Moinsen,

seit gestern Mittag habe ich mehrere Meldungen über Trojaner über mein Avast bekommen.
Hab eine filesafer23.exe im system32 ausfindig gemacht und gelöscht. Außerdem noch ein paar laut Ad-Aware und SpyBot fehlerhafte Dateien gelöscht.
Danach funzte alles wieder. Heute, nachdem der Rechner die Nacht durchlief habe ich wieder Trojaner drauf. Bekomme Meldungen über verschiedene Trojaner.
Bin auf dem Gebiet echt unbedarft und bräuchte Hilfe.
Könnt ihr mit dem Log was anfangen?

Logfile of HijackThis v1.99.1
Scan saved at 13:54:54, on 06.04.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Internetsicherheit\Firewall\smc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\SCardSvr.exe
C:\Programme\Ideazon\Zboard Software\Driver\ZboardTray.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\Prismsta.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\Dit.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\INTERN~2\Viren\Avast4\ashDisp.exe
C:\Programme\Java\jre1.5.0_05\bin\jusched.exe
C:\Programme\Software\Kommunikation\GMX SMS-Manager\SMSMngr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Ideazon\Zboard Software\Driver\Zboard.exe
C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Internetsicherheit\Viren\Avast4\aswUpdSv.exe
C:\Programme\Internetsicherheit\Viren\Avast4\ashServ.exe
C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Programme\Internetsicherheit\Viren\Avast4\ashMaiSv.exe
C:\Programme\Internetsicherheit\Viren\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Downloadtools\eMule\emule.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme zur Neuinstallation\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://w*w.google.de/
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\Software\ICQToolbar\toolbaru.dll
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {78364D99-A640-4ddf-B91A-67EFF8373045} - C:\WINDOWS\system32\ips6mon.dll (file missing)
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Programme\Software\Kommunikation\FlashFXP\IEFlash.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\Software\ICQToolbar\toolbaru.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Prism_Utility] Prismsta.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\INTERN~2\Viren\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\INTERN~2\Firewall\smc.exe -startgui
O4 - HKLM\..\Run: [FineReader7NewsReaderPro] REM C:\Programme\Software\Textbearbeitung\AbbyyNewsReader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [exe.rjgmd] C:\WINDOWS\system32\dmgjr.exe
O4 - HKLM\..\Run: [exe.djmmd] C:\WINDOWS\system32\dmmjd.exe
O4 - HKLM\..\Run: [exe.djvmd] C:\WINDOWS\system32\dmvjd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [exe.aupmd] C:\WINDOWS\system32\dmpua.exe
O4 - HKLM\..\Run: [exe.nvdmd] C:\WINDOWS\system32\dmdvn.exe
O4 - HKLM\..\Run: [exe.qwbmd] C:\WINDOWS\system32\dmbwq.exe
O4 - HKLM\..\Run: [hgqhp.exe] C:\WINDOWS\system32\hgqhp.exe
O4 - HKLM\..\Run: [exe.ncbmd] C:\WINDOWS\system32\dmbcn.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [exe.fblmd] C:\WINDOWS\system32\dmlbf.exe
O4 - HKLM\..\Run: [exe.dprmd] C:\WINDOWS\system32\dmrpd.exe
O4 - HKCU\..\Run: [GMX SMS-Manager] C:\Programme\Software\Kommunikation\GMX SMS-Manager\SMSMngr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [UnSpyPC] "C:\Programme\UnSpyPC\UnSpyPC.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\Software\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: BINGOOO - {50689844-4B63-4B00-8400-C39D9CD1922A} - C:\Programme\Software\BINGOOO\BINGOOO.exe (file missing)
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\Software\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\Software\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra button: MedionShop - {07E3F115-C445-480D-94CB-ECA914A353CE} - h**p://w*w.medionshop.de/ (file missing) (HKCU)
