST Software\Avast\snxhk.dll (AVAST Software)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:[b]64bit:[/b] - (avast! Firewall) -- C:\Program Files\AVAST Software\Avast\afwServ.exe (AVAST Software)
SRV:[b]64bit:[/b] - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:[b]64bit:[/b] - (OODefragAgent) -- C:\Program Files\OO Software\Defrag\oodag.exe (O&O Software GmbH)
SRV:[b]64bit:[/b] - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (XAudioService) -- C:\Windows\SysNative\drivers\XAudio64.exe (Conexant Systems, Inc.)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (TeamViewer6) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (afcdpsrv) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (AcrSch2Svc) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (OS Selector) -- C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (VMware NAT Service) -- C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)
SRV - (VMAuthdService) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc.)
SRV - (VMnetDHCP) -- C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)
SRV - (VMUSBArbService) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.)
SRV - (ufad-ws60) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-ufad.exe (VMware, Inc.)
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AWUS036H) -- C:\Program Files (x86)\ALFA\AWUS036H Wireless LAN Utility\RtlService.exe (Realtek)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:[b]64bit:[/b] - (FTDIBUS) -- C:\Windows\SysNative\drivers\ftdibus.sys (FTDI Ltd.)
DRV:[b]64bit:[/b] - (FTSER2K) -- C:\Windows\SysNative\drivers\ftser2k.sys (FTDI Ltd.)
DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:[b]64bit:[/b] - (aswNdis) -- C:\Windows\SysNative\drivers\aswNdis.sys (ALWIL Software)
DRV:[b]64bit:[/b] - (afcdp) -- C:\Windows\SysNative\drivers\afcdp.sys (Acronis)
DRV:[b]64bit:[/b] - (tdrpman273) Acronis Try&Decide and Restore Points filter (build 273) -- C:\Windows\SysNative\drivers\tdrpm273.sys (Acronis)
DRV:[b]64bit:[/b] - (timounter) -- C:\Windows\SysNative\drivers\timntr.sys (Acronis)
DRV:[b]64bit:[/b] - (snapman) -- C:\Windows\SysNative\drivers\snapman.sys (Acronis)
DRV:[b]64bit:[/b] - (pcouffin) -- C:\Windows\SysNative\drivers\pcouffin.sys (VSO Software)
DRV:[b]64bit:[/b] - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:[b]64bit:[/b] - (androidusb) -- C:\Windows\SysNative\drivers\androidusb.sys (Google Inc)
DRV:[b]64bit:[/b] - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vpcvmm) -- C:\Windows\SysNative\drivers\vpcvmm.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vpcbus) -- C:\Windows\SysNative\drivers\vpchbus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vpcusb) -- C:\Windows\SysNative\drivers\vpcusb.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vpcnfltr) -- C:\Windows\SysNative\drivers\vpcnfltr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vmci) -- C:\Windows\SysNative\drivers\vmci.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (vmkbd) -- C:\Windows\SysNative\drivers\VMkbd.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (vmx86) -- C:\Windows\SysNative\drivers\vmx86.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (VMnetuserif) -- C:\Windows\SysNative\drivers\vmnetuserif.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (hcmon) -- C:\Windows\SysNative\drivers\hcmon.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (VMnetBridge) -- C:\Windows\SysNative\drivers\vmnetbridge.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (VMnetAdapter) -- C:\Windows\SysNative\drivers\vmnetadapter.sys (VMware, Inc.)
DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:[b]64bit:[/b] - (RTL8187) -- C:\Windows\SysNative\drivers\RTL8187.sys (Realtek Semiconductor Corporation                           )
DRV:[b]64bit:[/b] - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:[b]64bit:[/b] - (SrvHsfV92) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (SrvHsfWinac) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (SrvHsfHDA) -- C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:[b]64bit:[/b] - (NVENETFD) -- C:\Windows\SysNative\drivers\nvm62x64.sys (NVIDIA Corporation)
DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:[b]64bit:[/b] - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:[b]64bit:[/b] - (mcdbus) -- C:\Windows\SysNative\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:[b]64bit:[/b] - (ElbyCDIO) -- C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:[b]64bit:[/b] - (Ser2pl) -- C:\Windows\SysNative\drivers\ser2pl64.sys (Prolific Technology Inc.)
