Code:
OTL logfile created on: 13.02.2012 22:17:33 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\johnson\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
5,91 Gb Total Physical Memory | 3,88 Gb Available Physical Memory | 65,68% Memory free
11,82 Gb Paging File | 9,41 Gb Available in Paging File | 79,56% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 449,51 Gb Total Space | 53,75 Gb Free Space | 11,96% Space Free | Partition Type: NTFS
Computer Name: JOHNSON-VAIO | User Name: johnson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\johnson\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
PRC - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
PRC - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation)
PRC - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (ArcSoft, Inc.)
PRC - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\Programme\Sony\VAIO Care\listener.exe (Sony of America Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
PRC - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
PRC - C:\Windows\SysWOW64\nlssrv32.exe (Nalpeiron Ltd.)
PRC - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\b41e38edbd6dfe20997f6ea7c080aceb\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b559a471eef00081f0b5c2719d1d9623\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\356136d6f23fe3cde33dc96fbda2df0a\IAStorUtil.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\b40ad47b1338dd50c41d2c5571819a09\IAStorCommon.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d7a64c28cf0c90e6c48af4f7d6f9ed41\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
========== Win32 Services (SafeList) ==========
SRV:64bit: - (VUAgent) -- C:\Program Files\Sony\VAIO Update Common\VUAgent.exe (Sony Corporation)
SRV:64bit: - (VSNService) -- C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation)
SRV:64bit: - (DCDhcpService) -- C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe (Atheros Communication Inc.)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (VcmIAlzMgr) -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation)
SRV:64bit: - (VcmXmlIfHelper) -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe (Sony Corporation)
SRV:64bit: - (VcmINSMgr) -- C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation)
SRV:64bit: - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
SRV:64bit: - (VCService) -- C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation)
SRV:64bit: - (SampleCollector) -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation)
SRV:64bit: - (SpfService) -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (NIHardwareService) -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Native Instruments GmbH)
SRV - (CLKMSVC10_9EC60124) -- C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe (CyberLink)
SRV - (Atheros Bt&Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Atheros Commnucations)
SRV - (VAIO Event Service) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (uCamMonitor) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (ArcSoft, Inc.)
SRV - (SOHCImp) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation)
SRV - (SOHDs) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Sony Corporation)
SRV - (VCFw) -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation)
SRV - (IAStorDataMgrSvc) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (PMBDeviceInfoProvider) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (nlsX86cc) -- C:\Windows\SysWOW64\nlssrv32.exe (Nalpeiron Ltd.)
SRV - (AdobeActiveFileMonitor9.0) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (intelkmd) -- C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)
DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)
DRV:64bit: - (btath_avdt) -- C:\Windows\SysNative\drivers\btath_avdt.sys (Atheros)
DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)
DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)
DRV:64bit: - (TASCAM_US144_MK2_WDM) -- C:\Windows\SysNative\drivers\tscusb2a.sys (TASCAM)
DRV:64bit: - (TASCAM_US122L_WDM) -- C:\Windows\SysNative\drivers\tscusb2a.sys (TASCAM)
DRV:64bit: - (TASCAM_US144_MK2_MIDI) -- C:\Windows\SysNative\drivers\tscusb2m.sys (TASCAM)
DRV:64bit: - (TASCAM_US122L_MIDI) -- C:\Windows\SysNative\drivers\tscusb2m.sys (TASCAM)
DRV:64bit: - (TASCAM_US122144) -- C:\Windows\SysNative\drivers\tascusb2.sys (TASCAM)
DRV:64bit: - (IntcDAud) Intel(R) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (rimspci) -- C:\Windows\SysNative\drivers\rimssne64.sys (REDC)
DRV:64bit: - (risdsnpe) -- C:\Windows\SysNative\drivers\risdsnxc64.sys (REDC)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (L1C) -- C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.)
