Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: Program Files (x86) not executing

  1. 2009-03-22, 09:56 #1
    Tobias Nightbringer
    Tobias Nightbringer is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default Program Files (x86) not executing

    I am not exactly sure how to explain my problem. I'm not even sure if this has anything to do with being infected by a virus, but I have not found a permanent solution to my situation.

    A week or so ago, I was not able to execute any programs that were stored in my Program Files (x86) folder nor did my anti-virus start up (at the time it was Avira). Double-clicking, right-click and run, etc, etc. did not work. I would see the 'loading' cursor for a brief moment, but then nothing. No errors, no sounds, nada. I eventually solved it (somewhat of an accident. Trial and error for the win) by doing a System Restore.

    However, it cost me my Avira anti-virus program. I had to delete it and re-install it, but when I tried to re-install, I got a message that it was already installed on my computer (even though I deleted everything, registry files and all). After several unsuccessful attempts to re-install Avira (even though it said it was installed successfully), I installed AVG on March 21.

    That worked--until I powered on my computer when I got home (which was the same day I installed AVG, just at the end of the day). Same exact situation. Couldn't execute any programs from Program Files (x86) folder. Did another System Restore and I am back to square one. I am not sure if this has to do with a virus or not, so I will just post my HJT log and hope that someone can answer my plea or direct me towards the right path.

    Thank you for your time in advance.
    -------------------------------------------------
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:55:53 AM, on 3/22/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files (x86)\HP\QuickPlay\QPService.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
    C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files (x86)\Java\jre6\bin\jusched.exe
    C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
    C:\Program Files (x86)\Steam\Steam.exe
    C:\Users\Tobias\Downloads\HijackThis\HijackThis.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    F2 - REG:system.ini: UserInit=userinit.exe
    O1 - Hosts: ::1 localhost
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: HP Print Clips - {FFFFFFFF-FF12-44C5-91EC-068E3AA1B2D7} - c:\Program Files (x86)\HP\Smart Web Printing\hpswp_framework.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [QPService] "C:\Program Files (x86)\HP\QuickPlay\QPService.exe"
    O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles(x86)%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
    O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: HP Smart Select - {58ECB495-38F0-49cb-A538-10282ABF65E7} - c:\Program Files (x86)\HP\Smart Web Printing\hpswp_extensions.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\Comodo\Firewall\cmdagent.exe
    O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
    O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
    O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files (x86)\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
    O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files (x86)\HP\QuickPlay\Kernel\TV\QPSched.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files (x86)\WinPcap\rpcapd.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 10741 bytes
  2. 2009-03-26, 00:16 #2
    katana
    katana is offline
    Security Expert-Emeritus
    Join Date
    Oct 2006
    Location
    Manchester UK
    Posts
    3,425

    Default

    Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

    If you think you have similar problems, please post a log in the HJT forum and wait for help.
    Hello and welcome to the forums

    My name is Katana and I will be helping you to remove any infection(s) that you may have.

    Please observe these rules while we work:
    1. Please Read All Instructions Carefully
    2. If you don't understand something, stop and ask! Don't keep going on.
    3. Please do not run any other tools or scans whilst I am helping you
    4. Please continue to respond until I give you the "All Clear"
      (Just because you can't see a problem doesn't mean it isn't there)

    If you can do those few things, everything should go smoothly

    Please Note, your security programs may give warnings for some of the tools I will ask you to use.
    Be assured, any links I give are safe
    ----------------------------------------------------------------------------------------

    It looks from your log as if you have a 64bit machine, if this is correct then please note that most of the tools we would normally use will not function.
    I will help you as much as I can, but I can't promise anything.



    OTScanIt

    1. Please download OTScanIt.exe by OldTimer and save it to your desktop.
    2. Double click on OTScanIt.exe to run it.
    3. Click on Extract. Once done, you will be prompted. Click OK and click Close.
    4. Double click on the OTScanIt folder. Double click on OTScanIt.exe to run it.
    5. Under Drivers section, select Non-Microsoft.
    6. Click on the Run Scan button at the top left hand corner.
    7. OTScanIt will start running. Once done, Notepad will open. Please post the contents of this Notepad file in your next reply.
    Last edited by katana; 2009-03-26 at 02:01.
    Microsoft MVP Consumer Security 2009 -2010
    If we have helped, please consider a donation
    THESE INSTRUCTIONS ARE FOR THIS USER ONLY
  3. 2009-03-26, 01:38 #3
    Tobias Nightbringer
    Tobias Nightbringer is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    Hello Katana, and thank you for assisting me! Unfortunately for some reason when I click on your link to download the OTScanIt.exe, the window that pops up is a 404-Not Found. Tried to Google OTScanIt.exe as well to see if I could download it elsewhere, but no such luck :( Any suggestions?
  4. 2009-03-26, 02:02 #4
    katana
    katana is offline
    Security Expert-Emeritus
    Join Date
    Oct 2006
    Location
    Manchester UK
    Posts
    3,425

    Default

    I've changed the link, please try it again.
    Microsoft MVP Consumer Security 2009 -2010
    If we have helped, please consider a donation
    THESE INSTRUCTIONS ARE FOR THIS USER ONLY
  5. 2009-03-26, 02:09 #5
    Tobias Nightbringer
    Tobias Nightbringer is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    Under the 'Drivers' section, my following options are:

    None

    Safe List

    All

    Do I select the option 'None'?
  6. 2009-03-26, 02:13 #6
    katana
    katana is offline
    Security Expert-Emeritus
    Join Date
    Oct 2006
    Location
    Manchester UK
    Posts
    3,425

    Default

    Safe List
    Microsoft MVP Consumer Security 2009 -2010
    If we have helped, please consider a donation
    THESE INSTRUCTIONS ARE FOR THIS USER ONLY
  7. 2009-03-26, 02:16 #7
    Tobias Nightbringer
    Tobias Nightbringer is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    Copy that. Running now. Will post the content in Notepad ASAP.
  8. 2009-03-26, 02:18 #8
    Tobias Nightbringer
    Tobias Nightbringer is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    [code]
    OTScanIt2 logfile created on: 3/25/2009 6:16:09 PM - Run 1
    OTScanIt2 by OldTimer - Version 1.0.9.0 Folder = C:\Users\Tobias\Downloads\OTScanIt\OTScanIt2
    Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
    Internet Explorer (Version = 7.0.6001.18000)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    4.00 Gb Total Physical Memory | 2.55 Gb Available Physical Memory | 63.81% Memory free
    4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
    Paging file location(s): ?:\pagefile.sys;

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 285.13 Gb Total Space | 142.39 Gb Free Space | 49.94% Space Free | Partition Type: NTFS
    D: Drive not present or media not loaded
    E: Drive not present or media not loaded
    F: Drive not present or media not loaded
    G: Drive not present or media not loaded
    H: Drive not present or media not loaded
    I: Drive not present or media not loaded

    Computer Name: NIGHTFIRE
    Current User Name: Tobias
    Logged in as Administrator.

    Current Boot Mode: Normal
    Scan Mode: Current user
    Whitelist: On
    File Age = 30 Days

    [Processes - Safe List]
    aawservice.exe -> %ProgramFiles%\Lavasoft\Ad-Aware\aawservice.exe -> [2008/09/29 04:22:41 | 00,611,664 | ---- | M] (Lavasoft)
    firefox.exe -> %ProgramFiles%\Mozilla Firefox\firefox.exe -> [2009/02/19 18:43:11 | 00,307,704 | ---- | M] (Mozilla Corporation)
    hpqsrmon.exe -> %ProgramFiles%\HP\Digital Imaging\bin\HpqSRmon.exe -> [2008/06/02 00:55:22 | 00,080,896 | ---- | M] (Hewlett-Packard)
    hpqtoaster.exe -> %ProgramFiles%\Hewlett-Packard\Shared\HpqToaster.exe -> [2007/05/16 11:43:06 | 00,677,432 | R--- | M] ()
    hpqwmiex.exe -> %ProgramFiles%\Hewlett-Packard\Shared\hpqwmiex.exe -> [2006/05/02 16:41:28 | 00,135,168 | ---- | M] (Hewlett-Packard Development Company, L.P.)
    hpwamain.exe -> %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe -> [2007/09/13 09:47:52 | 00,480,560 | ---- | M] (Hewlett-Packard Development Company, L.P.)
    hpwuschd2.exe -> %ProgramFiles%\HP\HP Software Update\hpwuSchd2.exe -> [2007/05/08 17:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard)
    iaanotif.exe -> %ProgramFiles%\Intel\Intel Matrix Storage Manager\IAAnotif.exe -> [2008/04/15 18:54:40 | 00,178,712 | ---- | M] (Intel Corporation)
    iaantmon.exe -> %ProgramFiles%\Intel\Intel Matrix Storage Manager\IAANTMon.exe -> [2008/04/15 18:54:42 | 00,354,840 | ---- | M] (Intel Corporation)
    jusched.exe -> %ProgramFiles%\Java\jre6\bin\jusched.exe -> [2008/11/10 06:43:42 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.)
    lightscribecontrolpanel.exe -> %CommonProgramFiles%\LightScribe\LightScribeControlPanel.exe -> [2007/08/23 17:36:30 | 00,455,968 | ---- | M] (Hewlett-Packard Company)
    lssrvc.exe -> %CommonProgramFiles%\LightScribe\LSSrvc.exe -> [2007/08/23 17:40:48 | 00,079,136 | ---- | M] (Hewlett-Packard Company)
    otscanit2.exe -> %UserProfile%\Downloads\OTScanIt\OTScanIt2\OTScanIt2.exe -> [2009/03/22 18:23:22 | 00,491,520 | ---- | M] (OldTimer Tools)
    pnkbstra.exe -> %SystemRoot%\SysWOW64\PnkBstrA.exe -> [2008/10/08 17:28:44 | 00,066,872 | ---- | M] ()
    qlbctrl.exe -> %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe -> [2007/09/19 14:31:34 | 00,202,032 | ---- | M] ( Hewlett-Packard Development Company, L.P.)
    qpcapsvc.exe -> %ProgramFiles%\HP\QuickPlay\Kernel\TV\QPCapSvc.exe -> [2007/12/19 19:28:34 | 00,271,760 | ---- | M] ()
    qpsched.exe -> %ProgramFiles%\HP\QuickPlay\Kernel\TV\QPSched.exe -> [2007/12/19 19:28:34 | 00,112,016 | ---- | M] ()
    qpservice.exe -> %ProgramFiles%\HP\QuickPlay\QPService.exe -> [2007/12/19 19:27:50 | 00,468,264 | ---- | M] (CyberLink Corp.)
    richvideo.exe -> %ProgramFiles%\CyberLink\Shared Files\RichVideo.exe -> [2007/01/09 03:25:30 | 00,272,024 | ---- | M] ()
    steam.exe -> %ProgramFiles%\Steam\Steam.exe -> [2008/10/08 02:45:05 | 01,410,296 | ---- | M] (Valve Corporation)
    steamservice.exe -> %CommonProgramFiles%\Steam\SteamService.exe -> [2009/03/18 02:36:02 | 00,316,664 | ---- | M] (Valve Corporation)
    teatimer.exe -> %ProgramFiles%\Spybot - Search & Destroy\TeaTimer.exe -> [2008/09/16 12:16:08 | 01,833,296 | RHS- | M] (Safer Networking Limited)
    viewpointservice.exe -> %ProgramFiles%\Viewpoint\Common\ViewpointService.exe -> [2007/01/04 14:38:08 | 00,024,652 | ---- | M] (Viewpoint Corporation)
    wifimsg.exe -> %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe -> [2007/01/08 16:53:06 | 00,311,296 | ---- | M] (Hewlett-Packard Development Company, L.P.)

    [Win32 Services - Safe List]
    (aawservice) Lavasoft Ad-Aware Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Lavasoft\Ad-Aware\aawservice.exe -> [2008/09/29 04:22:41 | 00,611,664 | ---- | M] (Lavasoft)
    (aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> -> File not found
    (clr_optimization_v2.0.50727_32) Microsoft .NET Framework NGEN v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008/07/27 11:03:13 | 00,069,632 | ---- | M] (Microsoft Corporation)
    (clr_optimization_v2.0.50727_64) Microsoft .NET Framework NGEN v2.0.50727_X64 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -> [2008/07/27 11:01:49 | 00,093,184 | ---- | M] (Microsoft Corporation)
    (cmdAgent) COMODO Firewall Pro Helper Service [Win32_Own | Auto | Running] -> %SystemDrive%\Program Files\Comodo\Firewall\cmdagent.exe -> [2008/12/06 13:59:42 | 00,889,080 | ---- | M] ()
    (Com4Qlb) Com4Qlb [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe -> [2007/03/05 10:30:06 | 00,110,592 | ---- | M] (Hewlett-Packard Development Company, L.P.)
    (ehRecvr) Windows Media Center Receiver Service [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\ehome\ehRecvr.exe -> [2008/01/20 19:51:36 | 00,344,064 | ---- | M] (Microsoft Corporation)
    (ehSched) Windows Media Center Scheduler Service [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\ehome\ehsched.exe -> [2008/01/20 19:51:36 | 00,153,600 | ---- | M] (Microsoft Corporation)
    (ehstart) Windows Media Center Service Launcher [Win32_Shared | Auto | Stopped] -> %SystemRoot%\ehome\ehstart.dll -> [2006/11/02 08:03:48 | 00,015,360 | ---- | M] (Microsoft Corporation)
    (FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe -> [2008/06/19 18:17:12 | 00,046,104 | ---- | M] (Microsoft Corporation)
    (GameConsoleService) GameConsoleService [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\HP Games\My HP Game Console\GameConsoleService.exe -> [2008/05/05 15:25:46 | 00,165,416 | ---- | M] (WildTangent, Inc.)
    (HP Health Check Service) HP Health Check Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Hewlett-Packard\HP Health Check\hphc_service.exe -> [2008/06/16 09:02:28 | 00,094,208 | ---- | M] (Hewlett-Packard)
    (hpqwmiex) hpqwmiex [Win32_Own | Auto | Running] -> %ProgramFiles%\Hewlett-Packard\Shared\hpqwmiex.exe -> [2006/05/02 16:41:28 | 00,135,168 | ---- | M] (Hewlett-Packard Development Company, L.P.)
    (IAANTMON) Intel(R) Matrix Storage Event Monitor [Win32_Own | Auto | Running] -> %ProgramFiles%\Intel\Intel Matrix Storage Manager\IAANTMon.exe -> [2008/04/15 18:54:42 | 00,354,840 | ---- | M] (Intel Corporation)
    (IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\11\Intel 32\IDriverT.exe -> [2005/04/04 00:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation)
    (idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> %SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -> [2008/06/19 18:16:53 | 00,859,648 | ---- | M] (Microsoft Corporation)
    (LightScribeService) LightScribeService Direct Disc Labeling Service [Win32_Own | Auto | Running] -> %CommonProgramFiles%\LightScribe\LSSrvc.exe -> [2007/08/23 17:40:48 | 00,079,136 | ---- | M] (Hewlett-Packard Company)
    (NetTcpPortSharing) Net.Tcp Port Sharing Service [Win32_Shared | Disabled | Stopped] -> %SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe -> [2008/06/19 18:16:54 | 00,119,808 | ---- | M] (Microsoft Corporation)
    (odserv) Microsoft Office Diagnostics Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Microsoft Shared\OFFICE12\ODSERV.EXE -> [2007/08/24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation)
    (ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Microsoft Shared\Source Engine\OSE.EXE -> [2006/10/26 15:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation)
    (PcaSvc) Program Compatibility Assistant Service [Win32_Shared | Auto | Running] -> %SystemRoot%\sysnative\pcasvc.dll -> [2008/01/20 19:47:55 | 00,079,360 | ---- | M] ()
    (PerfHost) Performance Counter DLL Host [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\SysWow64\perfhost.exe -> [2008/01/20 19:51:00 | 00,019,968 | ---- | M] (Microsoft Corporation)
    (PnkBstrA) PnkBstrA [Win32_Own | Auto | Running] -> %SystemRoot%\system32\PnkBstrA.exe -> [2008/10/08 17:28:44 | 00,066,872 | ---- | M] ()
    (QPCapSvc) QuickPlay Background Capture Service (QBCS) [Win32_Own | Auto | Running] -> %ProgramFiles%\HP\QuickPlay\Kernel\TV\QPCapSvc.exe -> [2007/12/19 19:28:34 | 00,271,760 | ---- | M] ()
    (QPSched) QuickPlay Task Scheduler (QTS) [Win32_Own | Auto | Running] -> %ProgramFiles%\HP\QuickPlay\Kernel\TV\QPSched.exe -> [2007/12/19 19:28:34 | 00,112,016 | ---- | M] ()
    (RichVideo) Cyberlink RichVideo Service(CRVS) [Win32_Own | Auto | Running] -> %ProgramFiles%\CyberLink\Shared Files\RichVideo.exe -> [2007/01/09 03:25:30 | 00,272,024 | ---- | M] ()
    (rpcapd) Remote Packet Capture Protocol v.0 (experimental) [Win32_Own | On_Demand | Stopped] -> -> File not found
    (Steam Client Service) Steam Client Service [Win32_Own | On_Demand | Running] -> %CommonProgramFiles%\Steam\SteamService.exe -> [2009/03/18 02:36:02 | 00,316,664 | ---- | M] (Valve Corporation)
    (Viewpoint Manager Service) Viewpoint Manager Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Viewpoint\Common\ViewpointService.exe -> [2007/01/04 14:38:08 | 00,024,652 | ---- | M] (Viewpoint Corporation)
    (WMPNetworkSvc) Windows Media Player Network Sharing Service [Win32_Own | On_Demand | Running] -> %SystemDrive%\Program Files\Windows Media Player\wmpnetwk.exe -> [2008/01/20 19:52:15 | 01,216,000 | ---- | M] (Microsoft Corporation)