DRV:[b]64bit:[/b] - (INFUSB) -- C:\Windows\SysNative\drivers\infusb_wlh_x64.sys (WB Electronics)
DRV:[b]64bit:[/b] - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics, Inc.)
DRV:[b]64bit:[/b] - (enecir) -- C:\Windows\SysNative\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV:[b]64bit:[/b] - (HSF_DPV) -- C:\Windows\SysNative\drivers\CAX_DPV.sys (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (CAXHWAZL) -- C:\Windows\SysNative\drivers\CAXHWAZL.sys (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (winachsf) -- C:\Windows\SysNative\drivers\CAX_CNXT.sys (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:[b]64bit:[/b] - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:[b]64bit:[/b] - (rimsptsk) -- C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV:[b]64bit:[/b] - (ElbyCDFL) -- C:\Windows\SysNative\drivers\ElbyCDFL.sys (SlySoft, Inc.)
DRV:[b]64bit:[/b] - (XAudio) -- C:\Windows\SysNative\drivers\XAudio64.sys (Conexant Systems, Inc.)
DRV:[b]64bit:[/b] - (mdmxsdk) -- C:\Windows\SysNative\drivers\mdmxsdk.sys (Conexant)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (vstor2-ws60) -- C:\Program Files (x86)\VMware\VMware Workstation\vstor2-ws60.sys (VMware, Inc.)
DRV - (mcdbus) -- C:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (ElbyCDFL) -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys (SlySoft, Inc.)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=ConduitEngine&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.dark-sat-world.com/forum.php|http://www.cs-pirates.cc/forum.php|http://www.dragoncard.info/|http://bittorrentfiles.org/browse.php|http://www.boerse.bz/|http://premiere-cs.to/forum.php|http://vpscp1-md.spenelli.com:5353/login.php|http://www.sat-crew.info/wbb2/index.php|http://www.benm.at/|http://www.cccamforum.info/forum.php|http://www.navitotal.com/forums-de/index.php|http://www.s-b-m.host-tec.net/wbb2/index.php?sid=|http://geronimosden.com/index.php|http://www.cccamforum.com/forums/forumdisplay.php?f=6|http://www.dsbc.scorpion-team.to|http://www.8a8f8.com/ubbthreads.php/topics/1/secondstages#Post1|https://www.paypal.com/de/cgi-bin/webscr?cmd=_login-run|http://mail.genxxl.com/mail/|http://www.i-have-a-dreambox.com/wbb2/index.php|http://www.box-pirates.to/index.php|http://streamboard.gmc.to/wbb2/index.php|http://www.eurocardsharing.com/usercp.php|http://www.ascofun.cc/index.php|http://www.cardsharing.ws/cardsharing/private.php|http://www.digital-eliteboard.com/|http://www.satpalast.com/index.php|http://www.leecher.to/|http://www.postbank.de/|http://www.cw-share.com/forum.php|http://www.card-share.biz/|http://www.dreambox.info/dreamboxdb/|http://www.grenzgaenger-forum.de/forum/steuern-b2.0/|http://forum.thiazi.net/|https://www.dyndns.com/account/services/hosts/|http://www.inj-x.com/eshop/index.php|http://www.sat-ulc.eu/index.php?s=2aefd51d63c5e18ac681c1c8f61294b4&|http://cp.heihachi.net/cart.php?gid=10|http://www.sky.de/web/cms/de/stdlogout.jsp;jsessionid=BF006032F4A613D82069293F30ACB259.p-ng-tc3h11#|http://www.ebay.de/|http://www.volksbank-krp.de/|http://phoenix-tracker.ath.cx/browse.php|http://www.autoscout24.de/Home.aspx|https://login.i.daimler.com/internet/login?TYPE=33554432&REALMOID=06-90ad4bc0-0b7a-1058-8668-83ce79670cb3&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=uRYLDKfFlXhBjNBAtzXavlWEpsiPMeCxBTymGXbvnrHVXqAKzh4oTU1sPa75nNGj&TARGET=$SM$https%3a%2f%2flogin.i.daimler.com%2feportal%2fportal%2f"
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.9.3
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.1.0.3
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.91
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.4&q="
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.type: 0
 
FF - user.js..network.proxy.type: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port: 
FF - user.js..network.proxy.no_proxies_on: ""
 
FF - HKLM\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011.06.09 00:42:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.06 15:17:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.06 15:17:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.05.02 17:15:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\SeaMonkey 2.0.14\extensions\\Components: C:\Program Files (x86)\SeaMonkey\components [2011.05.01 16:26:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\SeaMonkey 2.0.14\extensions\\Plugins: C:\Program Files (x86)\SeaMonkey\plugins [2011.05.02 18:39:46 | 000,000,000 | ---D | M]
 
[2011.02.20 09:43:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tamox\AppData\Roaming\mozilla\Extensions
[2011.02.20 09:26:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tamox\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.02.20 09:42:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tamox\AppData\Roaming\mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
[2011.06.03 19:05:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tamox\AppData\Roaming\mozilla\Firefox\Profiles\uwhqne1t.default\extensions
[2011.02.24 20:05:34 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Tamox\AppData\Roaming\mozilla\Firefox\Profiles\uwhqne1t.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.02.24 20:05:34 | 000,000,000 | ---D | M] (Modern Modoki) -- C:\Users\Tamox\AppData\Roaming\mozilla\Firefox\Profiles\uwhqne1t.default\extensions\{4a428302-5267-4749-bb22-459b3236695f}