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - h**p://download.ebay.com/turbo_lister/DE/install.cab
O16 - DPF: {60EFC337-15C2-4369-B2A0-3429B071D8B8} (Hewlett-Packard Printer Diagnostics) - h**p://h50203.w*w5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{051BBEA5-7234-49FD-9E25-32CEDBBE4B73}: NameServer = 85.255.116.163,85.255.112.102
O17 - HKLM\System\CCS\Services\Tcpip\..\{40FBCFB0-EFBC-49FE-ABB5-E3077DCB4284}: NameServer = 85.255.116.163,85.255.112.102
O17 - HKLM\System\CCS\Services\Tcpip\..\{51C0A456-78B8-46FD-B676-6B445B00CFE6}: NameServer = 85.255.116.163,85.255.112.102
O17 - HKLM\System\CCS\Services\Tcpip\..\{B37EAD3B-2A7A-413A-A63D-B39AB3C2C021}: NameServer = 85.255.116.163,85.255.112.102
O17 - HKLM\System\CS1\Services\Tcpip\..\{051BBEA5-7234-49FD-9E25-32CEDBBE4B73}: NameServer = 85.255.116.163,85.255.112.102
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Zboard - C:\WINDOWS\SYSTEM32\Winlognotif.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programme\Internetsicherheit\Viren\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programme\Internetsicherheit\Viren\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programme\Internetsicherheit\Viren\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programme\Internetsicherheit\Viren\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: CA-Lizenz-Client (CA_LIC_CLNT) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\lic98rmt.exe
O23 - Service: CA-Lizenzserver (CA_LIC_SRVR) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Ereignisprotokoll-Überwachung (LogWatch) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Programme\Internetsicherheit\Firewall\smc.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Vielen Dank im Voraus...

Servus!

Bei Dir ist da einiges zugange. Da sollte erst mal eine gründliche Diagnose gestartet werde.
Lass mal escan nach Cidres Anleitung http://www.trojaner-board.de/showthread.php?t=24192 im abgesicherten Modus http://www.systemwiederherstellung-d...indows-xp.html laufen und poste anschließend das Ergebnis von Hauis45´s 'find.bat' (ist in der Anleitung ebenfalls beschrieben). Halte Dich genau an diese Anleitung (Speicherort von escan-entpacken nach C:\bases_x, Spracheinstellung "English", alle Häkchen wie beschrieben setzen) sonst funktioniert die find.bat nicht. Lies´ die Anleitung zuerst ganz durch, sonst übersiehst Du vielleicht etwas!
Und das Logfile des Rootkitrevealer wäre auch interessant!

stupormundi

So, hier mal die find.bat und anschließend der logfile von Rootkitreleaver:

Infektionsmeldungen
Thu Apr 06 14:43:32 2006 => System found infected with spyware Spyware/Adware ({78364d99-a640-4ddf-b91a-67eff8373045})! Action taken: No Action Taken.
Thu Apr 06 14:43:33 2006 => System found infected with flashfxp Spyware/Adware ({e5a1691b-d188-4419-ad02-90002030b8ee})! Action taken: No Action Taken.
Thu Apr 06 14:43:33 2006 => System found infected with spyware Spyware/Adware ({78364d99-a640-4ddf-b91a-67eff8373045})! Action taken: No Action Taken.
Thu Apr 06 14:43:33 2006 => System found infected with flashfxp Spyware/Adware ({e5a1691b-d188-4419-ad02-90002030b8ee})! Action taken: No Action Taken.
Thu Apr 06 14:43:33 2006 => System found infected with spyware Spyware/Adware ({78364d99-a640-4ddf-b91a-67eff8373045})! Action taken: No Action Taken.
Thu Apr 06 14:43:33 2006 => System found infected with spyware Spyware/Adware ({78364d99-a640-4ddf-b91a-67eff8373045})! Action taken: No Action Taken.
Thu Apr 06 14:43:40 2006 => Object "ezula Spyware/Adware" found in File System! Action Taken: No Action Taken.