    [Driver Services - Safe List]
    (BCM43XV) Broadcom Extensible 802.11 Network Adapter Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\bcmwl664.sys -> [2006/10/06 19:13:22 | 00,550,912 | ---- | M] ()
    (CmBatt) Microsoft ACPI Control Method Battery Driver [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\CmBatt.sys -> [2008/01/20 19:46:51 | 00,017,792 | ---- | M] ()
    (HdAudAddService) Microsoft 1.1 UAA Function Driver for High Definition Audio Service [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\drivers\HdAudio.sys -> [2006/11/01 22:28:10 | 00,273,920 | ---- | M] ()
    (HpqKbFiltr) HpqKbFilter Driver [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\HpqKbFiltr.sys -> [2007/06/18 17:13:12 | 00,018,432 | ---- | M] ()
    (HpqRemHid) HP Remote Control HID Device [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\HpqRemHid.sys -> [2007/07/11 10:30:34 | 00,009,088 | ---- | M] ()
    (HSFHWAZL) HSFHWAZL [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\VSTAZL6.SYS -> [2008/01/20 19:46:57 | 00,286,720 | ---- | M] ()
    (HSF_DPV) HSF_DPV [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\VSTDPV6.SYS -> [2008/01/20 19:46:57 | 01,523,712 | ---- | M] ()
    (iaStor) Intel AHCI Controller [Kernel | Boot | Running] -> %SystemRoot%\sysnative\DRIVERS\iaStor.sys -> [2008/04/15 18:54:16 | 00,388,120 | ---- | M] ()
    (NETw3v64) Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 64 Bit [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\NETw3v64.sys -> [2008/01/20 19:46:57 | 03,154,432 | ---- | M] ()
    (NETw4v64) Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 64 Bit [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\NETw4v64.sys -> [2007/10/31 18:44:38 | 03,197,440 | ---- | M] ()
    (NETw5v64) Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\NETw5v64.sys -> [2008/11/17 16:50:30 | 04,751,360 | ---- | M] ()
    (NPF) NetGroup Packet Filter Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\drivers\npf.sys -> [2007/11/06 13:23:14 | 00,040,464 | ---- | M] ()
    (NVENETFD) NVIDIA nForce Networking Controller Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\nvm60x64.sys -> [2006/10/09 19:09:03 | 00,742,696 | ---- | M] ()
    (rimmptsk) rimmptsk [Kernel | Auto | Running] -> %SystemRoot%\sysnative\DRIVERS\rimmpx64.sys -> [2007/03/19 12:09:36 | 00,055,808 | ---- | M] ()
    (rimsptsk) rimsptsk [Kernel | Auto | Running] -> %SystemRoot%\sysnative\DRIVERS\rimspx64.sys -> [2007/02/27 16:10:38 | 00,053,760 | ---- | M] ()
    (rismxdp) Ricoh xD-Picture Card Driver [Kernel | Auto | Running] -> %SystemRoot%\sysnative\DRIVERS\rixdpx64.sys -> [2007/03/26 19:48:24 | 00,055,808 | ---- | M] ()
    (RTL8169) Realtek 8169 NT Driver [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\Rtlh64.sys -> [2009/01/20 07:49:48 | 00,195,584 | ---- | M] ()
    (sdbus) sdbus [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\sdbus.sys -> [2008/01/20 19:46:55 | 00,111,104 | ---- | M] ()
    (smserial) smserial [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\smserial.sys -> [2007/01/17 06:48:30 | 01,455,616 | ---- | M] ()
    (SynTP) Synaptics TouchPad Driver [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\DRIVERS\SynTP.sys -> [2008/03/28 02:06:00 | 00,324,656 | ---- | M] ()
    (usbaudio) USB Audio Driver (WDM) [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\drivers\usbaudio.sys -> [2008/01/20 19:47:04 | 00,098,816 | ---- | M] ()
    (usbvideo) USB Video Device (WDM) [Kernel | On_Demand | Running] -> %SystemRoot%\sysnative\Drivers\usbvideo.sys -> [2008/01/20 19:47:27 | 00,168,704 | ---- | M] ()
    (winachsf) winachsf [Kernel | On_Demand | Stopped] -> %SystemRoot%\sysnative\DRIVERS\VSTCNXT6.SYS -> [2008/01/20 19:46:57 | 00,724,480 | ---- | M] ()