[2011.04.01 17:24:20 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tamox\AppData\Roaming\mozilla\Firefox\Profiles\uwhqne1t.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.19 13:59:06 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Users\Tamox\AppData\Roaming\mozilla\Firefox\Profiles\uwhqne1t.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011.05.20 20:10:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tamox\AppData\Roaming\mozilla\SeaMonkey\Profiles\282rubpb.default\extensions
[2011.03.22 23:07:38 | 000,000,000 | ---D | M] (ChatZilla) -- C:\Users\Tamox\AppData\Roaming\mozilla\SeaMonkey\Profiles\282rubpb.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
[2011.02.24 19:24:03 | 000,000,000 | ---D | M] (JavaScript Debugger) -- C:\Users\Tamox\AppData\Roaming\mozilla\SeaMonkey\Profiles\282rubpb.default\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}
[2011.02.24 19:24:03 | 000,000,000 | ---D | M] (DOM Inspector) -- C:\Users\Tamox\AppData\Roaming\mozilla\SeaMonkey\Profiles\282rubpb.default\extensions\inspector@mozilla.org
[2008.04.25 22:08:24 | 000,002,649 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\collectr.xml
[2010.11.19 20:08:16 | 000,000,913 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\conduit.xml
[2010.06.07 00:02:08 | 000,000,961 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\icqplugin-1.xml
[2010.06.24 06:54:56 | 000,000,950 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\icqplugin-2.xml
[2010.06.29 07:32:24 | 000,000,950 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\icqplugin-3.xml
[2010.07.22 19:53:06 | 000,000,950 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\icqplugin-4.xml
[2010.05.12 18:40:06 | 000,001,042 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\icqplugin.xml
[2008.12.03 09:19:32 | 000,001,632 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\live-search.xml
[2008.12.05 17:39:32 | 000,001,843 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\Mozilla\Firefox\Profiles\uwhqne1t.default\searchplugins\LiveSearch.xml
[2011.02.20 09:29:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
File not found (No name found) -- 
[2011.06.09 00:42:19 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
() (No name found) -- C:\USERS\TAMOX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\UWHQNE1T.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI
() (No name found) -- C:\USERS\TAMOX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\UWHQNE1T.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
() (No name found) -- C:\USERS\TAMOX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\UWHQNE1T.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011.05.06 15:17:10 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.05.06 15:17:12 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.05.06 15:17:12 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.06 15:17:12 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.02.24 18:30:28 | 000,002,046 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchddr.xml
[2011.05.06 15:17:12 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.05.06 15:17:12 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.05.06 15:17:12 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll ()
O2:[b]64bit:[/b] - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (FlashFXP Helper for Internet Explorer) - {E5A1691B-D188-4419-AD02-90002030B8EE} -  File not found
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [SynTPStart] C:\Programme\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe ()
O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Users\Tamox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Erinnerung.lnk = C:\Program Files (x86)\Erinnerung\erinnerung.exe (P.....)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8:[b]64bit:[/b] - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (C:\Windows\SYSTEM32\RtlGina\RtlGina.DLL) - C:\Windows\SysWOW64\RtlGina\RtlGina.dll (Realtek)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (OODBS) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011.06.09 18:08:32 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\Tamox\Desktop\OTL.exe
[2011.06.09 17:52:33 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{917A7BD7-D743-4968-B1DD-F0BCCA118F88}
[2011.06.09 01:28:48 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools 2010
[2011.06.09 01:28:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\jv16 PowerTools 2010
[2011.06.09 01:23:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FlashFXP 4
[2011.06.09 01:12:53 | 000,000,000 | ---D | C] -- C:\Users\Tamox\Desktop\GERMANIA TEXT
[2011.06.09 01:11:42 | 000,000,000 | ---D | C] -- C:\Users\Tamox\Desktop\GERMANIA
[2011.06.09 00:53:41 | 000,000,000 | ---D | C] -- C:\sfzone_profile
[2011.06.09 00:43:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security
[2011.06.09 00:43:30 | 000,280,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011.06.09 00:43:30 | 000,022,360 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011.06.09 00:43:25 | 000,127,320 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFW.sys
[2011.06.09 00:43:03 | 000,253,784 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdis2.sys