DRV:64bit: - (MEIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (Sftvol) -- C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) -- C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) -- C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) -- C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (SFEP) -- C:\Windows\SysNative\drivers\SFEP.sys (Sony Corporation)
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (e1yexpress) Intel(R) -- C:\Windows\SysNative\drivers\e1y60x64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (ArcSoftKsUFilter) -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys (ArcSoft, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SynasUSB) -- C:\Windows\SysNative\drivers\synUSB64.sys (SIA Syncrosoft)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.eu/vaioportal
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.t-online.de/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"
FF - prefs.js..network.proxy.type: 0
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\johnson\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\johnson\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\johnson\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.11.16 16:21:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2011.08.26 11:06:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\johnson\AppData\Roaming\mozilla\Extensions
[2011.10.02 11:28:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.11.14 15:04:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.11.14 15:04:40 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.11.14 15:04:40 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.11.14 15:04:40 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.11.14 15:04:40 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.11.14 15:04:40 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.11.14 15:04:40 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\johnson\AppData\Local\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\johnson\AppData\Local\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\johnson\AppData\Local\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\johnson\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: YouTube = C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google-Suche = C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Google-Suche = C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: Google Mail = C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [Facebook Update] C:\Users\johnson\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7CFB0B2C-C6D7-4E90-9443-109D3B6D0272}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{98595174-3099-450F-BFE0-3ADE07C6CF09}: DhcpNameServer = 195.34.133.21 195.34.133.22
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{31087e61-e1d3-11e0-9a57-f0bf9762c4a8}\Shell - "" = AutoRun
O33 - MountPoints2\{31087e61-e1d3-11e0-9a57-f0bf9762c4a8}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012.02.13 22:18:57 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{0289B294-083D-4AA5-AA6C-E850FB4558BF}
[2012.02.13 22:18:40 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{FAB2D8FC-6BBB-4E73-98A9-478F3BC581ED}
[2012.02.13 19:35:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.02.13 19:35:13 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.02.13 19:35:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.02.13 19:26:09 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Roaming\Malwarebytes
[2012.02.13 19:26:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.02.13 07:27:16 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{D49B03CE-0FA1-4467-BFB2-BF065D7A1DEC}
[2012.02.13 07:27:03 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{4A63C89C-BD2B-4BE9-84A1-D95012F6895D}
[2012.02.12 19:26:28 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{FF79B2B7-7780-4824-A5EF-519BFB88F55B}
[2012.02.12 19:26:15 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{704B132E-A8B1-401C-9816-2DBD76DCEBCD}
[2012.02.12 07:24:51 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{63DC96EC-5E9D-48AB-8FA9-AD1AF0CC60A1}
[2012.02.12 07:24:48 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{78A21BEA-D33D-457C-8DBF-48B78EDDE310}
[2012.02.11 09:34:12 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{7071123C-599F-4F3C-A0D9-D8C5336DE292}
[2012.02.11 09:34:11 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{D87CC2B7-4414-4239-9BCA-BE1C86C01840}
[2012.02.10 16:00:43 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{98BD0A5E-77E7-4EA7-ADF5-F0BF5CF18B3E}
[2012.02.10 16:00:41 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{58A74670-4D6D-405E-BBA7-E3EE7DDA920B}
[2012.02.09 13:40:19 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{CF0CD4B6-032D-4655-99DE-2475BC0DA012}
[2012.02.09 13:40:18 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{E87407BF-2720-4B41-874E-EBA7F69DA1B4}
[2012.02.08 17:15:04 | 000,000,000 | ---D | C] -- C:\Users\johnson\vitadrom
[2012.02.08 11:08:11 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{F8EA61ED-0894-4D87-8A4B-D451C1DB7957}
[2012.02.08 11:07:57 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{CB46FA62-A583-4CC8-AEAF-BA38BD60D516}
[2012.02.07 22:12:40 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{DD41110E-B208-4DBA-A555-193A1647D92E}
[2012.02.07 22:12:37 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{4EFBB934-ECA7-412A-83A5-05FCFC4D1B08}
[2012.02.07 09:21:32 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{568AA1F6-9A6E-4FFE-B93E-37A6CFF48DDC}
[2012.02.07 09:21:30 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{BB8F2A64-645C-4185-9903-754D2F971150}
[2012.02.07 00:44:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012.02.06 12:59:04 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{B10905AA-83A1-494F-AC75-0CA777A23169}
[2012.02.06 12:58:51 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{48423FE7-B4FF-4DAD-AB0B-61E229813835}
[2012.02.06 00:58:09 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{38BDE137-9A40-4DD0-B7B3-28B07DD012AF}
[2012.02.06 00:57:56 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{C7345AA4-7D0E-4B77-985B-5573E0D1A630}
[2012.02.05 06:01:16 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{814AF8A1-7EA6-4363-9DD5-DBFB5077EF50}
[2012.02.05 06:01:13 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{CB905DB6-73F3-450B-A9AD-6DE4FAE19F54}
[2012.02.04 13:59:16 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{CA22227F-CA9C-4C6F-BE93-1225039CBB13}
[2012.02.04 13:59:02 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{89F7F93A-E6D6-4A8E-95C4-2486D330F6A3}
[2012.02.04 01:36:10 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{D9040054-8836-4EA8-BBE9-DF2BA7050403}
[2012.02.04 01:35:56 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{8D2BA026-C582-4598-A537-2EF12BC43C76}
[2012.02.03 12:49:25 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{925D985A-4FE6-4011-83C6-A013F8C5A691}
[2012.02.03 12:49:10 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{4046FACC-17E9-4C06-BD30-BC5B27499528}
[2012.02.02 23:09:58 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{19B2243C-99BC-4B3C-ADDF-10B922EA0FAC}
[2012.02.02 23:09:56 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{E5273809-6C58-4A13-84D5-F1A346E30F30}
[2012.02.02 09:45:44 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{069DFBE0-F040-4141-8C03-43D511FB792B}
[2012.02.02 09:45:31 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{21B00E30-A04D-4EF2-A859-6898CC4D67FF}
[2012.02.01 19:15:03 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Roaming\vlc
[2012.02.01 15:35:52 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{356BEF96-CA50-4091-9564-767A1D04B8B7}
[2012.02.01 15:35:48 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{1B089DED-AEF5-4BAC-AB39-D042CDAAA6F5}
[2012.01.31 21:26:22 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2012.01.31 21:26:22 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2012.01.31 21:26:22 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2012.01.31 21:26:22 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2012.01.31 21:26:22 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2012.01.31 21:26:22 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2012.01.31 21:24:34 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{9AC25473-F8BD-4068-850C-5854040F61D0}
[2012.01.31 21:24:32 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{C22A7949-C0D3-4384-B667-96A12E9435BD}
[2012.01.30 12:03:13 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{00588AA0-FC5D-4DA0-85AC-1829BD63F17A}
[2012.01.30 12:03:12 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{9B49E30D-221E-4B80-9618-F0F171EECDC2}
[2012.01.29 13:59:13 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{A926AA2F-5DD6-4E4B-AF7C-08157454CCCA}
[2012.01.29 13:59:12 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{01A39F00-E4C6-4298-A13F-AB16D488C33C}
[2012.01.29 01:58:31 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{0973F63E-687C-46B7-8A84-15D69595E5C8}
[2012.01.29 01:58:19 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{D033C4A1-EF43-4C48-8857-F6EA9CA988DC}
[2012.01.28 12:22:06 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{6C343085-8931-4153-AA37-0E4E91923A87}
[2012.01.28 12:21:53 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{D3AEEC25-FFF6-433A-A120-51CCA67539B5}
[2012.01.28 00:21:13 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{16D89AC8-4CC4-4454-9D7A-5C30F8E460E4}
[2012.01.28 00:21:00 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{EA9AEF93-C3AD-4DE7-A602-E240A02390DD}
[2012.01.27 12:20:17 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{A655A86C-33E2-448F-B4EF-AFD15B4E5356}
[2012.01.27 12:20:04 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{A96B9577-1D14-4AC5-96AD-02B2DC991BDF}
[2012.01.27 00:18:49 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{0BC605FA-BFD8-47D7-B753-75D9AA83FEC6}
[2012.01.27 00:18:46 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{21F23B9D-8694-49AA-B3D8-67CB9E7496DD}
[2012.01.26 12:54:47 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Roaming\Nero
[2012.01.26 12:50:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2012.01.26 12:50:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
[2012.01.26 12:50:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2012.01.26 12:50:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2012.01.26 12:45:29 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2012.01.26 12:45:29 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2012.01.26 12:45:29 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2012.01.26 12:45:29 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2012.01.26 12:45:27 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2012.01.26 12:45:13 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2012.01.26 11:57:58 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{96AE0F1D-B8BA-4396-9C2F-D0E653B3BFCB}
[2012.01.26 11:57:56 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{1FDA7D93-65F6-4D8B-8C16-126D45877D66}
[2012.01.25 16:36:38 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{08AB6AB6-775B-499E-BF34-8A148A393F79}
[2012.01.25 16:36:37 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{7AA2FB86-E85D-4994-848E-E036BC728AD9}
[2012.01.25 04:36:11 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{F4C985FF-92FA-470F-AB79-19E33EC3C624}
[2012.01.25 04:36:10 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{54F141E4-303D-4442-9468-3B786C514C54}
[2012.01.24 16:35:44 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{A37ABC53-5DAF-4DCF-9DB4-F50D70E41F7E}
[2012.01.24 16:35:43 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{462CF02C-46B3-4299-9DBD-375D402DBAA7}
[2012.01.24 04:35:14 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{69E58974-FB32-43B3-A5D3-FB0480341844}
[2012.01.24 04:35:13 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{B9F7B10D-53D2-44D8-8113-11FC089D061F}
[2012.01.23 12:23:40 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{DA1FD266-5520-4D9E-BBBE-62076712DDA5}
[2012.01.23 12:23:37 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{3DD6DB5C-26E0-4FA5-A65E-CAF27E7F32C0}
[2012.01.22 23:17:45 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{4BFA890D-F8B9-4A11-8520-DE53D595366E}
[2012.01.22 23:17:44 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{067516A8-1142-4F76-99CB-752FA753E0E7}
[2012.01.22 04:57:56 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{04317E00-BE81-406E-AD52-ACFDB9F5CB39}
[2012.01.22 04:57:55 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{E95C6891-70BE-4B28-A889-33AF9893DD30}
[2012.01.21 16:12:34 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{410E6DDA-47BF-4D13-A4EB-7F7D706F7ED0}
[2012.01.21 16:12:32 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{3F3A8BED-4E22-4222-A000-E1238777E83F}
[2012.01.21 04:03:22 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{C9EB909B-857F-4459-9085-342BE2A02250}
[2012.01.21 04:03:21 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{9C9CAA6F-B7EE-4215-892C-45B4BFF75101}
[2012.01.20 16:02:55 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{CA186FB1-0CB4-44FD-9754-ED28C4774EDE}
[2012.01.20 16:02:54 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{8EB58A19-6262-47D1-BD50-13F5E9504C8E}
[2012.01.20 04:02:28 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{FD8843AA-E2DF-475E-BE4A-06769676676D}
[2012.01.20 04:02:27 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{CB42F08D-D31B-4625-BA90-684BB14466E0}
[2012.01.19 16:02:08 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{63BA0ACA-2BC9-43F0-A727-0F24085D364B}
[2012.01.19 16:02:06 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{FC1200AC-EE0C-44A2-BC74-8A8387FA4A45}
[2012.01.19 04:01:08 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{C5E0C8CA-0DFB-44FF-850E-ACD759CDAD84}
[2012.01.19 04:01:06 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{267F7F85-6FEA-4BFD-8F64-980AD8DA6B7C}
[2012.01.18 13:09:38 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{A7150324-3032-460D-A750-6E29F56D153B}
[2012.01.18 13:09:36 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{89499C7E-DC9C-47CE-98C4-694512D45811}
[2012.01.18 01:01:01 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{A5525274-49F2-4B8B-9C58-B5D41267E46B}
[2012.01.18 01:01:00 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{B8758086-C89D-4A89-A4F9-B0C9F250B9D2}
[2012.01.17 15:30:08 | 000,000,000 | ---D | C] -- C:\Users\johnson\Innfield
[2012.01.17 13:00:14 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{D6CF6902-26C1-43B8-A0F3-CE3E6417B117}
[2012.01.17 13:00:08 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{189633D7-4EF3-415A-81AE-2CFFA10931B0}
[2012.01.16 17:40:29 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{14058352-CFFE-48DC-AFF9-AB1E8ADE6D87}
[2012.01.16 17:40:27 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{F7B0FF14-1CC6-4DA6-AD71-036A50CEC331}
[2012.01.16 01:53:59 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{C691408F-8CE4-49E0-A091-5495C35A3795}
[2012.01.16 01:53:58 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{89463CD4-1037-47DC-B0E4-58D2F46771EC}
[2012.01.15 13:53:21 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{31C572EA-CF4C-49AF-AC64-792321E917A6}
[2012.01.15 13:53:19 | 000,000,000 | ---D | C] -- C:\Users\johnson\AppData\Local\{0BB329CE-5274-48E1-ADFD-8DDF59E2CAD8}
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.02.13 22:21:38 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.13 22:21:38 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.13 22:14:02 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.02.13 22:13:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.13 22:13:47 | 466,984,959 | -HS- | M] () -- C:\hiberfil.sys
[2012.02.13 21:43:06 | 000,001,076 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-267714115-4148949142-3198035650-1000Core.job
[2012.02.13 21:43:05 | 000,001,128 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-267714115-4148949142-3198035650-1000UA.job
[2012.02.13 21:28:04 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.02.13 20:08:05 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-267714115-4148949142-3198035650-1000UA.job
[2012.02.13 20:08:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-267714115-4148949142-3198035650-1000Core.job
[2012.02.11 13:10:39 | 001,614,892 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.02.11 13:10:39 | 000,697,534 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.02.11 13:10:39 | 000,652,812 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.02.11 13:10:39 | 000,148,540 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.02.11 13:10:39 | 000,121,486 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.02.08 17:23:40 | 000,000,132 | ---- | M] () -- C:\Users\johnson\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2012.02.07 00:44:53 | 000,002,066 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.02.05 07:08:09 | 000,317,057 | ---- | M] () -- C:\test.xml
[2012.01.28 02:25:03 | 000,314,744 | ---- | M] () -- C:\Users\johnson\Desktop\header.psd
[2012.01.28 02:24:55 | 000,304,629 | ---- | M] () -- C:\Users\johnson\Desktop\Unbenannt-2.psd
[2012.01.26 23:21:18 | 000,074,063 | ---- | M] () -- C:\Users\johnson\Desktop\Unbenannt-2.jpg
[2012.01.26 21:40:22 | 000,057,737 | ---- | M] () -- C:\Users\johnson\Desktop\11.jpg
[2012.01.26 12:51:06 | 000,002,843 | ---- | M] () -- C:\Users\Public\Desktop\Nero Burning ROM 11.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.02.08 17:23:40 | 000,000,132 | ---- | C] () -- C:\Users\johnson\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2012.01.26 23:21:17 | 000,074,063 | ---- | C] () -- C:\Users\johnson\Desktop\Unbenannt-2.jpg
[2012.01.26 21:40:21 | 000,057,737 | ---- | C] () -- C:\Users\johnson\Desktop\11.jpg
[2012.01.26 12:51:06 | 000,002,843 | ---- | C] () -- C:\Users\Public\Desktop\Nero Burning ROM 11.lnk
[2011.12.01 19:03:21 | 013,903,872 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.12.01 19:03:21 | 000,216,000 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.12.01 19:03:21 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.12.01 19:03:21 | 000,028,732 | ---- | C] () -- C:\Windows\SysWow64\ativvsny.dat
[2011.12.01 19:03:21 | 000,026,936 | ---- | C] () -- C:\Windows\SysWow64\ativvsnl.dat
[2011.12.01 19:03:21 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.11.15 17:40:04 | 000,004,608 | ---- | C] () -- C:\Users\johnson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.30 16:26:49 | 000,002,892 | ---- | C] () -- C:\Windows\SysWow64\audcon.sys
[2011.09.18 23:55:49 | 000,044,544 | ---- | C] () -- C:\Windows\SysWow64\Gif89.dll
[2011.08.02 02:48:39 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.08.02 02:46:52 | 000,002,975 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat
[2011.06.30 08:01:52 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.04.14 04:56:29 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.04.14 04:56:28 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.03.04 11:00:37 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2011.02.11 00:03:27 | 001,599,434 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
========== Alternate Data Streams ==========
@Alternate Data Stream - 1050 bytes -> C:\Users\johnson\AppData\Local\Temp:P9jd8NlX5ucDopU2iqZ79sBT
< End of report >
extras