    [Registry - Safe List]
    < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
    HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop ->
    HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://go.microsoft.com/fwlink/?LinkId=54896 ->
    HKEY_LOCAL_MACHINE\: Main\\"Default_Secondary_Page_URL" -> Reg Error: Invalid data type. ->
    HKEY_LOCAL_MACHINE\: Main\\"Extensions Off Page" -> about:NoAdd-ons ->
    HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm ->
    HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://go.microsoft.com/fwlink/?LinkId=54896 ->
    HKEY_LOCAL_MACHINE\: Main\\"Security Risk Page" -> about:SecurityRisk ->
    HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop ->
    < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> ->
    HKEY_CURRENT_USER\: Main\\"Default_Page_URL" -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop ->
    HKEY_CURRENT_USER\: Main\\"Local Page" -> C:\Windows\system32\blank.htm ->
    HKEY_CURRENT_USER\: Main\\"Search Page" -> http://go.microsoft.com/fwlink/?LinkId=54896 ->
    HKEY_CURRENT_USER\: Main\\"Start Page" -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop ->
    HKEY_CURRENT_USER\: Main\\"StartPageCache" -> Reg Error: Invalid data type. ->
    HKEY_CURRENT_USER\: URLSearchHooks\\"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" [HKLM] -> %SystemRoot%\SysWOW64\ieframe.dll [Microsoft Url Search Hook] -> [2009/01/14 23:07:53 | 06,069,248 | ---- | M] (Microsoft Corporation)
    HKEY_CURRENT_USER\: URLSearchHooks\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> [2007/05/30 14:18:26 | 00,808,472 | ---- | M] (Yahoo! Inc.)
    HKEY_CURRENT_USER\: "ProxyEnable" -> 0 ->
    < FireFox Settings [Prefs.js] > -> C:\Users\Tobias\AppData\Roaming\Mozilla\FireFox\Profiles\xqhaek2b.default\prefs.js ->
    extensions.enabledItems -> {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.0.1 ->
    extensions.enabledItems -> {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 ->
    extensions.enabledItems -> {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10 ->
    extensions.enabledItems -> {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 ->
    extensions.enabledItems -> {20a82645-c095-46ed-80e3-08825760534b}:1.0 ->
    extensions.enabledItems -> {73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.1.2 ->
    extensions.enabledItems -> {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7 ->
    < FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
    HKLM\software\mozilla\Firefox\Extensions -> ->
    HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} -> %SystemRoot%\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\] -> [2009/03/21 00:05:46 | 00,000,000 | ---D | M]
    HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions -> ->
    HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components -> %ProgramFiles%\MOZILLA FIREFOX\COMPONENTS [C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\COMPONENTS] -> [2009/03/22 01:26:16 | 00,000,000 | ---D | M]
    HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins -> %ProgramFiles%\MOZILLA FIREFOX\PLUGINS [C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGINS] -> [2009/03/22 01:26:15 | 00,000,000 | ---D | M]
    < FireFox Extensions [User Folders] > ->
    -> C:\Users\Tobias\AppData\Roaming\mozilla\Extensions -> [2008/10/03 12:19:01 | 00,000,000 | ---D | M]
    -> C:\Users\Tobias\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} -> [2008/10/03 12:19:01 | 00,000,000 | ---D | M]
    -> C:\Users\Tobias\AppData\Roaming\mozilla\Firefox\Profiles\xqhaek2b.default\extensions -> [2009/03/22 01:26:32 | 00,096,618 | ---- | M] ()
    -> C:\Users\Tobias\AppData\Roaming\mozilla\Firefox\Profiles\xqhaek2b.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} -> [2009/03/22 01:26:32 | 00,096,618 | ---- | M] ()
    -> C:\Users\Tobias\AppData\Roaming\mozilla\Firefox\Profiles\xqhaek2b.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} -> [2009/03/22 01:26:32 | 00,096,618 | ---- | M] ()
    < FireFox Extensions [Program Folders] > ->
    -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions -> [2009/02/19 18:43:32 | 09,742,840 | ---- | M] (Mozilla Foundation)
    -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} -> [2009/02/19 18:43:32 | 09,742,840 | ---- | M] (Mozilla Foundation)
    -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} -> [2009/02/19 18:43:32 | 09,742,840 | ---- | M] (Mozilla Foundation)
    -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} -> [2009/02/19 18:43:32 | 09,742,840 | ---- | M] (Mozilla Foundation)
    -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} -> [2009/02/19 18:43:32 | 09,742,840 | ---- | M] (Mozilla Foundation)
    < FireFox Components [Program Folders] > ->
    C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components\ -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components -> [2009/03/22 01:26:16 | 00,000,000 | ---D | M]
    browserdirprovider.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components\browserdirprovider.dll -> [2009/02/19 18:43:33 | 00,023,032 | ---- | M] (Mozilla Foundation)
    brwsrcmp.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components\brwsrcmp.dll -> [2009/02/19 18:43:34 | 00,134,648 | ---- | M] (Mozilla Foundation)
    < FireFox Plugins [Program Folders] > ->
    C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\ -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins -> [2009/03/22 01:26:15 | 00,000,000 | ---D | M]
    np-mswmp.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\np-mswmp.dll -> [2007/04/10 18:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation)
    npdeploytk.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npdeploytk.dll -> [2008/11/10 06:43:30 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.)
    npnul32.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npnul32.dll -> [2009/02/19 18:43:35 | 00,065,528 | ---- | M] (mozilla.org)
    npViewpoint.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npViewpoint.dll -> [2007/04/16 10:07:12 | 00,180,293 | ---- | M] ()
    npViewpoint.xpt -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npViewpoint.xpt -> [2006/10/09 11:26:35 | 00,000,266 | ---- | M] ()
    WMP Firefox Plugin License.rtf -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\WMP Firefox Plugin License.rtf -> [2007/03/30 11:43:58 | 00,149,569 | ---- | M] ()
    WMP Firefox Plugin RelNotes.txt -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\WMP Firefox Plugin RelNotes.txt -> [2007/03/30 11:43:58 | 00,003,352 | ---- | M] ()
    < FireFox SearchPlugins [Program Folders] > ->
    C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\ -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins -> [2009/03/22 01:26:16 | 00,000,000 | ---D | M]
    amazondotcom.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\amazondotcom.xml -> [2009/02/19 12:33:08 | 00,001,394 | ---- | M] ()
    answers.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\answers.xml -> [2009/02/19 12:33:08 | 00,002,193 | ---- | M] ()
    creativecommons.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\creativecommons.xml -> [2009/02/19 12:33:08 | 00,001,534 | ---- | M] ()
    eBay.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\eBay.xml -> [2009/02/19 12:33:08 | 00,002,343 | ---- | M] ()
    google.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\google.xml -> [2009/02/19 12:33:08 | 00,001,706 | ---- | M] ()
    wikipedia.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\wikipedia.xml -> [2009/02/19 12:33:08 | 00,001,178 | ---- | M] ()
    yahoo.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\yahoo.xml -> [2009/02/19 12:33:08 | 00,000,792 | ---- | M] ()
    < HOSTS File > (289702 bytes and 10023 lines) -> C:\Windows\System32\drivers\etc\Hosts ->
    First 25 entries...
    Reset Hosts
    127.0.0.1 localhost
    ::1 localhost
    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com
    127.0.0.1 www.0scan.com
    127.0.0.1 0scan.com
    127.0.0.1 1000gratisproben.com
    127.0.0.1 www.1000gratisproben.com
    127.0.0.1 www.1001namen.com
    127.0.0.1 1001namen.com
    127.0.0.1 www.100888290cs.com
    127.0.0.1 100888290cs.com
    127.0.0.1 www.100sexlinks.com
    127.0.0.1 100sexlinks.com
    127.0.0.1 www.10sek.com
    127.0.0.1 10sek.com
    < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
    {02478D38-C3F9-4efb-9B51-7695ECA05670} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [&Yahoo! Toolbar Helper] -> [2007/05/30 14:18:26 | 00,808,472 | ---- | M] (Yahoo! Inc.)
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %CommonProgramFiles%\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> [2006/10/23 00:08:42 | 00,062,080 | ---- | M] (Adobe Systems Incorporated)
    {53707962-6F74-2D53-2644-206D7942484F} [HKLM] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Spybot-S&D IE Protection] -> [2008/09/15 15:25:44 | 01,562,960 | RHS- | M] (Safer Networking Limited)
    {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> %ProgramFiles%\Java\jre6\bin\ssv.dll [Java(tm) Plug-In SSV Helper] -> [2008/11/10 06:43:31 | 00,320,920 | ---- | M] (Sun Microsystems, Inc.)
    {DBC80044-A445-435b-BC74-9C25C1C588A9} [HKLM] -> %ProgramFiles%\Java\jre6\bin\jp2ssv.dll [Java(tm) Plug-In 2 SSV Helper] -> [2008/11/10 06:43:16 | 00,034,816 | ---- | M] (Sun Microsystems, Inc.)
    {FFFFFFFF-FF12-44C5-91EC-068E3AA1B2D7} [HKLM] -> %ProgramFiles%\HP\Smart Web Printing\hpswp_framework.dll [HP Print Clips] -> [2007/08/31 12:32:24 | 00,177,504 | ---- | M] (Hewlett-Packard Co.)
    < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
    "{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
    "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> [2007/05/30 14:18:26 | 00,808,472 | ---- | M] (Yahoo! Inc.)
    < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
    "Adobe Reader Speed Launcher" -> %ProgramFiles%\Adobe\Reader 8.0\Reader\Reader_sl.exe ["C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"] -> [2007/05/11 04:06:32 | 00,040,048 | ---- | M] (Adobe Systems Incorporated)
    "avgnt" -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avgnt.exe ["C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min] -> File not found
    "HP Health Check Scheduler" -> %ProgramFiles%\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe] -> [2008/06/16 09:03:20 | 00,075,008 | ---- | M] (Hewlett-Packard)
    "HP Software Update" -> %ProgramFiles%\Hp\HP Software Update\HPWuSchd2.exe [C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe] -> [2007/05/08 17:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard)
    "hpqSRMon" -> %ProgramFiles%\HP\Digital Imaging\bin\hpqSRMon.exe [C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe] -> [2008/06/02 00:55:22 | 00,080,896 | ---- | M] (Hewlett-Packard)
    "hpWirelessAssistant" -> %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe] -> [2007/09/13 09:47:52 | 00,480,560 | ---- | M] (Hewlett-Packard Development Company, L.P.)
    "QlbCtrl" -> [%ProgramFiles(x86)%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start] -> File not found
    "QPService" -> %ProgramFiles%\HP\QuickPlay\QPService.exe ["C:\Program Files (x86)\HP\QuickPlay\QPService.exe"] -> [2007/12/19 19:27:50 | 00,468,264 | ---- | M] (CyberLink Corp.)
    "SunJavaUpdateSched" -> %ProgramFiles%\Java\jre6\bin\jusched.exe ["C:\Program Files (x86)\Java\jre6\bin\jusched.exe"] -> [2008/11/10 06:43:42 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.)
    "UCam_Menu" -> %ProgramFiles%\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe ["C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"] -> [2007/08/16 23:13:28 | 00,218,408 | ---- | M] (CyberLink Corp.)
    "WAWifiMessage" -> %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe] -> [2007/01/08 16:53:06 | 00,311,296 | ---- | M] (Hewlett-Packard Development Company, L.P.)
    < Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
    "Aim6" -> [] -> File not found
    "LightScribe Control Panel" -> %CommonProgramFiles%\LightScribe\LightScribeControlPanel.exe [C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden] -> [2007/08/23 17:36:30 | 00,455,968 | ---- | M] (Hewlett-Packard Company)
    "SpybotSD TeaTimer" -> %ProgramFiles%\Spybot - Search & Destroy\TeaTimer.exe [C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe] -> [2008/09/16 12:16:08 | 01,833,296 | RHS- | M] (Safer Networking Limited)
    < CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    \\"NoActiveDesktop" -> [1] -> File not found
    \\"NoActiveDesktopChanges" -> [1] -> File not found
    \\"ForceActiveDesktopOn" -> [0] -> File not found
    < CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
    \\"ConsentPromptBehaviorAdmin" -> [2] -> File not found
    \\"ConsentPromptBehaviorUser" -> [1] -> File not found
    \\"EnableInstallerDetection" -> [1] -> File not found
    \\"EnableLUA" -> [1] -> File not found
    \\"EnableSecureUIAPaths" -> [1] -> File not found
    \\"EnableVirtualization" -> [1] -> File not found
    \\"PromptOnSecureDesktop" -> [1] -> File not found
    \\"ValidateAdminCodeSignatures" -> [0] -> File not found
    \\"dontdisplaylastusername" -> [0] -> File not found
    \\"legalnoticecaption" -> [] -> File not found
    \\"legalnoticetext" -> [] -> File not found
    \\"scforceoption" -> [0] -> File not found
    \\"shutdownwithoutlogon" -> [1] -> File not found
    \\"undockwithoutlogon" -> [1] -> File not found
    \\"FilterAdministratorToken" -> [0] -> File not found
    \\"EnableUIADesktopToggle" -> [0] -> File not found
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats
    \UIPI\Clipboard\ExceptionFormats\\"CF_TEXT" -> [1] -> File not found
    \UIPI\Clipboard\ExceptionFormats\\"CF_BITMAP" -> [2] -> File not found
    \UIPI\Clipboard\ExceptionFormats\\"CF_OEMTEXT" -> [7] -> File not found
    \UIPI\Clipboard\ExceptionFormats\\"CF_DIB" -> [8] -> File not found
    \UIPI\Clipboard\ExceptionFormats\\"CF_PALETTE" -> [9] -> File not found
    \UIPI\Clipboard\ExceptionFormats\\"CF_UNICODETEXT" -> [13] -> File not found
    \UIPI\Clipboard\ExceptionFormats\\"CF_DIBV5" -> [17] -> File not found
    < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
    {2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> %ProgramFiles%\Microsoft Office\Office12\ONBttnIE.dll [Button: Send to OneNote] -> [2007/12/13 02:20:58 | 00,606,288 | ---- | M] (Microsoft Corporation)
    {2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> %ProgramFiles%\Microsoft Office\Office12\ONBttnIE.dll [Menu: S&end to OneNote] -> [2007/12/13 02:20:58 | 00,606,288 | ---- | M] (Microsoft Corporation)
    {58ECB495-38F0-49cb-A538-10282ABF65E7}:{A93C41D8-01F8-4F8B-B14C-DE20B117E636} [HKLM] -> %ProgramFiles%\HP\Smart Web Printing\hpswp_extensions.dll [Button: HP Smart Select] -> [2007/08/31 12:34:58 | 00,152,928 | ---- | M] (Hewlett-Packard Co.)
    {92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> %ProgramFiles%\Microsoft Office\Office12\REFIEBAR.DLL [Button: Research] -> [2006/10/26 21:12:22 | 00,040,424 | ---- | M] (Microsoft Corporation)
    {DFB852A3-47F8-48C4-A200-58CAB36FD2A2}:{53707962-6F74-2D53-2644-206D7942484F} [HKLM] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Menu: Spybot - Search & Destroy Configuration] -> [2008/09/15 15:25:44 | 01,562,960 | RHS- | M] (Safer Networking Limited)
    < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ ->
    PluginsPageFriendlyName -> Microsoft ActiveX Gallery ->
    PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s ->
    < Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
    "" -> http://
    < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 5216 domain(s) found. ->
    49 domain(s) and sub-domain(s) not assigned to a zone.
    < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 36 range(s) found. ->
    < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 5146 domain(s) found. ->
    48 domain(s) and sub-domain(s) not assigned to a zone.
    < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 36 range(s) found. ->
    < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
    {8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab [Java Plug-in 1.6.0_11] ->
    {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab [Java Plug-in 1.6.0_02] ->
    {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab [Java Plug-in 1.6.0_07] ->
    {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab [Java Plug-in 1.6.0_11] ->
    {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab [Java Plug-in 1.6.0_11] ->
    < DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
    {4AA6E3A5-6D8E-4FA0-93B1-860735EA4966} -> (Realtek RTL8168B/8111B Family PCI-E GBE NIC) ->
    < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs ->
    *AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls ->
    C:\Windows\SysWOW64\guard32.dll -> %SystemRoot%\SysWOW64\guard32.dll -> [2008/12/06 13:59:55 | 00,147,192 | ---- | M] ()
    *MultiFile Done* -> ->
    < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
    *Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
    explorer.exe -> %SystemRoot%\system32\explorer.exe -> [2008/10/28 23:29:41 | 02,927,104 | ---- | M] (Microsoft Corporation)
    *MultiFile Done* -> ->
    < SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad ->
    "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" [HKLM] -> %SystemRoot%\SysWOW64\webcheck.dll [WebCheck] -> [2008/01/20 19:48:55 | 00,233,984 | ---- | M] (Microsoft Corporation)
    < Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List ->
    "C:\Program Files (x86)\EarthLink TotalAccess\TaskPanl.exe" -> C:\Program Files (x86)\EarthLink TotalAccess\TaskPanl.exe [C:\Program Files (x86)\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink] -> [2006/08/30 13:35:12 | 00,952,088 | ---- | M] (EarthLink, Inc.)
    < SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot ->
    "AlternateShell" -> cmd.exe ->
    < CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
    "AutoRun" -> 1 ->
    "DisplayName" -> CD-ROM Driver ->
    "ImagePath" -> [system32\DRIVERS\cdrom.sys] -> File not found
    < MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 ->


    [Files/Folders - Created Within 30 Days]
    NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> %UserProfile%\NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> [2009/03/22 01:23:01 | 00,524,288 | -HS- | C] ()
    NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> %UserProfile%\NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> [2009/03/22 01:23:01 | 00,524,288 | -HS- | C] ()
    NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TM.blf -> %UserProfile%\NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TM.blf -> [2009/03/22 01:23:01 | 00,065,536 | -HS- | C] ()
    avg -> %SystemRoot%\System32\drivers\avg -> [2009/03/21 01:08:12 | 00,000,000 | ---D | C]
    avg8 -> %AllUsersProfile%\avg8 -> [2009/03/21 01:06:39 | 00,000,000 | ---D | C]
    AVG -> %ProgramFiles%\AVG -> [2009/03/21 01:06:39 | 00,000,000 | ---D | C]
    infocardcpl.cpl -> %SystemRoot%\System32\infocardcpl.cpl -> [2009/03/21 00:01:39 | 00,037,384 | ---- | C] (Microsoft Corporation)
    icardres.dll -> %SystemRoot%\System32\icardres.dll -> [2009/03/21 00:01:36 | 00,011,264 | ---- | C] (Microsoft Corporation)
    PresentationNative_v0300.dll -> %SystemRoot%\System32\PresentationNative_v0300.dll -> [2009/03/21 00:01:35 | 00,781,344 | ---- | C] (Microsoft Corporation)
    icardagt.exe -> %SystemRoot%\System32\icardagt.exe -> [2009/03/21 00:01:35 | 00,622,080 | ---- | C] (Microsoft Corporation)
    infocardapi.dll -> %SystemRoot%\System32\infocardapi.dll -> [2009/03/21 00:01:35 | 00,097,800 | ---- | C] (Microsoft Corporation)
    PresentationHostProxy.dll -> %SystemRoot%\System32\PresentationHostProxy.dll -> [2009/03/21 00:01:35 | 00,043,544 | ---- | C] (Microsoft Corporation)
    PresentationCFFRasterizerNative_v0300.dll -> %SystemRoot%\System32\PresentationCFFRasterizerNative_v0300.dll -> [2009/03/21 00:01:30 | 00,105,016 | ---- | C] (Microsoft Corporation)
    PresentationHost.exe -> %SystemRoot%\System32\PresentationHost.exe -> [2009/03/21 00:01:28 | 00,326,160 | ---- | C] (Microsoft Corporation)
    netfxperf.dll -> %SystemRoot%\System32\netfxperf.dll -> [2009/03/20 23:54:59 | 00,041,984 | ---- | C] (Microsoft Corporation)
    dfshim.dll -> %SystemRoot%\System32\dfshim.dll -> [2009/03/20 23:54:21 | 00,096,760 | ---- | C] (Microsoft Corporation)
    mscoree.dll -> %SystemRoot%\System32\mscoree.dll -> [2009/03/20 23:54:13 | 00,282,112 | ---- | C] (Microsoft Corporation)
    mscorier.dll -> %SystemRoot%\System32\mscorier.dll -> [2009/03/20 23:54:04 | 00,158,720 | ---- | C] (Microsoft Corporation)
    mscories.dll -> %SystemRoot%\System32\mscories.dll -> [2009/03/20 23:54:02 | 00,083,968 | ---- | C] (Microsoft Corporation)
    IconCache.db -> %UserProfile%\AppData\Local\IconCache.db -> [2009/03/18 11:25:16 | 02,295,944 | -H-- | C] ()
    hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [2009/03/18 11:04:41 | 42,933,20704 | -HS- | C] ()
    NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> %UserProfile%\NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> [2009/03/18 02:14:17 | 00,524,288 | -HS- | C] ()
    NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> %UserProfile%\NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> [2009/03/18 02:14:17 | 00,524,288 | -HS- | C] ()
    NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TM.blf -> %UserProfile%\NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TM.blf -> [2009/03/18 02:14:17 | 00,065,536 | -HS- | C] ()
    d3d9caps64.dat -> %UserProfile%\AppData\Local\d3d9caps64.dat -> [2009/03/18 00:42:06 | 00,000,732 | ---- | C] ()
    schannel.dll -> %SystemRoot%\System32\schannel.dll -> [2009/03/17 13:39:09 | 00,268,288 | ---- | C] (Microsoft Corporation)