Dateien
Infected files
Thu Apr 06 17:18:08 2006 => File C:\WINDOWS\qcm.exe infected by "Trojan-Spy.Win32.BZub.f" Virus! Action Taken: No Action Taken.
Offending files
Tagged files
Ordner
Thu Apr 06 14:43:40 2006 => Offending Folder found: C:\DE\All Users\Favoriten\online pharmacy
Registry
Statistiken:
Thu Apr 06 17:46:17 2006 => Total Errors: 36
Thu Apr 06 17:46:17 2006 => Time Elapsed: 03:04:58
Thu Apr 06 17:46:17 2006 => Total Objects Scanned: 123623
Thu Apr 06 14:32:13 2006 => Virus Database Date: 4/3/2006
Thu Apr 06 14:33:09 2006 => Virus Database Date: 4/6/2006
Thu Apr 06 14:40:47 2006 => Virus Database Date: 4/6/2006
Thu Apr 06 17:46:17 2006 => Virus Database Date: 4/6/2006
Thu Apr 06 17:59:45 2006 => Virus Database Date: 4/6/2006

HKLM\S-1-5-21-1494714821-3438865316-1443700875-1008\RemoteAccess\InternetProfile 09.01.2006 19:20 5 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32* 03.05.2004 13:20 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Classes\Installer\Products\32418F9EE1126B64A90E8365B85CFCF6\ProductName 16.03.2006 23:41 26 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Classes\webcal\URL Protocol 23.10.2005 13:26 13 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}\DisplayName 16.03.2006 23:41 26 bytes Data mismatch between Windows API and raw hive data.
HKLM\SYSTEM\ControlSet001\Services\a347scsi\Config\jdgg40* 18:00 0 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@ad.zanox[1].txt* 18:29 96 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@adfarm1.adition[2].txt* 18:29 157 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@ads.planetactive[1].txt* 18:30 94 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@as1.falkag[1].txt* 18:33 643 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@cgi-bin[2].txt* 18:29 214 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@de.dadamobile[1].txt* 18:29 82 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@eshop[2].txt* 18:29 169 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@info-ad[2].txt* 18:29 73 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@partners.webmasterplan[2].txt* 18:29 339 bytes Hidden from Windows API.
C:\DE\p p\Cookies\p p@valueclick[1].txt* 18:33 96 bytes Hidden from Windows API.
C:\DE\p p\Favoriten\Space-Pioneers.url 28.07.2005 02:20 459 bytes Visible in Windows API, but not in MFT or directory index.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\309[1].jpg* 18:29 3.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\315[1].jpg* 18:29 3.66 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\468x60[1].swf* 18:30 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\468x60[2].swf* 18:31 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\B0009PRU6S.03._AA60_[1].jpg* 18:33 1.98 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\gen_head_arcor-logo[1].gif * 18:29 1.09 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\i4h[1].png* 18:29 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\nav02_no[1].gif* 18:29 412 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\nav[1].htm* 18:29 6.74 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\raw[1].gif* 18:30 11.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\s112[1].jpg* 18:29 838 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\shipsV2[1].htm* 18:30 34.12 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\shipsV2[2].htm* 18:31 34.50 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\trpix[1].gif* 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\2XK7GNIR\werbung9[1].htm* 18:29 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\302[1].jpg* 18:29 2.77 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\313[1].jpg* 18:29 3.99 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\B000E5OO6W.03-ATVPDKIKX0DER._AA60_[1].jpg* 18:33 1.84 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\banner[1].shtml* 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\CAZ2GRNX.swf* 18:30 13.10 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\f1[1].gif* 18:29 490 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\gen_footer_logo_test_stiftung_w[1].gif* 18:29 1.85 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\home[1].htm* 18:29 9.76 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\i4[1].png* 18:29 976 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\reiter1[1].gif* 18:31 1.12 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\s051[1].jpg* 18:29 1011 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\sel[1].htm* 18:30 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\sel[2].htm* 18:30 4.38 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\sel[3].htm* 18:31 4.54 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\shipsV2[1].htm* 18:30 34.62 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\4TABO9I3\werbung1[1].htm* 18:31 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\310[1].jpg* 18:29 2.93 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\accdelete[1].htm* 18:32 247 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\banner[1].shtml* 18:30 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\banner[2].shtml* 18:31 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\CAU3UV6H.swf* 18:30 13.10 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\holoship[1].gif* 18:29 132.73 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\lturad[1].txt* 18:30 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\oben[1].htm* 18:29 1.63 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\sel[1].htm* 18:30 4.54 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\shipsV2[1].htm* 18:31 34.41 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\specialoffer_de1[1].htm* 18:29 8.87 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\teas_dsl_box_2[1].png* 18:29 16.99 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\teas_dsl_bundle-4[1].jpg* 18:29 14.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\teas_dsl_bundle-5[1].jpg* 18:29 14.37 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\teas_dsl_bundle-6[1].jpg* 18:29 14.38 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\89STCM5F\us[1].jpg* 18:29 1.01 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\305[1].jpg* 18:29 3.51 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\468x60[1].swf* 18:30 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\banner[1].shtml* 18:29 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\banner[2].shtml* 18:29 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\google[1].htm * 18:01 4.13 KB Visible in Windows API, but not in MFT or directory index.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\home[1].htm* 18:33 9.83 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\metall[1].gif* 18:29 371 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\popup[1].htm* 18:29 351 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\raw[1].gif* 18:29 11.94 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\raw[2].gif* 18:30 11.94 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\raw[3].gif* 18:30 11.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\sbok[1].gif* 18:29 1.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\sel[1].htm* 18:30 1.15 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\shipsV2[1].htm* 18:30 33.74 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\shipsV2[2].htm* 18:31 34.09 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\showthread[1].php* 18:04 12.29 KB Visible in Windows API, but not in MFT or directory index.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\trpix[1].gif* 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\9J2LDEFY\trpix[2].gif* 18:31 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\468x60[1].swf* 18:31 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\banner[1].shtml* 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\banner[2].shtml* 18:31 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\banner[3].shtml* 18:31 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\but_rot_mehr_info_no[1].gif* 18:29 1017 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\CAUFWJ3C.php%3Fp%3D205118&cc=100&u_h=768&u_w=1024&u_ah=740&u_aw=1024&u_cd=32&u_tz=120&u_java=true * 18:04 2.01 KB Visible in Windows API, but not in MFT or directory index.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\energie[1].gif * 18:29 286 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\logo[1].gif* 18:33 1.23 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\lturad[1].txt* 18:30 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\Piede-bgk[1].gif* 18:29 162 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\Piede-top[1].gif* 18:29 236 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\sel[1].htm* 18:30 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\shipsV2[1].htm* 18:30 34.41 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\teas_dsl_bundle-10[1].jpg* 18:29 16.97 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\teas_dsl_bundle-9[1].jpg* 18:29 16.85 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\A9QB614B\teas_dsl_speedmodem[1].gif* 18:29 4.38 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\308[1].jpg* 18:29 3.10 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\312[1].jpg* 18:29 3.62 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\banner[1].shtml* 18:30 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\but_blau_mehr_info_ms[1].gif* 18:29 1.01 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\CATOOR9L.php%3Fp%3D205118&cc=100&u_h=768&u_w=1024&u_ah=740&u_aw=1024&u_cd=32&u_tz=120&u_java=true* 18:04 2.26 KB Visible in Windows API, but not in MFT or directory index.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\deuterium[1].gif* 18:29 229 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\gen_arcor_pshop_chrome_screen[1].css* 18:29 11.37 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\i6[1].png* 18:29 1.49 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\lturad[1].txt * 18:31 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\main[1].htm* 18:29 1.17 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\raw[1].gif* 18:30 11.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\sel[1].htm* 18:31 4.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\shipsV2[1].htm* 18:30 34.25 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\shipsV2[2].htm* 18:30 33.54 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\suche[1].gif * 18:33 336 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ABMR4ROP\werbung8[1].htm* 18:30 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\306[1].jpg* 18:29 3.20 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\adition[1].js* 18:29 3.12 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\CAUB4523.swf* 18:30 12.67 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\DM-DE_get-loaded[1].swf* 18:29 19.05 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\dsl_bg_li[1].jpg* 18:29 15.09 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\dsl_stoer_495_li[1].jpg* 18:29 25.06 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\jetzt-vorbestellen[1].gif* 18:33 560 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\script[1].php* 18:29 476 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\sel[1].htm* 18:30 4.