Hallo,

erneut hat es mich erwischt.

Direkt nach dem hochfahren kommt die aufforderung zum zahlen von 100€ zum entsperren des Rechners. Da ich das schon mal hatte und Ihr mir super geholfen habt wende ich mich erneut an euch.

OTL is noch installiert.

Werde die Dateien gleich posten, bitte nochmal um eure hilfe.

OTL Logfile:

OTL logfile created on: 21.02.2012 12:09:30 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Dokumente und Einstellungen\Jens\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,37 Gb Total Physical Memory | 3,08 Gb Available Physical Memory | 91,16% Memory free
5,22 Gb Paging File | 5,14 Gb Available in Paging File | 98,50% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 71,27 Gb Total Space | 26,83 Gb Free Space | 37,64% Space Free | Partition Type: NTFS
Drive D: | 3,26 Gb Total Space | 2,71 Gb Free Space | 83,14% Space Free | Partition Type: NTFS
Drive E: | 2,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: PC_SCHMIDT | User Name: Jens | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.02.06 13:26:21 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Jens\Desktop\OTL.exe
PRC - [2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2011.10.24 21:32:00 | 000,055,144 | ---- | M] (Apple Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2011.07.21 11:08:02 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.04.21 06:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009.12.03 02:44:00 | 000,147,040 | ---- | M] (DATEV eG) [On_Demand | Stopped] -- C:\DATEV\PROGRAMM\INSTALL\DvInesASDSvc.Exe -- (DATEV Update-Service)
SRV - [2009.07.20 12:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2009.05.15 13:45:16 | 000,619,336 | ---- | M] (Acronis) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2008.02.13 02:30:00 | 001,217,856 | ---- | M] (WIBU-SYSTEMS AG) [Auto | Stopped] -- C:\Programme\CodeMeter\Runtime\bin\CodeMeter.exe -- (CodeMeter.exe)
SRV - [2006.04.06 01:06:00 | 000,350,876 | ---- | M] (AVM Berlin) [Auto | Stopped] -- C:\Programme\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2005.04.03 23:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004.06.21 13:55:56 | 000,139,264 | R--- | M] (OTi) [Auto | Stopped] -- C:\WINDOWS\System32\UStorSrv.exe -- (UStorage Server Service)
SRV - [2003.07.28 12:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2011.07.21 11:11:12 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.07.21 11:11:11 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010.05.05 03:45:04 | 004,807,680 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.04.08 09:11:36 | 000,101,904 | R--- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2010.03.13 05:41:22 | 005,867,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009.11.18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.11.06 11:53:22 | 000,902,592 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\tdrpm228.sys -- (tdrpman228) Acronis Try&Decide and Restore Points filter (build 228)
DRV - [2009.11.06 11:53:19 | 000,540,000 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2009.11.06 11:53:19 | 000,044,704 | ---- | M] (Acronis) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2009.11.06 11:53:12 | 000,138,208 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2009.10.08 16:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.09.29 15:05:15 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.06.17 17:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2009.06.17 17:56:24 | 000,079,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2009.06.17 17:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2009.06.17 17:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2009.06.17 17:55:26 | 000,063,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2009.06.17 17:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007.08.08 10:40:38 | 000,098,944 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.03.16 09:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007.03.16 09:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2006.11.22 09:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006.11.22 09:01:48 | 000,100,096 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb)
DRV - [2006.11.22 09:01:46 | 000,327,168 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp)
DRV - [2006.06.30 00:53:44 | 000,003,712 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE)
DRV - [2006.06.12 19:06:28 | 000,041,984 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp)
DRV - [2006.05.10 09:56:54 | 000,027,264 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidKE.Sys -- (LHidKe)
DRV - [2006.04.06 01:06:00 | 000,264,704 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2005.12.28 03:37:58 | 000,015,488 | R--- | M] (WideView Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WDM_Loader_220A.sys -- (WDM_Loader_220A)
DRV - [2005.08.03 15:16:10 | 000,202,112 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vinyl97.sys -- (VIAudio) Vinyl AC'97 Audio Controller (WDM)
DRV - [2005.03.12 20:48:08 | 000,243,456 | R--- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2500usb.sys -- (rt2500usb) DWL-G122(rev.B)
DRV - [2004.10.22 07:31:14 | 000,059,151 | R--- | M] (OMNIKEY AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cxbu0wdm.sys -- (cxbu0wdm)
DRV - [2004.09.06 14:40:04 | 000,018,432 | R--- | M] (Computer & Entertainment, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WDM_Capture_220A.sys -- (WDM_Capture_220A)
DRV - [2004.08.19 09:00:00 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004.08.04 16:59:14 | 000,034,560 | ---- | M] (DigitalPersona, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\UsbdpFP.sys -- (UsbdpFP)
DRV - [2004.08.04 16:58:08 | 000,032,640 | ---- | M] (DigitalPersona, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dpK0Bx01.sys -- (dpK0Bx01)
DRV - [2004.08.03 22:29:52 | 000,166,912 | ---- | M] (S3 Graphics, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3gnbm.sys -- (S3SavageNB)
DRV - [2004.03.04 17:27:56 | 000,016,509 | ---- | M] (Palm, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PalmUSBD.sys -- (PalmUSBD)
DRV - [2003.07.16 07:27:40 | 000,043,264 | R--- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2002.01.01 00:23:56 | 001,042,816 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2002.01.01 00:23:56 | 000,679,808 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2002.01.01 00:23:56 | 000,210,304 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys -- (HSFHWBS2)
DRV - [1999.09.10 12:06:00 | 000,025,244 | R--- | M] (Adaptec) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\ASPI32.sys -- (Aspi32)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search, = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Aktuelle Nachrichten - Bild.de
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.46: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc;version=0.8.6h: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\PROGRA~1\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008.08.14 09:46:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.02.09 10:55:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.12.16 11:21:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.11.13 13:28:41 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.02.09 10:55:42 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{d591241b-9967-418c-9b7d-ee128131d60d}: C:\Programme\GMX\GMX MultiMessenger\ThunderbirdSyncProxy [2009.01.26 16:52:54 | 000,000,000 | ---D | M]
 
[2010.02.26 15:00:25 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Mozilla\Extensions
[2012.02.17 14:33:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Mozilla\Firefox\Profiles\a7qq2mpq.default\extensions
[2011.12.16 11:21:19 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.11.21 05:21:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011.11.21 02:17:49 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.11.21 02:09:48 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011.11.21 02:17:49 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011.11.21 02:17:49 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.11.21 02:17:49 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.11.21 02:17:49 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Programme\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java(TM) Platform SE 6 U12 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java(TM) Platform SE 6 U15 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Programme\Mozilla Firefox\plugins\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Programme\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Programme\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Programme\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programme\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Programme\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll
CHR - plugin: Unity Player (Enabled) = C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\PROGRA~1\Yahoo!\Common\npyaxmpb.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Google Update (Enabled) = C:\Programme\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: VLC Multimedia Plugin (Enabled) = C:\Programme\VideoLAN\VLC\npvlc.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Programme\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\
 