    [Files/Folders - Modified Within 30 Days]
    16 C:\Users\Tobias\AppData\Local\Temp\*.tmp files -> C:\Users\Tobias\AppData\Local\Temp\*.tmp ->
    16 C:\Users\Tobias\AppData\Local\Temp\*.tmp files -> C:\Users\Tobias\AppData\Local\Temp\*.tmp ->
    NTUSER.DAT -> %UserProfile%\NTUSER.DAT -> [2009/03/25 18:16:28 | 07,077,888 | -HS- | M] ()
    dwpqqrfnE.dll -> %UserProfile%\AppData\Local\Temp\dwpqqrfnE.dll -> [2009/03/25 18:08:05 | 00,053,248 | ---- | M] ()
    qmgr1.dat -> %AllUsersProfile%\Microsoft\Network\Downloader\qmgr1.dat -> [2009/03/25 16:06:14 | 04,194,304 | ---- | M] ()
    qmgr0.dat -> %AllUsersProfile%\Microsoft\Network\Downloader\qmgr0.dat -> [2009/03/25 16:06:14 | 04,194,304 | ---- | M] ()
    nvModes.001 -> %AllUsersProfile%\nvModes.001 -> [2009/03/25 16:03:41 | 00,042,526 | ---- | M] ()
    hpqp.ini -> %SystemDrive%\Users\Public\Documents\hpqp.ini -> [2009/03/25 16:03:36 | 00,000,253 | ---- | M] ()
    nvModes.dat -> %AllUsersProfile%\nvModes.dat -> [2009/03/25 16:03:33 | 00,042,526 | ---- | M] ()
    SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [2009/03/25 16:03:15 | 00,000,006 | -H-- | M] ()
    bootstat.dat -> %SystemRoot%\bootstat.dat -> [2009/03/25 16:03:02 | 00,067,584 | --S- | M] ()
    hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [2009/03/25 16:02:57 | 42,933,20704 | -HS- | M] ()
    NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> %UserProfile%\NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> [2009/03/25 12:55:57 | 00,524,288 | -HS- | M] ()
    NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TM.blf -> %UserProfile%\NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TM.blf -> [2009/03/25 12:55:57 | 00,065,536 | -HS- | M] ()
    IconCache.db -> %UserProfile%\AppData\Local\IconCache.db -> [2009/03/25 12:55:48 | 02,295,944 | -H-- | M] ()
    PublishedRacMonSWITable.DAT -> %AllUsersProfile%\Microsoft\RAC\PublishedData\PublishedRacMonSWITable.DAT -> [2009/03/25 00:59:56 | 00,013,916 | ---- | M] ()
    PublishedRacMonAFLTable.DAT -> %AllUsersProfile%\Microsoft\RAC\PublishedData\PublishedRacMonAFLTable.DAT -> [2009/03/25 00:59:56 | 00,008,004 | ---- | M] ()
    PublishedRacMonIndex.DAT -> %AllUsersProfile%\Microsoft\RAC\PublishedData\PublishedRacMonIndex.DAT -> [2009/03/25 00:59:56 | 00,001,584 | ---- | M] ()
    PublishedRacMonOSFTable.DAT -> %AllUsersProfile%\Microsoft\RAC\PublishedData\PublishedRacMonOSFTable.DAT -> [2009/03/25 00:59:56 | 00,001,104 | ---- | M] ()
    PublishedRacMonHFLTable.DAT -> %AllUsersProfile%\Microsoft\RAC\PublishedData\PublishedRacMonHFLTable.DAT -> [2009/03/25 00:59:56 | 00,000,000 | ---- | M] ()
    PublishedRacMonCLKTable.DAT -> %AllUsersProfile%\Microsoft\RAC\PublishedData\PublishedRacMonCLKTable.DAT -> [2009/03/25 00:59:56 | 00,000,000 | ---- | M] ()
    NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> %UserProfile%\NTUSER.DAT{1021b489-16b1-11de-881d-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> [2009/03/22 04:30:32 | 00,524,288 | -HS- | M] ()
    d3d9caps.dat -> %UserProfile%\AppData\Local\d3d9caps.dat -> [2009/03/22 03:24:57 | 00,000,680 | ---- | M] ()
    PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [2009/03/22 01:14:37 | 00,744,188 | ---- | M] ()
    ntuser.dat_previous -> %UserProfile%\ntuser.dat_previous -> [2009/03/22 01:11:07 | 07,077,888 | -HS- | M] ()
    NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> %UserProfile%\NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000001.regtrans-ms -> [2009/03/22 01:11:07 | 00,524,288 | -HS- | M] ()
    NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TM.blf -> %UserProfile%\NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TM.blf -> [2009/03/22 01:11:07 | 00,065,536 | -HS- | M] ()
    d3d9caps64.dat -> %UserProfile%\AppData\Local\d3d9caps64.dat -> [2009/03/18 02:47:53 | 00,000,732 | ---- | M] ()
    NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> %UserProfile%\NTUSER.DAT{67f52449-1399-11de-8466-001e6843cdf2}.TMContainer00000000000000000002.regtrans-ms -> [2009/03/18 02:29:02 | 00,524,288 | -HS- | M] ()
    NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms -> %UserProfile%\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms -> [2009/03/18 02:12:47 | 00,524,288 | -HS- | M] ()
    NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf -> %UserProfile%\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf -> [2009/03/18 02:12:47 | 00,065,536 | -HS- | M] ()
    build.dat -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\build.dat -> [2009/03/11 15:55:33 | 00,017,962 | ---- | M] ()
    build.dat -> %SystemRoot%\Temp\AVSETUP_49c5422e\build.dat -> [2009/03/11 15:55:33 | 00,017,962 | ---- | M] ()
    build.dat -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\build.dat -> [2009/03/11 15:55:33 | 00,017,962 | ---- | M] ()
    build.dat -> %SystemRoot%\Temp\AVSETUP_49c1380a\build.dat -> [2009/03/11 15:55:33 | 00,017,962 | ---- | M] ()
    build.dat -> %SystemRoot%\Temp\AVSETUP_49c0c89f\build.dat -> [2009/03/11 15:55:33 | 00,017,962 | ---- | M] ()
    rctext.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\rctext.dll -> [2009/03/11 15:55:12 | 00,087,297 | ---- | M] (Avira GmbH)
    rctext.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\rctext.dll -> [2009/03/11 15:55:12 | 00,087,297 | ---- | M] (Avira GmbH)
    rctext.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\rctext.dll -> [2009/03/11 15:55:12 | 00,087,297 | ---- | M] (Avira GmbH)
    rctext.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\rctext.dll -> [2009/03/11 15:55:12 | 00,087,297 | ---- | M] (Avira GmbH)
    rctext.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\rctext.dll -> [2009/03/11 15:55:12 | 00,087,297 | ---- | M] (Avira GmbH)
    setup.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\setup.exe -> [2009/03/10 10:03:29 | 00,679,681 | ---- | M] (Avira GmbH)
    setup.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\setup.exe -> [2009/03/10 10:03:29 | 00,679,681 | ---- | M] (Avira GmbH)
    setup.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\setup.exe -> [2009/03/10 10:03:29 | 00,679,681 | ---- | M] (Avira GmbH)
    setup.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\setup.exe -> [2009/03/10 10:03:29 | 00,679,681 | ---- | M] (Avira GmbH)
    setup.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\setup.exe -> [2009/03/10 10:03:29 | 00,679,681 | ---- | M] (Avira GmbH)
    opa12.dat -> %AllUsersProfile%\Microsoft\OFFICE\DATA\opa12.dat -> [2009/03/06 00:46:00 | 00,008,306 | ---- | M] ()
    update.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\update.exe -> [2009/03/05 16:20:02 | 00,401,153 | ---- | M] (Avira GmbH)
    update.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\update.exe -> [2009/03/05 16:20:02 | 00,401,153 | ---- | M] (Avira GmbH)
    update.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\update.exe -> [2009/03/05 16:20:02 | 00,401,153 | ---- | M] (Avira GmbH)
    update.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\update.exe -> [2009/03/05 16:20:02 | 00,401,153 | ---- | M] (Avira GmbH)
    update.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\update.exe -> [2009/03/05 16:20:02 | 00,401,153 | ---- | M] (Avira GmbH)
    sched.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\sched.exe -> [2009/03/05 16:17:24 | 00,108,289 | ---- | M] (Avira GmbH)
    sched.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\sched.exe -> [2009/03/05 16:17:24 | 00,108,289 | ---- | M] (Avira GmbH)
    sched.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\sched.exe -> [2009/03/05 16:17:24 | 00,108,289 | ---- | M] (Avira GmbH)
    sched.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\sched.exe -> [2009/03/05 16:17:24 | 00,108,289 | ---- | M] (Avira GmbH)
    sched.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\sched.exe -> [2009/03/05 16:17:24 | 00,108,289 | ---- | M] (Avira GmbH)
    aepack.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aepack.dll -> [2009/03/04 13:06:10 | 00,397,686 | ---- | M] (Avira GmbH)
    aepack.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aepack.dll -> [2009/03/04 13:06:10 | 00,397,686 | ---- | M] (Avira GmbH)
    aepack.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aepack.dll -> [2009/03/04 13:06:10 | 00,397,686 | ---- | M] (Avira GmbH)
    aepack.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aepack.dll -> [2009/03/04 13:06:10 | 00,397,686 | ---- | M] (Avira GmbH)
    aepack.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aepack.dll -> [2009/03/04 13:06:10 | 00,397,686 | ---- | M] (Avira GmbH)
    aegen.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aegen.dll -> [2009/03/04 13:06:10 | 00,336,244 | ---- | M] (Avira GmbH)
    aegen.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aegen.dll -> [2009/03/04 13:06:10 | 00,336,244 | ---- | M] (Avira GmbH)
    aegen.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aegen.dll -> [2009/03/04 13:06:10 | 00,336,244 | ---- | M] (Avira GmbH)
    aegen.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aegen.dll -> [2009/03/04 13:06:10 | 00,336,244 | ---- | M] (Avira GmbH)
    aegen.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aegen.dll -> [2009/03/04 13:06:10 | 00,336,244 | ---- | M] (Avira GmbH)
    aeset.dat -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aeset.dat -> [2009/03/04 13:06:10 | 00,002,158 | ---- | M] ()
    aeset.dat -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aeset.dat -> [2009/03/04 13:06:10 | 00,002,158 | ---- | M] ()
    aeset.dat -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aeset.dat -> [2009/03/04 13:06:10 | 00,002,158 | ---- | M] ()
    aeset.dat -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aeset.dat -> [2009/03/04 13:06:10 | 00,002,158 | ---- | M] ()
    aeset.dat -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aeset.dat -> [2009/03/04 13:06:10 | 00,002,158 | ---- | M] ()
    update.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\update.dll -> [2009/03/02 13:57:04 | 00,326,913 | ---- | M] (Avira GmbH)
    update.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\update.dll -> [2009/03/02 13:57:04 | 00,326,913 | ---- | M] (Avira GmbH)
    update.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\update.dll -> [2009/03/02 13:57:04 | 00,326,913 | ---- | M] (Avira GmbH)
    update.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\update.dll -> [2009/03/02 13:57:04 | 00,326,913 | ---- | M] (Avira GmbH)
    update.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\update.dll -> [2009/03/02 13:57:04 | 00,326,913 | ---- | M] (Avira GmbH)
    ccgen.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccgen.dll -> [2009/03/02 13:53:02 | 00,450,305 | ---- | M] (Avira GmbH)
    ccgen.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccgen.dll -> [2009/03/02 13:53:02 | 00,450,305 | ---- | M] (Avira GmbH)
    ccgen.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccgen.dll -> [2009/03/02 13:53:02 | 00,450,305 | ---- | M] (Avira GmbH)
    ccgen.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccgen.dll -> [2009/03/02 13:53:02 | 00,450,305 | ---- | M] (Avira GmbH)
    ccgen.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccgen.dll -> [2009/03/02 13:53:02 | 00,450,305 | ---- | M] (Avira GmbH)
    avconfig.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avconfig.dll -> [2009/03/02 13:49:11 | 00,444,161 | ---- | M] (Avira GmbH)
    avconfig.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avconfig.dll -> [2009/03/02 13:49:11 | 00,444,161 | ---- | M] (Avira GmbH)
    avconfig.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avconfig.dll -> [2009/03/02 13:49:11 | 00,444,161 | ---- | M] (Avira GmbH)
    avconfig.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avconfig.dll -> [2009/03/02 13:49:11 | 00,444,161 | ---- | M] (Avira GmbH)
    avconfig.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avconfig.dll -> [2009/03/02 13:49:11 | 00,444,161 | ---- | M] (Avira GmbH)
    ccquamgr.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccquamgr.dll -> [2009/03/02 12:11:52 | 00,341,249 | ---- | M] (Avira GmbH)
    ccquamgr.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccquamgr.dll -> [2009/03/02 12:11:52 | 00,341,249 | ---- | M] (Avira GmbH)
    ccquamgr.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccquamgr.dll -> [2009/03/02 12:11:52 | 00,341,249 | ---- | M] (Avira GmbH)
    ccquamgr.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccquamgr.dll -> [2009/03/02 12:11:52 | 00,341,249 | ---- | M] (Avira GmbH)
    ccquamgr.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccquamgr.dll -> [2009/03/02 12:11:52 | 00,341,249 | ---- | M] (Avira GmbH)
    avguard.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avguard.exe -> [2009/03/02 12:10:30 | 00,185,089 | ---- | M] (Avira GmbH)
    avguard.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avguard.exe -> [2009/03/02 12:10:30 | 00,185,089 | ---- | M] (Avira GmbH)
    avguard.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avguard.exe -> [2009/03/02 12:10:30 | 00,185,089 | ---- | M] (Avira GmbH)
    avguard.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avguard.exe -> [2009/03/02 12:10:30 | 00,185,089 | ---- | M] (Avira GmbH)
    avguard.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avguard.exe -> [2009/03/02 12:10:30 | 00,185,089 | ---- | M] (Avira GmbH)
    avgnt.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avgnt.exe -> [2009/03/02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH)
    avgnt.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avgnt.exe -> [2009/03/02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH)
    avgnt.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avgnt.exe -> [2009/03/02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH)
    avgnt.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avgnt.exe -> [2009/03/02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH)
    avgnt.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avgnt.exe -> [2009/03/02 12:08:47 | 00,209,153 | ---- | M] (Avira GmbH)
    avgsetup.exe -> %UserProfile%\AppData\Local\Temp\7zSA331.tmp\avgsetup.exe -> [2009/03/02 06:42:07 | 03,130,136 | ---- | M] (AVG Technologies CZ, s.r.o.)
    rchelp.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\rchelp.dll -> [2009/02/27 11:33:33 | 00,046,337 | ---- | M] (Avira GmbH)
    rchelp.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\rchelp.dll -> [2009/02/27 11:33:33 | 00,046,337 | ---- | M] (Avira GmbH)
    rchelp.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\rchelp.dll -> [2009/02/27 11:33:33 | 00,046,337 | ---- | M] (Avira GmbH)
    rchelp.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\rchelp.dll -> [2009/02/27 11:33:33 | 00,046,337 | ---- | M] (Avira GmbH)
    rchelp.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\rchelp.dll -> [2009/02/27 11:33:33 | 00,046,337 | ---- | M] (Avira GmbH)
    updaterc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\updaterc.dll -> [2009/02/27 10:59:22 | 00,078,593 | ---- | M] (Avira GmbH)
    updaterc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\updaterc.dll -> [2009/02/27 10:59:22 | 00,078,593 | ---- | M] (Avira GmbH)
    updaterc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\updaterc.dll -> [2009/02/27 10:59:22 | 00,078,593 | ---- | M] (Avira GmbH)
    updaterc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\updaterc.dll -> [2009/02/27 10:59:22 | 00,078,593 | ---- | M] (Avira GmbH)
    updaterc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\updaterc.dll -> [2009/02/27 10:59:22 | 00,078,593 | ---- | M] (Avira GmbH)
    avconfigrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avconfigrc.dll -> [2009/02/27 10:59:18 | 00,011,009 | ---- | M] (Avira GmbH)
    avconfigrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avconfigrc.dll -> [2009/02/27 10:59:18 | 00,011,009 | ---- | M] (Avira GmbH)
    avconfigrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avconfigrc.dll -> [2009/02/27 10:59:18 | 00,011,009 | ---- | M] (Avira GmbH)
    avconfigrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avconfigrc.dll -> [2009/02/27 10:59:18 | 00,011,009 | ---- | M] (Avira GmbH)
    avconfigrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avconfigrc.dll -> [2009/02/27 10:59:18 | 00,011,009 | ---- | M] (Avira GmbH)
    factrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\factrc.dll -> [2009/02/27 10:59:15 | 00,020,737 | ---- | M] (Avira GmbH)
    factrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\factrc.dll -> [2009/02/27 10:59:15 | 00,020,737 | ---- | M] (Avira GmbH)
    factrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\factrc.dll -> [2009/02/27 10:59:15 | 00,020,737 | ---- | M] (Avira GmbH)
    factrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\factrc.dll -> [2009/02/27 10:59:15 | 00,020,737 | ---- | M] (Avira GmbH)
    factrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\factrc.dll -> [2009/02/27 10:59:15 | 00,020,737 | ---- | M] (Avira GmbH)
    updguirc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\updguirc.dll -> [2009/02/27 10:59:02 | 00,008,961 | ---- | M] (Avira GmbH)
    updguirc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\updguirc.dll -> [2009/02/27 10:59:02 | 00,008,961 | ---- | M] (Avira GmbH)
    updguirc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\updguirc.dll -> [2009/02/27 10:59:02 | 00,008,961 | ---- | M] (Avira GmbH)
    updguirc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\updguirc.dll -> [2009/02/27 10:59:02 | 00,008,961 | ---- | M] (Avira GmbH)
    updguirc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\updguirc.dll -> [2009/02/27 10:59:02 | 00,008,961 | ---- | M] (Avira GmbH)
    setup.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\setup.dll -> [2009/02/27 10:59:00 | 00,060,930 | ---- | M] (Avira GmbH)
    setup.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\setup.dll -> [2009/02/27 10:59:00 | 00,060,930 | ---- | M] (Avira GmbH)
    setup.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\setup.dll -> [2009/02/27 10:59:00 | 00,060,930 | ---- | M] (Avira GmbH)
    setup.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\setup.dll -> [2009/02/27 10:59:00 | 00,060,930 | ---- | M] (Avira GmbH)
    setup.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\setup.dll -> [2009/02/27 10:59:00 | 00,060,930 | ---- | M] (Avira GmbH)
    schedr.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\schedr.dll -> [2009/02/27 10:58:59 | 00,006,913 | ---- | M] (Avira GmbH)