[2011.06.09 00:43:01 | 000,031,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011.06.09 00:43:00 | 000,053,592 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011.06.09 00:42:57 | 000,505,176 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.06.09 00:42:55 | 000,064,344 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011.06.09 00:42:51 | 000,238,968 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.06.09 00:42:23 | 000,012,368 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswNdis.sys
[2011.06.09 00:42:07 | 000,190,016 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011.06.09 00:42:07 | 000,040,648 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.06.09 00:42:02 | 000,000,000 | ---D | C] -- C:\Programme\AVAST Software
[2011.06.09 00:42:02 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2011.06.08 23:33:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Simply Super Software
[2011.06.08 22:36:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trojan Remover
[2011.06.08 21:15:54 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.06.08 21:15:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.06.08 21:15:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.06.08 20:42:29 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{B3563941-E545-474C-AEF4-219C7697D8F8}
[2011.06.08 08:21:32 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2011.06.08 08:21:32 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2011.06.08 08:21:32 | 002,303,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2011.06.08 08:21:32 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9.dll
[2011.06.08 08:21:32 | 001,492,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011.06.08 08:21:32 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011.06.08 08:21:32 | 000,818,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.06.08 08:21:32 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.06.08 08:21:32 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.06.08 08:21:32 | 000,603,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.06.08 08:21:32 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.06.08 08:21:32 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2011.06.08 08:21:32 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2011.06.08 08:21:32 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.06.08 08:21:32 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2011.06.08 08:21:32 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.06.08 08:21:32 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtmsft.dll
[2011.06.08 08:21:32 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2011.06.08 08:21:32 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2011.06.08 08:21:32 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.06.08 08:21:32 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011.06.08 08:21:32 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011.06.08 08:21:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2011.06.08 08:21:32 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtrans.dll
[2011.06.08 08:21:32 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2011.06.08 08:21:32 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2011.06.08 08:21:32 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.06.08 08:21:32 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2011.06.08 08:21:32 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2011.06.08 08:21:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2011.06.08 08:21:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2011.06.08 08:21:32 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2011.06.08 08:21:32 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msls31.dll
[2011.06.08 08:21:32 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2011.06.08 08:21:32 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2011.06.08 08:21:32 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2011.06.08 08:21:32 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2011.06.08 08:21:32 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2011.06.08 08:21:32 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.06.08 08:21:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2011.06.08 08:21:32 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2011.06.08 08:21:32 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2011.06.08 08:21:32 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2011.06.08 08:21:32 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.06.08 08:21:32 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2011.06.08 08:21:32 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2011.06.08 08:21:32 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2011.06.08 08:21:32 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2011.06.08 08:21:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2011.06.08 08:21:32 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.06.08 08:21:32 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2011.06.08 08:21:32 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011.06.08 08:21:32 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2011.06.08 08:21:32 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011.06.08 08:21:32 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2011.06.08 08:21:32 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2011.06.08 08:21:32 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2011.06.08 08:21:32 