O1 HOSTS File: ([2012.02.07 18:13:24 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (ZeonIEEventHelper Class) - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKLM\..\Toolbar: (Nuance PDF) - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [SweetIM] C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKCU..\Run: [adobeflash] C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\adobeflash\adobeflash.exe ()
O4 - HKCU..\Run: [H/PC Connection Agent] D:\Programme\wcescomm.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: An vorhandene PDF-Datei anhängen - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Inhalt der ausgewählten Links an vorhandene PDF-Datei anhängen - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Linkinhalt an vorhandene PDF-Datei anhängen - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Mit Nuance PDF Converter 5.0 öffnen - C:\Programme\Nuance\PDF Converter 5\cnvres_ger.dll (Nuance Communications, Inc.)
O8 - Extra context menu item: PDF-Datei aus Linkinhalt erstellen - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: PDF-Datei erstellen - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: PDF-Dateien aus den ausgewählten Links erstellen - C:\Programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Web-Suche - C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://www.apple.com/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab (20-20 3D Viewer for IKEA)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {579CACEB-F009-44D2-8775-C698876048DD} Lizenzmanager (CmUserDataX Element)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1141993751468 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA} Java Plug-in Technology (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1730D2E9-F4ED-4B72-8980-7011DEB2FA2C}: DhcpNameServer = 213.191.92.86 62.109.123.7
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{92FDFAE3-3490-409F-9343-CF3842C6928E}: DhcpNameServer = 87.245.0.35 87.245.0.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9DC60EE2-9455-40A2-A78E-D84C4A4B93A4}: DhcpNameServer = 217.237.149.142 217.237.150.205
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B750D594-ED13-4095-92C6-0343DA8D945C}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\LBTWlgn: DllName - (c:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll) - c:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 () - file:///C:/DOKUME~1/Jens/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.03.09 18:30:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2007.10.11 17:19:29 | 000,000,047 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2007.10.12 12:47:53 | 000,745,472 | R--- | M] () - E:\Autorun.exe -- [ UDF ]
O32 - AutoRun File - [2007.10.12 12:43:46 | 000,015,086 | R--- | M] () - E:\Autorun.ico -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.21 11:43:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\adobeflash
[2012.02.17 15:04:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\SCAR Divi
[2012.02.17 15:04:50 | 000,000,000 | ---D | C] -- C:\Programme\SCAR Divi
[2012.02.17 14:40:56 | 000,000,000 | ---D | C] -- C:\Programme\SweetIM
[2012.02.17 14:40:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[2012.02.17 14:10:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Babylon
[2012.02.17 14:10:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Babylon
[2012.02.17 14:10:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012.02.14 10:19:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Winterberg-Modifications
[2012.02.13 09:51:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Jens\Recent
[2012.02.10 11:32:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Hewlett-Packard
[2012.02.09 13:08:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\HPAppData
[2012.02.09 12:09:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\sixteen tons entertainment
[2012.02.09 12:04:37 | 000,000,000 | ---D | C] -- C:\Programme\sixteen tons entertainment
[2012.02.09 10:54:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HP Product Assistant
[2012.02.09 10:52:48 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\HP
[2012.02.09 10:52:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\HP
[2012.02.09 10:49:47 | 000,000,000 | -H-D | C] -- C:\Config.Msi
[2012.02.08 11:10:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Malwarebytes
[2012.02.08 11:10:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2012.02.08 11:10:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012.02.08 11:10:51 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.02.08 11:10:51 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2012.02.07 19:55:13 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012.02.07 18:01:40 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012.02.07 17:59:47 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012.02.07 17:59:47 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012.02.07 17:59:47 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012.02.07 17:59:47 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012.02.07 17:59:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2012.02.07 17:56:36 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.02.07 17:56:31 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Jens\Startmenü\Programme\Verwaltung
[2012.02.07 17:53:59 | 004,398,288 | R--- | C] (Swearware) -- C:\Dokumente und Einstellungen\Jens\Desktop\ComboFix.exe
[2012.02.06 17:44:34 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.02.06 13:26:16 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Jens\Desktop\OTL.exe
[2011.11.29 11:44:43 | 000,594,566 | ---- | C] (                                                            ) -- C:\WINDOWS\System32\mvSetup.exe
[1 C:\Dokumente und Einstellungen\Jens\*.tmp files -> C:\Dokumente und Einstellungen\Jens\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.21 12:07:06 | 000,013,752 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.02.21 12:06:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.02.21 12:03:29 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.02.21 11:19:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.02.17 15:04:53 | 000,000,705 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SCAR Divi.lnk
[2012.02.17 14:37:51 | 000,058,824 | ---- | M] () -- C:\Dokumente und Einstellungen\Jens\Desktop\HeLLRaid_v_1.1.scar
[2012.02.17 14:10:21 | 000,000,240 | ---- | M] () -- C:\user.js
[2012.02.17 11:15:28 | 000,221,632 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.02.16 20:10:55 | 000,462,916 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.02.16 20:10:55 | 000,444,334 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.02.16 20:10:55 | 000,086,144 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.02.16 20:10:55 | 000,072,592 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.02.16 20:08:28 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.02.14 10:56:38 | 000,000,238 | ---- | M] () -- C:\Dokumente und Einstellungen\Jens\Eigene Dateien\onlineupdate.e4mod
[2012.02.14 10:19:20 | 000,474,571 | ---- | M] () -- C:\Dokumente und Einstellungen\Jens\Eigene Dateien\WinterbergUpdater.exe
[2012.02.13 14:20:04 | 000,000,605 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Emergency 3 spielen.lnk
[2012.02.09 15:58:49 | 000,002,509 | ---- | M] () -- C:\Dokumente und Einstellungen\Jens\Desktop\Microsoft Office Word 2003.lnk
[2012.02.09 12:09:04 | 000,000,589 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Emergency4 spielen.lnk
[2012.02.09 10:55:53 | 000,219,290 | ---- | M] () -- C:\WINDOWS\hpoins41.dat
[2012.02.09 10:54:09 | 000,001,026 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HP Solution Center.lnk
[2012.02.08 14:08:23 | 000,000,021 | ---- | M] () -- C:\WINDOWS\KurusDeinstall.INI
[2012.02.08 11:10:53 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.02.07 19:54:30 | 000,000,654 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2012.02.07 18:13:24 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012.02.07 18:01:46 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012.02.07 17:54:08 | 004,398,288 | R--- | M] (Swearware) -- C:\Dokumente und Einstellungen\Jens\Desktop\ComboFix.exe
[2012.02.06 13:26:21 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Jens\Desktop\OTL.exe
[2012.02.06 10:31:18 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[1 C:\Dokumente und Einstellungen\Jens\*.tmp files -> C:\Dokumente und Einstellungen\Jens\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.02.17 15:04:53 | 000,000,705 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SCAR Divi.lnk
[2012.02.17 14:37:50 | 000,058,824 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Desktop\HeLLRaid_v_1.1.scar
[2012.02.17 14:10:20 | 000,000,240 | ---- | C] () -- C:\user.js
[2012.02.16 20:06:34 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2012.02.16 12:54:05 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.02.16 12:54:05 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012.02.14 11:23:50 | 092,323,368 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Eigene Dateien\Florian_Hamburg_Mod_V1_0.e4mod
[2012.02.14 10:19:16 | 000,474,571 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Eigene Dateien\WinterbergUpdater.exe
[2012.02.14 10:19:01 | 000,000,238 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Eigene Dateien\onlineupdate.e4mod
[2012.02.13 14:20:04 | 000,000,605 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Emergency 3 spielen.lnk
[2012.02.09 12:09:04 | 000,000,589 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Emergency4 spielen.lnk
[2012.02.09 10:54:09 | 000,001,026 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HP Solution Center.lnk
[2012.02.09 10:46:52 | 000,219,290 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2012.02.09 10:46:52 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2012.02.08 11:10:53 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.02.07 18:01:46 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012.02.07 18:01:43 | 000,262,448 | RHS- | C] () -- C:\cmldr
[2012.02.07 17:59:47 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.02.07 17:59:47 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.02.07 17:59:47 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.02.07 17:59:47 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.02.07 17:59:47 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.02.06 10:31:13 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.11.11 10:41:42 | 000,000,021 | ---- | C] () -- C:\WINDOWS\KurusDeinstall.INI
[2011.10.03 15:34:37 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011.03.03 17:17:53 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011.03.03 17:17:38 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011.03.03 17:17:38 | 000,203,331 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011.03.03 17:17:38 | 000,000,003 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011.03.03 17:17:28 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe
[2011.03.03 17:17:18 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe
[2011.02.17 11:16:43 | 000,000,021 | ---- | C] () -- C:\WINDOWS\DvInesKurusOleServer003.INI
[2011.02.17 11:14:46 | 000,000,100 | ---- | C] () -- C:\WINDOWS\dvinesinstalllocation001.INI
[2011.02.17 11:14:39 | 000,000,100 | ---- | C] () -- C:\WINDOWS\dvinesinstart001.INI
[2011.02.17 11:14:37 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Startup.INI
[2011.02.04 13:32:50 | 000,000,836 | ---- | C] () -- C:\WINDOWS\wiso.ini
[2010.11.21 15:13:08 | 000,688,128 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2010.11.21 15:13:08 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2010.02.26 15:00:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009.09.15 11:23:43 | 000,042,208 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009.08.10 13:23:23 | 000,163,840 | R--- | C] () -- C:\WINDOWS\System32\cmabout.dll
[2009.08.10 13:23:23 | 000,061,440 | R--- | C] () -- C:\WINDOWS\System32\chksvrn.dll
[2009.08.10 13:23:23 | 000,008,621 | R--- | C] () -- C:\WINDOWS\System32\cmdiag.ini
[2009.08.10 13:23:23 | 000,000,145 | R--- | C] () -- C:\WINDOWS\System32\cmabout.ini
[2009.07.30 11:33:05 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\ODBCINST.EXE
[2009.05.29 14:09:00 | 000,000,036 | ---- | C] () -- C:\WINDOWS\System32\FWSettings.INI
[2009.05.29 14:07:29 | 000,219,136 | ---- | C] () -- C:\WINDOWS\System32\sqlite3_engine.dll
[2009.04.03 17:42:30 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2009.04.03 17:39:20 | 000,001,022 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2009.04.03 17:39:20 | 000,000,148 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2009.04.03 17:39:20 | 000,000,065 | ---- | C] () -- C:\WINDOWS\System32\BD8860DN.DAT
[2009.04.03 17:38:52 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\BRTCPCON.DLL
[2009.04.03 17:38:51 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\BRLMW03A.INI
[2009.04.03 17:38:33 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2008.12.29 10:49:18 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\nnr.dll
[2008.11.11 12:04:19 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\hlduinst.exe
[2008.11.11 12:04:18 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI
[2008.10.07 08:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008.10.07 08:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008.07.10 12:28:11 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\$_hpcst$.hpc
[2008.07.07 17:17:44 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[2008.07.07 12:42:17 | 000,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI
[2008.07.07 12:10:56 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008.07.07 11:55:47 | 000,010,763 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2008.07.07 11:55:42 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2008.07.07 11:55:34 | 000,010,443 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2008.07.07 11:55:24 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007.11.28 09:45:31 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007.11.28 09:45:31 | 001,657,376 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2007.11.28 09:45:31 | 001,503,232 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007.11.28 09:45:31 | 001,346,080 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2007.11.28 09:45:31 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007.11.28 09:45:31 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007.11.28 09:45:31 | 000,449,056 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2007.11.28 09:45:31 | 000,436,768 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2007.11.28 09:45:31 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2007.10.18 18:22:48 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\$_hpcst$.hpc
[2007.01.15 09:19:16 | 000,016,473 | ---- | C] () -- C:\WINDOWS\System32\SELF32.INI
[2007.01.08 10:57:33 | 000,000,029 | ---- | C] () -- C:\WINDOWS\AlphaPlayer.INI
[2006.12.11 14:43:37 | 000,454,656 | ---- | C] () -- C:\WINDOWS\ssndii.exe
[2006.10.10 13:19:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\AlbumExe.INI
[2006.10.10 13:17:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MelodyExe.INI
[2006.10.10 13:13:46 | 000,000,077 | ---- | C] () -- C:\WINDOWS\PhoneBkExe.INI
[2006.10.07 12:37:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EngineExe.INI
[2006.10.07 12:35:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PanelExe.INI
[2006.10.07 12:16:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\FileMgrExe.INI
[2006.10.07 12:15:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MessageExe.INI
[2006.08.08 12:26:30 | 000,009,728 | ---- | C] () -- C:\Dokumente und Einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.05.22 12:52:10 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2006.05.17 19:20:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\QuickInstall.INI
[2006.04.06 01:06:00 | 000,097,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\Fwusb1b.bin
[2006.03.12 08:36:24 | 000,000,148 | ---- | C] () -- C:\WINDOWS\DEINSTAL.INI
[2006.03.10 13:42:59 | 000,139,264 | R--- | C] () -- C:\WINDOWS\System32\OPDSL.DLL
[2006.03.10 12:03:59 | 000,229,428 | ---- | C] () -- C:\WINDOWS\System32\pmtols.dll
[2006.03.10 11:37:57 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006.03.10 11:26:09 | 000,000,837 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2006.03.10 11:26:09 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\BD2030.DAT
[2006.03.09 19:01:20 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD_START.INI
[2006.03.09 18:32:38 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2006.03.09 18:27:15 | 000,022,880 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2006.03.09 18:21:12 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006.03.09 18:20:05 | 000,221,632 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006.03.06 11:37:27 | 000,000,067 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006.03.06 11:04:27 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2006.02.28 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006.02.28 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006.02.28 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006.02.28 13:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2006.02.28 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006.02.28 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006.02.28 13:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2006.02.28 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006.02.28 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006.02.28 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006.02.28 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2005.09.29 13:17:48 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\haspds_msi.dll
[2005.09.29 13:16:12 | 000,024,064 | ---- | C] () -- C:\WINDOWS\System32\strtstop.dll
[2004.08.04 13:00:00 | 000,462,916 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004.08.04 13:00:00 | 000,444,334 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004.08.04 13:00:00 | 000,086,144 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004.08.04 13:00:00 | 000,072,592 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004.08.04 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[1999.08.11 23:00:00 | 001,708,032 | ---- | C] () -- C:\WINDOWS\System32\MSO97V.DLL
[1999.08.11 23:00:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1999.08.11 23:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\MSORFS.DLL
[1999.08.11 23:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL
 