    schedr.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\schedr.dll -> [2009/02/27 10:58:59 | 00,006,913 | ---- | M] (Avira GmbH)
    schedr.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\schedr.dll -> [2009/02/27 10:58:59 | 00,006,913 | ---- | M] (Avira GmbH)
    schedr.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\schedr.dll -> [2009/02/27 10:58:59 | 00,006,913 | ---- | M] (Avira GmbH)
    schedr.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\schedr.dll -> [2009/02/27 10:58:59 | 00,006,913 | ---- | M] (Avira GmbH)
    lukeres.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\lukeres.dll -> [2009/02/27 10:58:52 | 00,012,033 | ---- | M] (Avira GmbH)
    lukeres.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\lukeres.dll -> [2009/02/27 10:58:52 | 00,012,033 | ---- | M] (Avira GmbH)
    lukeres.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\lukeres.dll -> [2009/02/27 10:58:52 | 00,012,033 | ---- | M] (Avira GmbH)
    lukeres.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\lukeres.dll -> [2009/02/27 10:58:52 | 00,012,033 | ---- | M] (Avira GmbH)
    lukeres.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\lukeres.dll -> [2009/02/27 10:58:52 | 00,012,033 | ---- | M] (Avira GmbH)
    licmgr.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\licmgr.dll -> [2009/02/27 10:58:51 | 00,009,473 | ---- | M] (Avira GmbH)
    licmgr.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\licmgr.dll -> [2009/02/27 10:58:51 | 00,009,473 | ---- | M] (Avira GmbH)
    licmgr.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\licmgr.dll -> [2009/02/27 10:58:51 | 00,009,473 | ---- | M] (Avira GmbH)
    licmgr.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\licmgr.dll -> [2009/02/27 10:58:51 | 00,009,473 | ---- | M] (Avira GmbH)
    licmgr.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\licmgr.dll -> [2009/02/27 10:58:51 | 00,009,473 | ---- | M] (Avira GmbH)
    guardmsg.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\guardmsg.dll -> [2009/02/27 10:58:49 | 00,029,441 | ---- | M] (Avira GmbH)
    guardmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\guardmsg.dll -> [2009/02/27 10:58:49 | 00,029,441 | ---- | M] (Avira GmbH)
    guardmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\guardmsg.dll -> [2009/02/27 10:58:49 | 00,029,441 | ---- | M] (Avira GmbH)
    guardmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\guardmsg.dll -> [2009/02/27 10:58:49 | 00,029,441 | ---- | M] (Avira GmbH)
    guardmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\guardmsg.dll -> [2009/02/27 10:58:49 | 00,029,441 | ---- | M] (Avira GmbH)
    ccupdrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccupdrc.dll -> [2009/02/27 10:58:44 | 00,012,545 | ---- | M] (Avira GmbH)
    ccupdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccupdrc.dll -> [2009/02/27 10:58:44 | 00,012,545 | ---- | M] (Avira GmbH)
    ccupdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccupdrc.dll -> [2009/02/27 10:58:44 | 00,012,545 | ---- | M] (Avira GmbH)
    ccupdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccupdrc.dll -> [2009/02/27 10:58:44 | 00,012,545 | ---- | M] (Avira GmbH)
    ccupdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccupdrc.dll -> [2009/02/27 10:58:44 | 00,012,545 | ---- | M] (Avira GmbH)
    ccscherc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccscherc.dll -> [2009/02/27 10:58:42 | 00,018,177 | ---- | M] (Avira GmbH)
    ccscherc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccscherc.dll -> [2009/02/27 10:58:42 | 00,018,177 | ---- | M] (Avira GmbH)
    ccscherc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccscherc.dll -> [2009/02/27 10:58:42 | 00,018,177 | ---- | M] (Avira GmbH)
    ccscherc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccscherc.dll -> [2009/02/27 10:58:42 | 00,018,177 | ---- | M] (Avira GmbH)
    ccscherc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccscherc.dll -> [2009/02/27 10:58:42 | 00,018,177 | ---- | M] (Avira GmbH)
    ccscanrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccscanrc.dll -> [2009/02/27 10:58:41 | 00,023,809 | ---- | M] (Avira GmbH)
    ccscanrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccscanrc.dll -> [2009/02/27 10:58:41 | 00,023,809 | ---- | M] (Avira GmbH)
    ccscanrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccscanrc.dll -> [2009/02/27 10:58:41 | 00,023,809 | ---- | M] (Avira GmbH)
    ccscanrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccscanrc.dll -> [2009/02/27 10:58:41 | 00,023,809 | ---- | M] (Avira GmbH)
    ccscanrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccscanrc.dll -> [2009/02/27 10:58:41 | 00,023,809 | ---- | M] (Avira GmbH)
    ccreporc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccreporc.dll -> [2009/02/27 10:58:39 | 00,011,009 | ---- | M] (Avira GmbH)
    ccreporc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccreporc.dll -> [2009/02/27 10:58:39 | 00,011,009 | ---- | M] (Avira GmbH)
    ccreporc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccreporc.dll
  9. 2009-03-26, 02:20 #9
    Tobias Nightbringer
    Tobias Nightbringer is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    -> [2009/02/27 10:58:39 | 00,011,009 | ---- | M] (Avira GmbH)
    ccreporc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccreporc.dll -> [2009/02/27 10:58:39 | 00,011,009 | ---- | M] (Avira GmbH)
    ccreporc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccreporc.dll -> [2009/02/27 10:58:39 | 00,011,009 | ---- | M] (Avira GmbH)
    ccquarc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccquarc.dll -> [2009/02/27 10:58:38 | 00,016,641 | ---- | M] (Avira GmbH)
    ccquarc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccquarc.dll -> [2009/02/27 10:58:38 | 00,016,641 | ---- | M] (Avira GmbH)
    ccquarc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccquarc.dll -> [2009/02/27 10:58:38 | 00,016,641 | ---- | M] (Avira GmbH)
    ccquarc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccquarc.dll -> [2009/02/27 10:58:38 | 00,016,641 | ---- | M] (Avira GmbH)
    ccquarc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccquarc.dll -> [2009/02/27 10:58:38 | 00,016,641 | ---- | M] (Avira GmbH)
    ccmainrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccmainrc.dll -> [2009/02/27 10:58:34 | 00,020,225 | ---- | M] (Avira GmbH)
    ccmainrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccmainrc.dll -> [2009/02/27 10:58:34 | 00,020,225 | ---- | M] (Avira GmbH)
    ccmainrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccmainrc.dll -> [2009/02/27 10:58:34 | 00,020,225 | ---- | M] (Avira GmbH)
    ccmainrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccmainrc.dll -> [2009/02/27 10:58:34 | 00,020,225 | ---- | M] (Avira GmbH)
    ccmainrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccmainrc.dll -> [2009/02/27 10:58:34 | 00,020,225 | ---- | M] (Avira GmbH)
    cclicrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\cclicrc.dll -> [2009/02/27 10:58:33 | 00,004,865 | ---- | M] (Avira GmbH)
    cclicrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\cclicrc.dll -> [2009/02/27 10:58:33 | 00,004,865 | ---- | M] (Avira GmbH)
    cclicrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\cclicrc.dll -> [2009/02/27 10:58:33 | 00,004,865 | ---- | M] (Avira GmbH)
    cclicrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\cclicrc.dll -> [2009/02/27 10:58:33 | 00,004,865 | ---- | M] (Avira GmbH)
    cclicrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\cclicrc.dll -> [2009/02/27 10:58:33 | 00,004,865 | ---- | M] (Avira GmbH)
    ccgrdrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccgrdrc.dll -> [2009/02/27 10:58:31 | 00,020,225 | ---- | M] (Avira GmbH)
    ccgrdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccgrdrc.dll -> [2009/02/27 10:58:31 | 00,020,225 | ---- | M] (Avira GmbH)
    ccgrdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccgrdrc.dll -> [2009/02/27 10:58:31 | 00,020,225 | ---- | M] (Avira GmbH)
    ccgrdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccgrdrc.dll -> [2009/02/27 10:58:31 | 00,020,225 | ---- | M] (Avira GmbH)
    ccgrdrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccgrdrc.dll -> [2009/02/27 10:58:31 | 00,020,225 | ---- | M] (Avira GmbH)
    ccgenrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccgenrc.dll -> [2009/02/27 10:58:29 | 00,026,881 | ---- | M] (Avira GmbH)
    ccgenrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccgenrc.dll -> [2009/02/27 10:58:29 | 00,026,881 | ---- | M] (Avira GmbH)
    ccgenrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccgenrc.dll -> [2009/02/27 10:58:29 | 00,026,881 | ---- | M] (Avira GmbH)
    ccgenrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccgenrc.dll -> [2009/02/27 10:58:29 | 00,026,881 | ---- | M] (Avira GmbH)
    ccgenrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccgenrc.dll -> [2009/02/27 10:58:29 | 00,026,881 | ---- | M] (Avira GmbH)
    ccevrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccevrc.dll -> [2009/02/27 10:58:26 | 00,011,521 | ---- | M] (Avira GmbH)
    ccevrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccevrc.dll -> [2009/02/27 10:58:26 | 00,011,521 | ---- | M] (Avira GmbH)
    ccevrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccevrc.dll -> [2009/02/27 10:58:26 | 00,011,521 | ---- | M] (Avira GmbH)
    ccevrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccevrc.dll -> [2009/02/27 10:58:26 | 00,011,521 | ---- | M] (Avira GmbH)
    ccevrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccevrc.dll -> [2009/02/27 10:58:26 | 00,011,521 | ---- | M] (Avira GmbH)
    avscan.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avscan.dll -> [2009/02/27 10:58:24 | 00,040,705 | ---- | M] (Avira GmbH)
    avscan.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avscan.dll -> [2009/02/27 10:58:24 | 00,040,705 | ---- | M] (Avira GmbH)
    avscan.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avscan.dll -> [2009/02/27 10:58:24 | 00,040,705 | ---- | M] (Avira GmbH)
    avscan.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avscan.dll -> [2009/02/27 10:58:24 | 00,040,705 | ---- | M] (Avira GmbH)
    avscan.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avscan.dll -> [2009/02/27 10:58:24 | 00,040,705 | ---- | M] (Avira GmbH)
    avnotify.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avnotify.dll -> [2009/02/27 10:58:22 | 00,007,425 | ---- | M] (Avira GmbH)
    avnotify.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avnotify.dll -> [2009/02/27 10:58:22 | 00,007,425 | ---- | M] (Avira GmbH)
    avnotify.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avnotify.dll -> [2009/02/27 10:58:22 | 00,007,425 | ---- | M] (Avira GmbH)
    avnotify.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avnotify.dll -> [2009/02/27 10:58:22 | 00,007,425 | ---- | M] (Avira GmbH)
    avnotify.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avnotify.dll -> [2009/02/27 10:58:22 | 00,007,425 | ---- | M] (Avira GmbH)
    aescript.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aescript.dll -> [2009/02/26 20:01:56 | 00,352,634 | ---- | M] (Avira GmbH)
    aescript.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aescript.dll -> [2009/02/26 20:01:56 | 00,352,634 | ---- | M] (Avira GmbH)
    aescript.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aescript.dll -> [2009/02/26 20:01:56 | 00,352,634 | ---- | M] (Avira GmbH)
    aescript.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aescript.dll -> [2009/02/26 20:01:56 | 00,352,634 | ---- | M] (Avira GmbH)
    aescript.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aescript.dll -> [2009/02/26 20:01:56 | 00,352,634 | ---- | M] (Avira GmbH)
    aeoffice.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aeoffice.dll -> [2009/02/26 20:01:56 | 00,196,987 | ---- | M] (Avira GmbH)
    aeoffice.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aeoffice.dll -> [2009/02/26 20:01:56 | 00,196,987 | ---- | M] (Avira GmbH)
    aeoffice.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aeoffice.dll -> [2009/02/26 20:01:56 | 00,196,987 | ---- | M] (Avira GmbH)
    aeoffice.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aeoffice.dll -> [2009/02/26 20:01:56 | 00,196,987 | ---- | M] (Avira GmbH)
    aeoffice.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aeoffice.dll -> [2009/02/26 20:01:56 | 00,196,987 | ---- | M] (Avira GmbH)
    aehelp.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aehelp.dll -> [2009/02/26 20:01:56 | 00,119,158 | ---- | M] (Avira GmbH)
    aehelp.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aehelp.dll -> [2009/02/26 20:01:56 | 00,119,158 | ---- | M] (Avira GmbH)
    aehelp.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aehelp.dll -> [2009/02/26 20:01:56 | 00,119,158 | ---- | M] (Avira GmbH)
    aehelp.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aehelp.dll -> [2009/02/26 20:01:56 | 00,119,158 | ---- | M] (Avira GmbH)
    aehelp.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aehelp.dll -> [2009/02/26 20:01:56 | 00,119,158 | ---- | M] (Avira GmbH)
    aeheur.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aeheur.dll -> [2009/02/25 15:49:16 | 01,618,295 | ---- | M] (Avira GmbH)
    aeheur.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aeheur.dll -> [2009/02/25 15:49:16 | 01,618,295 | ---- | M] (Avira GmbH)
    aeheur.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aeheur.dll -> [2009/02/25 15:49:16 | 01,618,295 | ---- | M] (Avira GmbH)
    aeheur.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aeheur.dll -> [2009/02/25 15:49:16 | 01,618,295 | ---- | M] (Avira GmbH)
    aeheur.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aeheur.dll -> [2009/02/25 15:49:16 | 01,618,295 | ---- | M] (Avira GmbH)
    avevtrc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\avevtrc.dll -> [2009/02/24 14:10:29 | 00,011,009 | ---- | M] (Avira GmbH)
    avevtrc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\avevtrc.dll -> [2009/02/24 14:10:29 | 00,011,009 | ---- | M] (Avira GmbH)
    avevtrc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\avevtrc.dll -> [2009/02/24 14:10:29 | 00,011,009 | ---- | M] (Avira GmbH)
    avevtrc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\avevtrc.dll -> [2009/02/24 14:10:29 | 00,011,009 | ---- | M] (Avira GmbH)
    avevtrc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\avevtrc.dll -> [2009/02/24 14:10:29 | 00,011,009 | ---- | M] (Avira GmbH)
    updgui.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\updgui.dll -> [2009/02/24 12:16:36 | 00,117,505 | ---- | M] (Avira GmbH)
    updgui.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\updgui.dll -> [2009/02/24 12:16:36 | 00,117,505 | ---- | M] (Avira GmbH)
    updgui.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\updgui.dll -> [2009/02/24 12:16:36 | 00,117,505 | ---- | M] (Avira GmbH)
    updgui.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\updgui.dll -> [2009/02/24 12:16:36 | 00,117,505 | ---- | M] (Avira GmbH)
    updgui.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\updgui.dll -> [2009/02/24 12:16:36 | 00,117,505 | ---- | M] (Avira GmbH)
    avscan.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avscan.exe -> [2009/02/24 12:13:26 | 00,464,641 | ---- | M] (Avira GmbH)
    avscan.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avscan.exe -> [2009/02/24 12:13:26 | 00,464,641 | ---- | M] (Avira GmbH)
    avscan.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avscan.exe -> [2009/02/24 12:13:26 | 00,464,641 | ---- | M] (Avira GmbH)
    avscan.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avscan.exe -> [2009/02/24 12:13:26 | 00,464,641 | ---- | M] (Avira GmbH)
    avscan.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avscan.exe -> [2009/02/24 12:13:26 | 00,464,641 | ---- | M] (Avira GmbH)
    luke.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\luke.dll -> [2009/02/20 11:35:49 | 00,209,665 | ---- | M] (Avira GmbH)
    luke.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\luke.dll -> [2009/02/20 11:35:49 | 00,209,665 | ---- | M] (Avira GmbH)
    luke.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\luke.dll -> [2009/02/20 11:35:49 | 00,209,665 | ---- | M] (Avira GmbH)
    luke.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\luke.dll -> [2009/02/20 11:35:49 | 00,209,665 | ---- | M] (Avira GmbH)
    luke.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\luke.dll -> [2009/02/20 11:35:49 | 00,209,665 | ---- | M] (Avira GmbH)
    ccsched.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccsched.dll -> [2009/02/20 11:34:41 | 00,303,361 | ---- | M] (Avira GmbH)
    ccsched.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccsched.dll -> [2009/02/20 11:34:41 | 00,303,361 | ---- | M] (Avira GmbH)
    ccsched.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccsched.dll -> [2009/02/20 11:34:41 | 00,303,361 | ---- | M] (Avira GmbH)
    ccsched.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccsched.dll -> [2009/02/20 11:34:41 | 00,303,361 | ---- | M] (Avira GmbH)
    ccsched.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccsched.dll -> [2009/02/20 11:34:41 | 00,303,361 | ---- | M] (Avira GmbH)
    ccprofil.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccprofil.dll -> [2009/02/20 11:33:26 | 00,386,817 | ---- | M] (Avira GmbH)
    ccprofil.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccprofil.dll -> [2009/02/20 11:33:26 | 00,386,817 | ---- | M] (Avira GmbH)
    ccprofil.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccprofil.dll -> [2009/02/20 11:33:26 | 00,386,817 | ---- | M] (Avira GmbH)
    ccprofil.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccprofil.dll -> [2009/02/20 11:33:26 | 00,386,817 | ---- | M] (Avira GmbH)
    ccprofil.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccprofil.dll -> [2009/02/20 11:33:26 | 00,386,817 | ---- | M] (Avira GmbH)
    avconfig.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avconfig.exe -> [2009/02/20 11:25:14 | 00,271,617 | ---- | M] (Avira GmbH)
    avconfig.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avconfig.exe -> [2009/02/20 11:25:14 | 00,271,617 | ---- | M] (Avira GmbH)
    avconfig.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avconfig.exe -> [2009/02/20 11:25:14 | 00,271,617 | ---- | M] (Avira GmbH)
    avconfig.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avconfig.exe -> [2009/02/20 11:25:14 | 00,271,617 | ---- | M] (Avira GmbH)
    avconfig.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avconfig.exe -> [2009/02/20 11:25:14 | 00,271,617 | ---- | M] (Avira GmbH)