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\shipsV2[1].htm* 18:30 34.81 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\shipsV2[2].htm* 18:30 34.60 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\shipsV2[3].htm* 18:31 34.31 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\teas_dsl_box_1[1].png* 18:29 15.15 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\C9Y3SBQL\v5[1].js* 18:29 2.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\B000E8NPPU.01._AA60_[1].jpg* 18:33 1.47 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\B000F1IIJY.01._AA60_[1].jpg* 18:33 2.23 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\banner[1].shtml * 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\banner[2].shtml * 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\banner[3].shtml * 18:31 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\but_big_z-bestellung_no[1].gif * 18:29 1.71 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\CAP0QHLF.swf * 18:33 15.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\gd_animbutton[1].gif * 18:29 5.10 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\gen_footer_logo_test_pcdirekt[1].gif * 18:29 2.56 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\gen_footer_logo_test_pcpraxis[1].gif * 18:29 1.87 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\head-1[1].png * 18:29 295 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\head-2[1].png * 18:29 376 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\lturad[1].txt * 18:31 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\raw[1].gif * 18:30 11.94 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\raw[2].gif * 18:30 25.51 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\s123[1].jpg * 18:29 1.20 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\s222[1].jpg * 18:29 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CD29YPCT\trpix[1].gif * 18:30 43 bytes Hidden from Windows API.

C:\DE\p p\LE\TIF\CIE5\CD29YPCT\zaehlpixel(2)[1].gif * 18:31 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\akt_arcor_pshop_custom_data_chrome_screen[1].css * 18:29 37 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\banner[1].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\gen_content_background[1].gif * 18:29 188 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\gp1[1].gif * 18:29 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\sel[1].htm * 18:30 4.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\shipsV2[1].htm * 18:30 33.81 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\shipsV2[2].htm * 18:30 34.22 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\shipsV2[3].htm * 18:31 34.22 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\splash_logo_DM_piede[1].gif * 18:29 2.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\teas_dsl_wlan_starter_set[1].gif * 18:29 4.55 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\trpix[1].gif * 18:31 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\trpix[2].gif * 18:33 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\vote[1].gif * 18:29 3.37 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\CFW3EVSV\werbung0[1].htm * 18:29 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\468x60[1].swf * 18:30 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\banner[1].shtml * 18:30 286 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\banner[2].shtml * 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\banner[3].shtml * 18:30 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\but_rot_mehr_info_ms[1].gif * 18:29 1.01 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\i1h[1].png * 18:29 727 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\i2h[1].png * 18:29 849 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\ico_info[1].gif * 18:29 899 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\pfeilrechts[1].gif * 18:29 170 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\raw[1].gif * 18:29 11.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\sel[1].htm * 18:31 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\shipsV2[1].htm * 18:30 34.24 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\shipsV2[2].htm * 18:31 33.90 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\EPQJM9CP\trpix[1].gif * 18:31 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\CAW5MTSP.swf * 18:31 12.12 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\gen_arcor_pshop_basic_screen[1].css * 18:29 2.43 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\i5[1].png * 18:29 1.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\index1[1].htm * 18:29 18.72 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\landing[1].css * 18:29 1.08 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\logout[1].htm * 18:33 2.33 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\sel[1].htm * 18:31 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\shipsV2[1].htm * 18:30 34.44 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\shipsV2[2].htm * 18:30 34.30 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\teas_dsl_box_3[1].png * 18:29 16.35 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\teas_dsl_bundle-7[1].jpg * 18:29 16.79 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\teas_dsl_bundle-8[1].jpg * 18:29 16.81 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\trpix[1].gif * 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\votebg[1].jpg * 18:29 2.24 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\G89JTUD5\werbung7[1].htm * 18:31 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\316[1].jpg * 18:29 3.63 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\468x60[1].swf * 18:31 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\B000ESSSR0.01._AA60_[1].jpg * 18:33 1.80 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\banner[1].shtml * 18:29 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\banner[2].