========== LOP Check ==========
 
[2009.11.06 11:56:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2010.08.07 11:15:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Alwil Software
[2012.02.17 14:10:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2010.02.16 12:36:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\boost_interprocess
[2011.02.04 13:30:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH
[2008.11.11 12:42:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Degener
[2011.07.06 10:13:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\elsterformular
[2009.01.26 16:53:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\GMX
[2010.07.07 12:24:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Happyville__
[2006.05.31 19:06:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Haufe
[2010.02.15 16:00:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2008.12.30 09:36:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nuance
[2006.10.05 12:34:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2011.11.11 10:44:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft
[2012.02.17 14:46:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[2009.08.10 13:28:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Travelcontrol
[2011.11.29 11:44:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vogel Verlag
[2009.04.09 11:08:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip
[2008.12.29 15:10:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\zeon
[2009.03.19 13:51:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2010.05.12 11:48:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009.09.15 09:41:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.04.15 11:10:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009.11.06 11:57:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Acronis
[2010.10.03 12:44:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Ahummy
[2012.01.11 14:10:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Amazon
[2012.02.17 14:10:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Babylon
[2011.02.04 13:30:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Buhl Data Service
[2008.09.04 15:59:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\concept design
[2006.10.11 13:25:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\DataLayer
[2008.11.11 12:11:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Degener
[2006.05.22 12:52:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Ebner
[2011.07.06 10:14:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\elsterformular
[2009.01.26 16:53:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\GMX
[2006.05.30 17:07:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Haufe
[2008.02.13 15:12:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\ICQ Toolbar
[2006.07.20 10:36:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\ICQLite
[2011.10.05 18:40:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\iPhoneRingToneMaker
[2008.12.16 16:45:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Leadertech
[2007.03.20 17:28:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Lern-o-Mat
[2006.10.07 12:13:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\MobileAction
[2011.11.21 11:31:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\naviextras
[2006.10.07 11:25:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Nokia
[2010.08.09 10:35:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\OnlineBackup
[2010.10.02 08:54:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Ozcomo
[2006.10.05 12:33:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\PC Suite
[2010.12.20 22:26:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Pirates of the Atlantic
[2009.10.15 11:59:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Ringtone Expressions
[2009.04.04 12:38:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\ScanSoft
[2008.08.11 14:00:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\temp
[2012.02.07 19:55:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\TS3Client
[2011.03.24 13:01:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Unity
[2011.08.16 11:30:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\wargaming.net
[2010.11.03 11:05:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\World-Loom
[2008.12.29 15:13:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\Zeon
 
========== Purity Check ==========
 
 

< End of report >
         

--- --- ---

hi


dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKCU..\Run: [adobeflash] C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\adobeflash\adobeflash.exe ()

 :Files
C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\adobeflash\adobeflash.exe
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\adobeflash not found.
File C:\Dokumente und Einstellungen\Jens\Anwendungsdaten\adobeflash\adobeflash.exe not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrator

User: Administrator.PC_SCHMIDT
->Flash cache emptied: 0 bytes

User: All Users

User: backup
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Jens
->Flash cache emptied: 661 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb


[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Administrator.PC_SCHMIDT
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: backup
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Jens
->Temp folder emptied: 30786088 bytes
->Temporary Internet Files folder emptied: 22524945 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 21341483 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1777088 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 73,00 mb


OTL by OldTimer - Version 3.2.31.0 log created on 02212012_133048

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\hlktmp scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Danke hab nun cccleaner etc auch durchlaufen lassen bisher läuft das System wieder.

Upload hab ich auch gemacht

wir sind sowieso noch nicht fertig...

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.

• Besuche folgende Seite für Downloadlinks und Anweisungen für dieses
  Tool
  
  Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  
• Hinweis:
  Gehe sicher das all deine Anti Virus und Anti Malware Programme abgeschalten sind, damit diese Combofix nicht bei der Arbeit stören.
  
• Poste bitte die C:\Combofix.txt in deiner nächsten Antwort.

Combofix Logfile:

ComboFix 12-02-21.01 - Jens 21.02.2012  16:12:32.2.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.3455.2728 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Jens\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Jens\ntuser.tmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-01-21 bis 2012-02-21  ))))))))))))))))))))))))))))))
.
.
2012-02-21 12:00 . 2012-02-21 12:29	--------	d-----w-	c:\dokumente und einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\NPE
2012-02-21 12:00 . 2012-02-21 12:00	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Norton
2012-02-21 10:43 . 2012-02-21 12:26	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\adobeflash
2012-02-17 14:04 . 2012-02-17 14:04	--------	d-----w-	c:\programme\SCAR Divi
2012-02-17 13:40 . 2012-02-17 13:46	--------	d-----w-	c:\programme\SweetIM
2012-02-17 13:40 . 2012-02-17 13:46	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\SweetIM
2012-02-17 13:10 . 2012-02-17 13:10	240	----a-w-	C:\user.js
2012-02-17 13:10 . 2012-02-17 13:10	--------	d-----w-	c:\dokumente und einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Babylon
2012-02-17 13:10 . 2012-02-17 13:10	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\Babylon
2012-02-17 13:10 . 2012-02-17 13:10	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Babylon
2012-02-16 11:54 . 2012-01-11 19:06	3072	-c----w-	c:\windows\system32\dllcache\iacenc.dll
2012-02-16 11:54 . 2012-01-11 19:06	3072	------w-	c:\windows\system32\iacenc.dll
2012-02-14 09:19 . 2012-02-14 09:19	--------	d-----w-	c:\dokumente und einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Winterberg-Modifications
2012-02-10 10:32 . 2012-02-10 10:32	--------	d-----w-	c:\windows\Hewlett-Packard
2012-02-09 12:08 . 2012-02-21 15:09	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\HPAppData
2012-02-09 11:04 . 2012-02-13 13:20	--------	d-----w-	c:\programme\sixteen tons entertainment
2012-02-09 09:57 . 2009-04-20 11:23	315904	----a-w-	c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
2012-02-09 09:57 . 2009-04-20 11:23	123904	----a-w-	c:\windows\system32\hpf3l70w.dll
2012-02-09 09:57 . 2009-02-10 20:03	315392	----a-r-	c:\windows\system32\hposc_p03a.dll
2012-02-09 09:57 . 2008-10-28 10:27	372736	----a-r-	c:\windows\system32\hppldcoi.dll
2012-02-09 09:57 . 2008-10-28 10:27	309760	----a-r-	c:\windows\system32\difxapi.dll
2012-02-09 09:57 . 2009-02-10 20:03	966656	----a-r-	c:\windows\system32\hpost_p03b.dll
2012-02-09 09:57 . 2009-02-10 20:03	712704	----a-r-	c:\windows\system32\hposwia_p03b.dll
2012-02-09 09:54 . 2012-02-09 09:54	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\HP Product Assistant
2012-02-09 09:53 . 2012-02-09 09:53	77824	----a-r-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\Microsoft\Installer\{922E8525-AC7E-4294-ACAA-43712D4423C0}\ARPPRODUCTICON.exe
2012-02-09 09:52 . 2012-02-09 09:52	--------	d-----w-	c:\programme\Gemeinsame Dateien\HP
2012-02-08 10:10 . 2012-02-08 10:10	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\Malwarebytes
2012-02-08 10:10 . 2012-02-08 10:10	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2012-02-08 10:10 . 2012-02-08 10:10	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2012-02-08 10:10 . 2011-12-10 14:24	20464	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-02-06 16:44 . 2012-02-06 16:44	--------	d-----w-	C:\_OTL
2012-02-06 11:55 . 2012-02-06 11:55	--------	d-----w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Anwendungsdaten\Zeon
2012-02-06 11:52 . 2012-02-06 11:52	--------	d-----r-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Eigene Dateien
2012-02-06 10:03 . 2012-02-06 10:03	--------	d-sh--w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\PrivacIE
2012-02-06 10:02 . 2012-02-06 10:02	--------	d-----w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Lokale Einstellungen\Anwendungsdaten\Mozilla
2012-02-06 09:33 . 2012-02-06 09:33	--------	d-----w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Anwendungsdaten\Avira
2012-02-06 09:30 . 2012-02-06 09:30	--------	d-sh--w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\IETldCache
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-21 12:38 . 2012-02-21 12:37	3824	----a-w-	C:\_OTL.zip
2012-01-12 17:20 . 2006-02-28 12:00	1860096	----a-w-	c:\windows\system32\win32k.sys
2011-12-17 19:43 . 2006-02-28 12:00	916992	----a-w-	c:\windows\system32\wininet.dll
2011-12-17 19:43 . 2006-02-28 12:00	43520	----a-w-	c:\windows\system32\licmgr10.dll
2011-12-17 19:43 . 2006-02-28 12:00	1469440	------w-	c:\windows\system32\inetcpl.cpl
2011-12-16 12:22 . 2006-02-28 12:00	385024	----a-w-	c:\windows\system32\html.iec
2011-11-25 21:57 . 2006-02-28 12:00	293888	----a-w-	c:\windows\system32\winsrv.dll
2011-11-21 04:21 . 2011-12-16 10:21	134104	----a-w-	c:\programme\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((   SnapShot@2012-02-07_17.13.48   )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-05-21 21:09 . 2009-05-21 21:09	59904              c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
+ 2009-05-21 21:09 . 2009-05-21 21:09	59904              c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	57344              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80u.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	69632              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	96256              c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_6e85597b\ATL80.dll
+ 2009-05-21 20:54 . 2009-05-21 20:54	96256              c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2012-02-09 09:52 . 2012-02-09 09:52	82432              c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
+ 2012-02-21 12:32 . 2012-02-21 12:32	16384              c:\windows\Temp\Perflib_Perfdata_20c.dat
- 2004-08-04 12:00 . 2012-02-06 11:59	72592              c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2012-02-16 19:10	72592              c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2012-02-16 19:10	86144              c:\windows\system32\perfc007.dat
- 2004-08-04 12:00 . 2012-02-06 11:59	86144              c:\windows\system32\perfc007.dat
+ 2006-02-28 12:00 . 2011-12-17 19:43	66560              c:\windows\system32\mshtmled.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	66560              c:\windows\system32\mshtmled.dll
- 2006-11-07 20:03 . 2011-11-04 19:13	55296              c:\windows\system32\msfeedsbs.dll
+ 2006-11-07 20:03 . 2011-12-17 19:43	55296              c:\windows\system32\msfeedsbs.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	25600              c:\windows\system32\jsproxy.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	25600              c:\windows\system32\jsproxy.dll
+ 2010-08-06 10:13 . 2010-08-06 10:13	20480              c:\windows\system32\hpzisn12.dll
- 2009-05-14 14:48 . 2009-05-14 14:48	20480              c:\windows\system32\hpzisn12.dll
+ 2010-08-06 10:13 . 2010-08-06 10:13	29696              c:\windows\system32\hpzipt12.dll
- 2009-05-14 14:48 . 2009-05-14 14:48	29696              c:\windows\system32\hpzipt12.dll
+ 2010-08-06 10:13 . 2010-08-06 10:13	34816              c:\windows\system32\HPZipr12.dll
- 2009-05-14 14:48 . 2009-05-14 14:48	53760              c:\windows\system32\HPZipm12.dll
+ 2010-08-06 10:13 . 2010-08-06 10:13	53760              c:\windows\system32\HPZipm12.dll
+ 2010-08-06 10:13 . 2010-08-06 10:13	44032              c:\windows\system32\HPZinw12.dll
- 2009-05-14 14:48 . 2009-05-14 14:48	44032              c:\windows\system32\HPZinw12.dll
+ 2010-08-06 10:13 . 2010-08-06 10:13	50688              c:\windows\system32\HPZidr12.dll
+ 2010-01-19 14:10 . 2010-01-19 14:10	63488              c:\windows\system32\HPBWSDR.DLL
+ 2010-07-23 08:54 . 2010-07-23 08:54	41472              c:\windows\system32\hpbpro.dll
+ 2010-07-23 08:55 . 2010-07-23 08:55	25600              c:\windows\system32\hpboid.dll
- 2009-07-17 10:07 . 2009-07-17 10:07	25600              c:\windows\system32\hpboid.dll
+ 2010-07-23 08:54 . 2010-07-23 08:54	24576              c:\windows\system32\hpbmiapi.dll
- 2009-07-17 10:07 . 2009-07-17 10:07	24576              c:\windows\system32\hpbmiapi.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	16800              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\drivers\dot4\WinxP\Hppaufd0.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	21568              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\drivers\dot4\Win2000\HPZius12.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	16496              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\drivers\dot4\Win2000\hpzipr12.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	49920              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\drivers\dot4\Win2000\hpzid412.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	16496              c:\windows\system32\DRVSTORE\hpzipr13_D715F6098FA1E1AAA844100179F2F11B7BC72ABF\drivers\dot4\Win2000\HPZipr12.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	21568              c:\windows\system32\DRVSTORE\hpzipa13_C7C260442B1351522D77732EB0D2429A413CE56A\drivers\dot4\Win2000\HPZius12.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	16496              c:\windows\system32\DRVSTORE\hpzipa13_C7C260442B1351522D77732EB0D2429A413CE56A\drivers\dot4\Win2000\HPzipr12.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	49920              c:\windows\system32\DRVSTORE\hpzipa13_C7C260442B1351522D77732EB0D2429A413CE56A\drivers\dot4\Win2000\HPZid412.sys
+ 2012-02-09 09:50 . 2008-10-28 10:27	49920              c:\windows\system32\DRVSTORE\hpzid413_C0168545C52E0D1050765D2C107AF090EAEC0A96\drivers\dot4\Win2000\HPZid412.sys
- 2009-06-26 08:28 . 2011-11-04 19:13	12800              c:\windows\system32\dllcache\xpshims.dll
+ 2009-06-26 08:28 . 2011-12-17 19:43	12800              c:\windows\system32\dllcache\xpshims.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	66560              c:\windows\system32\dllcache\mshtmled.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	66560              c:\windows\system32\dllcache\mshtmled.dll
+ 2008-07-08 09:40 . 2011-12-17 19:43	55296              c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-07-08 09:40 . 2011-11-04 19:13	55296              c:\windows\system32\dllcache\msfeedsbs.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	43520              c:\windows\system32\dllcache\licmgr10.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	43520              c:\windows\system32\dllcache\licmgr10.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	25600              c:\windows\system32\dllcache\jsproxy.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	25600              c:\windows\system32\dllcache\jsproxy.dll
+ 2012-02-10 10:33 . 2012-02-10 10:33	66048              c:\windows\Installer\4283b0.msi
+ 2012-02-09 09:53 . 2012-02-09 09:53	65536              c:\windows\Installer\{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}\NewShortcut1.A6CC6977_F7B4_4C0B_9510_BCD847D4BDB2.exe
+ 2012-02-17 13:40 . 2012-02-17 13:40	10134              c:\windows\Installer\{B85C4CB2-B352-4BD8-818C-BCE353599107}\ARPPRODUCTICON.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	23040              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	23040              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	61440              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	61440              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	27136              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	27136              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	11264              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	11264              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	86016              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	86016              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	12288              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	12288              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2011-02-20 13:14 . 2011-10-13 10:26	49152              c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-02-20 13:14 . 2012-02-16 19:07	49152              c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2012-02-10 10:32 . 2012-02-10 10:32	45056              c:\windows\Installer\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}\ARPPRODUCTICON.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut9.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut8.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut7.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut6.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut5.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut4.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut3.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut23.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut22.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut21.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut20.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut2.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut19.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut18.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut17.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut16.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut15.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut14.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut13.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut12.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut11.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut10.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-09 09:52 . 2012-02-09 09:52	91707              c:\windows\Installer\{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}\NewShortcut1.8A4F6A3E_5FDC_4E68_953F_2A8D5A684B79.exe
+ 2012-02-16 19:08 . 2011-11-04 19:13	12800              c:\windows\ie8updates\KB2647516-IE8\xpshims.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	66560              c:\windows\ie8updates\KB2647516-IE8\mshtmled.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	55296              c:\windows\ie8updates\KB2647516-IE8\msfeedsbs.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	43520              c:\windows\ie8updates\KB2647516-IE8\licmgr10.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	25600              c:\windows\ie8updates\KB2647516-IE8\jsproxy.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	37888              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\dab766b18e6fe0a8f53a93c56be7b40e\System.Windows.Presentation.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	36864              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\31b65443e56a470d199f293085576e05\System.Web.DynamicData.Design.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	94208              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\89dfd3999ad1d72c59243d7b4bf40d5a\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-02-17 10:18 . 2012-02-17 10:18	47104              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3aa4296d4aa01fe0533de2c15f818d5f\PresentationFontCache.ni.exe
+ 2012-02-17 10:17 . 2012-02-17 10:17	39424              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\820acb71782d9cd006800b3ac7e1ca53\PresentationCFFRasterizer.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	55296              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\d07f0222f62dbed7898a6e2e909d407a\Microsoft.Vsa.ni.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-07-23 08:54 . 2010-07-23 08:54	7680              c:\windows\system32\hpbprops.dll
- 2009-07-17 10:07 . 2009-07-17 10:07	7680              c:\windows\system32\hpbprops.dll
+ 2010-07-23 08:55 . 2010-07-23 08:55	7680              c:\windows\system32\hpboidps.dll
- 2009-07-17 10:07 . 2009-07-17 10:07	7680              c:\windows\system32\hpboidps.dll
+ 2006-03-10 10:37 . 2012-02-16 19:07	4096              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	4096              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2012-02-16 19:10 . 2012-02-16 19:10	7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-01-11 09:33 . 2012-01-11 09:33	6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-06-04 21:16 . 2009-06-04 21:16	161784              c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	626688              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcr80.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	548864              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcp80.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	479232              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcm80.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	105984              c:\windows\system32\url.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	105984              c:\windows\system32\url.dll
+ 2010-09-12 18:18 . 2009-03-30 14:42	761344              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\UNIRES.DLL
+ 2010-09-12 18:18 . 2009-03-30 14:42	740864              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\UNIDRVUI.DLL
+ 2010-09-12 18:18 . 2009-03-30 14:42	372736              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\UNIDRV.DLL
+ 2010-09-12 18:18 . 2009-04-20 11:23	621056              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpoc30g3.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	206848              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfvu70w.dll
+ 2012-02-09 09:57 . 2009-03-30 16:55	113664              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfrs70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	307712              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfpr70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	470016              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfpa70w.dll
+ 2012-02-09 09:57 . 2009-03-30 16:55	252416              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfie70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	531456              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfev70w.dll
+ 2010-09-12 18:18 . 2009-04-20 11:23	621056              c:\windows\system32\spool\drivers\w32x86\3\hpoc30g3.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	206848              c:\windows\system32\spool\drivers\w32x86\3\hpfvu70w.dll
+ 2012-02-09 09:57 . 2009-03-30 16:55	113664              c:\windows\system32\spool\drivers\w32x86\3\hpfrs70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	307712              c:\windows\system32\spool\drivers\w32x86\3\hpfpr70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	470016              c:\windows\system32\spool\drivers\w32x86\3\hpfpa70w.dll
+ 2012-02-09 09:57 . 2009-03-30 16:55	252416              c:\windows\system32\spool\drivers\w32x86\3\hpfie70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	531456              c:\windows\system32\spool\drivers\w32x86\3\hpfev70w.dll
+ 2004-08-04 12:00 . 2012-02-16 19:10	444334              c:\windows\system32\perfh009.dat
- 2004-08-04 12:00 . 2012-02-06 11:59	444334              c:\windows\system32\perfh009.dat
+ 2004-08-04 12:00 . 2012-02-16 19:10	462916              c:\windows\system32\perfh007.dat
- 2004-08-04 12:00 . 2012-02-06 11:59	462916              c:\windows\system32\perfh007.dat
+ 2006-02-28 12:00 . 2011-12-17 19:43	206848              c:\windows\system32\occache.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	206848              c:\windows\system32\occache.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	611840              c:\windows\system32\mstime.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	611840              c:\windows\system32\mstime.dll
- 2006-11-07 20:03 . 2011-11-04 19:13	602112              c:\windows\system32\msfeeds.dll
+ 2006-11-07 20:03 . 2011-12-17 19:43	602112              c:\windows\system32\msfeeds.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	184320              c:\windows\system32\iepeers.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	184320              c:\windows\system32\iepeers.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	387584              c:\windows\system32\iedkcs32.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	387584              c:\windows\system32\iedkcs32.dll
- 2006-02-28 12:00 . 2011-11-04 11:24	174080              c:\windows\system32\ie4uinit.exe
+ 2006-02-28 12:00 . 2011-12-16 12:23	174080              c:\windows\system32\ie4uinit.exe
+ 2010-09-12 18:14 . 2009-04-15 21:53	452408              c:\windows\system32\hpzids01.dll
+ 2009-11-27 11:16 . 2009-11-27 11:16	180224              c:\windows\system32\hplbddrv.dll
+ 2006-03-09 17:20 . 2012-02-17 10:15	221632              c:\windows\system32\FNTCACHE.DAT
+ 2012-02-09 09:50 . 2008-10-17 07:01	282624              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\HPZc3212.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	372736              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\drivers\dot4\Win2000\hppldcoi.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	309760              c:\windows\system32\DRVSTORE\hpzius13_D627171118186196E509949900C5F44341391758\drivers\dot4\Win2000\difxapi.dll
+ 2012-02-09 09:50 . 2008-10-17 07:01	282624              c:\windows\system32\DRVSTORE\hpzipa13_C7C260442B1351522D77732EB0D2429A413CE56A\HPZc3212.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	372736              c:\windows\system32\DRVSTORE\hpzipa13_C7C260442B1351522D77732EB0D2429A413CE56A\drivers\dot4\Win2000\hppldcoi.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	309760              c:\windows\system32\DRVSTORE\hpzipa13_C7C260442B1351522D77732EB0D2429A413CE56A\drivers\dot4\Win2000\difxapi.dll
+ 2012-02-09 09:50 . 2008-10-27 21:30	229376              c:\windows\system32\DRVSTORE\hpoc309g_s_508DD9A59A11DAF1FE2E127917A7D90A0C440D72\drivers\scanner\x32\hpotsti1.dll
+ 2012-02-09 09:50 . 2009-02-10 20:03	712704              c:\windows\system32\DRVSTORE\hpoc309g_s_508DD9A59A11DAF1FE2E127917A7D90A0C440D72\drivers\scanner\x32\hposwia_p03b.dll
+ 2012-02-09 09:50 . 2009-02-10 20:03	966656              c:\windows\system32\DRVSTORE\hpoc309g_s_508DD9A59A11DAF1FE2E127917A7D90A0C440D72\drivers\scanner\x32\hpost_p03b.dll
+ 2012-02-09 09:50 . 2009-02-10 20:03	315392              c:\windows\system32\DRVSTORE\hpoc309g_s_508DD9A59A11DAF1FE2E127917A7D90A0C440D72\drivers\scanner\x32\hposc_p03a.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	372736              c:\windows\system32\DRVSTORE\hpoc309g_s_508DD9A59A11DAF1FE2E127917A7D90A0C440D72\drivers\dot4\Win2000\hppldcoi.dll
+ 2012-02-09 09:50 . 2008-10-28 10:27	309760              c:\windows\system32\DRVSTORE\hpoc309g_s_508DD9A59A11DAF1FE2E127917A7D90A0C440D72\drivers\dot4\Win2000\difxapi.dll
+ 2012-02-09 09:50 . 2009-04-15 21:53	452408              c:\windows\system32\DRVSTORE\hpc309g_46F3E451292D7E28A7322F9345E2D9DFF931C4CD\hpzids01.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	916992              c:\windows\system32\dllcache\wininet.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	916992              c:\windows\system32\dllcache\wininet.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	105984              c:\windows\system32\dllcache\url.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	105984              c:\windows\system32\dllcache\url.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	206848              c:\windows\system32\dllcache\occache.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	206848              c:\windows\system32\dllcache\occache.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	611840              c:\windows\system32\dllcache\mstime.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	611840              c:\windows\system32\dllcache\mstime.dll
- 2008-07-08 09:40 . 2011-11-04 19:13	602112              c:\windows\system32\dllcache\msfeeds.dll
+ 2008-07-08 09:40 . 2011-12-17 19:43	602112              c:\windows\system32\dllcache\msfeeds.dll
+ 2009-06-26 08:28 . 2011-12-17 19:43	247808              c:\windows\system32\dllcache\ieproxy.dll
- 2009-06-26 08:28 . 2011-11-04 19:13	247808              c:\windows\system32\dllcache\ieproxy.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	184320              c:\windows\system32\dllcache\iepeers.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	184320              c:\windows\system32\dllcache\iepeers.dll
+ 2010-06-11 11:47 . 2011-12-17 19:43	743424              c:\windows\system32\dllcache\iedvtool.dll
- 2010-06-11 11:47 . 2011-11-04 19:13	743424              c:\windows\system32\dllcache\iedvtool.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	387584              c:\windows\system32\dllcache\iedkcs32.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	387584              c:\windows\system32\dllcache\iedkcs32.dll
- 2006-02-28 12:00 . 2011-11-04 11:24	174080              c:\windows\system32\dllcache\ie4uinit.exe
+ 2006-02-28 12:00 . 2011-12-16 12:23	174080              c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-05-21 18:58 . 2009-05-21 18:58	287256              c:\windows\system32\AbaleZip.dll
+ 2012-02-10 10:32 . 2012-02-10 10:32	953344              c:\windows\Installer\42839f.msi
+ 2012-02-09 09:55 . 2012-02-09 09:55	857600              c:\windows\Installer\1b16d2.msi
+ 2012-02-09 09:54 . 2012-02-09 09:54	477184              c:\windows\Installer\1b16b7.msi
+ 2012-02-09 09:54 . 2012-02-09 09:54	577024              c:\windows\Installer\1b16b1.msi
+ 2012-02-09 09:54 . 2012-02-09 09:54	279040              c:\windows\Installer\1b16ab.msi
+ 2012-02-09 09:54 . 2012-02-09 09:54	821760              c:\windows\Installer\1b16a5.msi
+ 2012-02-09 09:53 . 2012-02-09 09:53	459264              c:\windows\Installer\1b169c.msi
+ 2012-02-09 09:53 . 2012-02-09 09:53	585216              c:\windows\Installer\1b1696.msi
+ 2012-02-09 09:53 . 2012-02-09 09:53	678400              c:\windows\Installer\1b1690.msi
+ 2012-02-09 09:53 . 2012-02-09 09:53	692224              c:\windows\Installer\1b1688.msi
+ 2012-02-09 09:52 . 2012-02-09 09:52	859648              c:\windows\Installer\1b167b.msi
+ 2012-02-09 09:52 . 2012-02-09 09:52	386560              c:\windows\Installer\1b166b.msi
+ 2012-02-09 09:51 . 2012-02-09 09:51	935424              c:\windows\Installer\1b165e.msi
+ 2012-02-09 09:51 . 2012-02-09 09:51	390144              c:\windows\Installer\1b1658.msi
+ 2012-02-09 09:51 . 2012-02-09 09:51	307712              c:\windows\Installer\1b1652.msi
+ 2012-02-09 09:50 . 2012-02-09 09:50	448000              c:\windows\Installer\1b1648.msi
+ 2006-03-10 10:37 . 2012-02-16 19:07	409600              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	409600              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	286720              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	286720              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	249856              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	249856              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	794624              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	794624              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	135168              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	135168              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2006-03-10 10:37 . 2012-02-16 19:07	593920              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2006-03-10 10:37 . 2012-01-11 21:13	593920              c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2012-02-10 10:32 . 2012-02-10 10:32	102400              c:\windows\Installer\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}\NewShortcut1_47F36D92E58E456DB73C3382737E4C42.exe
+ 2012-02-16 19:08 . 2011-11-04 19:13	916992              c:\windows\ie8updates\KB2647516-IE8\wininet.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	105984              c:\windows\ie8updates\KB2647516-IE8\url.dll
+ 2012-02-16 19:08 . 2010-07-05 13:14	388984              c:\windows\ie8updates\KB2647516-IE8\spuninst\updspapi.dll
+ 2012-02-16 19:08 . 2010-07-05 13:14	234872              c:\windows\ie8updates\KB2647516-IE8\spuninst\spuninst.exe
+ 2012-02-16 19:08 . 2011-11-04 19:13	206848              c:\windows\ie8updates\KB2647516-IE8\occache.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	611840              c:\windows\ie8updates\KB2647516-IE8\mstime.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	602112              c:\windows\ie8updates\KB2647516-IE8\msfeeds.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	247808              c:\windows\ie8updates\KB2647516-IE8\ieproxy.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	184320              c:\windows\ie8updates\KB2647516-IE8\iepeers.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	743424              c:\windows\ie8updates\KB2647516-IE8\iedvtool.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	387584              c:\windows\ie8updates\KB2647516-IE8\iedkcs32.dll
+ 2012-02-16 19:08 . 2011-11-04 11:24	174080              c:\windows\ie8updates\KB2647516-IE8\ie4uinit.exe
+ 2012-02-09 09:46 . 2012-02-09 09:55	219290              c:\windows\hpoins41.dat
+ 2012-02-17 10:28 . 2012-02-17 10:28	321536              c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\edc5691acfb65ac37f49de2ec497083a\WsatConfig.ni.exe
+ 2012-02-17 10:20 . 2012-02-17 10:20	240128              c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\4ad8369d6a60765d7e9b43cdf9023f41\WindowsFormsIntegration.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	447488              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\68f4157e570c77df653057c0583395bd\UIAutomationClient.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	400896              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c2a12bd4056b44f8005a7eb3af161e6a\System.Xml.Linq.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	129536              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fc63b434b2f253cd27625487f7b02ac0\System.Web.Routing.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	202240              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\67877f896b2b0e42286e838fe307f3fd\System.Web.RegularExpressions.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	859648              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\86650d4fb220f94f25bb5da42a03d454\System.Web.Extensions.Design.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	328704              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\654465871e547e131668874de7c60b8c\System.Web.Entity.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	301056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f0d6895f6e709d425cb5da6053c603d2\System.Web.Entity.Design.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	547328              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3f3b7dc7208e302e39a2dfb5b2cb953b\System.Web.DynamicData.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\e9cddd213343f15d611b14620d649bb0\System.Web.Abstractions.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	627200              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f25d114cb629d1f512f98883c6535a75\System.Transactions.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	212992              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\11dcb806c92f55111f5fa9f1a90e3bdd\System.ServiceProcess.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	679936              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5fb9981f4147b537b53be9d58bf4e9b4\System.Security.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	311296              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1335dd98ce5ce22ad1f51cc274ca5a1d\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	621056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\a4b2b1ee81acd843970d9a81b281f1c1\System.Net.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	998400              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	330752              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e3436edde657a5111d39d5b2eecf9715\System.Management.Instrumentation.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	381440              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\974ded7dd3bca225a1b90de778846c78\System.IO.Log.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	212992              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\01eba24390736a59c39becd825b5756e\System.IdentityModel.Selectors.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	280064              c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.Wrapper.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	627712              c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	208384              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\e9ae7ae6d1e9edc7aaf819889cd1c692\System.Drawing.Design.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	455680              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\78a370dc153011708dd9e4cb0e606bfc\System.DirectoryServices.Protocols.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	881152              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6e644fc7464d9fe23fc9cd6001296f2f\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	939008              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bac39be66bb9f987c1948b766833f8e6\System.Data.Services.Client.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	354816              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2b5ecd231320e57010043c408783d80b\System.Data.Services.Design.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	135680              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d504d550fd0a6994fcb1466ea7be92af\System.Data.DataSetExtensions.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	971264              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\28637135c6939e74450bbbf110b12643\System.Configuration.Install.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	633856              c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\958b5c0114d664ab5ba72575c301e2ea\System.AddIn.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	366080              c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4dcff3b0e79fc27e31549bb2af00efb5\SMSvcHost.ni.exe
+ 2012-02-17 10:28 . 2012-02-17 10:28	256000              c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\bd3bfd5b6ef659dac4d6cccb34577d33\SMDiagnostics.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	320512              c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\edec83be646eb52204c991371751a428\ServiceModelReg.ni.exe
+ 2012-02-17 10:19 . 2012-02-17 10:19	258048              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\52015457bc28e7a9a563d9eab8ab0015\PresentationFramework.Royale.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	224768              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46a680814559114706a33282e9df4b7a\PresentationFramework.Classic.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	368128              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2713754549b1114c9152d33efe5f72c7\PresentationFramework.Aero.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	539648              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	133632              c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7c51497b188c82e2ccbe6315549ce023\MSBuild.ni.exe
+ 2012-02-17 10:28 . 2012-02-17 10:28	386560              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f0f6dd614d294295c5d8386cc4192034\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	144384              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fd1338828beec8737fed8f50f4fcc567\Microsoft.Build.Utilities.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	175104              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0d5f999c4b7e51151548c37c676c1b8e\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	839680              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\792168ce8fe03a3db43e12cf736cf91e\Microsoft.Build.Engine.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	222720              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0a5277c34ddc1f55df1defb4231e814f\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	410112              c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a8df37aadb089f1f34d3d2f103966fbc\ComSvcConfig.ni.exe
+ 2012-02-17 10:28 . 2012-02-17 10:28	842240              c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\25ce400b547f517258c8afb0480390ea\AspNetMMCExt.ni.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-05-21 21:09 . 2009-05-21 21:09	1162744              c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2009-05-21 21:09 . 2009-05-21 21:09	1156600              c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	1079808              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80u.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	1093632              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80.dll
+ 2012-02-09 09:52 . 2012-02-09 09:52	1230336              c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	1212416              c:\windows\system32\urlmon.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	1212416              c:\windows\system32\urlmon.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	1757696              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfui70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:19	1166336              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpfst70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	1486848              c:\windows\system32\spool\drivers\w32x86\hpphotosmart_premium2f43\hpf3r70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	1757696              c:\windows\system32\spool\drivers\w32x86\3\hpfui70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:19	1166336              c:\windows\system32\spool\drivers\w32x86\3\hpfst70w.dll
+ 2012-02-09 09:57 . 2009-04-20 11:23	1486848              c:\windows\system32\spool\drivers\w32x86\3\hpf3r70w.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	5979136              c:\windows\system32\mshtml.dll
- 2006-10-17 10:57 . 2011-11-04 19:13	2000384              c:\windows\system32\iertutil.dll
+ 2006-10-17 10:57 . 2011-12-17 19:43	2000384              c:\windows\system32\iertutil.dll
+ 2009-05-14 05:22 . 2009-05-14 05:22	1645320              c:\windows\system32\gdiplus.dll
+ 2008-10-16 06:31 . 2012-01-12 17:20	1860096              c:\windows\system32\dllcache\win32k.sys
+ 2006-02-28 12:00 . 2011-12-17 19:43	1212416              c:\windows\system32\dllcache\urlmon.dll
- 2006-02-28 12:00 . 2011-11-04 19:13	1212416              c:\windows\system32\dllcache\urlmon.dll
+ 2006-02-28 12:00 . 2011-12-17 19:43	5979136              c:\windows\system32\dllcache\mshtml.dll
- 2008-07-08 09:40 . 2011-11-04 19:13	2000384              c:\windows\system32\dllcache\iertutil.dll
+ 2008-07-08 09:40 . 2011-12-17 19:43	2000384              c:\windows\system32\dllcache\iertutil.dll
+ 2011-10-26 02:39 . 2011-10-26 02:39	3186688              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-02-17 13:40 . 2012-02-17 13:40	1947136              c:\windows\Installer\b5c14a.msi
+ 2011-10-30 21:54 . 2011-10-30 21:54	2748416              c:\windows\Installer\225ee61.msp
+ 2012-01-25 13:55 . 2012-01-25 13:55	5520384              c:\windows\Installer\225ee4e.msp
+ 2012-02-09 09:55 . 2012-02-09 09:55	1097216              c:\windows\Installer\1b16cc.msi
+ 2012-02-09 09:55 . 2012-02-09 09:55	1054720              c:\windows\Installer\1b16c4.msi
+ 2012-02-09 09:53 . 2012-02-09 09:53	1022464              c:\windows\Installer\1b1681.msi
+ 2012-02-09 09:52 . 2012-02-09 09:52	2974720              c:\windows\Installer\1b1671.msi
+ 2012-02-09 09:52 . 2012-02-09 09:52	1902080              c:\windows\Installer\1b1665.msi
+ 2012-02-16 19:08 . 2011-11-04 19:13	1212416              c:\windows\ie8updates\KB2647516-IE8\urlmon.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	5978112              c:\windows\ie8updates\KB2647516-IE8\mshtml.dll
+ 2012-02-16 19:08 . 2011-11-04 19:13	2000384              c:\windows\ie8updates\KB2647516-IE8\iertutil.dll
+ 2012-02-10 10:32 . 2012-02-10 10:32	2348544              c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{83B34002-FCA8-4E3A-94E9-48B0A0D9C418}\HP Update.msi
+ 2012-02-17 10:17 . 2012-02-17 10:17	3325440              c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	1049600              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94f5164ff4f664c5e4e7fb4c3af1abad\UIAutomationClientsideProviders.ni.dll
+ 2012-02-17 10:16 . 2012-02-17 10:16	7953408              c:\windows\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	5450752              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	1356288              c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\c4c671c737b553db8e07664816475333\System.WorkflowServices.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	1908224              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\248ea47105ff4af6ee75e6fdd5b450a1\System.Workflow.Runtime.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	4514304              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\80a288b6611668160334668cc2608e4a\System.Workflow.ComponentModel.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	2992640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\4c27548df5897320840ee0d65db38742\System.Workflow.Activities.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	1840640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	2209280              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\030cde14924eefebc06c240dbfe093a4\System.Web.Mobile.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	2405888              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6379c8ca8ae11effb415139990923ff1\System.Web.Extensions.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	1917440              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\e456140d5d6c43d7383bd36d3f9e12c6\System.Speech.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	1706496              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\285dfbf2380436e187cb624bd1cd4683\System.ServiceModel.Web.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	2345472              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f2532204217dc10f152afd077b09927c\System.Runtime.Serialization.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	1035776              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d51e6bb07124a1d780d1e024858e0dc1\System.Printing.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	1070080              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\8ef05061cd205c4f2a8583d97f32a603\System.IdentityModel.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	1587200              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	1116672              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77d0e93f024055d04c07cc2700b4c590\System.DirectoryServices.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	1801216              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\707a05a7d5a8d99dd56d1d50311a60d2\System.Deployment.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	6616576              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	2510336              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\857300fa64d09c69125451fd8894f3da\System.Data.SqlXml.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	1328128              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e9d4a1fb13572c769ddd9b86e55baab4\System.Data.Services.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	2516480              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3d9c33f71d15a3e2e240092a244eba3\System.Data.Linq.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	9924096              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\424160369b301ccd1b6fd86265611955\System.Data.Entity.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	2295296              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0a6d6717e76be12295711ff02c7aa1d4\System.Core.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	2128896              c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\33cdfb4c322a528260016ac759230501\ReachFramework.ni.dll
+ 2012-02-17 10:19 . 2012-02-17 10:19	1657856              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a6def83aee1aaf3336675ce58ac09013\PresentationUI.ni.dll
+ 2012-02-17 10:16 . 2012-02-17 10:16	1451008              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\59cd6ce5a254006179eee92952cd2272\PresentationBuildTasks.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	1712128              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\96e485c02ad346a2bd26a635e7fcb023\Microsoft.VisualBasic.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	1093120              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f7071f9a1c0523540f6aa7f11c302fb6\Microsoft.Transactions.Bridge.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	2332160              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\806b1d127ed3e906db972751e87585c4\Microsoft.JScript.ni.dll
+ 2012-02-17 10:29 . 2012-02-17 10:29	1620992              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6c1d3eec78906cc2a2ecffb013114c50\Microsoft.Build.Tasks.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	1888768              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d6edd4b4619a9052d3dfe50c3067d5e0\Microsoft.Build.Engine.ni.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	3186688              c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-01-11 09:33 . 2012-01-11 09:33	5246976              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	5246976              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-01-11 09:34 . 2012-01-11 09:34	4550656              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-02-16 19:10 . 2012-02-16 19:10	4550656              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2006-03-12 07:10 . 2012-02-19 12:25	52550552              c:\windows\system32\MRT.exe
+ 2006-11-07 20:03 . 2011-12-18 13:43	11082240              c:\windows\system32\ieframe.dll
+ 2008-07-08 09:40 . 2011-12-18 13:43	11082240              c:\windows\system32\dllcache\ieframe.dll
+ 2012-02-16 19:07 . 2012-02-16 19:07	20333056              c:\windows\Installer\225ee5a.msp
+ 2012-02-16 19:08 . 2011-11-04 19:13	11081728              c:\windows\ie8updates\KB2647516-IE8\ieframe.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	12430848              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll
+ 2012-02-17 10:30 . 2012-02-17 10:30	11817472              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\29bdc8352d3c26e3c572ea60639dec3b\System.Web.ni.dll
+ 2012-02-17 10:28 . 2012-02-17 10:28	17403904              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1cdcd6d97627d345d5ff446e6ec88b97\System.ServiceModel.ni.dll
+ 2012-02-17 10:20 . 2012-02-17 10:20	10683392              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c8f8fb506c32500acc1b6190d054f26\System.Design.ni.dll
+ 2012-02-17 10:18 . 2012-02-17 10:18	14328320              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5060105fb9e169399fe45600b1e9215e\PresentationFramework.ni.dll
+ 2012-02-17 10:18 . 2012-02-17 10:18	12215808              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\0665bba8c9962deadc418881eb3a2a2a\PresentationCore.ni.dll
.
-- Snapshot auf jetziges Datum zurückgesetzt --
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="d:\programme\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2010-11-29 421888]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]
"HP Software Update"="c:\programme\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"SweetIM"="c:\programme\SweetIM\Messenger\SweetIM.exe" [2012-01-19 114992]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-07-20 11:28	72208	----a-w-	c:\programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-12-08 00:36	421736	----a-w-	c:\programme\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38	421888	----a-w-	c:\programme\QuickTime\QTTask.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Programme\\rapimgr.exe"=
"c:\\Programme\\ICQ6\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"d:\\Programme\\WCESMgr.exe"=
"c:\\NetObjects Fusion 7\\Fusion.exe"=
"c:\\Programme\\GMX\\GMX MultiMessenger\\MESSENGR.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Programme\\CrossLoop\\CrossLoopConnect.exe"=
"c:\\Programme\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\DRISC\\Programme\\fsmonlineservices.exe"=
"c:\\Programme\\CodeMeter\\Runtime\\bin\\CodeMeter.exe"=
"c:\\DRISC\\Programme\\OnlineBackup.EXE"=
"c:\\DATEV\\PROGRAMM\\Install\\ExecDll\\ExecDllExe.exe"=
"c:\\DATEV\\PROGRAMM\\Install\\Uninstal.exe"=
"c:\\DATEV\\PROGRAMM\\Sws\\LimaServer.exe"=
"c:\\DATEV\\PROGRAMM\\Sws\\LimaService.exe"=
"c:\\Dokumente und Einstellungen\\Jens\\Desktop\\Seafight Bot\\Antistealth.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Programme\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Programme\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
.
R0 tdrpman228;Acronis Try&Decide and Restore Points filter (build 228);c:\windows\system32\drivers\tdrpm228.sys [06.11.2009 11:53 902592]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [30.08.2011 11:32 136360]
R2 CodeMeter.exe;CodeMeter Runtime Server;c:\programme\CodeMeter\Runtime\bin\CodeMeter.exe [13.02.2008 02:30 1217856]
R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [12.11.2007 14:58 3712]
S2 gupdate1cab79e1535ffc;Google Update Service (gupdate1cab79e1535ffc);c:\programme\Google\Update\GoogleUpdate.exe [27.02.2010 12:14 133104]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [28.02.2011 16:22 1691480]
S3 cxbu0wdm;CardMan 3x21;c:\windows\system32\drivers\cxbu0wdm.sys [10.08.2009 13:23 59151]
S3 DATEV Update-Service;DATEV Update-Service;c:\datev\PROGRAMM\Install\DvInesASDSvc.Exe [03.12.2009 02:44 147040]
S3 dpK0Bx01;Fingerprint Reader Upper-Treiber;c:\windows\system32\drivers\dpK0Bx01.sys [04.08.2004 16:58 32640]
S3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\drivers\fwlanusb.sys [06.04.2006 01:06 264704]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [27.02.2010 12:14 133104]
S3 UltraMonMirror;UltraMonMirror;c:\windows\system32\DRIVERS\UltraMonMirror.sys --> c:\windows\system32\DRIVERS\UltraMonMirror.sys [?]
S3 UsbdpFP;Fingerprint Reader Class-Treiber;c:\windows\system32\drivers\UsbdpFP.sys [04.08.2004 16:59 34560]
S3 WDM_Capture_220A;DVB-T TV Receiver;c:\windows\system32\drivers\WDM_Capture_220A.sys [31.05.2006 11:39 18432]
S3 WDM_Loader_220A;DVB-T TV Loader;c:\windows\system32\drivers\WDM_Loader_220A.sys [31.05.2006 11:39 15488]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
HPService	REG_MULTI_SZ   	HPSLPSVC
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2012-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-02-27 11:14]
.
2012-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-02-27 11:14]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.bild.de/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://de.rd.yahoo.com/customize/ie/defaults/su/msgr8/*Yahoo! Suche
IE: An vorhandene PDF-Datei anhängen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Inhalt der ausgewählten Links an vorhandene PDF-Datei anhängen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Linkinhalt an vorhandene PDF-Datei anhängen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Mit Nuance PDF Converter 5.0 öffnen - c:\programme\Nuance\PDF Converter 5\cnvres_ger.dll /100
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: PDF-Datei aus Linkinhalt erstellen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: PDF-Datei erstellen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: PDF-Dateien aus den ausgewählten Links erstellen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Web-Suche - c:\programme\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: DhcpNameServer = 192.168.178.1
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} - hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: {579CACEB-F009-44D2-8775-C698876048DD} - hxxp://www.lizenzmanager.com/CmUserDataXControl1.ocx
FF - ProfilePath - c:\dokumente und einstellungen\Jens\Anwendungsdaten\Mozilla\Firefox\Profiles\a7qq2mpq.default\
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - tt=090212_noffx
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - c4193af9000000000000001d60cc940d
FF - user.js: extensions.BabylonToolbar_i.hardId - c4193af9000000000000001d60cc940d
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15387
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1714:10
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
MSConfigStartUp-AppleSyncNotifier - c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2012-02-21 16:21
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•6~*]
"7040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(868)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
c:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll
c:\programme\gemeinsame dateien\logitech\bluetooth\LBTServ.dll
.
Zeit der Fertigstellung: 2012-02-21  16:24:17
ComboFix-quarantined-files.txt  2012-02-21 15:24
ComboFix2.txt  2012-02-07 17:20
.
Vor Suchlauf: 26 Verzeichnis(se), 25.139.535.872 Bytes frei
Nach Suchlauf: 28 Verzeichnis(se), 25.185.824.768 Bytes frei
.
- - End Of File - - 429BDF7C59F5A361EB9F1A70602DB093
         

--- --- ---

öffne start programme zubehör editor, reinkopieren bitte:

killall::
folder::
c:\dokumente und einstellungen\Jens\Anwendungsdaten\adobeflash


datei speichern unter, typ alle datien, speicherort, dort wo sich combofix.exe befindet.
Datei Name:
cfscript.txt
ziehe cfscript auf das Combofix Symbol, Programm wird starten, log bitte posten

Combofix Logfile:

ComboFix 12-02-21.01 - Jens 21.02.2012  16:52:09.3.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.3455.2734 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Jens\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\dokumente und einstellungen\Jens\Desktop\cfscript.txt
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Jens\Anwendungsdaten\adobeflash
c:\dokumente und einstellungen\Jens\Anwendungsdaten\adobeflash\ip.txt
c:\dokumente und einstellungen\Jens\Anwendungsdaten\adobeflash\old.tmp
c:\dokumente und einstellungen\Jens\Anwendungsdaten\adobeflash\pic.bmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-01-21 bis 2012-02-21  ))))))))))))))))))))))))))))))
.
.
2012-02-17 14:04 . 2012-02-17 14:04	--------	d-----w-	c:\programme\SCAR Divi
2012-02-17 13:40 . 2012-02-17 13:46	--------	d-----w-	c:\programme\SweetIM
2012-02-17 13:40 . 2012-02-17 13:46	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\SweetIM
2012-02-17 13:10 . 2012-02-17 13:10	240	----a-w-	C:\user.js
2012-02-17 13:10 . 2012-02-17 13:10	--------	d-----w-	c:\dokumente und einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Babylon
2012-02-17 13:10 . 2012-02-17 13:10	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\Babylon
2012-02-17 13:10 . 2012-02-17 13:10	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Babylon
2012-02-16 11:54 . 2012-01-11 19:06	3072	-c----w-	c:\windows\system32\dllcache\iacenc.dll
2012-02-16 11:54 . 2012-01-11 19:06	3072	------w-	c:\windows\system32\iacenc.dll
2012-02-14 09:19 . 2012-02-14 09:19	--------	d-----w-	c:\dokumente und einstellungen\Jens\Lokale Einstellungen\Anwendungsdaten\Winterberg-Modifications
2012-02-10 10:32 . 2012-02-10 10:32	--------	d-----w-	c:\windows\Hewlett-Packard
2012-02-09 12:08 . 2012-02-21 15:37	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\HPAppData
2012-02-09 11:04 . 2012-02-13 13:20	--------	d-----w-	c:\programme\sixteen tons entertainment
2012-02-09 09:57 . 2009-04-20 11:23	315904	----a-w-	c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
2012-02-09 09:57 . 2009-04-20 11:23	123904	----a-w-	c:\windows\system32\hpf3l70w.dll
2012-02-09 09:57 . 2009-02-10 20:03	315392	----a-r-	c:\windows\system32\hposc_p03a.dll
2012-02-09 09:57 . 2008-10-28 10:27	372736	----a-r-	c:\windows\system32\hppldcoi.dll
2012-02-09 09:57 . 2008-10-28 10:27	309760	----a-r-	c:\windows\system32\difxapi.dll
2012-02-09 09:57 . 2009-02-10 20:03	966656	----a-r-	c:\windows\system32\hpost_p03b.dll
2012-02-09 09:57 . 2009-02-10 20:03	712704	----a-r-	c:\windows\system32\hposwia_p03b.dll
2012-02-09 09:54 . 2012-02-09 09:54	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\HP Product Assistant
2012-02-09 09:52 . 2012-02-09 09:52	--------	d-----w-	c:\programme\Gemeinsame Dateien\HP
2012-02-08 10:10 . 2012-02-08 10:10	--------	d-----w-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\Malwarebytes
2012-02-08 10:10 . 2012-02-08 10:10	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2012-02-08 10:10 . 2012-02-08 10:10	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2012-02-08 10:10 . 2011-12-10 14:24	20464	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-02-06 16:44 . 2012-02-06 16:44	--------	d-----w-	C:\_OTL
2012-02-06 11:55 . 2012-02-06 11:55	--------	d-----w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Anwendungsdaten\Zeon
2012-02-06 11:52 . 2012-02-06 11:52	--------	d-----r-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Eigene Dateien
2012-02-06 10:03 . 2012-02-06 10:03	--------	d-sh--w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\PrivacIE
2012-02-06 10:02 . 2012-02-06 10:02	--------	d-----w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Lokale Einstellungen\Anwendungsdaten\Mozilla
2012-02-06 09:33 . 2012-02-06 09:33	--------	d-----w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\Anwendungsdaten\Avira
2012-02-06 09:30 . 2012-02-06 09:30	--------	d-sh--w-	c:\dokumente und einstellungen\Administrator.PC_SCHMIDT\IETldCache
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-21 12:38 . 2012-02-21 12:37	3824	----a-w-	C:\_OTL.zip
2012-02-09 09:53 . 2012-02-09 09:53	77824	----a-r-	c:\dokumente und einstellungen\Jens\Anwendungsdaten\Microsoft\Installer\{922E8525-AC7E-4294-ACAA-43712D4423C0}\ARPPRODUCTICON.exe
2012-01-12 17:20 . 2006-02-28 12:00	1860096	----a-w-	c:\windows\system32\win32k.sys
2011-12-17 19:43 . 2006-02-28 12:00	916992	----a-w-	c:\windows\system32\wininet.dll
2011-12-17 19:43 . 2006-02-28 12:00	43520	----a-w-	c:\windows\system32\licmgr10.dll
2011-12-17 19:43 . 2006-02-28 12:00	1469440	------w-	c:\windows\system32\inetcpl.cpl
2011-12-16 12:22 . 2006-02-28 12:00	385024	----a-w-	c:\windows\system32\html.iec
2011-11-25 21:57 . 2006-02-28 12:00	293888	----a-w-	c:\windows\system32\winsrv.dll
2011-11-21 04:21 . 2011-12-16 10:21	134104	----a-w-	c:\programme\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((   SnapShot_2012-02-21_15.21.51   )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-02-21 15:58 . 2012-02-21 15:58	16384              c:\windows\Temp\Perflib_Perfdata_220.dat
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="d:\programme\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2010-11-29 421888]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]
"HP Software Update"="c:\programme\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"SweetIM"="c:\programme\SweetIM\Messenger\SweetIM.exe" [2012-01-19 114992]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-07-20 11:28	72208	----a-w-	c:\programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-12-08 00:36	421736	----a-w-	c:\programme\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38	421888	----a-w-	c:\programme\QuickTime\QTTask.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Programme\\rapimgr.exe"=
"c:\\Programme\\ICQ6\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"d:\\Programme\\WCESMgr.exe"=
"c:\\NetObjects Fusion 7\\Fusion.exe"=
"c:\\Programme\\GMX\\GMX MultiMessenger\\MESSENGR.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Programme\\CrossLoop\\CrossLoopConnect.exe"=
"c:\\Programme\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\DRISC\\Programme\\fsmonlineservices.exe"=
"c:\\Programme\\CodeMeter\\Runtime\\bin\\CodeMeter.exe"=
"c:\\DRISC\\Programme\\OnlineBackup.EXE"=
"c:\\DATEV\\PROGRAMM\\Install\\ExecDll\\ExecDllExe.exe"=
"c:\\DATEV\\PROGRAMM\\Install\\Uninstal.exe"=
"c:\\DATEV\\PROGRAMM\\Sws\\LimaServer.exe"=
"c:\\DATEV\\PROGRAMM\\Sws\\LimaService.exe"=
"c:\\Dokumente und Einstellungen\\Jens\\Desktop\\Seafight Bot\\Antistealth.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Programme\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Programme\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
.
R0 tdrpman228;Acronis Try&Decide and Restore Points filter (build 228);c:\windows\system32\drivers\tdrpm228.sys [06.11.2009 11:53 902592]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [30.08.2011 11:32 136360]
R2 CodeMeter.exe;CodeMeter Runtime Server;c:\programme\CodeMeter\Runtime\bin\CodeMeter.exe [13.02.2008 02:30 1217856]
R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [12.11.2007 14:58 3712]
S2 gupdate1cab79e1535ffc;Google Update Service (gupdate1cab79e1535ffc);c:\programme\Google\Update\GoogleUpdate.exe [27.02.2010 12:14 133104]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [28.02.2011 16:22 1691480]
S3 cxbu0wdm;CardMan 3x21;c:\windows\system32\drivers\cxbu0wdm.sys [10.08.2009 13:23 59151]
S3 DATEV Update-Service;DATEV Update-Service;c:\datev\PROGRAMM\Install\DvInesASDSvc.Exe [03.12.2009 02:44 147040]
S3 dpK0Bx01;Fingerprint Reader Upper-Treiber;c:\windows\system32\drivers\dpK0Bx01.sys [04.08.2004 16:58 32640]
S3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\drivers\fwlanusb.sys [06.04.2006 01:06 264704]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [27.02.2010 12:14 133104]
S3 UltraMonMirror;UltraMonMirror;c:\windows\system32\DRIVERS\UltraMonMirror.sys --> c:\windows\system32\DRIVERS\UltraMonMirror.sys [?]
S3 UsbdpFP;Fingerprint Reader Class-Treiber;c:\windows\system32\drivers\UsbdpFP.sys [04.08.2004 16:59 34560]
S3 WDM_Capture_220A;DVB-T TV Receiver;c:\windows\system32\drivers\WDM_Capture_220A.sys [31.05.2006 11:39 18432]
S3 WDM_Loader_220A;DVB-T TV Loader;c:\windows\system32\drivers\WDM_Loader_220A.sys [31.05.2006 11:39 15488]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
HPService	REG_MULTI_SZ   	HPSLPSVC
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2012-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-02-27 11:14]
.
2012-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-02-27 11:14]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.bild.de/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://de.rd.yahoo.com/customize/ie/defaults/su/msgr8/*Yahoo! Suche
IE: An vorhandene PDF-Datei anhängen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Inhalt der ausgewählten Links an vorhandene PDF-Datei anhängen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Linkinhalt an vorhandene PDF-Datei anhängen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Mit Nuance PDF Converter 5.0 öffnen - c:\programme\Nuance\PDF Converter 5\cnvres_ger.dll /100
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: PDF-Datei aus Linkinhalt erstellen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: PDF-Datei erstellen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: PDF-Dateien aus den ausgewählten Links erstellen - c:\programme\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Web-Suche - c:\programme\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: DhcpNameServer = 192.168.178.1
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} - hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: {579CACEB-F009-44D2-8775-C698876048DD} - hxxp://www.lizenzmanager.com/CmUserDataXControl1.ocx
FF - ProfilePath - c:\dokumente und einstellungen\Jens\Anwendungsdaten\Mozilla\Firefox\Profiles\a7qq2mpq.default\
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - tt=090212_noffx
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - c4193af9000000000000001d60cc940d
FF - user.js: extensions.BabylonToolbar_i.hardId - c4193af9000000000000001d60cc940d
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15387
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1714:10
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2012-02-21 17:08
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•6~*]
"7040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(872)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
c:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll
c:\programme\gemeinsame dateien\logitech\bluetooth\LBTServ.dll
.
- - - - - - - > 'explorer.exe'(4076)
c:\programme\SweetIM\Messenger\mgAdaptersProxy.dll
c:\windows\system32\webcheck.dll
c:\progra~1\GEMEIN~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
c:\programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\1031\OWCI10.DLL
c:\progra~1\GEMEIN~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
c:\programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\1031\OWCI11.DLL
c:\programme\Windows Media Player\wmpband.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\System32\SCardSvr.exe
c:\windows\system32\Ati2evxx.exe
c:\programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
c:\programme\Avira\AntiVir Desktop\avguard.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\programme\avmwlanstick\WlanNetService.exe
c:\programme\Bonjour\mDNSResponder.exe
c:\programme\Avira\AntiVir Desktop\avshadow.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\windows\system32\UStorSrv.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\programme\iPod\bin\iPodService.exe
d:\progra~1\rapimgr.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-02-21  17:13:36 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-02-21 16:13
ComboFix2.txt  2012-02-21 15:24
ComboFix3.txt  2012-02-07 17:20
.
Vor Suchlauf: 27 Verzeichnis(se), 25.172.553.728 Bytes frei
Nach Suchlauf: 28 Verzeichnis(se), 25.189.830.656 Bytes frei
.
- - End Of File - - DE5430E6EA498779753739724D403A8B
         

--- --- ---

malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Malwarebytes Anti-Malware 1.60.1.1000
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: v2012.02.22.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Jens :: PC_SCHMIDT [Administrator]

22.02.2012 11:02:31
mbam-log-2012-02-22 (11-02-31).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 391667
Laufzeit: 1 Stunde(n), 39 Minute(n), 1 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\System Volume Information\_restore{37F46157-8E3E-415E-BA41-7CB540C76641}\RP844\A0367899.exe (Adware.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

lade den CCleaner standard:
CCleaner Download - CCleaner 3.15.1643
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

das mache ich kein Problem.

NUr kenne ich die ganzen treiber etc nicht alle und weiß nicht was davon benötigt wird und was nicht.

trotzdem unbekannt hinterschreiben ??

na, denkst du ich würde dich was deinstalieren lassen was nötig, aber von dir falsch beschriftet wurde?
ich möchte alles aus deiner persönlichen sicht wissen.

3DMark03
Acronis*True*Image*Home Acronis
Adobe Flash Player 10 ActiveX
Adobe Flash Player 11 ActiveX
Adobe Flash Player Plugin
Adobe Reader 7.0 - Deutsch
Adobe Reader X (10.1.1) - Deutsch
Adobe Shockwave Player 11
Adobe® Photoshop® Album Starter Edition 3.0
Ahead Nero - Burning Rom
Amazon MP3-Downloader 1.0.9 unnötig
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ATI Catalyst Install Manager
Avira AntiVir Personal - Free Antivirus Avira GmbH
AVM FRITZ!WLAN unnötig
Bonjour Apple Inc. unnötig
CCleaner Piriform notwendig
CodeMeter Runtime Kit v3.30
Compatibility Pack for the 2007 Office system Microsoft Corporation
CrossLoop 2.60 CrossLoop, Inc. notwendig
Cult3D ActiveX Player
DATEV Installation V.2.73 unnötig
DATEV Kassenerfassung für Office V.1.23 unnötig
DivX Codec DivX, Inc.
DivX Converter DivX, Inc.
DivX Player DivX, Inc.
DivX Plus DirectShow Filters
DivX Plus Web Player
DVD Solution
ElsterFormular für Privatanwender notwendig
Emergency 3 notwendig
Emergency4 notwendig
EVEREST Home Edition v2.20
FastStone Capture 5.3
GMX MultiMessenger notwendig
Google Chrome Google Inc. notwendig
GreenBrowser notwendig
HP Customer Participation Program 13.0
HP Imaging Device Functions 13.0
HP Photosmart Premium C309g-m All-In-One Driver Software 13.0 Rel .6
HP Print Projects 1.0
HP Smart Web Printing 4.5
HP Solution Center 13.0
HP Update
iPhone-Konfigurationsprogramm notwendig
iPhoneRingToneMaker 2.5.1 notwendig
iTunes Apple Inc. notwendig
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 9
Java 2 Runtime Environment, SE v1.4.2_06
Java(TM) 6 Update 15
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
Java(TM) SE Runtime Environment 6 Update 1
Logitech SetPoint notwendig
Macromedia Flash Player 8
Malwarebytes Anti-Malware Version 1.60.1.1000
MapServer 5 COM-Module
MediaShow 3.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft ActiveSync
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Office File Validation Add-In
Microsoft Office Professional Edition 2003
Microsoft PowerPoint Viewer 97
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server Compact 3.5 SP1 (Deutsch)
Microsoft Visual C++ 2005 ATL Update kb973923
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 8.0.1 (x86 de)
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB973685)
Nuance PDF Converter 5 notwendig
Nuance PDF Create! 5 notwendig
NVIDIA Drivers NVIDIA Corporation
NVIDIA GAME System Software 2.8.1
NVIDIA PhysX NVIDIA Corporation
OpenOffice.org Installer 1.0
Palm Conduit Support for COM unnötig
Palm Desktop unnötig
PhotoNow! 1.0
Power2Go 4.0
PowerBackup 1.0
PowerDVD
PowerDVD Copy 1.0
PowerProducer
QuickTime
RealPlayer
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Ringtone Expressions 1.1.0
SCAR Divi CDE 3.31.00 notwendig
Shockwave
Shop for HP Supplies unnötig
SoftV92 Data Fax Modem with SmartCP
SweetIM for Messenger 3.6 unnötig
TeamSpeak 3 Client notwendig
VDOTool 5.9
VideoLAN VLC media player 0.8.6h
Visual Famos Datapart Edition 6.52
Windows Internet Explorer 8
Windows Live Anmelde-Assistent
Windows Live Essentials
Windows Live-Uploadtool
Windows Media Format 11
Windows Media Player 11
Windows Media Player 9
Windows XP Service Pack 3
WinRAR notwendig
WISO Sparbuch 2010 notwendig
WISO Steuer-Sparbuch 2011 notwendig
XMLServiceToolV2