    aecore.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aecore.dll -> [2009/02/17 14:22:44 | 00,176,501 | ---- | M] (Avira GmbH)
    aecore.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aecore.dll -> [2009/02/17 14:22:44 | 00,176,501 | ---- | M] (Avira GmbH)
    aecore.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aecore.dll -> [2009/02/17 14:22:44 | 00,176,501 | ---- | M] (Avira GmbH)
    aecore.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aecore.dll -> [2009/02/17 14:22:44 | 00,176,501 | ---- | M] (Avira GmbH)
    aecore.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aecore.dll -> [2009/02/17 14:22:44 | 00,176,501 | ---- | M] (Avira GmbH)
    drm_dialogs.dll -> %UserProfile%\AppData\Local\Temp\drm_dialogs.dll -> [2009/02/16 01:39:36 | 00,065,536 | ---- | M] (Sony DADC Austria AG)
    drm_dyndata_7370012.dll -> %UserProfile%\AppData\Local\Temp\drm_dyndata_7370012.dll -> [2009/02/16 01:39:30 | 00,208,896 | ---- | M] (Sony DADC Austria AG)
    updext.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\updext.dll -> [2009/02/13 15:01:24 | 00,079,105 | ---- | M] (Avira GmbH)
    updext.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\updext.dll -> [2009/02/13 15:01:24 | 00,079,105 | ---- | M] (Avira GmbH)
    updext.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\updext.dll -> [2009/02/13 15:01:24 | 00,079,105 | ---- | M] (Avira GmbH)
    updext.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\updext.dll -> [2009/02/13 15:01:24 | 00,079,105 | ---- | M] (Avira GmbH)
    updext.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\updext.dll -> [2009/02/13 15:01:24 | 00,079,105 | ---- | M] (Avira GmbH)
    ccev.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccev.dll -> [2009/02/13 12:11:26 | 00,314,625 | ---- | M] (Avira GmbH)
    ccev.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccev.dll -> [2009/02/13 12:11:26 | 00,314,625 | ---- | M] (Avira GmbH)
    ccev.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccev.dll -> [2009/02/13 12:11:26 | 00,314,625 | ---- | M] (Avira GmbH)
    ccev.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccev.dll -> [2009/02/13 12:11:26 | 00,314,625 | ---- | M] (Avira GmbH)
    ccev.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccev.dll -> [2009/02/13 12:11:26 | 00,314,625 | ---- | M] (Avira GmbH)
    avwsc.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avwsc.exe -> [2009/02/13 11:54:45 | 00,116,008 | ---- | M] (Avira GmbH)
    avwsc.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avwsc.exe -> [2009/02/13 11:54:45 | 00,116,008 | ---- | M] (Avira GmbH)
    avwsc.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avwsc.exe -> [2009/02/13 11:54:45 | 00,116,008 | ---- | M] (Avira GmbH)
    avwsc.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avwsc.exe -> [2009/02/13 11:54:45 | 00,116,008 | ---- | M] (Avira GmbH)
    avwsc.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avwsc.exe -> [2009/02/13 11:54:45 | 00,116,008 | ---- | M] (Avira GmbH)
    wsctool.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\wsctool.exe -> [2009/02/13 11:44:31 | 00,080,728 | ---- | M] (Avira GmbH)
    wsctool.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\wsctool.exe -> [2009/02/13 11:44:31 | 00,080,728 | ---- | M] (Avira GmbH)
    wsctool.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\wsctool.exe -> [2009/02/13 11:44:31 | 00,080,728 | ---- | M] (Avira GmbH)
    wsctool.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\wsctool.exe -> [2009/02/13 11:44:31 | 00,080,728 | ---- | M] (Avira GmbH)
    wsctool.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\wsctool.exe -> [2009/02/13 11:44:31 | 00,080,728 | ---- | M] (Avira GmbH)
    avadmin.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avadmin.exe -> [2009/02/13 11:43:29 | 00,118,616 | ---- | M] (Avira GmbH)
    avadmin.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avadmin.exe -> [2009/02/13 11:43:29 | 00,118,616 | ---- | M] (Avira GmbH)
    avadmin.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avadmin.exe -> [2009/02/13 11:43:29 | 00,118,616 | ---- | M] (Avira GmbH)
    avadmin.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avadmin.exe -> [2009/02/13 11:43:29 | 00,118,616 | ---- | M] (Avira GmbH)
    avadmin.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avadmin.exe -> [2009/02/13 11:43:29 | 00,118,616 | ---- | M] (Avira GmbH)
    shlext64.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\shlext64.dll -> [2009/02/13 11:36:19 | 00,359,768 | ---- | M] (Avira GmbH)
    shlext64.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\shlext64.dll -> [2009/02/13 11:36:19 | 00,359,768 | ---- | M] (Avira GmbH)
    shlext64.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\shlext64.dll -> [2009/02/13 11:36:19 | 00,359,768 | ---- | M] (Avira GmbH)
    shlext64.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\shlext64.dll -> [2009/02/13 11:36:19 | 00,359,768 | ---- | M] (Avira GmbH)
    shlext64.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\shlext64.dll -> [2009/02/13 11:36:19 | 00,359,768 | ---- | M] (Avira GmbH)
    avwmi.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avwmi.dll -> [2009/02/12 12:47:37 | 00,212,225 | ---- | M] (Avira GmbH)
    avwmi.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avwmi.dll -> [2009/02/12 12:47:37 | 00,212,225 | ---- | M] (Avira GmbH)
    avwmi.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avwmi.dll -> [2009/02/12 12:47:37 | 00,212,225 | ---- | M] (Avira GmbH)
    avwmi.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avwmi.dll -> [2009/02/12 12:47:37 | 00,212,225 | ---- | M] (Avira GmbH)
    avwmi.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avwmi.dll -> [2009/02/12 12:47:37 | 00,212,225 | ---- | M] (Avira GmbH)
    cfglib.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\cfglib.dll -> [2009/02/12 11:48:50 | 00,059,649 | ---- | M] (Avira GmbH)
    cfglib.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\cfglib.dll -> [2009/02/12 11:48:50 | 00,059,649 | ---- | M] (Avira GmbH)
    cfglib.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\cfglib.dll -> [2009/02/12 11:48:50 | 00,059,649 | ---- | M] (Avira GmbH)
    cfglib.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\cfglib.dll -> [2009/02/12 11:48:50 | 00,059,649 | ---- | M] (Avira GmbH)
    cfglib.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\cfglib.dll -> [2009/02/12 11:48:50 | 00,059,649 | ---- | M] (Avira GmbH)
    aescn.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aescn.dll -> [2009/02/12 11:44:25 | 00,127,347 | ---- | M] (Avira GmbH)
    aescn.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aescn.dll -> [2009/02/12 11:44:25 | 00,127,347 | ---- | M] (Avira GmbH)
    aescn.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aescn.dll -> [2009/02/12 11:44:25 | 00,127,347 | ---- | M] (Avira GmbH)
    aescn.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aescn.dll -> [2009/02/12 11:44:25 | 00,127,347 | ---- | M] (Avira GmbH)
    aescn.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aescn.dll -> [2009/02/12 11:44:25 | 00,127,347 | ---- | M] (Avira GmbH)
    fact.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\fact.exe -> [2009/02/11 10:38:28 | 00,293,633 | ---- | M] (Avira GmbH)
    fact.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\fact.exe -> [2009/02/11 10:38:28 | 00,293,633 | ---- | M] (Avira GmbH)
    fact.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\fact.exe -> [2009/02/11 10:38:28 | 00,293,633 | ---- | M] (Avira GmbH)
    fact.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\fact.exe -> [2009/02/11 10:38:28 | 00,293,633 | ---- | M] (Avira GmbH)
    fact.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\fact.exe -> [2009/02/11 10:38:28 | 00,293,633 | ---- | M] (Avira GmbH)
    prodinfo.dat -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\prodinfo.dat -> [2009/02/10 10:41:57 | 00,000,538 | ---- | M] ()
    prodinfo.dat -> %SystemRoot%\Temp\AVSETUP_49c5422e\prodinfo.dat -> [2009/02/10 10:41:57 | 00,000,538 | ---- | M] ()
    prodinfo.dat -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\prodinfo.dat -> [2009/02/10 10:41:57 | 00,000,538 | ---- | M] ()
    prodinfo.dat -> %SystemRoot%\Temp\AVSETUP_49c1380a\prodinfo.dat -> [2009/02/10 10:41:57 | 00,000,538 | ---- | M] ()
    prodinfo.dat -> %SystemRoot%\Temp\AVSETUP_49c0c89f\prodinfo.dat -> [2009/02/10 10:41:57 | 00,000,538 | ---- | M] ()
    rcimage.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\rcimage.dll -> [2009/02/09 11:45:45 | 02,438,401 | ---- | M] (Avira GmbH)
    rcimage.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\rcimage.dll -> [2009/02/09 11:45:45 | 02,438,401 | ---- | M] (Avira GmbH)
    rcimage.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\rcimage.dll -> [2009/02/09 11:45:45 | 02,438,401 | ---- | M] (Avira GmbH)
    rcimage.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\rcimage.dll -> [2009/02/09 11:45:45 | 02,438,401 | ---- | M] (Avira GmbH)
    rcimage.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\rcimage.dll -> [2009/02/09 11:45:45 | 02,438,401 | ---- | M] (Avira GmbH)
    avarkt.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avarkt.dll -> [2009/02/09 07:52:24 | 00,292,609 | ---- | M] (Avira GmbH)
    avarkt.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avarkt.dll -> [2009/02/09 07:52:24 | 00,292,609 | ---- | M] (Avira GmbH)
    avarkt.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avarkt.dll -> [2009/02/09 07:52:24 | 00,292,609 | ---- | M] (Avira GmbH)
    avarkt.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avarkt.dll -> [2009/02/09 07:52:24 | 00,292,609 | ---- | M] (Avira GmbH)
    avarkt.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avarkt.dll -> [2009/02/09 07:52:24 | 00,292,609 | ---- | M] (Avira GmbH)
    setupprf.dat -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\setupprf.dat -> [2009/02/04 14:32:36 | 00,000,802 | ---- | M] ()
    setupprf.dat -> %SystemRoot%\Temp\AVSETUP_49c5422e\setupprf.dat -> [2009/02/04 14:32:36 | 00,000,802 | ---- | M] ()
    setupprf.dat -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\setupprf.dat -> [2009/02/04 14:32:36 | 00,000,802 | ---- | M] ()
    setupprf.dat -> %SystemRoot%\Temp\AVSETUP_49c1380a\setupprf.dat -> [2009/02/04 14:32:36 | 00,000,802 | ---- | M] ()
    setupprf.dat -> %SystemRoot%\Temp\AVSETUP_49c0c89f\setupprf.dat -> [2009/02/04 14:32:36 | 00,000,802 | ---- | M] ()
    avinet.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avinet.dll -> [2009/02/04 09:07:04 | 00,013,569 | ---- | M] (Avira GmbH)
    avinet.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avinet.dll -> [2009/02/04 09:07:04 | 00,013,569 | ---- | M] (Avira GmbH)
    avinet.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avinet.dll -> [2009/02/04 09:07:04 | 00,013,569 | ---- | M] (Avira GmbH)
    avinet.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avinet.dll -> [2009/02/04 09:07:04 | 00,013,569 | ---- | M] (Avira GmbH)
    avinet.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avinet.dll -> [2009/02/04 09:07:04 | 00,013,569 | ---- | M] (Avira GmbH)
    wksstats.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\wksstats.dll -> [2009/02/02 08:25:21 | 00,085,249 | ---- | M] (Avira GmbH)
    wksstats.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\wksstats.dll -> [2009/02/02 08:25:21 | 00,085,249 | ---- | M] (Avira GmbH)
    wksstats.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\wksstats.dll -> [2009/02/02 08:25:21 | 00,085,249 | ---- | M] (Avira GmbH)
    wksstats.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\wksstats.dll -> [2009/02/02 08:25:21 | 00,085,249 | ---- | M] (Avira GmbH)
    wksstats.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\wksstats.dll -> [2009/02/02 08:25:21 | 00,085,249 | ---- | M] (Avira GmbH)
    smtplib.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\smtplib.dll -> [2009/02/02 08:21:33 | 00,028,417 | ---- | M] (Avira GmbH)
    smtplib.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\smtplib.dll -> [2009/02/02 08:21:33 | 00,028,417 | ---- | M] (Avira GmbH)
    smtplib.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\smtplib.dll -> [2009/02/02 08:21:33 | 00,028,417 | ---- | M] (Avira GmbH)
    smtplib.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\smtplib.dll -> [2009/02/02 08:21:33 | 00,028,417 | ---- | M] (Avira GmbH)
    smtplib.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\smtplib.dll -> [2009/02/02 08:21:33 | 00,028,417 | ---- | M] (Avira GmbH)
    ccupdate.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccupdate.dll -> [2009/02/02 08:20:20 | 00,167,681 | ---- | M] (Avira GmbH)
    ccupdate.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccupdate.dll -> [2009/02/02 08:20:20 | 00,167,681 | ---- | M] (Avira GmbH)
    ccupdate.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccupdate.dll -> [2009/02/02 08:20:20 | 00,167,681 | ---- | M] (Avira GmbH)
    ccupdate.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccupdate.dll -> [2009/02/02 08:20:20 | 00,167,681 | ---- | M] (Avira GmbH)
    ccupdate.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccupdate.dll -> [2009/02/02 08:20:20 | 00,167,681 | ---- | M] (Avira GmbH)
    ccreport.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccreport.dll -> [2009/02/02 08:18:25 | 00,282,881 | ---- | M] (Avira GmbH)
    ccreport.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccreport.dll -> [2009/02/02 08:18:25 | 00,282,881 | ---- | M] (Avira GmbH)
    ccreport.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccreport.dll -> [2009/02/02 08:18:25 | 00,282,881 | ---- | M] (Avira GmbH)
    ccreport.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccreport.dll -> [2009/02/02 08:18:25 | 00,282,881 | ---- | M] (Avira GmbH)
    ccreport.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccreport.dll -> [2009/02/02 08:18:25 | 00,282,881 | ---- | M] (Avira GmbH)
    ccguard.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccguard.dll -> [2009/02/02 08:15:25 | 00,226,049 | ---- | M] (Avira GmbH)
    ccguard.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccguard.dll -> [2009/02/02 08:15:25 | 00,226,049 | ---- | M] (Avira GmbH)
    ccguard.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccguard.dll -> [2009/02/02 08:15:25 | 00,226,049 | ---- | M] (Avira GmbH)
    ccguard.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccguard.dll -> [2009/02/02 08:15:25 | 00,226,049 | ---- | M] (Avira GmbH)
    ccguard.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccguard.dll -> [2009/02/02 08:15:25 | 00,226,049 | ---- | M] (Avira GmbH)
    cclib.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\cclib.dll -> [2009/01/30 10:58:30 | 00,211,713 | ---- | M] (Avira GmbH)
    cclib.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\cclib.dll -> [2009/01/30 10:58:30 | 00,211,713 | ---- | M] (Avira GmbH)
    cclib.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\cclib.dll -> [2009/01/30 10:58:30 | 00,211,713 | ---- | M] (Avira GmbH)
    cclib.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\cclib.dll -> [2009/01/30 10:58:30 | 00,211,713 | ---- | M] (Avira GmbH)
    cclib.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\cclib.dll -> [2009/01/30 10:58:30 | 00,211,713 | ---- | M] (Avira GmbH)
    ccmsg.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\ccmsg.dll -> [2009/01/30 10:56:30 | 00,173,825 | ---- | M] (Avira GmbH)
    ccmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\ccmsg.dll -> [2009/01/30 10:56:30 | 00,173,825 | ---- | M] (Avira GmbH)
    ccmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\ccmsg.dll -> [2009/01/30 10:56:30 | 00,173,825 | ---- | M] (Avira GmbH)
    ccmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\ccmsg.dll -> [2009/01/30 10:56:30 | 00,173,825 | ---- | M] (Avira GmbH)
    ccmsg.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\ccmsg.dll -> [2009/01/30 10:56:30 | 00,173,825 | ---- | M] (Avira GmbH)
    licmgr.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\licmgr.exe -> [2009/01/30 10:50:20 | 00,131,841 | ---- | M] (Avira GmbH)
    licmgr.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\licmgr.exe -> [2009/01/30 10:50:20 | 00,131,841 | ---- | M] (Avira GmbH)
    licmgr.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\licmgr.exe -> [2009/01/30 10:50:20 | 00,131,841 | ---- | M] (Avira GmbH)
    licmgr.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\licmgr.exe -> [2009/01/30 10:50:20 | 00,131,841 | ---- | M] (Avira GmbH)
    licmgr.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\licmgr.exe -> [2009/01/30 10:50:20 | 00,131,841 | ---- | M] (Avira GmbH)
    guardgui.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\guardgui.exe -> [2009/01/30 10:49:25 | 00,049,409 | ---- | M] (Avira GmbH)
    guardgui.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\guardgui.exe -> [2009/01/30 10:49:25 | 00,049,409 | ---- | M] (Avira GmbH)
    guardgui.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\guardgui.exe -> [2009/01/30 10:49:25 | 00,049,409 | ---- | M] (Avira GmbH)
    guardgui.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\guardgui.exe -> [2009/01/30 10:49:25 | 00,049,409 | ---- | M] (Avira GmbH)
    guardgui.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\guardgui.exe -> [2009/01/30 10:49:25 | 00,049,409 | ---- | M] (Avira GmbH)
    cclic.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\cclic.dll -> [2009/01/30 10:44:12 | 00,057,089 | ---- | M] (Avira GmbH)
    cclic.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\cclic.dll -> [2009/01/30 10:44:12 | 00,057,089 | ---- | M] (Avira GmbH)
    cclic.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\cclic.dll -> [2009/01/30 10:44:12 | 00,057,089 | ---- | M] (Avira GmbH)
    cclic.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\cclic.dll -> [2009/01/30 10:44:12 | 00,057,089 | ---- | M] (Avira GmbH)
    cclic.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\cclic.dll -> [2009/01/30 10:44:12 | 00,057,089 | ---- | M] (Avira GmbH)
    avevtlog.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avevtlog.dll -> [2009/01/30 10:37:08 | 00,167,169 | ---- | M] (Avira GmbH)
    avevtlog.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avevtlog.dll -> [2009/01/30 10:37:08 | 00,167,169 | ---- | M] (Avira GmbH)
    avevtlog.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avevtlog.dll -> [2009/01/30 10:37:08 | 00,167,169 | ---- | M] (Avira GmbH)