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2011.06.08 08:21:32 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011.06.08 08:21:32 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011.06.08 08:21:32 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2011.06.08 08:21:32 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2011.06.08 08:21:32 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.06.08 08:21:32 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2011.06.08 08:21:32 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2011.06.08 08:21:32 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2011.06.08 08:21:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2011.06.08 08:21:32 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2011.06.08 08:21:32 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2011.06.08 08:21:32 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2011.06.08 08:21:32 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2011.06.08 08:21:32 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imgutil.dll
[2011.06.08 08:21:32 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2011.06.08 08:21:32 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.06.08 08:21:32 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.06.08 08:21:32 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2011.06.08 08:21:32 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.06.08 08:21:32 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.06.08 07:35:45 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{06EA3A80-F797-4AEE-88E4-9A22D0B9305A}
[2011.06.07 19:14:32 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{675A5E10-CB07-4F69-9642-F3A986FA8E35}
[2011.06.06 18:34:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011.06.06 18:33:38 | 000,000,000 | ---D | C] -- C:\Programme\iTunes
[2011.06.06 18:33:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2011.06.06 18:33:38 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2011.06.06 18:31:26 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour
[2011.06.06 18:31:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2011.06.06 18:27:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Safari
[2011.06.06 17:58:58 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{032C56BC-2FBC-42ED-A7B3-C4815C8AA9DB}
[2011.06.05 21:16:20 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{FBEAEEA0-919C-43E7-8AD2-D97A8963A344}
[2011.06.04 18:02:08 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{32E9494D-F0AA-408D-901F-18C8173D802E}
[2011.06.04 06:01:55 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{E78D7B8C-9D73-4D69-895B-C4872122C83D}
[2011.06.03 19:12:55 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Tamox\Desktop\HiJackThis204.exe
[2011.06.03 18:01:29 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{B2688BED-7EB0-4497-8EAD-A6C1E0D2A6C4}
[2011.06.02 17:22:58 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{16D3D112-96EA-465D-901D-BD138644B05F}
[2011.06.01 17:26:12 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{6B9CD5CE-AB8F-4CAD-B7AE-CF9E22B6235A}
[2011.05.31 18:46:24 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{B80D0E0E-A3C3-44F7-B4E1-7B9A026B0610}
[2011.05.31 00:04:08 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{7492F721-938C-46AD-84D0-E13626DAA654}
[2011.05.30 11:56:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft
[2011.05.30 11:56:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlySoft
[2011.05.30 11:03:29 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{4297E01D-843F-42E3-BF0F-926454EB90A1}
[2011.05.29 19:42:32 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{E34D486B-7DA5-4C7B-B82A-1C13811B06D3}
[2011.05.28 10:39:39 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{9504AD22-D1E9-47EB-9D6D-A11E8ED97803}
[2011.05.27 18:05:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Downloader
[2011.05.27 18:05:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YouTube Downloader
[2011.05.27 15:55:55 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{2D1EF79F-24EB-457D-8FE2-91319EF18450}
[2011.05.26 14:10:52 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{4C985DC2-6161-4C34-B8DB-D504690898B3}
[2011.05.25 14:14:30 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.05.25 14:10:22 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{4F63DD91-9699-490B-B62E-7302A0E9DDE3}
[2011.05.24 19:21:28 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{18CB0150-084C-462A-B7DB-E9BAE6D584A9}
[2011.05.24 17:02:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.05.24 17:02:48 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.05.24 16:58:49 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011.05.24 14:23:03 | 000,000,000 | ---D | C] -- C:\Users\Tamox\Desktop\Kosamui
[2011.05.24 07:21:02 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{3E623728-654A-46D3-80FA-464C1264C64F}
[2011.05.23 17:41:00 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{86BF1BB9-8F79-4175-997A-DD649419AF7E}
[2011.05.22 11:21:33 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{704B5014-9F97-4F05-AC8A-9EE10CFC7760}
[2011.05.21 12:09:21 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{2AB559B0-B056-4E24-BC66-A96688F926E5}
[2011.05.20 12:23:13 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{81EA3D74-A526-4D8E-9861-D794FEC0D48D}
[2011.05.19 13:49:39 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{C79902C9-9784-40F0-9018-514EA14AB70F}
[2011.05.18 13:15:19 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{5736A17D-013C-46E6-8C28-89CF98391DEB}
[2011.05.17 11:08:38 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{FA3E0DC5-BFE2-4079-AF8E-3A394F31F16E}
[2011.05.16 09:46:39 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{5BE1AF97-E42A-488D-A6D1-D13B68002658}
[2011.05.14 11:01:31 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{A0C9BD11-E3F4-485D-A3E2-E91DC6FA3F1D}
[2011.05.13 12:20:04 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{112C2D78-A532-462F-9567-A189D52A1F8A}
[2011.05.12 14:25:43 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{56379F58-E27C-4641-9248-DB2BE4B8570D}
[2011.05.12 00:18:14 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{93E906FD-5346-4DDA-8456-8B0160DE921E}
[2011.05.11 12:22:35 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.05.11 12:22:33 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.05.11 12:22:32 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.05.11 12:17:47 | 000,000,000 | ---D | C] -- C:\Users\Tamox\AppData\Local\{81171941-8190-457E-A410-EC1EC66E5B5F}
[2011.02.20 11:13:35 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Tamox\AppData\Roaming\pcouffin.sys
[2011.02.15 15:30:10 | 000,121,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2010.02.04 00:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011.06.09 18:08:42 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Tamox\Desktop\OTL.exe
[2011.06.09 17:59:33 | 000,013,760 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.09 17:59:33 | 000,013,760 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.09 17:58:01 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3572513325-1199987832-3120796489-1001UA.job
[2011.06.09 17:51:55 | 000,000,036 | ---- | M] () -- C:\Windows\SysWow64\erin.pfd
[2011.06.09 17:51:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.09 17:51:43 | 3220,377,600 | -HS- | M] () -- C:\hiberfil.sys
[2011.06.09 17:51:41 | 000,267,960 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor
[2011.06.09 07:58:00 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3572513325-1199987832-3120796489-1001Core.job
[2011.06.09 03:43:48 | 000,001,538 | ---- | M] () -- C:\Users\Tamox\Desktop\iexplore -.lnk
[2011.06.09 03:23:28 | 000,139,996 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.06.09 02:24:22 | 000,000,600 | ---- | M] () -- C:\Users\Tamox\AppData\Roaming\winscp.rnd
[2011.06.09 02:09:22 | 000,001,260 | ---- | M] () -- C:\Users\Tamox\Desktop\Dreamset -.lnk
[2011.06.09 02:09:21 | 000,001,179 | ---- | M] () -- C:\Users\Tamox\Desktop\WinSCP.lnk
[2011.06.09 02:09:15 | 000,001,405 | ---- | M] () -- C:\Users\Tamox\Desktop\CCcamInfoPHP v0.9.lnk
[2011.06.09 01:28:56 | 000,000,022 | -HS- | M] () -- C:\Users\Tamox\AppData\Roaming\Sys6925.Config Collection.sys
[2011.06.09 01:28:56 | 000,000,022 | -HS- | M] () -- C:\Windows\Sys3390 SettingsCollection.bin
[2011.06.09 01:28:48 | 000,001,906 | ---- | M] () -- C:\Users\Tamox\Desktop\jv16 PowerTools 2010.lnk
[2011.06.09 01:23:53 | 000,001,038 | ---- | M] () -- C:\Users\Public\Desktop\FlashFXP.lnk
[2011.06.09 01:18:05 | 000,001,480 | ---- | M] () -- C:\Users\Tamox\Desktop\Cleanup.lnk
[2011.06.09 00:53:41 | 000,002,136 | ---- | M] () -- C:\Users\Tamox\Desktop\Chromium.lnk
[2011.06.09 00:43:31 | 000,001,854 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2011.06.09 00:42:55 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011.06.08 08:44:54 | 000,000,036 | ---- | M] () -- C:\Users\Tamox\AppData\Local\housecall.guid.cache
[2011.06.08 08:21:32 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2011.06.08 08:21:32 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2011.06.08 08:21:32 | 002,303,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2011.06.08 08:21:32 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9.dll
[2011.06.08 08:21:32 | 001,492,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011.06.08 08:21:32 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011.06.08 08:21:32 | 000,818,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.06.08 08:21:32 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.06.08 08:21:32 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.06.08 08:21:32 | 000,603,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.06.08 08:21:32 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.06.08 08:21:32 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2011.06.08 08:21:32 | 000,452,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2011.06.08 08:21:32 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.06.08 08:21:32 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2011.06.08 08:21:32 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.06.08 08:21:32 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtmsft.dll
[2011.06.08 08:21:32 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2011.06.08 08:21:32 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2011.06.08 08:21:32 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.06.08 08:21:32 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011.06.08 08:21:32 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011.06.08 08:21:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2011.06.08 08:21:32 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtrans.dll
[2011.06.08 08:21:32 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2011.06.08 08:21:32 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2011.06.08 08:21:32 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.06.08 08:21:32 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2011.06.08 08:21:32 | 000,165,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2011.06.08 08:21:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2011.06.08 08:21:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2011.06.08 08:21:32 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2011.06.08 08:21:32 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msls31.dll
[2011.06.08 08:21:32 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2011.06.08 08:21:32 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2011.06.08 08:21:32 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2011.06.08 08:21:32 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2011.06.08 08:21:32 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2011.06.08 08:21:32 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.06.08 08:21:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2011.06.08 08:21:32 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2011.06.08 08:21:32 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2011.06.08 08:21:32 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2011.06.08 08:21:32 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.06.08 08:21:32 | 000,114,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2011.06.08 08:21:32 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2011.06.08 08:21:32 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2011.06.08 08:21:32 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2011.06.08 08:21:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2011.06.08 08:21:32 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.06.08 08:21:32 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2011.06.08 08:21:32 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011.06.08 08:21:32 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2011.06.08 08:21:32 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011.06.08 08:21:32 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2011.06.08 08:21:32 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2011.06.08 08:21:32 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2011.06.08 08:21:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2011.06.08 08:21:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011.06.08 08:21:32 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011.06.08 08:21:32 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2011.06.08 08:21:32 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2011.06.08 08:21:32 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2011.06.08 08:21:32 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2011.06.08 08:21:32 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.06.08 08:21:32 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2011.06.08 08:21:32 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2011.06.08 08:21:32 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2011.06.08 08:21:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2011.06.08 08:21:32 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2011.06.08 08:21:32 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2011.06.08 08:21:32 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2011.06.08 08:21:32 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2011.06.08 08:21:32 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\imgutil.dll
[2011.06.08 08:21:32 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2011.06.08 08:21:32 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.06.08 08:21:32 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.06.08 08:21:32 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2011.06.08 08:21:32 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.06.08 08:21:32 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.06.06 18:34:14 | 000,001,796 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.06.06 18:27:16 | 000,002,491 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk
[2011.06.03 19:13:00 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Tamox\Desktop\HiJackThis204.exe
[2011.06.02 19:23:16 | 000,000,600 | ---- | M] () -- C:\Users\Tamox\AppData\Local\PUTTY.RND
[2011.05.31 21:57:42 | 001,538,548 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.05.31 21:57:42 | 000,675,210 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.05.31 21:57:42 | 000,624,050 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.05.31 21:57:42 | 000,137,040 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.05.31 21:57:42 | 000,112,764 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.05.30 12:05:20 | 000,000,041 | -HS- | M] () -- C:\ProgramData\.zreglib
[2011.05.30 11:56:14 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\CloneCD.lnk
[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.05.29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.05.27 22:52:03 | 000,005,120 | ---- | M] () -- C:\Users\Tamox\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.27 18:05:28 | 000,001,139 | ---- | M] () -- C:\Users\Public\Desktop\YouTube Downloader.lnk
[2011.05.24 16:58:49 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011.06.09 18:12:15 | 000,286,208 | ---- | C] () -- C:\Users\Tamox\Desktop\gmer.exe
[2011.06.09 03:43:48 | 000,001,538 | ---- | C] () -- C:\Users\Tamox\Desktop\iexplore -.lnk
[2011.06.09 03:23:28 | 000,139,996 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.06.09 01:28:56 | 000,000,022 | -HS- | C] () -- C:\Users\Tamox\AppData\Roaming\Sys6925.Config Collection.sys
[2011.06.09 01:28:56 | 000,000,022 | -HS- | C] () -- C:\Windows\Sys3390 SettingsCollection.bin
[2011.06.09 01:28:48 | 000,001,906 | ---- | C] () -- C:\Users\Tamox\Desktop\jv16 PowerTools 2010.lnk
[2011.06.09 01:23:53 | 000,001,050 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashFXP.lnk
[2011.06.09 01:23:53 | 000,001,038 | ---- | C] () -- C:\Users\Public\Desktop\FlashFXP.lnk
[2011.06.09 00:53:41 | 000,002,136 | ---- | C] () -- C:\Users\Tamox\Desktop\Chromium.lnk
[2011.06.09 00:43:31 | 000,001,854 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2011.06.08 08:44:54 | 000,000,036 | ---- | C] () -- C:\Users\Tamox\AppData\Local\housecall.guid.cache
[2011.06.08 08:21:32 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2011.06.08 08:21:32 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2011.06.06 18:34:14 | 000,001,796 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.06.06 18:27:16 | 000,002,503 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
[2011.06.06 18:27:16 | 000,002,491 | ---- | C] () -- C:\Users\Public\Desktop\Safari.lnk
[2011.05.30 12:05:20 | 000,000,041 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.05.30 11:56:14 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\CloneCD.lnk
[2011.05.27 18:05:28 | 000,001,139 | ---- | C] () -- C:\Users\Public\Desktop\YouTube Downloader.lnk
[2011.05.11 19:39:21 | 001,646,592 | ---- | C] () -- C:\Users\Tamox\Desktop\BlueloaderV2.EXE
[2011.04.18 19:07:46 | 000,611,840 | ---- | C] () -- C:\Windows\SysWow64\DVD43.dll
[2011.04.05 15:25:22 | 000,005,120 | ---- | C] () -- C:\Users\Tamox\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.03.26 15:42:08 | 000,005,259 | ---- | C] () -- C:\Users\Tamox\AppData\Roaming\servetome-fonts.conf
[2011.03.11 10:41:08 | 003,181,056 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll
[2011.03.07 05:08:32 | 000,080,896 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011.02.26 13:19:28 | 000,226,365 | ---- | C] () -- C:\Windows\hpoins18.dat
[2011.02.26 13:19:28 | 000,005,355 | ---- | C] () -- C:\Windows\hpomdl18.dat
[2011.02.25 14:12:14 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011.02.24 19:21:39 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.02.21 09:20:29 | 000,000,600 | ---- | C] () -- C:\Users\Tamox\AppData\Local\PUTTY.RND
[2011.02.20 11:23:39 | 001,562,536 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.02.20 11:17:37 | 000,001,044 | ---- | C] () -- C:\Users\Tamox\AppData\Roaming\vso_ts_preview.xml
[2011.02.20 11:13:35 | 000,099,384 | ---- | C] () -- C:\Users\Tamox\AppData\Roaming\inst.exe
[2011.02.20 11:13:35 | 000,007,859 | ---- | C] () -- C:\Users\Tamox\AppData\Roaming\pcouffin.cat
[2011.02.20 11:13:35 | 000,001,167 | ---- | C] () -- C:\Users\Tamox\AppData\Roaming\pcouffin.inf
[2011.02.20 10:42:29 | 000,000,600 | ---- | C] () -- C:\Users\Tamox\AppData\Roaming\winscp.rnd
[2011.02.20 09:26:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.02.20 09:14:04 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
[2010.06.23 12:35:52 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.06.23 12:35:52 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.03.15 05:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2007.02.05 20:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011.04.07 07:08:14 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\.servetome-fontconfig
[2011.02.20 17:52:40 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\Acronis
[2011.02.20 10:37:44 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\FlashFXP
[2011.02.25 18:44:53 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\GetRightToGo
[2011.05.12 18:57:03 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\ImgBurn
[2011.02.21 17:12:07 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\NetMeter
[2011.02.22 13:54:54 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\Notepad++
[2011.03.10 23:52:03 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\SpeedProject
[2011.03.11 16:26:21 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\TeamViewer
[2011.02.20 09:26:36 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\Thunderbird
[2011.02.20 10:55:46 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\TuneUp Software
[2011.06.09 17:53:18 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\uTorrent
[2011.03.25 17:59:19 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\VideoStream
[2011.03.21 22:01:56 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\Vso
[2011.03.17 05:33:09 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\Win7codecs
[2011.04.03 15:03:44 | 000,000,000 | ---D | M] -- C:\Users\Tamox\AppData\Roaming\WinAVI
[2011.04.27 15:06:32 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 24 bytes -> C:\Windows:646211FE29E3F408
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:5A868D37
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:CB0AACC9

< End of report >