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\banner[3].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\button[1].gif * 18:29 1.25 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\CAIR67QT.swf * 18:31 12.67 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\f0[1].gif * 18:29 640 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\lg[1].png * 18:29 1.76 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\s052[1].jpg * 18:29 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\script[1].htm * 18:29 17.28 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\sel[1].htm * 18:30 4.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\sel[2].htm * 18:31 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\shipsV2[1].htm * 18:30 33.93 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GF4RKZIZ\trpix[1].gif * 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\303[1].jpg * 18:29 3.18 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\468x60[1].swf * 18:30 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\[1].jpg * 18:29 997 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\banner[1].shtml * 18:31 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\einstellung[1].shtml * 18:31 2.84 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\kristall[1].gif * 18:29 336 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\los[1].gif * 18:33 534 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\pfeillinks[1].gif * 18:30 174 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\s023[1].jpg * 18:29 1.17 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\shipsV2[1].htm * 18:29 34.57 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\shipsV2[2].htm * 18:30 34.03 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\so_tracker[1].gif * 18:29 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\teas_dsl_bundle-3[1].jpg * 18:29 11.10 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\trpix[1].gif * 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\trpix[2].gif * 18:31 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\werbung2[1].htm * 18:30 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\GLYVCPUN\werbung5[1].htm * 18:30 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\300[1].jpg * 18:29 2.62 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\301[1].jpg * 18:29 3.28 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\B000E8NPPA.01._AA60_[1].jpg * 18:33 1.97 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\banner[1].shtml * 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\einstellung[1].htm * 18:31 11.65 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\google[1].htm * 18:29 4.13 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\i3[1].png * 18:29 675 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\s033[1].jpg * 18:29 970 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\shipsV2[1].htm * 18:29 34.18 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\shipsV2[2].htm * 18:30 34.60 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\shipsV2[3].htm * 18:30 29.81 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\shipsV2[4].htm * 18:31 34.03 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\ODMZCHQF\werbung3[1].htm * 18:29 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\304[1].jpg * 18:29 3.40 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\banner[1].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\banner[2].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\banner[3].shtml * 18:30 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\banner[4].shtml * 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\CAJ65W1H.swf * 18:31 14.72 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\CARJD51P.swf * 18:30 12.67 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\einstellung[1].htm * 18:31 11.78 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\gen_arcor_pshop_basic[1].js * 18:29 13.44 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\head-0[1].png * 18:29 1.36 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\home[2].htm * 18:33 9.83 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\js[1] * 18:29 565 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\llogo[1].jpg * 18:29 48.45 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\lturad[1].txt * 18:30 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\sel[1].htm * 18:30 4.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\sel[2].htm * 18:31 4.36 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\tr[1].jpg * 18:29 1008 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SL67G5Q3\werbung6[1].htm * 18:29 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\B000E9X6N0.01._AA60_[1].jpg * 18:33 2.20 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\banner[1].shtml * 18:30 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\banner[2].shtml * 18:31 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\CADBVL8W.swf * 18:30 12.67 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\gen_footer_logo_test_tomorrow[1].gif * 18:29 1.06 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\i1[1].png * 18:29 713 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\i2[1].png * 18:29 838 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\j[1] * 18:29 45 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\lturad[1].txt * 18:31 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\raw[1].gif * 18:29 11.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\raw[2].gif * 18:30 11.94 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\raw[3].gif * 18:30 11.94 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\shipsV2[1].htm * 18:29 34.76 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\trpix[1].gif * 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\SNUJ0981\werbung4[1].htm * 18:30 697 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\B000E0OA1Q.03-ATVPDKIKX0DER._AA60_[1].jpg * 18:33 2.15 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\b122[1].jpg * 18:29 19.95 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\banner[1].shtml * 18:30 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\banner[2].shtml * 18:31 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\bg3[1].gif * 18:29 830 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\CALG763J.swf * 18:30 12.12 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\i5h[1].png * 18:29 1.19 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\lturad[1].txt * 18:30 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\lturad[2].txt * 18:31 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\nav01_akt[1].gif * 18:29 687 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\nav03_no[1].gif * 18:29 368 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\sel[1].htm * 18:31 4.39 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\shipsV2[1].htm * 18:29 34.38 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\U16XUPCN\shipsV2[2].htm * 18:30 34.06 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\311[1].jpg * 18:29 3.18 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\317[1].jpg * 18:29 3.18 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\468x60[1].swf * 18:30 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\banner[1].shtml * 18:30 928 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\bkg[1].gif * 18:29 30.20 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\CAEVW9I7.swf * 18:30 14.72 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\it[1].jpg * 18:29 991 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\jsmaster[1] * 18:33 7.41 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\pulsante[1].gif * 18:29 696 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\raw[1].gif * 18:29 11.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\sel[1].htm * 18:30 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\shipsV2[1].htm * 18:30 34.00 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\shipsV2[2].htm * 18:31 29.80 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\vote[1].gif * 18:29 5.95 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\XYH9ATCD\zaehlpixel(2)[1].gif * 18:30 43 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\468x60[1].swf * 18:30 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\arcor-testsieger-screen[1].css * 18:29 709 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\banner[1].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\banner[2].shtml * 18:31 475 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\but_blau_mehr_info_no[1].gif * 18:29 1011 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\CAEJ0ZNO.swf * 18:31 12.67 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\gen_teaser_marginal_dsl[1].gif * 18:29 1.96 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\i3h[1].png * 18:29 634 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\jetzt-kaufen[1].gif * 18:33 448 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\lturad[1].txt * 18:30 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\Piede-bottom[1].gif * 18:29 236 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\script[1] * 18:30 3.20 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\sel[1].htm * 18:30 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\sel[2].htm * 18:30 4.36 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\sel[3].htm * 18:30 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YP0ZO5SZ\teas_dsl_wlan_modem[1].gif * 18:29 5.10 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\307[1].jpg * 18:29 3.21 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\314[1].jpg * 18:29 3.69 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\468x60[1].swf * 18:31 26.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\akt_arcor_pshop_aktion_chrome_screen[1].css * 18:29 864 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\B000EBGC7U.01._AA60_[1].jpg * 18:33 2.31 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\banner[1].shtml * 18:30 253 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\i6h[1].png * 18:29 1.26 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\lturad[1].txt * 18:30 134 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\nav04_no[1].gif * 18:29 262 bytes Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\richmedia[1].swf * 18:30 18.60 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\sel[1].htm * 18:31 1.16 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\sel[2].htm * 18:33 4.55 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\shipsV2[1].htm * 18:30 34.03 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\shipsV2[2].htm * 18:30 34.79 KB Hidden from Windows API.
C:\DE\p p\LE\TIF\CIE5\YT0L2TC5\stylesheet[1].css * 18:29 4.82 KB Hidden from Windows API.
C:\DE\p p\Recent\2006.lnk * 18:20 495 bytes Hidden from Windows API.
C:\DE\p p\Recent\db_printview.php.lnk 23.03.2006 18:32 1.22 KB Visible in Windows API, but not in MFT or directory index.
C:\RECYCLER\S-1-5-21-1494714821-3438865316-1443700875-1008\Dc264.url * 18:34 459 bytes Hidden from Windows API.

So, hab mich entschieden das System neu aufzusetzen.
Trotzdem Danke für die Mühe...