    avevtlog.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avevtlog.dll -> [2009/01/30 10:37:08 | 00,167,169 | ---- | M] (Avira GmbH)
    avevtlog.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avevtlog.dll -> [2009/01/30 10:37:08 | 00,167,169 | ---- | M] (Avira GmbH)
    avcenter.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avcenter.exe -> [2009/01/30 10:33:40 | 00,469,761 | ---- | M] (Avira GmbH)
    avcenter.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avcenter.exe -> [2009/01/30 10:33:40 | 00,469,761 | ---- | M] (Avira GmbH)
    avcenter.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avcenter.exe -> [2009/01/30 10:33:40 | 00,469,761 | ---- | M] (Avira GmbH)
    avcenter.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avcenter.exe -> [2009/01/30 10:33:40 | 00,469,761 | ---- | M] (Avira GmbH)
    avcenter.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avcenter.exe -> [2009/01/30 10:33:40 | 00,469,761 | ---- | M] (Avira GmbH)
    unacev2.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\unacev2.dll -> [2009/01/30 10:27:57 | 00,077,312 | ---- | M] (ACE Compression Software)
    unacev2.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\unacev2.dll -> [2009/01/30 10:27:57 | 00,077,312 | ---- | M] (ACE Compression Software)
    unacev2.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\unacev2.dll -> [2009/01/30 10:27:57 | 00,077,312 | ---- | M] (ACE Compression Software)
    unacev2.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\unacev2.dll -> [2009/01/30 10:27:57 | 00,077,312 | ---- | M] (ACE Compression Software)
    unacev2.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\unacev2.dll -> [2009/01/30 10:27:57 | 00,077,312 | ---- | M] (ACE Compression Software)
    presetup.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\presetup.exe -> [2009/01/29 07:42:43 | 00,277,249 | ---- | M] (Avira GmbH)
    presetup.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\presetup.exe -> [2009/01/29 07:42:43 | 00,277,249 | ---- | M] (Avira GmbH)
    presetup.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\presetup.exe -> [2009/01/29 07:42:43 | 00,277,249 | ---- | M] (Avira GmbH)
    presetup.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\presetup.exe -> [2009/01/29 07:42:43 | 00,277,249 | ---- | M] (Avira GmbH)
    presetup.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\presetup.exe -> [2009/01/29 07:42:43 | 00,277,249 | ---- | M] (Avira GmbH)
    sqlite3.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\sqlite3.dll -> [2009/01/28 15:03:49 | 00,326,401 | ---- | M] ()
    sqlite3.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\sqlite3.dll -> [2009/01/28 15:03:49 | 00,326,401 | ---- | M] ()
    sqlite3.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\sqlite3.dll -> [2009/01/28 15:03:49 | 00,326,401 | ---- | M] ()
    sqlite3.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\sqlite3.dll -> [2009/01/28 15:03:49 | 00,326,401 | ---- | M] ()
    sqlite3.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\sqlite3.dll -> [2009/01/28 15:03:49 | 00,326,401 | ---- | M] ()
    aevdf.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aevdf.dll -> [2009/01/27 17:36:42 | 00,106,868 | ---- | M] (Avira GmbH)
    aevdf.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aevdf.dll -> [2009/01/27 17:36:42 | 00,106,868 | ---- | M] (Avira GmbH)
    aevdf.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aevdf.dll -> [2009/01/27 17:36:42 | 00,106,868 | ---- | M] (Avira GmbH)
    aevdf.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aevdf.dll -> [2009/01/27 17:36:42 | 00,106,868 | ---- | M] (Avira GmbH)
    aevdf.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aevdf.dll -> [2009/01/27 17:36:42 | 00,106,868 | ---- | M] (Avira GmbH)
    shlext.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\shlext.dll -> [2009/01/26 11:46:41 | 00,086,273 | ---- | M] (Avira GmbH)
    shlext.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\shlext.dll -> [2009/01/26 11:46:41 | 00,086,273 | ---- | M] (Avira GmbH)
    shlext.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\shlext.dll -> [2009/01/26 11:46:41 | 00,086,273 | ---- | M] (Avira GmbH)
    shlext.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\shlext.dll -> [2009/01/26 11:46:41 | 00,086,273 | ---- | M] (Avira GmbH)
    shlext.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\shlext.dll -> [2009/01/26 11:46:41 | 00,086,273 | ---- | M] (Avira GmbH)
    avnotify.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avnotify.exe -> [2009/01/26 10:26:45 | 00,198,913 | ---- | M] (Avira GmbH)
    avnotify.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avnotify.exe -> [2009/01/26 10:26:45 | 00,198,913 | ---- | M] (Avira GmbH)
    avnotify.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avnotify.exe -> [2009/01/26 10:26:45 | 00,198,913 | ---- | M] (Avira GmbH)
    avnotify.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avnotify.exe -> [2009/01/26 10:26:45 | 00,198,913 | ---- | M] (Avira GmbH)
    avnotify.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avnotify.exe -> [2009/01/26 10:26:45 | 00,198,913 | ---- | M] (Avira GmbH)
    avgio.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avgio.dll -> [2009/01/22 08:05:25 | 00,072,449 | ---- | M] (Avira GmbH)
    avgio.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avgio.dll -> [2009/01/22 08:05:25 | 00,072,449 | ---- | M] (Avira GmbH)
    avgio.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avgio.dll -> [2009/01/22 08:05:25 | 00,072,449 | ---- | M] (Avira GmbH)
    avgio.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avgio.dll -> [2009/01/22 08:05:25 | 00,072,449 | ---- | M] (Avira GmbH)
    avgio.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avgio.dll -> [2009/01/22 08:05:25 | 00,072,449 | ---- | M] (Avira GmbH)
    avrep.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avrep.dll -> [2009/01/20 14:34:28 | 00,155,905 | ---- | M] (Avira GmbH)
    avrep.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avrep.dll -> [2009/01/20 14:34:28 | 00,155,905 | ---- | M] (Avira GmbH)
    avrep.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avrep.dll -> [2009/01/20 14:34:28 | 00,155,905 | ---- | M] (Avira GmbH)
    avrep.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avrep.dll -> [2009/01/20 14:34:28 | 00,155,905 | ---- | M] (Avira GmbH)
    avrep.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avrep.dll -> [2009/01/20 14:34:28 | 00,155,905 | ---- | M] (Avira GmbH)
    avwinll.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avwinll.dll -> [2008/12/12 08:47:59 | 00,018,177 | ---- | M] (Avira GmbH)
    avwinll.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avwinll.dll -> [2008/12/12 08:47:59 | 00,018,177 | ---- | M] (Avira GmbH)
    avwinll.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avwinll.dll -> [2008/12/12 08:47:59 | 00,018,177 | ---- | M] (Avira GmbH)
    avwinll.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avwinll.dll -> [2008/12/12 08:47:59 | 00,018,177 | ---- | M] (Avira GmbH)
    avwinll.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avwinll.dll -> [2008/12/12 08:47:59 | 00,018,177 | ---- | M] (Avira GmbH)
    vcredist_x86.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\vcredist_x86.exe -> [2008/12/05 10:32:22 | 04,216,840 | ---- | M] (Microsoft Corporation)
    vcredist_x86.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\vcredist_x86.exe -> [2008/12/05 10:32:22 | 04,216,840 | ---- | M] (Microsoft Corporation)
    vcredist_x86.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\vcredist_x86.exe -> [2008/12/05 10:32:22 | 04,216,840 | ---- | M] (Microsoft Corporation)
    vcredist_x86.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\vcredist_x86.exe -> [2008/12/05 10:32:22 | 04,216,840 | ---- | M] (Microsoft Corporation)
    vcredist_x86.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\vcredist_x86.exe -> [2008/12/05 10:32:22 | 04,216,840 | ---- | M] (Microsoft Corporation)
    scewxmlw.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\scewxmlw.dll -> [2008/12/05 10:32:20 | 00,126,721 | ---- | M] ()
    scewxmlw.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\scewxmlw.dll -> [2008/12/05 10:32:20 | 00,126,721 | ---- | M] ()
    scewxmlw.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\scewxmlw.dll -> [2008/12/05 10:32:20 | 00,126,721 | ---- | M] ()
    scewxmlw.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\scewxmlw.dll -> [2008/12/05 10:32:20 | 00,126,721 | ---- | M] ()
    scewxmlw.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\scewxmlw.dll -> [2008/12/05 10:32:20 | 00,126,721 | ---- | M] ()
    mgrs.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\mgrs.dll -> [2008/12/05 10:32:19 | 00,103,681 | ---- | M] (Avira GmbH)
    mgrs.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\mgrs.dll -> [2008/12/05 10:32:19 | 00,103,681 | ---- | M] (Avira GmbH)
    mgrs.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\mgrs.dll -> [2008/12/05 10:32:19 | 00,103,681 | ---- | M] (Avira GmbH)
    mgrs.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\mgrs.dll -> [2008/12/05 10:32:19 | 00,103,681 | ---- | M] (Avira GmbH)
    mgrs.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\mgrs.dll -> [2008/12/05 10:32:19 | 00,103,681 | ---- | M] (Avira GmbH)
    msgclient.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\msgclient.dll -> [2008/12/05 10:32:19 | 00,015,617 | ---- | M] (Avira GmbH)
    msgclient.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\msgclient.dll -> [2008/12/05 10:32:19 | 00,015,617 | ---- | M] (Avira GmbH)
    msgclient.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\msgclient.dll -> [2008/12/05 10:32:19 | 00,015,617 | ---- | M] (Avira GmbH)
    msgclient.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\msgclient.dll -> [2008/12/05 10:32:19 | 00,015,617 | ---- | M] (Avira GmbH)
    msgclient.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\msgclient.dll -> [2008/12/05 10:32:19 | 00,015,617 | ---- | M] (Avira GmbH)
    imp64b.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\imp64b.exe -> [2008/12/05 10:32:18 | 00,045,313 | ---- | M] (Avira GmbH)
    imp64b.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\imp64b.exe -> [2008/12/05 10:32:18 | 00,045,313 | ---- | M] (Avira GmbH)
    imp64b.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\imp64b.exe -> [2008/12/05 10:32:18 | 00,045,313 | ---- | M] (Avira GmbH)
    imp64b.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\imp64b.exe -> [2008/12/05 10:32:18 | 00,045,313 | ---- | M] (Avira GmbH)
    imp64b.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\imp64b.exe -> [2008/12/05 10:32:18 | 00,045,313 | ---- | M] (Avira GmbH)
    cctpc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\cctpc.dll -> [2008/12/05 10:32:17 | 00,351,489 | ---- | M] (Avira GmbH)
    cctpc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\cctpc.dll -> [2008/12/05 10:32:17 | 00,351,489 | ---- | M] (Avira GmbH)
    cctpc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\cctpc.dll -> [2008/12/05 10:32:17 | 00,351,489 | ---- | M] (Avira GmbH)
    cctpc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\cctpc.dll -> [2008/12/05 10:32:17 | 00,351,489 | ---- | M] (Avira GmbH)
    cctpc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\cctpc.dll -> [2008/12/05 10:32:17 | 00,351,489 | ---- | M] (Avira GmbH)
    avipc.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avipc.dll -> [2008/12/05 10:32:15 | 00,062,209 | ---- | M] (Avira GmbH)
    avipc.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avipc.dll -> [2008/12/05 10:32:15 | 00,062,209 | ---- | M] (Avira GmbH)
    avipc.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avipc.dll -> [2008/12/05 10:32:15 | 00,062,209 | ---- | M] (Avira GmbH)
    avipc.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avipc.dll -> [2008/12/05 10:32:15 | 00,062,209 | ---- | M] (Avira GmbH)
    avipc.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avipc.dll -> [2008/12/05 10:32:15 | 00,062,209 | ---- | M] (Avira GmbH)
    avpref.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avpref.dll -> [2008/12/05 10:32:15 | 00,043,777 | ---- | M] (Avira GmbH)
    avpref.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avpref.dll -> [2008/12/05 10:32:15 | 00,043,777 | ---- | M] (Avira GmbH)
    avpref.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avpref.dll -> [2008/12/05 10:32:15 | 00,043,777 | ---- | M] (Avira GmbH)
    avpref.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avpref.dll -> [2008/12/05 10:32:15 | 00,043,777 | ---- | M] (Avira GmbH)
    avpref.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avpref.dll -> [2008/12/05 10:32:15 | 00,043,777 | ---- | M] (Avira GmbH)
    avscan.dat -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avscan.dat -> [2008/12/05 10:32:15 | 00,001,115 | ---- | M] ()
    avscan.dat -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avscan.dat -> [2008/12/05 10:32:15 | 00,001,115 | ---- | M] ()
    avscan.dat -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avscan.dat -> [2008/12/05 10:32:15 | 00,001,115 | ---- | M] ()
    avscan.dat -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avscan.dat -> [2008/12/05 10:32:15 | 00,001,115 | ---- | M] ()
    avscan.dat -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avscan.dat -> [2008/12/05 10:32:15 | 00,001,115 | ---- | M] ()
    netnt.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\netnt.dll -> [2008/12/05 10:32:10 | 00,011,521 | ---- | M] (Avira GmbH)
    netnt.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\netnt.dll -> [2008/12/05 10:32:10 | 00,011,521 | ---- | M] (Avira GmbH)
    netnt.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\netnt.dll -> [2008/12/05 10:32:10 | 00,011,521 | ---- | M] (Avira GmbH)
    netnt.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\netnt.dll -> [2008/12/05 10:32:10 | 00,011,521 | ---- | M] (Avira GmbH)
    netnt.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\netnt.dll -> [2008/12/05 10:32:10 | 00,011,521 | ---- | M] (Avira GmbH)
    AVReg.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\AVReg.dll -> [2008/12/05 10:32:09 | 00,036,609 | ---- | M] (Avira GmbH)
    AVReg.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\AVReg.dll -> [2008/12/05 10:32:09 | 00,036,609 | ---- | M] (Avira GmbH)
    AVReg.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\AVReg.dll -> [2008/12/05 10:32:09 | 00,036,609 | ---- | M] (Avira GmbH)
    AVReg.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\AVReg.dll -> [2008/12/05 10:32:09 | 00,036,609 | ---- | M] (Avira GmbH)
    AVReg.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\AVReg.dll -> [2008/12/05 10:32:09 | 00,036,609 | ---- | M] (Avira GmbH)
    jre-6u11-windows-i586-p-iftw.exe -> %UserProfile%\AppData\Local\Temp\jre-6u11-windows-i586-p-iftw.exe -> [2008/11/25 20:49:07 | 00,607,640 | ---- | M] (Sun Microsystems, Inc.)
    avupgsvc.exe -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\avupgsvc.exe -> [2008/11/22 10:18:05 | 00,037,633 | ---- | M] (Avira GmbH)
    avupgsvc.exe -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\avupgsvc.exe -> [2008/11/22 10:18:05 | 00,037,633 | ---- | M] (Avira GmbH)
    avupgsvc.exe -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\avupgsvc.exe -> [2008/11/22 10:18:05 | 00,037,633 | ---- | M] (Avira GmbH)
    avupgsvc.exe -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\avupgsvc.exe -> [2008/11/22 10:18:05 | 00,037,633 | ---- | M] (Avira GmbH)
    avupgsvc.exe -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\avupgsvc.exe -> [2008/11/22 10:18:05 | 00,037,633 | ---- | M] (Avira GmbH)
    aerdl.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aerdl.dll -> [2008/10/29 18:24:41 | 00,438,645 | ---- | M] (Avira GmbH)
    aerdl.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aerdl.dll -> [2008/10/29 18:24:41 | 00,438,645 | ---- | M] (Avira GmbH)
    aerdl.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aerdl.dll -> [2008/10/29 18:24:41 | 00,438,645 | ---- | M] (Avira GmbH)
    aerdl.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aerdl.dll -> [2008/10/29 18:24:41 | 00,438,645 | ---- | M] (Avira GmbH)
    aerdl.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aerdl.dll -> [2008/10/29 18:24:41 | 00,438,645 | ---- | M] (Avira GmbH)
    aeemu.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aeemu.dll -> [2008/10/09 14:32:40 | 00,393,588 | ---- | M] (Avira GmbH)
    aeemu.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aeemu.dll -> [2008/10/09 14:32:40 | 00,393,588 | ---- | M] (Avira GmbH)
    aeemu.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aeemu.dll -> [2008/10/09 14:32:40 | 00,393,588 | ---- | M] (Avira GmbH)
    aeemu.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aeemu.dll -> [2008/10/09 14:32:40 | 00,393,588 | ---- | M] (Avira GmbH)
    aeemu.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aeemu.dll -> [2008/10/09 14:32:40 | 00,393,588 | ---- | M] (Avira GmbH)
    aebb.dll -> %UserProfile%\AppData\Local\Temp\AVSETUP_49c48eb8\basic\aebb.dll -> [2008/10/09 14:32:40 | 00,053,618 | ---- | M] (Avira GmbH)
    aebb.dll -> %SystemRoot%\Temp\AVSETUP_49c5422e\basic\aebb.dll -> [2008/10/09 14:32:40 | 00,053,618 | ---- | M] (Avira GmbH)
    aebb.dll -> %SystemRoot%\Temp\AVSETUP_49c2d0ed\basic\aebb.dll -> [2008/10/09 14:32:40 | 00,053,618 | ---- | M] (Avira GmbH)
    aebb.dll -> %SystemRoot%\Temp\AVSETUP_49c1380a\basic\aebb.dll -> [2008/10/09 14:32:40 | 00,053,618 | ---- | M] (Avira GmbH)
    aebb.dll -> %SystemRoot%\Temp\AVSETUP_49c0c89f\basic\aebb.dll -> [2008/10/09 14:32:40 | 00,053,618 | ---- | M] (Avira GmbH)
    Mom and Sis.dat -> %AllUsersProfile%\Microsoft\User Account Pictures\Mom and Sis.dat -> [2008/09/29 02:59:46 | 00,000,000 | ---- | M] ()
    Tobias.dat -> %AllUsersProfile%\Microsoft\User Account Pictures\Tobias.dat -> [2008/09/29 02:05:25 | 00,000,000 | ---- | M] ()
    sporder.dll -> %UserProfile%\AppData\Local\Temp\7zSA331.tmp\sporder.dll -> [2007/08/07 12:01:30 | 00,008,464 | ---- | M] (Microsoft Corporation)
    DXSETUP.exe -> %UserProfile%\AppData\Local\Temp\AUG2005DXREDIST\DXSETUP.exe -> [2005/07/26 15:23:16 | 00,482,000 | R--- | M] (Microsoft Corporation)
    dsetup32.dll -> %UserProfile%\AppData\Local\Temp\AUG2005DXREDIST\dsetup32.dll -> [2005/07/26 15:23:14 | 02,245,840 | R--- | M] (Microsoft Corporation)
    DSETUP.dll -> %UserProfile%\AppData\Local\Temp\AUG2005DXREDIST\DSETUP.dll -> [2005/07/26 15:23:14 | 00,075,472 | R--- | M] (Microsoft Corporation)
    < End of report >
    [/code]

    Had to break it up into two parts.
  10. 2009-03-26, 12:21 #10
    katana
    katana is offline
    Security Expert-Emeritus
    Join Date
    Oct 2006
    Location
    Manchester UK
    Posts
    3,425

    Default

    There is no obvious sign of infection so far .....


    Disable Teatimer
    We need to disable Teatimer as it may interfere with the cleaning.
    Please do not re-enable it until I give instructions.

    First step:
    • Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
    • If you have the new version 1.5, Click once on Resident Protection, then Right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
    • If you have Version 1.4, Click on Exit Spybot S&D Resident
    Second step, For Either Version :
    • Open Spybot S&D
    • Click Mode, choose Advanced Mode
    • Go To the bottom of the Vertical Panel on the Left, Click Tools
    • then, also in left panel, click Resident shows a red/white shield.
    • If your firewall raises a question, say OK
    • In the Resident protection status frame, Uncheck the box labeled Resident "Tea-Timer"(Protection of over-all system settings) active
    • OK any prompts.
    • Use File, Exit to terminate Spybot
    • Reboot your machine for the changes to take effect.




    Malwarebytes' Anti-Malware

    Please download Malwarebytes' Anti-Malware to your desktop.

    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to
      • Update Malwarebytes' Anti-Malware
      • and Launch Malwarebytes' Anti-Malware
    • then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. please copy and paste the log into your next reply
    • If requested, please reboot
      • If you accidently close it, the log file is saved here and will be named like this:
      • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt






    Active Scan
    Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
    NOTE:- Vista users should start IE by Start(Vista Orb) >> Internet Explorer >> Right-Click Run As Admin
    Please go to this site Link >> ActiveScan << LINK
    • Click the Scan Now button
    • Follow the prompts to install the Active X if necessary
    • Go and make a cup of tea/coffee/beverage of your choice and watch some TV
    • When the scan is finished, a report will be generated
    • Next to Scan Details click the small export to notepad button and save the report to your desktop.
    • Please post the report in your reply.
    Microsoft MVP Consumer Security 2009 -2010
    If we have helped, please consider a donation
    THESE INSTRUCTIONS ARE FOR THIS USER ONLY
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules