Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: 50 € Windows Blockier Virus

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 16.02.2012, 15:52   #1
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



hallo zusammen,

leider hat mich dieser ********* virus auch erwischt. "bitte zahlen sie 50 € per paysafe......"

Wer kann mir helfen?

Vielen Dank schonmal vorab

MfG Oehni

Geändert von Oehni (16.02.2012 um 16:05 Uhr)

Alt 16.02.2012, 16:08   #2
markusg
/// Malware-holic
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



hi, neustart, f8 drücken abgesicherter modus mit netzwerk wählen im betroffenen account anmelden.
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Starte bitte die
    OTL.exe
    .
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Kopiere nun den Inhalt in die
    Textbox.
Code:
ATTFilter
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
         
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread
__________________

__________________

Alt 16.02.2012, 16:27   #3
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 16.02.2012 16:40:54 - Run 1
OTL by OldTimer - Version 3.2.32.0     Folder = C:\Users\Timo Oehnbrink\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 80,73% Memory free
6,19 Gb Paging File | 5,84 Gb Available in Paging File | 94,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 56,97 Gb Free Space | 38,22% Space Free | Partition Type: NTFS
Drive D: | 141,23 Gb Total Space | 137,35 Gb Free Space | 97,25% Space Free | Partition Type: NTFS
 
Computer Name: HOME | User Name: Timo Oehnbrink | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.02.16 16:36:35 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Timo Oehnbrink\Desktop\OTL.exe
PRC - [2012.02.12 01:35:54 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.02.15 02:32:52 | 001,230,704 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.02.12 01:35:54 | 001,911,768 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.03.13 14:06:53 | 006,053,536 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2011.02.15 02:33:34 | 000,096,112 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.02.15 02:32:52 | 001,230,704 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2007.08.08 10:52:08 | 000,331,776 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\AdsmendecExt.dll
MOD - [2007.06.15 18:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
MOD - [2007.06.02 01:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
MOD - [2007.03.02 19:44:34 | 000,073,728 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto | Stopped] --  -- (LiveUpdate Notice Ex)
SRV - [2012.01.31 15:02:52 | 007,391,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2012.01.16 16:17:13 | 000,909,152 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe -- (vToolbarUpdater)
SRV - [2011.11.10 14:17:31 | 000,167,264 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2011.02.08 04:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2009.08.31 21:00:28 | 001,821,184 | ---- | M] (UASSOFT.COM) [Auto | Stopped] -- C:\Program Files\Mouse Driver\KMWDSrv.exe -- (KMWDSERVICE)
SRV - [2009.05.27 09:07:48 | 002,230,024 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Tobit ClipInc\Server\ClipInc-Server.exe -- (ClipInc001)
SRV - [2008.11.09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Stopped] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008.02.01 03:02:26 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) [Auto | Stopped] -- C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe -- (pgsql-8.3)
SRV - [2008.01.29 16:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2008.01.18 22:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2007.10.03 05:53:00 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2007.09.26 09:53:56 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE -- (LiveUpdate)
SRV - [2007.09.26 09:53:56 | 000,554,352 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Automatisches LiveUpdate - Scheduler)
SRV - [2007.08.08 08:08:40 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007.08.03 20:24:54 | 000,125,496 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - [2007.05.18 10:31:16 | 000,073,728 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2011.05.27 18:05:18 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011.04.04 23:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011.03.16 15:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2011.03.01 13:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011.02.22 07:12:38 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2011.02.10 06:53:30 | 000,028,624 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011.02.10 06:53:28 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2011.01.07 05:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2007.12.20 15:55:05 | 003,478,528 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007.10.01 07:59:45 | 001,769,984 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2007.09.26 23:03:42 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\lullaby.sys -- (lullaby)
DRV - [2007.08.11 04:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007.08.03 05:26:21 | 000,020,936 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio)
DRV - [2007.07.24 19:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007.06.21 12:51:28 | 002,222,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Intel(R)
DRV - [2007.06.13 17:11:10 | 000,025,136 | ---- | M] (America Online) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atwpkt2.sys -- (ATWPKT2)
DRV - [2007.04.12 01:18:33 | 000,048,000 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID)
DRV - [2007.03.22 06:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007.02.24 22:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007.01.24 19:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2007.01.24 00:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006.12.15 08:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006.11.29 23:24:57 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - [2006.11.22 18:34:59 | 000,982,272 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2006.11.02 10:50:17 | 000,041,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2006.11.02 08:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006.11.02 08:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R)
DRV - [2006.10.14 04:04:33 | 004,422,560 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2006.02.07 20:52:57 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\JGOGO.sys -- (JGOGO)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.yahoo.com/?fr=mkg029
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yahoo.com/?fr=mkg029
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yahoo.com/?fr=mkg029
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "hxxp://de.search.yahoo.com/search?fr=mkg030&p="
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "hxxp://de.yahoo.com/?fr=mkg031"
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=mkg030&p="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Users\Timo Oehnbrink\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.03.12 19:48:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.03.12 19:48:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2012.02.03 08:26:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files\ShopperReports3\bin\3.1.69.0\firefox\firefoxtoolbar\extensions [2011.06.09 16:58:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.10.30 12:58:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\10.0.0.7\ [2012.01.16 16:17:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.02.12 01:35:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.11.25 10:31:06 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\Users\Timo Oehnbrink\AppData\Roaming\5018 [2011.06.15 09:41:26 | 000,000,000 | ---D | M]
 
[2012.02.06 18:28:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo Oehnbrink\AppData\Roaming\mozilla\Extensions
[2012.02.10 11:09:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo Oehnbrink\AppData\Roaming\mozilla\Firefox\Profiles\vvavuiqo.default\extensions
[2012.02.10 11:09:50 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Timo Oehnbrink\AppData\Roaming\mozilla\Firefox\Profiles\vvavuiqo.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012.02.06 18:27:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2008.12.13 16:54:15 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.02.12 01:35:54 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.12.23 14:22:29 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.01.29 15:02:49 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.16 16:17:09 | 000,003,766 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2012.02.06 16:39:53 | 000,002,275 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.01.29 14:50:55 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.01.29 15:02:49 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.29 15:02:49 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.01.29 15:02:49 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.01.29 15:02:49 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (ShopperReports) - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files\ShopperReports3\bin\3.1.69.0\ShopperReports.dll (SmartShopper Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll File not found
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe ()
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe ()
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [KMCONFIG] C:\Program Files\Mouse Driver\StartAutorun.exe KMConfig.exe File not found
O4 - HKLM..\Run: [NapsterShell] C:\Program Files\Napster\napster.exe /systray File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM File not found
O4 - HKLM..\Run: [PowerForPhone] C:\Program Files\P4P\P4P.exe ()
O4 - HKLM..\Run: [ROC_roc_dec12] C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKLM..\Run: [TkBellExe] c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKCU..\Run: [{1295A81C-0244-11DD-95AA-806E6F6E6963}] C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\saletoc.exe ()
O4 - HKCU..\Run: [ClipIncSrvTray] C:\Program Files\Tobit ClipInc\Player\ClipIncTray.exe (Tobit.Software)
O4 - HKCU..\Run: [CPN Notifier] C:\Program Files\Intertops Poker\PokerNotifier.exe File not found
O4 - HKCU..\Run: [Getdo]  File not found
O4 - HKCU..\Run: [Helper] C:\Users\Timo Oehnbrink\AppData\Roaming\Helper\bin\liveu.exe File not found
O4 - HKCU..\Run: [ICQ] C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [Locfla] C:\Users\Timo Oehnbrink\AppData\Roaming\Adobe\Update\32cli.exe ()
O4 - HKCU..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet File not found
O4 - HKCU..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background File not found
O4 - HKCU..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart File not found
O4 - HKCU..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKCU..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\YspService.exe File not found
O4 - Startup: C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe File not found
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: PokerStars.fr - {90EAE591-7E7E-434a-8E28-ECFD00071806} - C:\Program Files\PokerStars.FR\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShopperReports3\bin\3.1.69.0\ShopperReports.dll (SmartShopper Inc.)
O9 - Extra Button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShopperReports3\bin\3.1.69.0\ShopperReports.dll (SmartShopper Inc.)
O9 - Extra Button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range -  5)
O15 - HKCU\..Trusted Domains: everestpoker.com ([account] https in Trusted sites)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{593DD25F-20B9-474A-8DDA-7797F0C8395B}: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7EC0EB63-CF30-4613-A096-DD29042D1880}: DhcpNameServer = 192.168.2.1 192.168.2.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll ()
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{5730974b-0e96-11e0-8b9a-e6997b7ace97}\Shell - "" = AutoRun
O33 - MountPoints2\{5730974b-0e96-11e0-8b9a-e6997b7ace97}\Shell\AutoRun\command - "" = F:\setup.exe AUTORUN=1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX: {0291E591-EA41-4c82-8106-3DC6CE7F7664} - Reg Error: Value error.
ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - Reg Error: Value error.
ActiveX: {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - Reg Error: Value error.
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - 
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error.
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
 
CREATERESTOREPOINT
Error creating restore point.
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.16 16:37:44 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Timo Oehnbrink\Desktop\OTL.exe
[2012.02.15 15:27:53 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\AppData\Local\Microsoft Games
[2012.02.15 15:14:23 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\Desktop\AOL Gespeicherte Ablage
[2012.02.15 12:59:02 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\Desktop\Master
[2012.02.12 12:01:55 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\AppData\Roaming\MAGIX
[2012.02.12 12:01:33 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\AppData\Local\Xara
[2012.02.12 11:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
[2012.02.12 11:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\MAGIX
[2012.02.12 11:59:29 | 000,000,000 | ---D | C] -- C:\Program Files\MAGIX
[2012.02.11 14:07:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Suche Schutzvorkehrung
[2012.02.11 14:07:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Yahoo! Companion
[2012.02.11 14:07:20 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Yahoo!
[2012.02.11 14:06:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger
[2012.02.06 16:39:56 | 000,000,000 | ---D | C] -- C:\Program Files\Babylon
[2012.02.05 16:40:21 | 000,000,000 | ---D | C] -- C:\Microgaming
[2012.02.05 16:40:21 | 000,000,000 | ---D | C] -- C:\ProgramData\MGS
[2012.01.29 10:45:46 | 000,000,000 | ---D | C] -- C:\Users\Timo Oehnbrink\AppData\Local\PokerStars.FR
[2012.01.29 10:45:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerStars.FR
[2012.01.29 10:44:55 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars.FR
[2012.01.27 12:37:33 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2007.01.24 19:08:39 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[1 C:\Users\Timo Oehnbrink\AppData\Roaming\*.tmp files -> C:\Users\Timo Oehnbrink\AppData\Roaming\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.16 16:37:55 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012.02.16 16:37:50 | 000,001,356 | ---- | M] () -- C:\Users\Timo Oehnbrink\AppData\Local\d3d9caps.dat
[2012.02.16 16:37:40 | 000,113,152 | ---- | M] () -- C:\Users\Timo Oehnbrink\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.02.16 16:36:35 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Timo Oehnbrink\Desktop\OTL.exe
[2012.02.16 16:32:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.16 16:31:33 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012.02.16 16:29:22 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cc4f82adfe2ac0.job
[2012.02.16 16:28:58 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.16 16:28:58 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.16 15:55:52 | 000,674,456 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.02.16 15:55:52 | 000,634,540 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.02.16 15:55:52 | 000,144,898 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.02.16 15:55:52 | 000,119,106 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.02.16 15:20:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA1cc4f82af9ce6a0.job
[2012.02.16 11:31:14 | 089,138,198 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012.02.15 15:14:23 | 000,000,006 | ---- | M] () -- C:\Windows\msoffice.ini
[2012.02.13 19:26:38 | 000,402,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.02.12 17:01:38 | 000,463,442 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012.02.12 16:57:09 | 000,008,989 | ---- | M] () -- C:\Users\Timo Oehnbrink\Desktop\55555.jpg
[2012.02.12 12:01:29 | 000,001,121 | ---- | M] () -- C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 Download-Version.lnk
[2012.02.11 14:06:56 | 000,000,949 | ---- | M] () -- C:\Users\Public\Desktop\Yahoo! Messenger.lnk
[2012.02.11 13:56:32 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2012.02.06 18:27:31 | 000,000,853 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.02.06 16:40:07 | 000,000,226 | ---- | M] () -- C:\user.js
[2012.02.03 08:26:41 | 000,000,853 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2011.lnk
[2012.01.29 10:45:17 | 000,000,888 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.fr.lnk
[2012.01.27 11:05:32 | 000,001,500 | ---- | M] () -- C:\Users\Public\Desktop\HollywoodPoker.com.lnk
[2012.01.18 13:43:04 | 000,415,319 | ---- | M] () -- C:\Users\Timo Oehnbrink\Desktop\339018012012120431.pdf
[1 C:\Users\Timo Oehnbrink\AppData\Roaming\*.tmp files -> C:\Users\Timo Oehnbrink\AppData\Roaming\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.02.12 16:57:09 | 000,008,989 | ---- | C] () -- C:\Users\Timo Oehnbrink\Desktop\55555.jpg
[2012.02.12 12:01:29 | 000,001,121 | ---- | C] () -- C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 Download-Version.lnk
[2012.02.11 14:06:56 | 000,000,949 | ---- | C] () -- C:\Users\Public\Desktop\Yahoo! Messenger.lnk
[2012.02.06 18:27:31 | 000,000,865 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.02.06 18:27:31 | 000,000,853 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.02.06 16:40:02 | 000,000,226 | ---- | C] () -- C:\user.js
[2012.01.29 10:45:17 | 000,000,888 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.fr.lnk
[2012.01.27 11:05:32 | 000,001,500 | ---- | C] () -- C:\Users\Public\Desktop\HollywoodPoker.com.lnk
[2012.01.20 17:11:34 | 000,000,708 | ---- | C] () -- C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Titan Poker.lnk
[2012.01.18 13:43:03 | 000,415,319 | ---- | C] () -- C:\Users\Timo Oehnbrink\Desktop\339018012012120431.pdf
[2011.06.10 10:34:08 | 000,000,020 | ---- | C] () -- C:\Users\Timo Oehnbrink\AppData\Roaming\urhtps.dat
[2011.03.27 13:50:04 | 000,000,367 | ---- | C] () -- C:\Users\Timo Oehnbrink\AppData\Local\postgresinstall.bat
[2011.03.14 15:56:14 | 000,000,011 | ---- | C] () -- C:\Windows\MKKKXWGD.INI
[2011.03.14 15:56:14 | 000,000,010 | ---- | C] () -- C:\Windows\HLOHNIWU.INI
[2011.03.14 15:29:14 | 000,000,031 | ---- | C] () -- C:\Windows\LxTrans.INI
[2011.03.14 15:29:13 | 000,000,081 | ---- | C] () -- C:\Windows\loge.dat
[2011.03.14 15:20:52 | 000,208,896 | ---- | C] () -- C:\Windows\System32\LXPrnUtil10.dll
[2011.03.14 15:20:52 | 000,135,168 | ---- | C] () -- C:\Windows\System32\MMedia20VC7.dll
[2010.12.24 22:14:54 | 000,001,356 | ---- | C] () -- C:\Users\Timo Oehnbrink\AppData\Local\d3d9caps.dat
[2010.10.04 16:14:00 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010.08.29 12:45:00 | 000,008,831 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2009.05.27 19:05:03 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI
[2009.05.24 02:02:17 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009.05.24 02:02:17 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009.02.09 17:35:48 | 000,554,496 | ---- | C] () -- C:\Windows\System32\dvmsg.dll
[2008.12.09 16:23:49 | 000,011,264 | ---- | C] () -- C:\Windows\System32\KOBZQABL.DLL
[2008.12.09 16:04:23 | 000,003,349 | ---- | C] () -- C:\Windows\tm.ini
[2008.06.07 11:27:06 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2008.05.16 14:52:16 | 000,000,006 | ---- | C] () -- C:\Windows\msoffice.ini
[2008.05.16 14:22:51 | 000,000,546 | ---- | C] () -- C:\Windows\System32\ABF7Se.DAT
[2008.05.16 13:43:23 | 000,000,862 | ---- | C] () -- C:\Windows\aolback.exe.lnk
[2008.05.16 13:42:00 | 000,000,335 | ---- | C] () -- C:\Windows\nsreg.dat
[2008.05.16 13:11:12 | 000,113,152 | ---- | C] () -- C:\Users\Timo Oehnbrink\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.05.16 11:24:02 | 000,045,056 | ---- | C] () -- C:\Windows\System32\acovcnt.exe
[2008.04.04 16:39:18 | 000,033,136 | ---- | C] () -- C:\Windows\ASScrPro.exe
[2008.04.04 16:38:58 | 000,037,232 | ---- | C] () -- C:\Windows\ASScrProlog.exe
[2008.04.04 16:38:56 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2008.04.04 16:05:27 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2008.04.04 13:50:36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2007.12.20 15:02:19 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007.12.20 14:33:43 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2007.11.08 10:54:33 | 000,159,146 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2007.10.01 07:59:45 | 001,769,984 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2007.07.19 14:24:51 | 000,032,768 | ---- | C] () -- C:\Windows\PGMonitor.exe
[2007.06.01 18:58:40 | 000,999,424 | ---- | C] () -- C:\Windows\System32\WLIHVUI.dll
[2007.05.09 08:16:39 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2007.04.27 10:43:58 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2007.04.18 10:14:04 | 000,674,456 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2007.04.18 10:14:04 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2007.04.18 10:14:04 | 000,144,898 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2007.04.18 10:14:04 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2007.04.18 10:06:01 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2007.04.18 09:33:08 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 000,402,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,634,540 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,119,106 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006.09.29 15:12:12 | 000,303,104 | ---- | C] () -- C:\Windows\System32\dnt27VC8.dll
[2006.09.24 21:04:42 | 000,090,112 | ---- | C] () -- C:\Windows\System32\dntvmc27VC8.dll
[2006.09.24 21:03:32 | 000,086,016 | ---- | C] () -- C:\Windows\System32\dntvm27VC8.dll
[2006.09.21 13:53:28 | 000,282,679 | ---- | C] () -- C:\Windows\System32\dnt27.dll
[2006.09.21 13:52:24 | 000,077,882 | ---- | C] () -- C:\Windows\System32\dntvmc27.dll
[2006.09.21 13:52:14 | 000,077,881 | ---- | C] () -- C:\Windows\System32\dntvm27.dll
[2006.03.09 11:57:59 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2005.11.09 12:13:48 | 000,282,624 | ---- | C] () -- C:\Windows\System32\dnt27VC7.dll
[2005.11.09 12:11:46 | 000,086,016 | ---- | C] () -- C:\Windows\System32\dntvmc27VC7.dll
[2005.11.09 12:11:30 | 000,077,824 | ---- | C] () -- C:\Windows\System32\dntvm27VC7.dll
[2001.10.10 08:57:58 | 000,073,786 | ---- | C] () -- C:\Windows\System32\dntvmc23.dll
[2001.10.10 08:57:58 | 000,061,497 | ---- | C] () -- C:\Windows\System32\dntvm23.dll
[2001.03.07 08:02:30 | 000,229,431 | ---- | C] () -- C:\Windows\System32\dnt23.dll
 
========== LOP Check ==========
 
[2011.06.09 13:16:53 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\5016
[2011.06.10 14:20:53 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\5017
[2011.06.15 09:41:26 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\5018
[2010.11.22 17:04:11 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\AVG10
[2010.03.12 15:51:14 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\cbuenger
[2011.10.10 13:12:17 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\elsterformular
[2011.12.23 16:31:49 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\gtk-2.0
[2011.12.27 14:27:14 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\ICQ
[2011.05.21 20:49:46 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\IrfanView
[2011.06.09 13:16:36 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\kock
[2009.09.11 15:30:02 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Leadertech
[2011.03.14 15:32:45 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Lexware
[2012.02.12 12:02:15 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\MAGIX
[2012.02.05 16:44:35 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Microgaming
[2009.04.10 10:53:20 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\OpenOffice.org
[2011.08.30 16:24:46 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\PacificPoker
[2011.01.13 12:56:27 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Povim
[2011.06.09 16:35:15 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\ShopperReports3
[2009.02.09 17:36:10 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Tobit
[2011.06.09 17:01:19 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\UAs
[2010.09.11 12:53:17 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\UB
[2011.01.13 12:59:46 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Uqveer
[2011.03.23 09:59:27 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\Valuga Software
[2011.06.18 16:39:21 | 000,000,000 | ---D | M] -- C:\Users\Timo Oehnbrink\AppData\Roaming\xmldm
[2012.02.16 16:31:33 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2010.08.29 13:06:09 | 000,000,000 | -H-D | M] -- C:\$AVG
[2008.05.16 11:47:07 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2009.05.22 13:47:09 | 000,000,000 | -HSD | M] -- C:\Boot
[2006.11.02 14:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2008.12.09 16:03:23 | 000,000,000 | ---D | M] -- C:\ElsterFormular
[2011.10.11 13:01:11 | 000,000,000 | ---D | M] -- C:\HeyPoker
[2012.01.27 11:05:48 | 000,000,000 | ---D | M] -- C:\HollywoodPoker
[2008.04.04 15:47:16 | 000,000,000 | ---D | M] -- C:\Intel
[2012.02.05 16:40:21 | 000,000,000 | ---D | M] -- C:\Microgaming
[2008.04.04 13:51:59 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2008.05.16 13:43:00 | 000,000,000 | ---D | M] -- C:\My Music
[2012.02.16 13:14:09 | 000,000,000 | -H-D | M] -- C:\newdnswatch
[2009.05.22 13:29:41 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.01.20 17:11:29 | 000,000,000 | ---D | M] -- C:\Poker
[2010.09.11 12:43:33 | 000,000,000 | ---D | M] -- C:\Poker Application
[2012.02.15 15:23:07 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.02.12 11:59:29 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2008.10.13 15:48:49 | 000,000,000 | ---D | M] -- C:\Programs
[2008.04.04 16:19:49 | 000,000,000 | ---D | M] -- C:\RaidTool
[2012.02.16 13:41:39 | 000,000,000 | -H-D | M] -- C:\Recycle.Bin
[2012.02.15 19:18:04 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.07.17 18:55:30 | 000,000,000 | -H-D | M] -- C:\SystemData
[2011.03.14 16:18:57 | 000,000,000 | ---D | M] -- C:\temp
[2011.04.17 17:52:11 | 000,000,000 | R--D | M] -- C:\Users
[2012.02.16 12:47:12 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2008.01.19 08:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.18 22:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.18 22:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.18 22:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.19 08:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2008.01.18 22:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys
[2008.01.18 22:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.18 22:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008.06.06 05:55:20 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008.06.06 05:55:20 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008.06.06 05:55:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2008.04.04 15:21:19 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2008.04.04 15:21:19 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006.11.02 10:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
[2008.01.19 08:33:10 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
[2008.01.18 22:33:12 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2008.01.19 08:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2008.01.18 22:42:52 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.18 22:42:52 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2006.11.02 10:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.19 08:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
[2008.01.18 22:35:38 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\System32\netlogon.dll
[2008.01.18 22:35:38 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.19 08:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
[2008.01.18 22:42:10 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.18 22:42:10 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2008.01.19 08:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2008.01.18 22:36:20 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\System32\scecli.dll
[2008.01.18 22:36:20 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006.11.02 10:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
 
< MD5 for: USER32.DLL  >
[2008.04.04 14:16:34 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=63B4F59D7C89B1BF5277F1FFEFD491CD -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16438_none_cb39bc5b7047127e\user32.dll
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008.04.04 14:16:34 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=9D9F061EDA75425FC67F0365E3467C86 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.20537_none_cbc258dc896598f1\user32.dll
[2008.01.19 08:36:46 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
[2008.01.18 22:36:48 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\System32\user32.dll
[2008.01.18 22:36:48 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
[2006.11.02 10:46:13 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=E698A5437B89A285ACA3FF022356810A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16386_none_cb01aa4570716e5e\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.01.19 08:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2008.01.18 22:33:34 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.18 22:33:34 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2006.11.02 10:45:50 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2006.11.02 10:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
[2008.01.19 08:33:37 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
[2008.01.18 22:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\System32\winlogon.exe
[2008.01.18 22:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2006.11.02 09:58:26 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=84620AECDCFD2A7A14E6263927D8C0ED -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6000.16386_none_4d4fded8cae2956d\ws2ifsl.sys
[2008.01.19 06:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\SoftwareDistribution\Download\a58fa8f1a78b89e6c2a670e288053b8b\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
[2008.01.18 20:56:50 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.18 20:56:50 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2006.11.02 11:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006.11.02 11:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006.11.02 11:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
 
< %systemroot%\system32\*.dll /lockedfiles >
 
< %USERPROFILE%\*.* >
[2011.12.23 16:31:49 | 000,002,819 | ---- | M] () -- C:\Users\Timo Oehnbrink\.recently-used.xbel
[2012.02.16 16:46:12 | 007,602,176 | -HS- | M] () -- C:\Users\Timo Oehnbrink\NTUSER.DAT
[2012.02.16 16:46:12 | 000,262,144 | -H-- | M] () -- C:\Users\Timo Oehnbrink\ntuser.dat.LOG1
[2011.04.03 11:40:54 | 000,194,048 | -H-- | M] () -- C:\Users\Timo Oehnbrink\ntuser.dat.LOG2
[2012.02.16 16:31:25 | 000,065,536 | -HS- | M] () -- C:\Users\Timo Oehnbrink\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2012.02.16 16:31:25 | 000,524,288 | -HS- | M] () -- C:\Users\Timo Oehnbrink\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2008.05.16 11:23:51 | 000,524,288 | -HS- | M] () -- C:\Users\Timo Oehnbrink\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
[2008.05.16 11:23:51 | 000,000,020 | -HS- | M] () -- C:\Users\Timo Oehnbrink\ntuser.ini
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 81 bytes -> C:\Program Files\Intertops Poker:MID
@Alternate Data Stream - 81 bytes -> C:\Program Files\Cake Poker:MID
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:8CEFE51A
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:A5B56640

< End of report >
         
--- --- ---
__________________

Alt 16.02.2012, 16:28   #4
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 16.02.2012 16:40:54 - Run 1
OTL by OldTimer - Version 3.2.32.0     Folder = C:\Users\Timo Oehnbrink\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 80,73% Memory free
6,19 Gb Paging File | 5,84 Gb Available in Paging File | 94,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 56,97 Gb Free Space | 38,22% Space Free | Partition Type: NTFS
Drive D: | 141,23 Gb Total Space | 137,35 Gb Free Space | 97,25% Space Free | Partition Type: NTFS
 
Computer Name: HOME | User Name: Timo Oehnbrink | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2BBC5556-99AC-44C8-8DD1-E05D4586921B}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 
"{2C068DA6-F97C-44D4-AFDE-8D69D3B82B6E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00747FB4-3D1D-439D-947F-627FDB760CB5}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgdiagex.exe | 
"{033949CC-BA7E-4FE6-A84F-3432E37A88DF}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe | 
"{0480E120-E1FB-4350-A1AE-5EFF3BEF0832}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{054AE8E1-58DC-4068-A642-AFAE0E2D3DDE}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{06E850C9-A214-49AB-9FB4-B0740B587036}" = protocol=6 | dir=in | app=c:\program files\intertops poker\pokerclient.exe | 
"{0CF13B28-3EF8-4A67-9032-5BFC9DEA1884}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgdiagex.exe | 
"{10D0F288-B49A-4FBD-BEB0-A93A3F02CADF}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{13043DD0-9C00-4BE0-B5F4-EBBB8E2C46EC}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe | 
"{14E94CC4-D766-45AE-BF0F-A31E5F8FA7F7}" = protocol=17 | dir=in | app=c:\program files\intertops poker\pokerclient.exe | 
"{18E4488F-DE0D-41C2-BDFD-6C8FAFCCBDF0}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{1A4F331D-9A19-44F2-B461-2F3D65A739F2}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{1D868D96-F4B8-45D6-9ED0-440B9133EACB}" = protocol=58 | dir=in | app=system | 
"{1F35246E-EEF4-4612-8211-6DB5D4C3B6BB}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | 
"{21CEAB2D-7E2C-46FC-8A1E-FB0A3EC16484}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe | 
"{22F87A10-A7CF-47E5-B723-CB0A19526B09}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgemcx.exe | 
"{254DBE41-26CA-4077-8FC4-C7EC987ADA58}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{2609592C-C948-4243-A68A-0BDB885FEB30}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | 
"{2D156277-1EBA-4187-B04A-AE0A705E83CF}" = protocol=17 | dir=in | app=c:\program files\tobit clipinc\player\clipinc-player.exe | 
"{2F657909-0FDA-4FCF-BF2D-139DDE4CC01D}" = protocol=6 | dir=in | app=c:\program files\tobit clipinc\server\clipinc-server.exe | 
"{3400A2D9-502B-4DD7-8E2E-156276838993}" = protocol=17 | dir=in | app=c:\program files\tobit clipinc\server\clipinc-server.exe | 
"{3F944554-65D0-4108-96AC-0C2249E5A1A6}" = protocol=6 | dir=in | app=c:\program files\tobit clipinc\player\clipinc-player.exe | 
"{45850349-6C31-43C5-AAD6-BF4616A27CBE}" = protocol=6 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe | 
"{48A3F4BD-CA48-45FA-97C1-0A48BE726F19}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{4EBC6F88-778F-4674-A020-A866B8141D3A}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{51159E4A-1F49-4EFC-8EA4-FFD04A9558C6}" = protocol=17 | dir=in | app=c:\program files\common files\aol\1212658807\ee\aolsoftware.exe | 
"{56684C64-99ED-4B47-ACBD-6B08D54C2C20}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe | 
"{57028C33-EB9B-49AA-931B-6FFEBA88B276}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgdiagex.exe | 
"{5C17BD8B-EBED-4C15-AE8E-26BC9BE73214}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgdiagex.exe | 
"{6DBC27CD-23D4-4628-A681-6DE7F1CCEF1A}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | 
"{70F3AC51-3654-47F6-A61E-EF78111FA900}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{72FDD9E5-B334-4D3A-93D9-C3F2ECCCCFB2}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | 
"{74D6DECC-F58C-474C-9F3E-5019D75556D7}" = protocol=6 | dir=in | app=c:\program files\aol 9.0 vr\waol.exe | 
"{7535D79B-0197-465C-A534-87CF925EFCAC}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgemcx.exe | 
"{7D03C837-4B8B-44F5-8064-4D076756C471}" = protocol=17 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe | 
"{7E79365C-CBC5-49CC-93F3-A3183621A037}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgemcx.exe | 
"{7FF12980-9F80-4906-8987-CEC3B4176F68}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{82A935F2-1774-4963-84F1-8AF8C0DC9641}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{88C5DFDC-2CA1-4541-83CE-2160D7602A13}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgnsx.exe | 
"{8FA2A193-9BCB-4A0A-B524-B5FC58E859D7}" = protocol=6 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe | 
"{93DBECEF-7091-4980-81EF-765EB96201C6}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | 
"{968FC321-940B-40A0-A61F-22DA97C08B6C}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yserver.exe | 
"{A064D19A-B4E5-4619-9844-3D9E7A0EA980}" = protocol=17 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe | 
"{A0F4B497-EBB9-4C0F-957F-6D4129886BC9}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{A176CED2-34BA-4EBC-B3C9-A0346AB2A6E7}" = protocol=6 | dir=in | app=c:\program files\intertops poker\pokerclient.exe | 
"{A5286960-8492-48B3-820B-B0B37B94DD5E}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgnsx.exe | 
"{A8F98717-270B-4C8A-BD1C-8B0F16E7F0A4}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgemcx.exe | 
"{B33916E4-7FBF-491F-A3C9-196E5D0C7E5F}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{BA928F82-76F2-4C55-BC84-94BC5A7A96AA}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{BD5C648C-F28F-479F-90AE-8A5DACD2A285}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgnsx.exe | 
"{C10A6AEF-37A9-462B-B33E-DEDD6CB6880E}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe | 
"{CB4AB08B-2366-4BAB-B57D-7062FA8F2DFD}" = protocol=17 | dir=in | app=c:\program files\intertops poker\pokerclient.exe | 
"{D1F5B324-93BC-4112-85C7-E6E0875982B8}" = protocol=6 | dir=in | app=c:\program files\common files\aol\1212658807\ee\aolsoftware.exe | 
"{DC11D8EA-D4B2-4984-BBF5-C1988EFD3B7D}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe | 
"{DDD428DF-CC43-4410-B852-1669B6CD3A4B}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{EA7D3733-15D5-42B3-862B-9B68BF65EEA9}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-203 | 
"{EAC0B32F-A94A-4FB0-9EA4-89A6E2D22917}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgnsx.exe | 
"{EB57F8DA-1D57-4F82-8209-EF9F798683FB}" = protocol=17 | dir=in | app=c:\program files\aol 9.0 vr\waol.exe | 
"{F0C04278-4A65-435A-9B92-CA51A4185E35}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | 
"{F41AE725-634C-4617-A792-46A41561804D}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yserver.exe | 
"{FAFB6696-71DD-4B21-8647-E5C1BD19F14B}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"TCP Query User{06C5F4DF-7E25-4F2C-8BB4-DE19C64DB2CD}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"TCP Query User{1F247015-C462-47F9-852E-ACED16F3420C}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe | 
"TCP Query User{39C4B5BB-35DA-4257-A100-F7859B4FD60B}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | 
"TCP Query User{711E861D-651B-465A-B690-77252B8BF9FF}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{93308DEC-C971-4F20-91C5-4B0EB2821076}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{FC92B84F-0BEF-47B6-B02A-1FF32E1F0598}C:\program files\pacificpoker\bin\poker.exe" = protocol=6 | dir=in | app=c:\program files\pacificpoker\bin\poker.exe | 
"UDP Query User{35D2F8CF-270F-41EA-A918-46479F25E5A9}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"UDP Query User{68CBDEBD-624F-4D07-9360-467AB93F62D7}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{837A9FFC-03DC-4734-97FC-7C936DDAFF83}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{9F6F9F44-FF41-4DFB-842E-4E89F65D920B}C:\program files\pacificpoker\bin\poker.exe" = protocol=17 | dir=in | app=c:\program files\pacificpoker\bin\poker.exe | 
"UDP Query User{DAF17945-451E-4767-B0C0-6CC03D6BE9AF}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | 
"UDP Query User{F91F1F07-6C8D-4BC8-8A80-BE0E9E2B88BC}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{025F9C8B-27B3-76B0-08E8-4EB918DE287B}" = Catalyst Control Center Localization Dutch
"{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}" = ElsterFormular 2008/2009
"{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0813BDD1-7E8E-4F18-A13C-037CDD7F9A48}" = Catalyst Control Center Localization Chinese Traditional
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B3ED35F-3BDC-72FE-3477-A7CA54325F06}" = CCC Help Chinese Traditional
"{0B950F52-0FD9-C679-6FD0-C4D4F43ACA3E}" = Catalyst Control Center Localization Greek
"{0C0BE8DE-7BD2-45A5-BBA4-95C9FA2CE292}" = DM_Install
"{0E4DC8EF-9438-AEEF-A042-851C2EA86FEA}" = Catalyst Control Center Localization Finnish
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{146E206D-7D2C-493A-B431-1F1D16E822AF}" = MobileMe Control Panel
"{17991528-E473-43B8-9E3A-4DBD4BAE07D6}" = Lexware lohn + gehalt 2007
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1A915E9E-75A0-5FD6-53C3-D2E5EDA27B52}" = Catalyst Control Center Localization Polish
"{1BDCA62C-699A-A3C2-57C6-D496414BA297}" = Catalyst Control Center Graphics Full New
"{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}" = ASUS Data Security Manager
"{1CE34A07-F95C-C749-B8FB-10BEFBB5D917}" = Catalyst Control Center Localization Swedish
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22AD2DF3-00C4-68EB-8D2A-C5AC60BDA907}" = CCC Help Greek
"{2396F815-84E0-4353-83D7-8B190556DA42}" = ASUS CopyProtect
"{24339461-1E3B-290E-613E-B0B234B64ABE}" = Catalyst Control Center Localization Japanese
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23
"{27DB888F-A703-E898-6261-D84260EF93DA}" = Catalyst Control Center Core Implementation
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2A125DB3-CE73-46FC-A1F9-E25E5C201143}" = MAGIX Screenshare
"{3127F76D-5335-4AC7-BD1E-2F5247A23C24}" = iTunes
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{337C0055-BE59-63E5-72AE-DAED46ED980B}" = CCC Help Korean
"{342D2010-703F-2098-441E-F96F532EBD09}" = CCC Help Chinese Standard
"{35064B13-A847-4E02-B24A-311FFAE2A173}" = Lexware lohn + gehalt 2007
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer
"{3A9A74B7-DAE0-EB01-E51A-D2A6720CF135}" = CCC Help Japanese
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E7CE151-F6EC-8550-9B73-427F6A89AC42}" = CCC Help Polish
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{44CDBD1B-89FB-4E02-8319-2A4C550F664A}" = RTC Client API v1.2
"{45936E5D-5CEB-A100-8694-B62523FD99C6}" = Catalyst Control Center Localization German
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BE52CD7-9B51-F4D8-ED51-8E89324F3EBD}" = Catalyst Control Center Localization Norwegian
"{4EE9DA0A-4CED-1FB9-3231-24C85855A387}" = Catalyst Control Center Localization Spanish
"{50DD51CF-31D8-7831-D4E8-E13E0A736D93}" = Catalyst Control Center Localization Russian
"{52159193-1EA1-B129-7C03-7120CB0C502E}" = CCC Help Portuguese
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{52E43F33-7D7C-3209-0539-1B2A43010E0D}" = Catalyst Control Center Localization Turkish
"{55BFC356-5A7B-482F-A213-9ACFDDFF6037}" = Mouse Driver
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58752780-E21C-A458-2397-BD8D5E3CB0C1}" = Catalyst Control Center Localization Portuguese
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
"{5BA43E5C-66FD-48D2-AB40-B807D457EF83}" = ElsterFormular 2007/2008
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5E453519-60F6-4A4D-A0BF-16663F9B3536}" = Safari
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{62562224-27D6-4542-AD91-1DAD0B965A0D}" = MAGIX Foto & Grafik Designer 7 Download-Version
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6602C18D-52EC-BB1F-C3B9-EFF2F1463A58}" = Catalyst Control Center Localization Thai
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6E32B134-CA8D-49DD-B94C-0DB155CE70B5}" = ccc-Branding
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{73AA12E1-5FFD-4545-9A28-CE7C318F284E}" = AVG 2011
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{77AD4A77-F70F-84BC-B52B-91DAB868EF27}" = CCC Help Czech
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7B63B2922B174135AFC0E1377DD81EC2}" = 
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{82CC81F5-5706-45CE-A805-4A2A3F53B451}" = Lexware lohn + gehalt 2007
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{872717DD-EE82-F142-4DF7-0308772A8DE4}" = ccc-utility
"{88D44595-9B8E-38FF-7CD9-F5A1423BA2D6}" = Catalyst Control Center Graphics Light
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp
"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme
"{8D3D4041-DA1D-F814-B37E-ABF774556DAA}" = Catalyst Control Center Localization Italian
"{900F0963-B211-5692-EEEC-4DFF6F7321F6}" = CCC Help Swedish
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0410-0000-0000000FF1CE}" = Microsoft Office Access MUI (Italian) 2007
"{90120000-0015-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0413-0000-0000000FF1CE}" = Microsoft Office Access MUI (Dutch) 2007
"{90120000-0015-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0410-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Italian) 2007
"{90120000-0016-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0413-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Dutch) 2007
"{90120000-0016-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0410-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Italian) 2007
"{90120000-0018-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0413-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Dutch) 2007
"{90120000-0018-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0410-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Italian) 2007
"{90120000-0019-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0413-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Dutch) 2007
"{90120000-0019-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0410-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Italian) 2007
"{90120000-001A-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0413-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Dutch) 2007
"{90120000-001A-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0410-0000-0000000FF1CE}" = Microsoft Office Word MUI (Italian) 2007
"{90120000-001B-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0413-0000-0000000FF1CE}" = Microsoft Office Word MUI (Dutch) 2007
"{90120000-001B-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_PROHYBRIDR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-002C-0410-0000-0000000FF1CE}" = Microsoft Office Proofing (Italian) 2007
"{90120000-002C-0413-0000-0000000FF1CE}" = Microsoft Office Proofing (Dutch) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_PROHYBRIDR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0410-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Italian) 2007
"{90120000-006E-0410-0000-0000000FF1CE}_PROHYBRIDR_{0A75DA12-55CB-4DE5-8B6A-74D97847204E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0413-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Dutch) 2007
"{90120000-006E-0413-0000-0000000FF1CE}_PROHYBRIDR_{89C8E56A-90D8-4598-B0E6-EB28F6270E07}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91AA9814-7B89-DA53-5FCA-EBDCDAC4F611}" = CCC Help Italian
"{92C98289-5C00-4A4E-03ED-6E59F7D73435}" = Catalyst Control Center Localization Chinese Standard
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97C9E93A-7DEA-37C2-50F0-E6172D91DEE6}" = CCC Help German
"{97F73E68-213C-6F88-A590-9C600186E36C}" = CCC Help Finnish
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9BF9D522-7FA6-D442-9769-558E3B4503F0}" = Skins
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A654A805-41D9-40C7-AA46-4AF04F044D61}" = Adobe® Photoshop® Album Starter Edition 3.2
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB870B63-94EF-0B0A-340E-62CAF5D48B17}" = CCC Help French
"{AC76BA86-7AD7-1031-7B44-A81200000003}" = Adobe Reader 8.1.2 - Deutsch
"{AFD12747-7CDA-49A5-BC5F-18B90FAD6822}" = DM_Install
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B480BD2A-F1BA-4FE6-8C8E-34C6111B72C9}" = ElsterFormular 2007/2008
"{B6512E97-FFA8-6A76-4B07-036784E56A7B}" = Catalyst Control Center Localization Czech
"{B823632F-3B72-4514-8861-B961CE263224}" = PostgreSQL 8.3
"{B8F1FA25-D1F3-5DEB-5AE2-18E72A2955CA}" = Catalyst Control Center Localization Danish
"{B935DAF9-605C-A1F8-7A4E-BE87E82B7237}" = CCC Help Norwegian
"{BC61F51E-8AF7-46B9-AF20-B33B5EE81031}" = Nero 7 Essentials
"{C0BAF48F-940E-7AC7-63B3-BDFAF8A6CCA5}" = CCC Help Thai
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{C1B22596-9F6C-6795-F374-D6843ABA8A9A}" = Catalyst Control Center Localization Korean
"{C1D783C5-D3ED-D03E-59CE-1FCC0C059B0F}" = ATI Catalyst Install Manager
"{C376495E-6F9D-2A3A-329E-960682A22B3B}" = Catalyst Control Center Localization Hungarian
"{C6FB5BC4-823A-FE8B-01CB-3A7F51B4C9C2}" = ccc-core-static
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CBBCBE04-EA5E-4201-A924-E7ED3E8686AE}" = ElsterFormular 2006/2007
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE86A0E7-818D-43EC-A181-59BA9BD3EF2E}" = LightScribe  1.8.13.1
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D48385D5-5720-46F1-93A8-36B38076772E}" = Lexware lohn + gehalt 2007
"{D8438AE5-4BE7-CEC7-D0AA-189B34C4628F}" = CCC Help Dutch
"{da5afc67-5bf7-40b2-b595-64a7b4008a48}" = Intertops Casino German
"{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}" = LiveUpdate Notice (Symantec Corporation)
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DF4EB70F-6EBF-AD9E-AF89-D1398A284C86}" = Catalyst Control Center Graphics Previews Common
"{E037311F-0715-DB85-4394-6B09A66605C0}" = CCC Help Spanish
"{E1D0A2DB-9B8D-E7B1-295B-DDAB0B9A423F}" = Catalyst Control Center Localization French
"{E533E637-FB3E-4F28-8B18-449CC9AB7235}" = AVG 2011
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{EAF8F949-849D-9E39-2A86-0DB83A90405B}" = Catalyst Control Center Graphics Full Existing
"{EDFE36E7-B60E-BF8E-F2DF-0DD61B1E3CAE}" = CCC Help Hungarian
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F5D7FAB5-A1FD-4DD3-983E-4155B09D7102}" = mCore
"{F615FCB3-A49A-4899-9390-6FE949EDF922}" = Lexware lohn + gehalt 2007
"{F656696C-CF30-03E5-03A8-05078E02ACEB}" = CCC Help Danish
"{F6CAF803-A534-705F-A673-A04FCEC5AFC9}" = CCC Help Russian
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FC3D290D-79BE-44B7-ABF9-FDD110925930}" = P4P
"{FCABF3BF-D716-980B-F463-32D5734A3DB4}" = CCC Help English
"{FCED9B62-34FF-4C15-8A23-F65221F7874D}" = ITECIR Driver
"{FE0C4C63-56C1-087C-3404-C547405FCEA7}" = Catalyst Control Center Graphics Previews Vista
"{FE44D8AC-80B2-A8BA-291F-59109DE96C11}" = CCC Help Turkish
"{FF748561-FFFE-11D3-A06B-00E02939A7B1}" = dakota.ag
"2EFF310ED3BF3BFB24E6CC25AEB5491813E56803" = Windows Driver Package - ITE Tech.Inc. (itecir) HIDClass  (06/20/2007 5.0.0004.2)
"7-Zip" = 7-Zip 9.20
"888poker" = 888poker
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe® Photoshop® Album Starter Edition 3.2" = Adobe® Photoshop® Album Starter Edition 3.2
"AOL Installations-Manager" = AOL Installations-Manager
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"AVG" = AVG 2011
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"ElsterFormular 13.0.0.8055k" = ElsterFormular
"ElsterFormular für Privatanwender 12.1.1.6214p" = ElsterFormular für Privatanwender
"ElsterFormular für Privatanwender und Unternehmer 11.5.3.5585" = ElsterFormular für Privatanwender und Unternehmer
"FLV Player" = FLV Player 2.0, build 24
"Heypoker_is1" = Heypoker
"HollywoodPoker.com_is1" = HollywoodPoker.com 1.0.0
"InstallShield_{55BFC356-5A7B-482F-A213-9ACFDDFF6037}" = Mouse Driver
"Intertops Poker" = Intertops Poker
"ladbrokes (Poker)" = Ladbrokes Poker
"LiveUpdate" = LiveUpdate 3.2 (Symantec Corporation)
"MAGIX_MSI_Foto_Grafik_Designer_7" = MAGIX Foto & Grafik Designer 7 Download-Version
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Mozilla Firefox 10.0.1 (x86 de)" = Mozilla Firefox 10.0.1 (x86 de)
"PokerStars" = PokerStars
"PokerStars.fr" = PokerStars.fr
"PROHYBRIDR" = 2007 Microsoft Office system
"ProInst" = Intel(R) PROSet/Wireless Software
"RealPlayer 12.0" = RealPlayer
"ShopperReportsSA" = ShopperReports
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"sv.net" = sv.net
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Tobit ClipInc Server" = Tobit.Software clipinc.fx
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"ViewpointMediaPlayer" = Viewpoint Media Player
"WinGimp-2.0_is1" = GIMP 2.6.11
"Xvid Video Codec 1.3.1" = Xvid Video Codec
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Search Defender" = Yahoo! Suche Schutzvorkehrung
"Yahoo! Software Update" = Yahoo! Software Update
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Absolute Poker" = Absolute Poker
"PhotoMagic" = BenVista PhotoMagic 1.2.8
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.8
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >
         
--- --- ---

Alt 16.02.2012, 16:39   #5
markusg
/// Malware-holic
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



hi


dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.



Code:
ATTFilter
:OTL
O4 - HKCU..\Run: [Locfla] C:\Users\Timo Oehnbrink\AppData\Roaming\Adobe\Update\32cli.exe ()
O4 - HKCU..\Run: [{1295A81C-0244-11DD-95AA-806E6F6E6963}] C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\saletoc.exe ()
 :Files
C:\Users\Timo Oehnbrink\AppData\Roaming\Adobe\Update\32cli.exe
C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\saletoc.exe ()
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         


• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!




Drücke bitte die + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 16.02.2012, 17:07   #6
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Locfla deleted successfully.
C:\Users\Timo Oehnbrink\AppData\Roaming\Adobe\Update\32cli.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{1295A81C-0244-11DD-95AA-806E6F6E6963} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1295A81C-0244-11DD-95AA-806E6F6E6963}\ not found.
C:\Users\Timo Oehnbrink\AppData\Roaming\Microsoft\saletoc.exe moved successfully.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrator

User: All Users

User: Default

User: Default User

User: moppen

User: postgres

User: Public

User: Timo Oehnbrink
->Flash cache emptied: 5042964 bytes

Total Flash Files Cleaned = 5,00 mb


[EMPTYTEMP]

User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User

User: moppen

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Public

User: Timo Oehnbrink
->Temp folder emptied: 4481678409 bytes
->Temporary Internet Files folder emptied: 890678426 bytes
->Java cache emptied: 34427650 bytes
->FireFox cache emptied: 52526638 bytes
->Google Chrome cache emptied: 6238380 bytes
->Apple Safari cache emptied: 23649280 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 961203790 bytes
RecycleBin emptied: 15009144 bytes

Total Files Cleaned = 6.166,00 mb


OTL by OldTimer - Version 3.2.32.0 log created on 02162012_174252

Files\Folders moved on Reboot...
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A0HEXX3CAV02GU4CAGOYGFJCAX8TDX0CAZW7CWDCAKQT34BCAE93318CA6V6YS9CAUDQKFCCA8A0UGZCASHNK38CAU6UN32CAH8F980CAKOPSJUCARH04Q7CAKL ZE3ECAKHKVNBCAGEVGGXCATL1QG7CAQ1NRZ5CAHBYL2N.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A0OEJVTCAOZ4AP0CA4JDY52CA5DMFIYCATBI11LCAK0AIPMCASEG0EMCANGA39YCASWTWA2CA333PDZCAM4Y0JDCAIE2B99CAN0Q36SCA1OMF6LCA7SXUK5CAWA LLLRCAPXPB9GCA298TP6CAEM22T0CAZM5DFTCAF8LOED.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A117YABCAZNTAMKCALBLK46CA11YQG8CA4JYIHECAPPO6DKCAXERK0XCAF3RZXVCAEUZQ2BCAPX7OIYCA656NACCAND3MZ6CA4UY22MCASPXHVMCA3ZC7NKCAI8 WOGNCACWP0U7CACWJUQMCA398N3GCA0Y72YGCAUSSL5A.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A1G9YHSCA7HFNFHCAM13W8VCA74Z4N7CATGQM0RCARAPJ8GCAHVOHV9CAW0ATYUCACKGP00CANTAGMNCA3D82IECAVMB3OWCAMJQYPGCAEF3O3FCAAN7JLKCAF6 S2AOCA25KZGACAPWXP94CAZZ9H7ECA8RVGB6CAIMLNNJ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A476T2SCA1EHY9UCARFBP59CAJ13Y9RCAVAWN4HCAB15VJWCA8PG2MSCAYI6KFZCA44X3B7CAVR0R33CAVD4RD0CA6KOGGVCAUPA1DACACH5A4RCASE1310CAKR 9THACADBHLJFCADYFHXLCATNT8A8CANSNWRYCA0NWKMQ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A4ERJIMCAZPI7YGCA5NBNT9CAGM7OZXCAIDLCZ3CABINHMNCA3FE36JCANNEQ4HCA4S21JMCAWV70X6CA4LF8HGCA7C368NCAL05RCACA7AS3NECAR7WKU4CAG2 06WGCAV0VUTXCAEJGWP6CAFXCT4SCAGGV0T1CA34DMLG.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A52F79SCA5SJWKACANV8UZ9CA25L2EUCASLCNYNCA4FYR5FCAFGFOX9CAT1WWR2CA20B96ICAA05TS2CAPWWNRSCA5WURZ7CAQXY05MCACX312TCASU4NV4CA0T BSKRCA1UXYYKCAN201GUCAT3LRH3CA6D2KAMCAHT1H0T.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A5S1MEACA4LUDO2CAWH1J81CADMKT9MCAQSLUPUCAD7X0H0CA3UBVMECAHZSXZHCAPQCIFACAX0QLWWCAY1JCGXCA17YZDDCABAG429CACYMRJUCAMSK1CQCAK8 9SX7CAXJ25BTCAZONWINCAY787E3CA4U6SZ3CADUI65Q.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A5SNVSGCAER6YITCA2NWX1RCACW0X50CAMROL7ECA7C3U5OCARYWES4CA5DYGFUCAJUAXY9CAMPTJD7CATFVTGLCAO52N8OCA2E3N9ECAYK44IFCAXKWUEUCASJ EPE2CAHB0I8HCAGYPD1QCAD8D7SACA92ZP14CAW3Q47X.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\A6LLO1KCAWCDSMSCAUQ7VV5CAX1BVH1CA2TNCH6CANENDR6CAPXS7PHCAHYED7LCA4QIWHMCASA4V26CAAWNQ1FCAZDRKPVCAQ7Y070CAISPW9HCASA38WICAFT BVL6CAR56MTWCANZQINXCAO02JE7CAJAILCFCA5FCU00.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AB3OOWCCABWFQSXCAM9JRBNCAD15CFWCAT4O0K2CAVERR51CAYJMXRHCAJPQU78CA0FSRYPCAE6N0O2CAO5O4BECAFFL8K1CAMIVTDSCAB82JGMCAMEJFZKCA8M 22ACCAK4ALN1CAEH8MLXCARMJ6L4CAO7O2W2CABOGUNG.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ABND82GCAXKYFUQCAPICE9LCA06E01BCATJYP0NCAR68FFFCA4SI7A4CAW2PKQ6CA50JU9ICA1TRB7GCA2ZT9B0CANNHZRECAX744ZVCA3AVTIFCAMLGEPKCAXP YSH1CANDEHWWCAKF4WG0CAS6QYS8CAIJTO91CAYY9OEQ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ABP07DUCALQV257CA8CGD09CABPWENFCAXWVD78CA2CRZ5ECAZ2CVNCCARCRL0HCASMM4TJCAMMR4JFCA89UMA1CA4MFUAMCA4H75ERCA1NMUL6CAPMDS5RCA7K J2FZCATL5M5PCALGL3OYCABUWZLBCAOIWDDJCA1G0HQL.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ABXCU44CA5RI48XCAB1OT8TCA7H7AVJCAIO33UFCAE3WRGZCA3JIDJ1CA4EGLS4CAG9KU6XCAX9TSECCAUNIPQDCA1TTT3JCA6BS6L3CAWZL83QCAGBZBTZCATK 397QCAWJ9UX7CA4YF2C5CAQWC2NDCAOMZLH8CAG5VH07.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AFLDHV3CAKD0AHFCAA1T4DQCAV31KJXCAKN6DM7CAMMMCB5CAXCU28WCAZS7T26CATUXYC0CAFG6F1PCAXLHVLWCAEVYD7UCACNQZ83CAJZ6FUWCAI8FB66CALY XTMPCALGCZ5CCAQO9UO2CA71181KCA4GNINJCAEO4DQH.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AG2SF9ZCAO22EFVCAHJCMGGCA6RMXQ1CAC2K69GCA6VBD46CAPH2XR8CAMT9FJ3CAR9J48ECA8YO9HBCADY460VCAZREJV8CAKNOBTJCA2BETQRCAWD88U9CAHY CTDRCA4W8XGSCA7GI53TCA5ZVXRACAACS0ILCAQAD1NH.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AG8Z9J2CA8QMG31CAP5NJZ7CA5SOS8RCAQJY0W6CALPW8KACA6D1E09CAJOKCLMCASN9RM9CAQYPYPICA3HK20GCAJ48A04CAPRRFGZCALQJZUECADRH6C1CA7C DPVTCA48D372CAY7ACGRCAYPKY0UCAWU7BEJCAJ64OW3.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AGG0L5GCAWHAA33CA8K8H8FCAMOMLS6CAKQCOHICAABVY4FCAXOZE8LCA0FAU4GCAWKMTQMCA72GD1FCAFAECUWCAJ3HQZ2CAY9LIZLCAT6XHYTCAHF517DCAZO D9KDCA3AJ08QCAD75952CAGDY3P8CA1WCF36CAYGXJUX.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AHXSNWRCA5CIPOXCADTVMDZCA8A16HOCAO6Y9YVCA440UXNCAU6MLD5CAMI20WYCAYKT0WKCA3NM12OCAS69KN8CARJ4W12CAKZBC80CASDUQ3YCAAXCQ9QCA65 MSQXCAT8D5BWCAZE5SNDCAZK06IDCAKIRD01CAMX4Z7A.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AI79A6KCA5G57PDCAMFBKASCAXZE0LMCAJJAGIFCAQ69ICTCAV2NWOICAODPKL0CAOOHPSVCAHYHXQCCATITGKBCAIWL3VRCARFYYA6CAW3D8FBCAUE1JB3CA9G 6D52CAQLGY2LCA628CRKCARZ3KY2CA44EL0CCAU8PDUE.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AIAO5ULCAMCITFOCA0MZYIECAQ7WG5MCAJT553GCANDODS7CAXCL292CA5XBP9NCATZJWQ1CA2WY0I5CAXQF3MPCANQ1BHNCASAQBV6CAIWF4YSCATN6TSRCA4F W6LZCASGV50OCAFS9K2GCA8NT2Z9CA6OJ0MRCA8J6IY3.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AJA16NDCAWW1K7QCANVAW3ZCA7G0Y2ICAUHVBRGCA6DD98DCA25OBEBCAA7FB4TCAI3652BCAZ3IUAKCAGWGCSOCANDYIQ1CAHXLINCCA2K2GYQCA2B2TV4CAF3 PUBUCAIMKJ43CAJY0O5RCAKMOELWCADTDTBTCAUL7SU5.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AKHA27KCAE0SIVHCAHGDPDRCA02SJ2ACA4X40JMCA30964TCAIXS7LXCAQ8O7TQCAGSZ5KGCAA5CMKSCAR3EQAACANRIZPKCADGQOK0CA8N6A6ACA1QTS3UCAPN WNGLCADDWMX0CA05IG8PCAAD6INGCAUV1LZNCAMIHHIO.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ALNN02DCAPHFYAWCA47OII8CAMOZW4KCA7CX85ICA3JVLJ7CAZX7ZJ7CA165XCJCAONN0MSCAPE4YUWCAA5ZU8ICAWIAH4LCAS9WU1ZCAPJTTVNCAX8RH82CANC ANINCA07Q5MUCADS6XOVCAE262MPCAMYFCNHCAJF3NQL.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ALRWUTOCAUB9DHFCA9RVHZVCAM4Z2A4CA0VZD29CADNYIFECAAXWOA0CA6MEVHPCA5GQEFFCA1T6ML5CA173R9FCA5I4LCGCARYQ2CBCAE00D9DCAIN4SE9CAOA UH5GCAYB76HDCACC2WA1CASRMOAXCAJGMLW5CA476F15.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ANNUWVTCA9NXZ6RCARM0E0SCAXRMK44CA3T0J61CADHZJNQCA1OVVJ4CAPWLJ70CAHCPIRUCA0OBI4WCA0ILZAYCAFIKPP3CA44ZKSICA5N3IBWCASRA2W1CATM YEO2CA8L5NZ2CANTYLH5CAL3NWDTCADKXVH1CAAAZ1AK.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AO7YJTQCAHOAKBVCA5Q44S1CA0JZQ2ZCAK3DRA8CAE5X307CATNTXUQCAK8ZDE5CACA7SH9CA1L6KSZCA4H7RBHCANT6UTFCAFK4MZICA9A44IQCAYZQ00NCAKR CSU3CADBAV03CAURMGY9CAEUB3OPCA148RK4CAX9FZPE.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AOEL69NCANRPXEYCAUY592VCAC5YHR5CAJELEQFCA6B8I82CATCG2LGCA49F1O6CANZ21BYCAH5Z2DICA31UVU6CA99MEN0CAC3DXZTCAI4DDVVCAD0VXN3CA5R T6Y2CA10XHXFCA9D4E1SCA4S5F6OCADJHQYPCAZVVNC4.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AORD9TTCAG9MIACCAN8ZL1XCA847XDFCA5MR5MBCAV5I00QCASX9P3FCAJYGKXWCANUCZ0ACA7N267CCAE5PIJTCATSLXNSCAM8ALKQCAEYJ20KCA43AJ1ECAII QVM3CATLQSPVCA5DOHKOCA8XOX3MCAA67TXSCA6VLPWP.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\APLCG5PCA5E6VKNCAXU739ZCAY1FNQPCACSRZDNCAEHYMY7CA8OJRQHCA5MWVXVCALKE8IPCA6UFK3MCA1KWDXQCA6AVMXACACJXQ24CATRKJM0CAOIX0DYCAMS BQTCCAWW0OJKCAKVGHK8CAOR387VCAAQ9F4TCAOIN6PD.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AR78EK8CAWMGRZXCA3Y9PL9CA6AMHCKCAPNNIGUCARZ96IJCA65KPIZCA3O00B7CAZY0MK9CA5QRBH3CAPJ4GYRCA1C2N6NCA4QWEGOCAPBRQTLCAFPEKCHCA4I J1DOCAA0XNOCCAQJW3OBCACZ14T1CAHFTNNGCAXN1N00.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ARIQJ40CANLQ1RMCAU0TVEMCAIKHWYFCAUR05Z2CA8S568TCAYRNYMQCA7LNC92CA1SHL3PCAGA5NGDCAKV5X81CAEHEWDDCATQ2OAOCA5GG5K9CA4JD1ALCAUR VFLQCAGI00LSCA4QYAH4CAYZKZBSCALOMP0RCACB9CUC.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\ARUXVNUCA07M2MYCA914YQCCA00IUBECA2JDGHJCAE5L6I1CAF9LSP4CACAC5FXCABLL34QCAKQ93FPCADGEI9RCA6EOUDYCAICNHB0CAZD1GR0CAFYV3UBCAG1 8L9LCALIPDQ4CARIFT93CAURRRRCCACSM2G7CAOD2VG1.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AS8SJEICAF66J9NCAXIXYLLCAJ702VLCA4JIFQBCAD7UCDQCA8UFXEFCAFKPHH1CAVOIN9UCACOA5PUCA0L3LGICAYOTLK0CAZWJLPJCA01MMMQCAW9UE5BCA6Z Z1W8CA1M32NPCAW7U2X6CAWXBCVQCAVU1KWECABP4N1W.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AVVGE1YCANH3GOHCAD2D33XCA6G231VCAPV1ZUXCAJ15ZPWCATZZ6QFCAGJ9G3WCA1KKMZ9CAC5DD69CAFP2ZNACAZ9AVCVCA4HI40PCAFJQRU1CA3PJI14CA74 6KGBCAB9DXPFCAHQ5QR4CA2ETBJ0CAQFBHOTCAIB3IYI.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\VY0M6SXW\AXOGRL4CAJFMX03CAYOU0BLCATDW1ADCA45U70VCA13TGGWCA1RX3PQCAVXMCVCCANSF5Y4CAJKU3BUCAO88UR6CA3N4I2ZCA8D5TWDCA1PFHCSCAR0G414CAIC YG6VCA246UDACAMOL0XSCAA2U0PFCAI0HFQQCAJBS74D.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\A155HOTCAXEPW08CAHNSSWCCAIK80DUCA7M0234CANKYPO1CA3X8X4ACAM7PVBJCA284FEACAYU7UKHCAGFWBHOCA0ZO39DCA0LKA8GCAL7K1OACAXN3J9ICAFA WBRTCAHIO8YKCAZI6WELCAP22XRTCA0AVUBZCA1LCC4M.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\A15BVS3CAVFD0B3CABMTY62CAFWD82WCAQJRCRLCAY1XROTCA9GGU1GCAHOLXN2CA924EO3CATRQUPCCAY8AW51CAPXGQGRCAHY23O2CAQPYNUBCAKVLJY2CA8G RW89CA48RN0ZCAZWM8Y9CA7ZFCKTCAQ0QEEXCARM6F1Z.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\A1JEQ35CANMIYHSCAGXYYA4CARY61KWCAP975QNCA7530IRCAOAFJG3CAITXS62CA3TGG3DCA678Y9FCAS9D1PQCA0Y0X2GCAO54VKXCARRBI3ZCA9WYS2QCA4E CACUCAOYXV8MCAH70WFVCAJ1DEHOCAKLFLCFCA6YAB91.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\A38HASQCABY42MOCAZQBN9ZCARSE80KCAQ6WO25CA5T1D0UCAT3QNL4CAWJ8DO4CAM5K0ETCANFA65TCA010X2XCAVU7265CAESJKFYCASFA9O5CAXJ7KPYCAMQ L646CA4WBPDTCAXP91JWCAO46F2YCAM93E32CAH6EA3I.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\A41VYWTCACWK4N0CAAMM6J3CA7DJLZUCAH0M8LNCA81BLXECAWC5WXICA2KQDY2CARRQA5CCA3Q6TBHCAFGNN3MCAJ80FUPCAIQG23GCAC9J18UCAR3LO70CAEC G2B8CAUZOJ17CAUDVQRFCA0NMPOUCAJVV2LHCALP3DVQ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\A4FT86QCAMFQWDZCAH6VZOQCAB7RS3ACA3IUKCNCA00OTVKCAZNKHU8CA7SDPHLCA1CTLDMCA6N5Z03CA9CPS79CAMUCATXCA15CMPHCAXVP769CA8DMFQ4CAS6 9XVDCAWRCWCECA0SLOEMCAPRJTIECAE37XB0CA4C4NNM.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AANNEXCCAFK1AI7CARJ5DAXCA733UJZCAAAITUHCAM7O0Y6CA7NS0MVCA0Y3FEJCA6MQMCUCAWFB8SWCAHDEGNVCAFI3UQDCARF7WZLCAZEIKP0CAPQK1XTCA6J 8Y95CABFP8SICA9VJ2FCCAT3TV7YCAXMLCF0CA59PABA.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AAP569ZCAH6WPOTCAMAR3U8CA0FBN2BCAF3MADZCA62XV8ICAF53V8GCA1WBNYPCAOG1FN3CAWC7JSTCAQLEASCCAYJI3GECAN814PPCA8TPEAZCAUDQOHGCACC ROUCCATUVX7XCA7SO9NECA462VQ0CAWJ4ETACAM76S6N.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\ABMEBYOCAU96SWWCAZLXUPRCABS5CLDCAMRN8U4CAOTEXKBCA01ESG5CAXT9NFLCAZF4ROZCACFLNO2CAU4PK23CA6IUS0HCAZ1S1K5CAISAPEFCAJAD15WCA0F RUDDCAHE994VCARJ68WOCACU0MMMCAEU2JSZCAVY3F91.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AD2BTV0CA51A93JCAUQ3YSJCA3CKYK3CABNGPVDCAJPZ3XACAE0R2GZCALH1AMKCAFLWMS2CAT40WV1CA7FNVU5CAH5WU1JCAQMA1Z3CAV88SNFCAE36SMACAB1 A8TFCATSXDQ6CAW9P9KICAX5Z32MCA0SMKWQCA2W4S4X.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\ADQSJIQCA1DUFACCA1858HFCAMHF5MVCAX52KUJCAKTLYKCCAN730YLCADB5WWUCAWNB7UCCALGPVW1CAK8GERHCAMJ1TP7CAZ61ECXCAY3W16ICA5N8WSYCA9O XAL9CASSUZIICA6VX363CASPO8K0CA1GUMN1CA62W270.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\ADTJQ56CAUBT84WCA2KBXC5CANA7FEACAZPB7HTCA45H6MLCAY1IGZ9CAASZO52CA5U2LF5CA51LFSTCAPOSZV6CAU0R9AKCAJ9VM9ACA2NLLWVCAYW8Y0NCA8K 6C7NCA9UJKZWCARBWZRJCA4HCGOLCA3X51SKCA2WMX0R.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AIMYOXWCAJ3QEGJCAW3E8DJCA2Q652ZCA9JYENZCA65K8V8CAEEF78ACAHFU3WLCAL5OP4CCAOOKYDFCARNP2MSCAH2TB2DCAAZ6KAJCAMK0YJVCAVARL22CAJQ NGN5CAZQEO3WCANICG88CAM1AX1XCAQ0US2BCAL0233H.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AJB6EIJCAP8FHEWCAHJ4B4BCAH0WUV1CA4Q0B9WCAA78UINCARKUQSDCACOCKDDCAWSSIS6CA8I3GZZCA2ASVY7CAAMMIUDCAQIKTNTCASJWGIMCA18GCMTCAIF POIHCAQV4EV3CALB0ODDCAGUXSQ1CA8ZW62WCA4LTWKH.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AKN97LKCAJZJ05DCAAS0FOUCA9JDKURCAX4GKTJCABN7IALCA14L4VBCA1VVVR1CAHRA326CABIFFA4CAOO4YXICAZNXN6LCA2ITFQ6CA1X05PXCAMCCT0ACA79 11BZCA7RMGQ5CAB4UWWACABEQNVFCAQHDS1OCALVD1O3.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AL66L3WCAH3UM2BCASK80CJCAUWMPW4CAD6BNQ5CAXB8H9TCAARCDEWCAS20I72CAOGDILOCA1JRN6ECAGSJC40CA238UYJCAZUX4PECA3MMQO2CAIZ3WOJCAVP FGCXCAJFTPVICAYZ5RWVCALWFLWKCARPJH5JCABR0VSB.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\ALFZEI1CAHE5ER1CA40OU0BCAXHOW6LCA5KSEGCCA685N5LCAS3KJISCAGD45B9CAZV8G8ECAKH8Q09CASAYPUYCAIFD230CASRD5JRCA6J5VS3CA0I896GCAM0 8GKNCAE7BTDSCAC66E5YCAKK8Q45CAP0ZMKKCAGZZG99.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AM80DHXCAT1EW0VCA2ZLNO6CAICUKHMCAHXUJPYCA1447MICA7N9BVSCA0IJ30FCA9FXEWPCAQMD5LACAASKC4JCADEBYXSCAZQHSL8CAKIRHGHCAAEJGEJCAG3 OPASCAGXAEF7CA3XU6N8CA2W7FL1CA2B2UAPCAIDVRKX.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AMMADPTCASJICFWCADCDOJKCAW9FOYXCAVGPNU7CAXK7SXOCACRPEH3CA6H7XHRCAF7TYE1CABAO3MMCAB9TSHYCA4QEGZ9CA4J8RYECAEUQKSGCAK0A40FCA73 GT5JCASR985RCAJA2LCFCA3PUBPCCA00ML8KCAPHTTXW.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AOWGID2CA4B72KQCAHEN03UCA4O5UB7CASPJDWECAPW5OT2CARGOQGWCA1QOESFCAEE9X6TCAV16TQBCACDQXCJCANJEOMBCAYU3LBACAGNZNNMCA0NBXE1CA6A VL1XCALAOANVCAV0SMSJCAULF6CGCAUUYG79CAZ0ET0X.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AS5ZM1YCA6Y7RODCALYA5VPCAI0TWTOCA3TVC3NCAPHOMWJCA2PCMGYCA2V4W94CAOGK6QWCAHWICN0CADRXO0ICAJ3MDCLCAA73ZR0CANVJHZYCATQIFPJCAC8 813WCAMQ9L43CA3A8KJZCAME7NZDCA2FUSEZCARAJOF1.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\ATP5NMBCAGFAITRCAM70GJ2CAN2E9GVCA39BN7PCAPPQ573CAE6OGDYCA8C53LHCA8P9NOPCA4GDZD2CAXDKEMWCA8XD6P4CABS2VVMCA3LDT1FCADN27NKCA0B CJMNCAPONTM4CAV04A7OCAOB9I16CAYBYZRXCABLA27W.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AWEI7ZBCAGTB414CA563MAHCAK3T9XECAOKTC2PCAE340TLCAHKV5DGCA6HJMZ9CA2240NDCAH5WCX9CAV8JZV9CAP2VTO8CAAR6Q5QCA7C4SDNCAEWQCC7CANI 4145CACV9YWQCA0EEBPZCAE2FHAMCAIKI3ANCABKXDG8.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U57MB5YR\AYUMJYUCA41TIZFCA1OZ8UNCAN85X65CAYEN7DICAJ4J8STCARN4AF4CAIBNOD6CA9WVIHXCAZ48CTICAZ1XM14CA0JSNA3CAZZ4XC5CAE6W5CVCA1KDXWJCA7A N3DMCAN8JNLICA9KKCZHCAU79008CA2NJ46LCAJ8V2VL.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\A0ZD8OKCA2H3WNYCASOEYRNCAKZ5C3YCAPVKE2ZCALI066ICAICHFB7CAQTRN3DCAT9BA7NCA4LG9LOCAXOVTRHCAFZ0TCVCA183J1FCAA453MSCAG0A0FECAFM 8ETXCA2EYU7XCA8XMGOMCACF0AV8CA3J43FQCA0F6F0C.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\A29XKTKCAOYCWDGCA5P5LTVCAUDSI4ZCAN0OGU6CASRY2LFCAVJTG56CABUV6J7CACZGOAWCA58R2ERCA1UKAXACAACFNM5CA3HE6FMCAMRYAP8CA0HK4YSCABH COCOCA6YA7X5CAL3DUM7CAB0DCPYCAPECTBQCAV7U0TU.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\A44TKUHCA94FW4DCALNG3FSCAGIBPGKCA2B67K1CANBNMOHCA0HEVOBCAHVA5FGCAJ7DUWRCAR09AYLCAN6I1YTCADUO95ZCA541BBRCARG6LA7CAA0AJOFCAX4 FSCHCATC6TKQCAUW0WAKCAB03E68CA9EBWFPCAJN4127.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\A4Q7WCFCABL0GZMCAQZELLPCAHPNU91CAANJJ7SCASNUNW8CARE6BRHCA1JANKJCA04QL13CA51XNSICASMIK7DCAMWI9Y3CAHE2W8ZCAZ9UJX9CAZ9RMMVCA9L 843YCABFH76NCAURD790CAZEPLN6CAGQK0J7CAW4AT9B.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\A68JJNOCA9OVBMYCACPS541CAQWWBD2CAZHMNIZCAWKQ0DLCAJW6XW0CAOY8SN6CAZ74QF7CA7Z2Q7DCAT7YIDMCAC83K97CAY9R2MRCA7W8YPXCATL029NCAZF KOA6CAEYQB05CA83GC4QCA2XG06GCAXHR8B9CAVX57X3.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\A7NBLQZCAI8QT29CAY11R7DCAIT1L9MCAAU1PBHCAW8SC0VCA2KNAU6CASULLA3CAH685TVCATOUZZTCA2EZW9LCA4N613OCA9WM35XCAUBLYHUCABSFI82CAZ5 MZ4RCAHHL35ICA1EUFMWCAY1SSPXCAMX5JL2CAX48SLX.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AAQF1SNCAUYX3EHCAEMRHK6CA6W16DSCAF8EOCKCABF7L1ZCAGKBE5WCARHXMIICAK1DD7ZCAHT02F3CAEJ496FCA2EVE6HCA882ARNCA76YOU4CABLX9L2CAJY VIBCCAPKQVEECA36AG9ACAMH2TMOCADBER9JCAL35HTS.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\ABC88QACAZV2UB1CAN9G375CA1VHKZRCARVQBG5CAN42Y4GCA6K87FZCAQX705ACABRC52DCAEFHAL9CA2ZJ2IGCAAD8Y94CA6YXLOQCAO5NTQBCAQCYQVRCAD0 DE67CAVYUUWQCA2GEQVNCAYV2MMCCALTDTI8CAFU5SZ7.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\ACQGIJUCA5E838YCAAAU9D7CAB7SLZSCAH0XT5FCAG4W98ECA5LVY8XCAT0LWQ8CA8VUV4LCA54Z2K4CADX6AGMCAWKC1KECA0FE9AVCAXTFFHKCAJRM11QCABM BQZ1CAX3ZR7YCAD13F2MCAGUXG7PCAJ25AYTCAA6AWHC.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\ADCM9HBCAEQVDIWCAY4OPI4CANL0OV4CA8BJM13CAKJLYLUCAP9ZJ5PCA2H8ZGNCAC1SELZCA578CFQCAIK7Q9ECAOEI9RNCAI4K8YFCAA1JSQCCAOD2UJUCA4D Z231CAXCF4GFCA0P5M69CASDSP9JCA3GI2OHCAK8GS6L.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AE3839JCA2XFM8OCAGOSVSQCAFJE3R2CAHZED1ZCAY07PTVCAHUJ2OQCAUBUQ5TCA03B1VMCAN9RPKSCAAQFKVJCA9CXKNACAXB48FSCA144UHWCAEAMLOLCAYA DX59CA4AXRGYCA8ZQIJUCAD8WHPOCA3Y69R4CA4GZSSI.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AFAZMSFCA39NWQQCA4IWELXCA8UWMHPCALFGUHKCAYUVZV5CATUZYQ3CAJ47SG6CARBY51UCA1J5KO9CAUQUD0ECAUNMX8ZCAP21P8MCAPOXK1ZCA0Y2OJ3CAYB E1GCCALTH3S1CA44A25FCA2T83ZNCAU68TTICAP23JE2.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AFV1RB6CAS8EDWFCA6YSZD9CAWLW3LMCASPIEHNCAU636BTCAJ9U5HQCAW7LLJRCARA3UILCAHN4GW4CAH5X21MCAMV68VYCAEQXN7MCAUYW064CAHINIDNCA0V 80O9CAE1RR8FCATCQMAWCAPEMV6WCA1SRJ1FCA9CJA6Y.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AGM0JBBCA8M0YP0CAP2E0FUCAK5MFJJCAMROKRZCAS1QI9WCAPO1VPYCATJGMV0CA6MIAAHCAN5XM5RCAIAODJ7CAXS6DUKCAJH18GACAMTV0OFCASK5GL7CAK3 IIJACAAJAC20CAZHSALRCA69NTLDCA7UYDXLCAK8HPMI.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AHE6OXUCAABO1B6CA66HOF4CAPQM34XCAG4QRCNCAPSPT5HCAP8PFQPCAVICS1ECA1VKL0BCAR9J28YCABNOS83CAXI8LSJCA852LTJCAAYXLAUCAWV0S13CAOH N2NYCAAB94MYCAHMAUEFCAS1D47DCAVRYN8NCAZ8Q8TI.png not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AINQ44TCAS4SI42CAM4TJ3BCAFZEGRBCA5ZTIFOCAMVV4SACAK9VP1GCA37HYKICAMT9WOTCA3TPDQDCA0Z4UAXCA5VRITWCA0BF7FRCA84UOT0CA946PEUCA8Q FY9TCALFPOK8CAOE9OW7CAUYDB18CAB19S50CANRZV1W.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AIRX9MVCAKGCVAECAAG7RWJCAUYT1CNCAUI8YADCA55I7QLCA3FRDLKCAO397ZGCA1B2JNECAIXMB9LCAP75AACCARSHWJECA9QMI1ZCA2BC5WECA9N26YNCAUK KY5QCAL4QUONCAJKS9LMCAMUUZJZCA70W93LCARVQ07U.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AL5V1UWCA0M1XU2CAVZOPYMCA2JEAB5CA309Y1TCAVULQDFCAUGI77VCA8Q67GVCA08T6JOCAB6VPCQCAAZAJ43CARZM9S8CAGD6XCRCAA4GBNJCABVYA7ZCAOK 5NJOCANQAYU9CAFZCFC0CAKLXNTUCA9NPYN6CAL1T4SJ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AMSCZR9CAZ7F98YCAXPPZ4UCA6OILNXCAR114WKCADBZRQJCA5IV6SKCAX89X0YCAB1B6PQCAD1KBVYCAZW450ECAIAIZTJCA068LOWCAX260JTCAJ12PDZCA3X E2CHCAU1FWEECASAJURCCA63JGCFCA1EX236CABWIVZM.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AN16F78CAJBQRP2CAXX2CBZCA8LNC7GCAGL4HF2CAD9ERP0CA3YBZ6DCAY240UXCAUG0KTWCAGBG0XJCA826UOXCA1IJP6GCA847Z84CA47LB26CA585X46CAF4 NP21CABB7CJRCAMH18GRCAMI297ACAMZEMOTCAL453WO.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AN9DEEVCA0D21BGCA9CWXXZCA0WIJRECA9P2J75CAN60MKOCA1FIKFGCAQ9M868CAC2421OCAVXRL7QCA4T7OBKCAFNCX70CAZOUFPTCA6OLYDFCAI2JVO1CAMO VWQFCA6W9ZEVCASJGIQACAMWI02DCAGKJRJXCA2RHFDR.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\ANG4NW8CAQZL2OXCAZEEF1ZCAHWTJRWCAY8C7Y0CA2ID1SUCAKDSY6TCAB9T37LCAM6IF51CAPW461ICAEZVI7UCAPZAHNTCA6XGRXGCA1YBAI1CAR8LXM2CAND 9VRCCA0A5DOKCAUKHYFTCAK14SX7CAU337RJCAXBWKPY.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\ASMMGO9CA42PSDUCAITBMCXCAVH107SCA3BUXOFCAXYX2LBCAHMI2C8CAR02Z8TCA0MYXPOCATBR35XCA3CHFHNCACQ32ASCAXA514SCAJ1E55UCA3AS6W1CAHJ K7I0CAYBKRPHCA1S3T5FCAMXNZBWCA9LG95CCAM44FVR.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AVGBJZSCAIZ9ACACALXQJPPCAQ3Q9YECA4GWPH7CA0TU8USCA5X5641CASGJXKGCA3QM2YJCASXW8AYCAN37TZOCACY3MQACAULCVFHCAIUPOIRCAOSMMM4CAFN DNP8CASQA76BCAUTDOFECAYILANUCACXZGH2CA3WF8JH.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AXDAJH1CADBSBY2CAFYCSTHCAZNCNUACA4RCPKACAGTFTY4CAUOZOJQCAFUIA72CABLK4LGCASG54IDCAGXGEBDCAMFO6A1CATJOGLKCA3HM01FCAUIKLU9CAK3 IEPXCAQKOEUVCAV93MPYCA0MSSP6CAGL1EMRCAX7BY1I.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AXXQ3M1CA7BDL4ZCAIX81Z3CAZFA775CA9EREL6CAGQQWI2CA58Z262CA76Y7UBCAHQLMM9CAUO4K55CAYI9WOXCAUVCJH5CAPJ8N3ICA29V4TUCAZPYYNZCA0M 1N61CA2EYE7CCATCAZIECAMZXNHJCAN6HC03CA8RS7A6.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AYBBVR1CATTDPZ2CAP7VOAACABWETZ2CAXFOIYICA8JKVW7CAKY66I4CAT3KSG2CA71TFKJCABJNEC9CA6V8F1FCAJAH2Q6CA32KOHMCAZFWVROCADXKHYJCAPH SVGOCAFJOBXCCAGSPUGKCAI8Y96ZCA2WX49ACANCFGNY.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\B9JROY9X\AZ2RLN8CAUY6R3ACAXLI1SCCAGNYOUCCA5638T0CADWM2T3CAQAJ2D8CAHW2TN2CAGEG6EICAWI12CPCA05MWB4CAZ0YXABCACE6FN9CADDTR60CAPRTMUKCA7E WVUBCA5BVBJWCA20XHN8CAKG2MBPCAGX1GHRCAZUF7M2.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A0KMYQSCAUXRL43CACQF9VRCA7E6L6BCA4RVCRYCAY7G0JYCAWVT86GCAPJHZOMCALVO1H9CAR186PQCAJMY29QCAAA6SIOCA0QQXM8CAQFH31NCAA0XXR1CAYU IMJ3CAYYSILCCAE2LP3HCAHF7M7DCA3TUFPLCAT3VO2N.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A15T62HCAS9DTIVCAFHBVT8CAXJUTBWCA0S2OKQCAV3O45NCA9RPAQRCAH3E2NLCA080PMLCAFOYJF5CA43SN0DCA01OT9ZCAQ0QAPBCAKIQVSTCAS31SE2CAVN WT78CAFCQ0IHCAJKCOWSCAVW6VN4CAD6CV1ZCAWN93RQ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A1BR9PECAVWU527CAHC5Y1KCA5M34FECAIJ55GJCAULSTITCA734N9VCA6XBHH3CAM29QJ5CAKLOVWYCAH3G6CLCAJHJ7R5CAF1AHOUCAQ8H0Z3CAXLAANVCAKB 48QACACX3YVICA9GKNOWCA6BKYNBCANKC6I9CAGK08A4.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A1L6ZN8CAV48MMKCA4RLA16CA2ZF4LNCAZUPEMGCA91NP12CAXGJCGICA8OWEJHCALGOOASCADA2X1FCAIEA8MACA4HXLINCAQFAKKQCALC5O4GCAWL0J3HCAC7 SBDTCAO331XZCANEW6YPCAI19J7ZCA7YOTA3CAS57AQ0.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A2G2GHZCA0DOK5PCAUG14YXCA05HVF2CABRSH37CA27HVO1CAV66L4ICARSA7E8CAIYEA2WCAW7GMA9CAFDZKW1CAR45A0BCAW3UB13CA9GPIAOCAI4FYBACAYT FYSYCARB4P6CCAD3D40DCA5838AHCAG4NBXXCABV7Y3R.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A3IQ5TOCADZ3XOLCAQYVKULCA46Y02GCAIQZEHFCA5GLKLSCAV1QGTVCAUFMBDQCAOUDVTJCAXLW6VPCA03IONNCAH30NCNCAIDNUV2CAHLAALQCAI056LGCASD WMZDCAMT7JR1CAPZAJOLCALZ269DCAP7MYGICAB9BV9X.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A4YZPIYCAJSXL2BCASO5ZL5CA8NR3WYCAE19ROUCAZ6VR40CAD2TA9HCA4QLOI5CAGJKRECCA1NOT0HCAXPB0SCCA4FA1Z9CA04X6NLCA21U3XCCA27H6PQCAVX 4BV1CAY5SPJHCABRK9O1CA7CRNZ8CAXYT95XCA3JOWWH.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A6K4KZJCAD7XA13CAEAEF89CAFOK8MMCAIQIR6OCA184E2TCAKMRZD5CAGXSPNYCAOWSV4QCAJN1UM3CA6NCWMPCA6WR83WCAJF48QKCAMQRTPBCAQJDK8HCA70 FRX9CA4KXF39CA6LMG17CAR2H49OCA4X92KTCANVZVAF.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A7HKEUWCAI17XECCAHTFT2CCA5PNBNFCAN89G6YCAGER257CA6UY53LCABA4NNACAH1RZM6CA068WMECARX9K6ICAAXLQFDCAZQX6UJCAE0X23PCAMVV0SQCARN SHF2CAUV7NXQCAY69QCRCAOGEEC3CADKA526CAOH7AUI.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A7Q5DSYCA7NT0X7CAASZI1FCA47BGG4CAVR8XWDCAT247A1CA3B0KBDCAXHGHC7CAFJ6MLQCA4QS3I3CAZQRLSXCAPMQZ2GCA4ADGKCCA7A40CSCAYKZQV5CAIV XAZTCAM8X06MCA3XMW2XCAYOC3NACAFJJF88CA90GH6T.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A84UTFMCAEF8RWSCACHYQUQCA009DQ5CA3QXWOBCAEVG91KCA5JF1SLCA5I8DV4CAO92HETCAOIA215CAYR48C0CAEM0P9YCAHC2J5OCAZ1M41WCA3DCG9RCAIP RHS8CAOKFPOWCAA6MGC8CAN96ZO0CAS8L30QCA8IQ29K.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\A9Y9FC1CA3DBMNUCAYKL326CARKZ7IKCAMGVM2OCA546M0FCAYRVKD2CATK5UY2CAI30PC7CA60735BCAFOKXM2CA6OYUE0CAVF640VCATS9CZBCAS9BR67CA09 9ACACAROPS63CAAXZ5NQCAZT0JTTCA50G8TJCAMT4PVT.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ACHG4FBCAC7DVS1CAEL5RHACAXHABJXCAPH0K5KCA6NT6GVCACHG6LMCAK7ZL4SCAK35YJICAHB83UGCARWAPACCAD6MXT3CANSEAURCA255WHJCA4JYVW9CA11 N4E0CAWAV8RQCAJO2SHQCAKH3FBSCAHAXE76CA6DGX9J.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ADIORCYCACIX1T2CAAVK3LOCA2DVSQICAGDFI77CA1HVA6KCAGEDYZZCA2L7MPGCANUJAG3CAZ9IS9ICAICIYSCCATPQ4E9CAUSY7N2CA2DB7UECAO2B7CZCATU 70Y0CA4NMKOYCAJFXYIZCA932UEUCA5AW72SCAEQ9P8H.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ADMU9HJCAMRKTUCCA7TGWS0CAWD9XV6CACFMC0SCAZFJZC7CASMSF38CA2EPVZ9CAYG3K8WCA8Y2B56CA19NJ9VCAT0HAPPCAMAG0V6CAGFDCRXCALZ15QRCA49 VOB1CAC34ZMDCAPL3JLOCA00D5FZCAC0W5RQCAMWCLI6.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ADS0K99CAC4JRCVCAIDUGTHCAYYFAKECA7YKW7YCA2USYS2CAXPIWK1CAPZLPHSCAP32M9RCA5N7E5CCABEZ3OICAP9SIS2CAZAZVBUCA9PGIW6CAUA9VKICAJR 9K7ACAV3C60OCAW8YA8ZCA5OT3PTCA4JWDPXCABQYVI5.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ADURS6UCARFZYQECAZKIOHFCAOO54BHCA3DDXFQCA20H9F2CAYLFPTUCAQJ3W97CADQLXK7CAEZDRUYCADIZN6XCA1137O5CATUORPNCAWRZ86BCA47CGAICASG 7C33CAZIZMDBCA2IBXWECA788P8QCA7WAB8HCAT9W9FO.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AG6A144CAFXL5CUCA0IDJTQCAQ22KYDCAE69HIBCA33FIS4CAPWRKZDCAFF1QS7CA9I6AOWCACBYOYFCAZ7VF7KCAKBOKZHCAVV1CUGCABPAJF3CAWKD1CRCAZF 01AUCAF656QECAI03ZM8CAMIZI0QCAXQ13GCCASNVU5Z.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AGEFSX6CAQVYLMOCALL0XEXCAMAXXN4CAB0S19OCAGD9UH5CAF664ORCAUCSKJVCAWKUA6TCAF5I9ZYCAFC5KKJCA0SP6QSCAKHVA3SCA8NG4DJCAVCHJTOCAMF IASDCAHKHOVPCA3EYERNCARG608VCAR621MRCARHEHKN.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AGJIBYLCANTH0W9CAIU4U34CAM25T4FCAOWCCNYCACYZQS1CAPOI6B4CALKDAN0CA81XDU1CA3QBY3VCAWZS8MMCA5V1BCLCAUZLAQNCAHA1KAPCAAF2IK2CALV CAQCCALY9Z9ZCAR4Z2MVCAV4TCYGCAA2F0NNCAPACF1V.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AHLA5SWCAGB9G8ECAB77S7ACATFEHK4CAUKWDXGCA9BK4GDCACM85UICA05U078CAXWM01LCAV7WMZNCAJWP5MUCAYSJEENCA8P8JVJCA858KULCA9TVHEPCAEE N5RFCANSL7JOCA6HIFAACAAZ0U79CABHBMVKCA0VRXV0.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AINYZ40CAFVOZ4ECA0WYYXOCAFGY7NUCAID9LQOCAVVYP8WCAJTQ3QNCAAWO5LNCAOYJXODCA82YZP7CA95P3TXCAMTXJ0GCAMBODVXCA5CGO00CAIG11ZBCA8D 7BX3CA8FQ4NNCANTFK5TCAXVW4QMCA7C50NTCAER8O84.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AIW2KA8CAIJK1J4CA6FTHOCCAO3R13DCAVPEVPDCA6OI2M0CAXWQ3VTCA6Z3IZOCA8RRB5FCADTY72YCAVPZFWSCASMMT1PCA4G6O6SCAI5YLK0CALDVJOICA0R 7OECCAMOGDVBCACCW3VYCA8F8MYRCANKV97FCA8APWXN.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AJSHEI4CAJJKTH9CAQY3B78CA6MMTZTCA56BKNQCA25CR35CAM010GXCAOZL0JTCAJDDMH9CAAXE4E6CAQG8143CA6QIYCTCAQ47U1CCADMX230CA2O8IRICAIO FN4NCAMO7S9KCAMTMWPTCA8UJO01CAX8UV30CANPG5YC.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AK1WP2UCABT7LMMCAGDTD5UCAL9VJA7CAJUTCH9CACSGL59CAPQKKUUCA0TEHCHCALVF625CAZSSTRECA4PCNG8CAELZLQ5CAPHZOB0CAKF0PLCCADMRK0HCAAD XMERCANAJQKGCAA4JICJCAZJHD9ACABZJOF1CA6IHJNO.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AO03O9ECAE90TLUCA0T5DC5CADEJ6AOCAP92BOOCAUG7YEHCAC74BMPCAMN09S7CAHTQH7RCA27ZY3TCAOW1YOCCAO8HG46CAYYZ5BECALLTGUHCAJ8I69RCADQ 93BKCA3OGJSWCABJGYMYCA5O57RBCAWNNTZ3CAPX8207.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AOOPR9ACAQW3JO6CAZKUP1BCA904P83CA69LO36CACOP32ACAVUUTV3CA95B4CZCARTAHSKCAP8S6UMCANOXWCQCAQZ8FZICAY83FJZCAIK4TLRCA7NA9SPCAMZ MZ3YCAU4I4HKCACM5XAXCAN2OHPBCALQJK0QCA0V62RF.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\APWHZX3CAAKSF4MCAV9EPVHCAFVPLBTCAYSEOHVCATY2UPSCA4K9EQTCAN6CKC1CANOQ3MXCAX6NG63CABQOERRCAFZQ502CAZC6BETCATI0PW5CAQKP8NGCAKD 072MCABBLXY1CAR1W3VQCARIJAG3CA2KTATTCAPQ8Q21.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AQ1RZVJCAXXEN2DCAZX4LPYCAHQVU9HCA35QQPXCA2RUTOFCAYMM3DQCAL354MKCA6UBBDVCAZPCESYCA3FCEEECA7F1RIGCAK7UWGFCAJEJ3OZCARWOL9VCAM2 ASMXCALRILEOCA946M2HCA6BEACPCAMTL3QTCAMDZUVR.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AR5HQKZCAADMZHZCAWFY383CAPHMAF5CASHLP1WCA6GCKGZCAHUF7T2CAGE1XCOCAJYZ13OCAEEGVT0CAX71NAACARX0CGYCAFYGQT6CAPJ67VDCAPIEOOMCABM LFWACAF05ENLCAJEA78UCAXDI2MZCACX8ODWCA9PDEGY.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ARUM389CA7FAAM4CA1N5NHYCACD7I4PCA2VRZAWCAAC0JFSCALRJN1QCA4JKU2ECA1KKR8HCAQMPH7OCAP64IVYCAJZCOK0CAY8LQKSCALGKYVBCAW2IMA5CAOR 9GU6CA42K1K4CAO4XLIZCAZDS2VUCA7O8JFBCAQI9QGD.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\ASWF30XCAR2EVLICAZXFJMKCAIP5YCSCAQ2LR8MCA7W6V9VCAE9PWZKCA76IR0TCAE71845CA48E4WVCA1BYK2WCAARWZ86CAP8XNTWCA4OVPYZCA4KXLXBCAJB 6IT8CAZCL18CCAS4LXROCAGUMZUACA7CZFN4CAF5WTE4.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AW0HVVSCAMQ1LTCCALW1K7DCAWLOTX3CA2LPPY7CA8SUJPNCAXD8UHFCA88LR2LCAOO809BCAX9TLKGCA8MNBWFCAZLZUKMCA1I22NYCA9ZX280CAFH737XCAX8 T13ACAZE9UCZCA8PS69TCAHXOR3MCAO14ELBCA4KHG2M.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AWSK5AYCAAWKABFCA5E4X0BCAGJSXFVCADZLC8GCASC6KDHCA0WHANMCAU506KCCA0C3SDNCAIMC7J0CAXWIW01CA3BE441CARQSLFTCAJ5SCM2CASKI7UDCAO0 75YOCAK0ZKWUCAF3JPGNCAO5XE3PCA0ORRZLCA7OTNUR.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\7QKNK9HR\AXTMSN1CAZ6BOLFCARIKQDACA71H3F5CAAD3X75CA2R6W14CAEOSIAFCAVVFFFUCAYJYHFACA6R3QGWCAOMC07CCABJXNKLCAE8Q6VDCA3VB0ZKCAWBXDT9CAEO TVO4CA6W4DKBCAXLWQ12CAL1UIHMCAPP134ICAP7E6JW.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A0TG8H5CAR4EMSSCAF0ZO1CCAZZIF3OCAI5EHKICA3P3KF7CA7REEFNCALUFD86CA2CSG6VCAY8IZ13CAJETPSJCAHTM419CA0EYDLXCAKN2F4CCA0EXG7QCAMN QSHDCAD7QACSCA6I9IHZCAOYRSM7CANHZ5PTCA0NSOVV.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A1O11L3CA5OBS2UCAH4NAXACA6ILI2DCAFBX0J6CAB70DEWCAFG6JMSCA6AITH8CAUJ689NCANKECVYCA77FHT9CABG3NWWCAQGV6RHCAGS7UVWCAPLO31SCAYA CTQGCAMMX93KCA78QFGCCAAA5HH7CA32AGC5CAVEP2MG.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A22I1MTCA41LL24CA0Z5CH4CAZALHB5CA44KZT8CA485SMECAWMYDMBCATNGO0MCA6Y7KWPCAY6K51YCATRKTNNCAIMB7CHCA2O1BP0CAVQ66F5CASTWRG6CAZ4 7ZISCA2XAAY3CAA5F28ACATLTFR8CAJT2SZHCALG4C79.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A2TDHKYCANK8B52CA4O90NQCAOXJJZ2CA7SY53MCA1Q81TTCAKKSCQ4CAMDEXHBCA1U3HXYCAOCY2SECA7WPO8LCA8HKMB0CAZT3ACVCAS8P6ERCAG0E7D1CANN 82AKCAZNXB8ICALMT16ACA403WFPCAAXLMQKCAC1DXMO.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A2UN2TXCAPP99KKCABAVBUVCADD0YVNCA7HIKJOCASCFZ0OCACI0OHTCAX9QEWFCA7F8CBFCA82PKF8CAOJOZKDCAJWYXFICAJU2RZTCAX0IU2DCA6B7MXYCAB0 R9OXCAYHA6Q0CA8EMZFJCA6N3BGGCAGGJ9PPCAN6387I.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A395JWRCAYFG8STCA1SJBGVCAQFVX4NCAAJUZYPCARB1RB6CA6AUPP0CALATNTECAH3MO7ECA89ST1UCAKPBZRJCAP19ABQCASTY1PBCA5E53QJCAU7YXNYCAFK MPQXCAYNPDFSCAHW50TWCA4VN1INCAGPNPLGCAZOI01K.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A3W9J69CAY7XIL5CAE0XWGKCAYXDM2WCACBZS92CAPS7MV5CAVP7OFVCA761XFQCALSFERDCAW0P3T5CAKDSBF4CAF0E72CCA5HI05FCACY56G9CASTZB59CABK EUXLCA95Q4V0CARORX3SCAZ4LM4UCAYPYCBFCA94CNJ7.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A3YMLSOCAD631CWCAF5ZPU7CAP9J7WFCA98EJ8QCAEONXHCCA32DBKRCA8AMUW8CAI75JEWCAITJ159CAVUQWW7CA8F0H32CAF136ZECAUSNVHTCA41HPYUCA0F QREACA9T5FL4CAH3S42ZCAYRA2L2CADX2TT5CA6VAMR1.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A4G1YW2CA2GQVPECAXKP5HHCAUO4I7ECAG268XGCAVDX3MMCAH7NDFWCA2NQ771CA3Q6SOECA4NQTSVCA3O8DA5CAO5UAVZCAKRV05KCA9J6WK6CANA3GGXCA5J 44SOCAWKJDDKCAKUVFQLCA0A3C0CCAKPMQ6LCA0VZ321.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A4WKNDGCAX4PJ5YCAHXVVYUCAYVU5WLCA3VR3X8CAO8Q3RICAZBXX35CA339GO0CAOCN68GCAPEWCR4CA4EHYN2CAY9340XCAEFAA5GCALQZ1MFCAHFTT76CAWY DEYTCAI9LO3MCAE13MU8CA3KTN0HCAPNKXNUCAFARSB8.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A7BTEDFCA2HYGS7CA1NZBG4CA1PZ1X5CAZA1K0NCA805ZEOCAVCNH6RCAH0UESHCAPHFH0XCAMLP4O4CAGBI0PACA13PTLBCAO8M2GKCA6KXP0MCAQACASUCAPI 88SBCANPPBXCCATXX6YTCA6YVSZ0CAZQGYP2CAR8LI5J.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A7F9IE2CAEIEPFVCA8AA99NCAYB06D9CAM60XWVCA6MFO4SCAO0AQKSCAEJS16YCAHUSHGWCA58DV36CAVVN8HYCAG6WIINCAEPBMHKCAMOYT2BCAL9Z03HCA94 W10CCA09TP8SCA6KZASUCAHM4KW3CAET36U7CAEFSK28.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A875CV0CAS69GMZCAAULZJUCA78VQV0CAKOUXBLCA64XTT6CAO5UGSWCA3CBJERCA8K0QYECAIX7CX4CAPSMFU7CAU4DAPJCAYALLX2CAA6UOMLCALJ89YUCADD JU6ZCAVHSI8FCASA7WEOCAP1NX9XCA3FG6T9CAJWJFSK.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A8SC59CCA2BDW1ECAY35AS1CA12GN11CAHVT7DQCAAG6FGZCA1N03D8CAK24PJXCA07CWYACA5KOBW7CA67O9PPCAPCK184CANE89L6CALQ69GVCAQPTDH5CAUO JL8VCAX3ZGVTCARX953QCAISHWYOCATS2CCCCA8BAFE7.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A8W1U2BCA48LI58CAKX214KCA73LPZTCAAS83ZDCAONKKU3CAG5ETNSCAU4NHJZCAGKO1IJCAQ25E32CA1DX3VBCA3F724UCANU9NZKCADPF6ORCA8NUP1XCA3U 2CD9CAVL3STSCATPTWOXCABEJJQ4CAEEP6QWCA454DWX.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A99CQD2CA3RIQOCCAVBK23OCAFNMXF4CAPDN6O3CAHMRXQHCAH9PXSXCA0TNYJFCACYM2MGCAZ21U1HCA8VM751CAT7IZOQCA8B5NL1CAEPZI5NCA311Z87CACA N8M8CAQOQOTTCABT5IHJCAAETGNYCAI34KGLCAKZQ1H5.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A9B1KUBCA2I810HCA005M63CAO922WGCAV381NWCAFL9OLOCARNWT4OCAOW5YLICAYQ2H71CAVIDNF5CA1EIGHTCAY65Y1NCAG9W5Y9CAILFVE0CAFTZ3NQCAT2 IMX2CACNQ39MCAT3T6HTCACTT5HGCADM12RGCAT3HFGM.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\A9M1EIPCAAYW3NJCA2AD0NSCAFF012VCAIOP4VCCARRVSUKCAJZM9WKCAY7Y21ZCAZVY02ZCATXSU2SCAD2IE23CA08SD0KCA1KUWMTCA2L72ILCAUTIURDCAY1 8HCWCA1AR9EGCAQUIO7RCAITIB73CAUUE2NNCA09ATNV.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AAT3E3ACAFSEGOQCALPMP1BCAKLOZW1CAKZ4TX6CACON8WPCAQ83S0ECA5ZZEY3CAZK6XXECA4X0RBLCAYZZBZ1CA2EMJXUCA38DY83CA170C8MCA0FLOJUCA3K MKS0CAE491XNCAAFFWFKCAIFCW24CAFVBQ2DCA8APJMR.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AAXT9QUCAI5IQX0CAG4B2G4CAL16QGLCA334CO7CAIXL16WCACACWMCCABVKOIYCALID1CRCA372G51CAYPT9MDCA24UN5RCA5XARZXCALQVH9RCAIOZE0HCA4R OP5CCAL5F1V1CAFXOK3ZCA070VRMCAFFK9TRCAUXAR53.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AD3ABHWCAGGBH1ZCAQVPJNNCAQ22MWECAFFLMDBCA1SWW25CAZQA1VLCAR88X5RCAUXGTZXCAMJ5RHXCAIBHICTCA31Y2L4CAIGNN2KCAEGIRYJCA1EVE84CAQF VZ98CAZFMFI2CA4EQ9XMCASEEULDCAV9478FCAD9ORDC.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AEL3Y0ACAOCDQBKCAV9JE16CANM9JSXCA9C9NWWCAAPOBX6CAR281VMCAJ8DEN9CA4H2D1OCAFTZLJWCALHAD3SCABFG7L4CA5XCZUKCAMQMPZACAFM3QAWCAOH 1J20CAD87RA7CA7WEBSUCA7BZ7CACAU0BU6WCAI2ZN82.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AEPOS1MCA9PH39ECACPY6IYCAKT9Y50CAMHET0UCA5ZC3RXCA7OOSZXCA16026LCAD38KZBCACCQ1FGCA6T2JXOCAUJKBY8CA335L61CABH15MPCAKCLBR4CAXO TQ2QCA2STO1VCAVAK4KJCAQ4QVFZCAK2ZJ07CAQEFFQD.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AFP3TB0CA8O5EVDCAAXLA7CCAUYJ2XUCA6BL320CASM33BGCA28YT06CARTCP3XCAQMRO2ECAQ5LHU8CAPHSBN0CAR14WIACA1ZJ0FTCAS9W775CASX794DCAAT SX5LCA2C2ZDKCA9MSWQ4CAMJEL7CCA4WR61VCA9HWPQR.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AFXSI2XCAKNTTBTCA6U63N4CAQPHY4OCAW8GIWRCAPUSF3TCAH4YFQ3CAYSUL41CANYM2CFCA08OL4WCAM26XN2CABJUTCXCAMZ04CZCAX2JD2VCAR47X27CA9F BL6ZCATLQ2YPCAR8245KCAH7WTALCAHRIR94CA3NDBMS.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AGEEO2RCA416TXUCAL70DQFCAK4GSB2CASOKKXCCASHH2C1CAKFQUR3CADFEKTBCAZYBR2MCAJCTZYNCA02MJG6CAG7EY8JCANTFSBACAA1UQYNCAAJ95W9CAKB 8BUECA9HHJKICAXRB6V2CA232ZGOCA9800ZNCAK3APT6.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AGGDSUJCA6Y4ZJJCA3JBZQACAELKDINCAB43E2XCAPFPPEBCA3TAGXBCA9F9ADOCA1DVUAQCAZ7H60RCA31RM58CANPSZNCCAFMC76VCA1LXSY3CA83ZN6UCAM7 60O6CAOJDQMDCAIGA059CA3B5YUTCAQ1XSHWCA0VMBM8.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AHP13QUCA5C39QJCA9KTFYTCA8UIG0LCAMMOU47CAZBWTGOCABZEFAMCAZVV2SWCAXTYDGQCAYN1Z8LCA2NUH28CARL9J35CADLKROWCA6O54P8CAZ0IRP8CAZT 9I7MCAVCCEOMCA8V9NLSCA8ZYGZFCAVFXXCTCA5OAKGX.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AHQJ0YYCAUOR0W1CAGXTZI1CAVS6FAVCA93BP68CAZU3FLPCAOV4FXNCATEYTY3CANCP8W6CADQ50ADCA8CQY2PCATOTHB9CAA24BNECAG141P5CAPFJSEHCAT9 RNHHCAAAIAYDCANNAZBMCA8DO0RECADT35XZCASLCP5X.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AJ5PFDVCAMNTH7OCA0YL0N5CARRTMYQCASGZRURCAWTL7NECAPX98DWCA8INJZPCAHIVO1LCA9WB6W3CAIUO549CA8TIB00CAFNYIT2CAXSC1Q6CA7VC21YCAEV 77RLCAL82NDWCAWVU04FCASITXHKCACYHMM6CADWQIMI.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AJAXMRQCAEJLN0PCAJLU6IBCAV1W8HQCA3CG812CAGIQJTOCAIPGEP7CACM3AQPCACD3QUDCA260GC4CA12EDY9CAF3TBPUCAP8UDZICAHPVCY0CAH6OD6HCAIY 6FYLCAKW31BLCAZ22IBQCARO0MC7CA8LUBLGCA70YACK.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\ALTUSB5CAFEQ06RCAIZ5T09CANXQ7RRCASELO2QCAK3U96WCAPC3D2PCA8LAOL0CAKKDWH2CATA6J4XCAG4TO3UCAM7E1ENCARCRD4UCAS55W4TCAIE0D6HCA8Y M855CAAZJ60BCA91U1Z8CAGX4NGKCA0ACO73CAGQY2V6.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AMN3XMOCAH99QMWCA9YF2P5CANQ5MKWCAIENIW7CAXF2FLOCAZU14KSCARIPYBOCA4F2LH4CARZRUSSCAXZH93NCANN0KHECA0YRU5ACARF89VHCAQ39XPUCAHZ FG7NCAE90BXCCA4SZNB4CA5FQS9NCA2L0HWJCAGIV775.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AMY339CCAUR3JRQCAXD8Y85CA23N7YVCA0J2MM8CAAI1OV4CAI9ZGT1CAX7QJAQCAVXGJWDCARD0QDTCAO5QQ74CAST9CPECALQQFIXCA81B6URCAU2UOFHCAZC KWTUCA3P3KAZCAU31GYICAQGIALWCA4EC2P8CA08SD1P.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AO2SSHGCA9ND297CAIXT7C7CA1I3LN6CAC7AAQVCAG1EQMKCA2XW0OXCAUS4LAKCAEC0LC3CANDVWQ2CA3M6FPWCARDKOY0CASL62QNCALLNHPSCAIA5K82CA5N Q8HCCAKWUCMWCAZD5NF6CA7V8Z60CA25OFUBCAEOWFN7.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AO3U34ACASG0KJ6CAP2OS4ZCAPD1231CAG387R1CA5KE70MCAGY6PLDCA2K2JI3CAUKVSM3CAGGB56WCA678630CAZ5MMY1CAE5ARI3CA6HNZV5CA66ZLRCCAMI 4Q0PCAMQ2ITOCALDGMBBCA45HNBYCA6P4121CA0P8GJX.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AOBING6CAZUFDIZCAV1VMDQCAUFAA7NCA55IYV2CATJW4V3CAX4SSSOCABK43RACA0DEQOKCAM4AT4ICA77CXU9CAZYJ2N3CA2UJ03RCAS3KGS4CA1UQLJ1CAEI E0AECADDLWARCAWF8G9YCAMKQ5RACA2XUSA4CAX4AGW2.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AODYGKMCAY0K3DCCAVFQ33ACA4XLMSFCAFSXR94CA7ZB8D6CA6Q024FCAPR3AKBCA5G057VCATWN9TNCAD1FA2VCARF73EYCA6AS4Y9CALAIZ3QCA9C2FKQCA26 A93PCAPRAD9NCAX6VUO7CAG6VOINCAZ987IBCAYJFGZA.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AP1IEN1CAEVK4XSCA0434Q6CA62BS7NCAUV5EARCA6I8ZR7CAYH9R32CAM3A2CICA8TLBQ5CAYYLCDECAGDAKFACABPF3VSCAX87WZ5CAALNY2HCARRS9G7CA84 VD52CAV0VITUCAV67T1JCAFZAQUOCAJZJKK7CAZPMZ9F.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AP2VB10CACXWKRNCA3BCPN5CAQ0T3QZCAINVTA7CA8J1Y8OCAPEMPZNCAQXZWVRCAC2ONP7CA3JEOBFCA7QUP95CAPPTRC4CARSA9YMCAPF9C53CA7NO6HICAQ7 NEW2CAL8PML5CAM1J5T1CA7B9OIDCA3UMTMVCAXE9VRW.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\APHZR2TCA62XHEOCA1VDYU1CAX83KO4CA70UQHRCA7DSLEVCAY6OK2PCAB8SFGCCATPDLCYCASTF7R6CA7ZP4QLCA29X8PYCAQSIQWVCA7I8ZI7CA7C8MU6CAB1 FZQKCAWM4DEZCASBXYVUCA4D9C1XCAVAQFJCCA9UIM4F.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\APN9333CAN5W8L2CA7OTRDPCAX9XUX1CAFBDHKYCAXO2Z09CA8X8RS8CA42MSNFCAI6XDGECA3W7XOKCAQ2HTACCA4TLN0XCAW4JEDQCA686ILVCAM989YKCA2L U0EHCAKQN4MQCA7QUNNJCA60AEZ3CA49WICJCA2TLBNY.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\ARCW9G3CAHOATSJCAEXHU0WCAKCRCMXCA5PQZAWCAGIPZZ7CA7FQD0TCAKE9XGJCA988FB1CA4THKS1CAEJVVDRCABQE05ICAUFS7MXCAKL8IGKCATDPQE4CA2I JQL9CAI7Z5IYCAMT9XNGCAGOSHU6CAI4GQX7CAZPTIP6.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AS7WT3FCA5W6ZSVCAFL7AU5CAOM8LHUCAF4Y4AKCAL1397PCAOB8KNQCAFAR5LGCAZLOI8WCALZZBFMCANYTFWBCAKRUJ3GCAI09HE4CAGD3BV9CATRF2J8CAQ0 XNKGCAHOYBFLCAHY2WGNCAP4KEOVCA40B3DMCADDR3RG.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\ASVDEX7CAT0PNLBCA9G3CYZCA7RZV77CAAZZMOWCAK1KSFKCADD0O6NCAYBGV7VCA4NM50VCATBJRX4CA72KUG6CAVPAWADCA248SWECA96WLCMCA8G2AIXCAE0 LV1ACAEWA7UACAA83DCQCAA7HMV1CA4D40J0CAQ2G64X.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AT0B3HDCAWWV5IVCAAYOCK1CAOL4P33CARN4Q9GCA5RMDEICA54168QCACILAOXCA1J35Q9CA4JQFCJCAFPP38CCA6W81SVCAF08HLHCAYHR5OGCAA6FOE1CAH0 9UKMCA8FVF9VCA0FI5SECAGYFT6WCASX5XHFCAHGALXM.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AV68ZJJCAM6JMH0CAQ9UXKSCAROJ7SMCAGTUQJLCAFN4KXWCADPQHTYCAYMZFF3CA6IUSE3CAC1JCW7CAEW1D6JCAWYXRLQCAJ89EXXCAVVBMUOCAY9QA6OCABL 8DZKCAMIJ5HZCAF96SA3CA02YIGUCAGAQ037CABOBC0L.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AVKCPEZCATEHL4YCA7D0PQCCAY92R0BCAJ1PIITCA12630TCAJFAZZXCA4P7SFWCAF8F7J3CA2BCXUICAY57OE3CA872T0BCAYC990ACA6JNQ0ICAY6IJ1KCADI NJY6CAG70WYECA1QQMLYCANA9SHQCALRETN5CAM0DJ2O.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AVWY87LCAD3OXECCAFXPQVECA26JJ40CAD9X4RCCAMZQJAHCATX1DX5CADBQE87CA8ANFPTCAH5871TCA20ORXDCALSBP7UCAKXZS1BCAM3EQJACAF1N2WHCALV L63MCAHSW5FACAAFBM6TCAJZ8R1OCAC1FCKLCAF92KMS.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AVXKQ6DCA1EFQRWCAA661NHCAZGJR73CADM6WGICA6SZI0ICA1DOFJ9CA1HB3KECA99K93YCABZK4SJCAX2WZINCA0I6WQ0CA254P5KCA99G6Z5CAZX29WUCABW YFXNCAIAYFLQCAGXOUAYCAMLFM8XCA1NCIEECAXN5T0F.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AWTPZ0HCA4YJ80PCADM6NGLCA1WYF31CA7I8L95CAEVOUR5CAIC2N9JCA2P1MZNCA5HT6IFCAQH6X42CAN07KPCCADJZR28CAFIO1VUCAM5L9ERCAAKBIQPCA13 0S4JCAO2J41OCAI91QXACA8PRF9ICAJQY34VCAW4CG1K.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AWXSMAZCAB2MRITCAW4YU5XCARMDBS6CAGOKBZ0CADHGZ1ZCAIG0YSKCAEHCKGECAWPRA3OCAW4WLSPCAFEPB0TCAATRXLNCASNWZ6QCAI0CSHZCA7GESYXCACW NUU0CAC7TS54CADDB361CA5R8XERCAGPLMB4CAVTVSOZ.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AY745C8CAUMLCJQCAI5CSY0CAUFYSA5CA8I96A0CALBAFSDCANDMT5FCAICXNZVCAD2O2X5CAQU56R1CAT5TFKZCAH0Q6XOCAONW93RCA5GCDNWCAAPSF62CAM0 F0X4CA7T9OX5CA8Y8TAMCANXG33KCANH8NLYCA2VE5AU.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AY8WFHYCAVJD1OVCASEVTRRCAMDZEU5CAWSPE8YCADG799ZCAZ7JL3KCAIIWZS8CAY3DDX7CA2LZ6EPCAN53JP6CA9QTMZFCAJWDPBBCAHUONKVCATZV9TWCA4J 0LCHCASMZJDQCANSP268CAR2QTBACASOW3IZCA8OAF5V.gif not found!
File\Folder C:\Users\Timo Oehnbrink\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1YSH3GSX\AYSGWH1CAQX4IKRCAS9KAZFCA8ITXSDCAI0VVM2CASNDO26CAUBTQ5NCABIXWX0CACR8MAMCA1CDW91CAX4K6AVCAW4YLVQCAQ122S9CAIHUH2RCAG0O6TICASN M4K0CARDU4RHCAVN21HJCADRLJNICA55DA3DCAXAHAGH.gif not found!

Registry entries deleted on Reboot...

Alt 16.02.2012, 17:11   #7
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



hallo markus,

vielen dank für die kompetente und vor allem auch sehr schnelle Hilfe. Hat alles geklappt.

Gruss Oehni

Alt 16.02.2012, 17:16   #8
markusg
/// Malware-holic
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



danke für den upload.
nutzt du den pc für onlinebanking, einkäufe, sonstige zahlungsabwicklungen, oder ähnlich wichtiges, wie berufliches?
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 16.02.2012, 17:26   #9
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



ja zum teil

Alt 16.02.2012, 17:28   #10
markusg
/// Malware-holic
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



also, du hast nen zbot trojaner, bank anrufen, notfall nummer:
116 116
onlinebanking sperren lassen.
der pc muss neu aufgesetzt und dann abgesichert werden
1. Datenrettung:2. Formatieren, Windows neuinstallieren:3. PC absichern: http://www.trojaner-board.de/96344-a...-rechners.html
4. alle Passwörter ändern!
5. nach PC Absicherung, die gesicherten Daten prüfen und falls sauber: zurückspielen.
6. werde ich dann noch was zum absichern von Onlinebanking mit Chip Card Reader + Star Money sagen.
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 16.02.2012, 17:31   #11
Oehni
 
50 € Windows Blockier Virus - Standard

50 € Windows Blockier Virus



alles klar. danke schonmal

Antwort

Themen zu 50 € Windows Blockier Virus
hallo zusammen, schonmal, virus, windows, zahlen, zusammen



Ähnliche Themen: 50 € Windows Blockier Virus


  1. Firefox geht auf Malware-Seite und wird von Avira blockier
    Log-Analyse und Auswertung - 21.02.2015 (6)
  2. Zombie News Virus / Windows Version Installer - Windows 7
    Log-Analyse und Auswertung - 21.12.2014 (1)
  3. Alter laptop Windows vista sp2 32bit: (vermutlich)virus blockt Windows services und einige Internet verbindungen
    Log-Analyse und Auswertung - 04.11.2014 (3)
  4. Windows 7: Avira meldet Boo/ cidox.b virus und Windows ist nicht mehr aktiviert
    Log-Analyse und Auswertung - 20.10.2014 (15)
  5. Windows 8, Windows PC-Repair Virus und wohl noch andere
    Log-Analyse und Auswertung - 07.05.2014 (27)
  6. Avira erst verschwunden und jetzt durch Gruppenrichtlinien blockier. Trojaner?
    Plagegeister aller Art und deren Bekämpfung - 02.03.2014 (3)
  7. Windows 7 Meldung Win32/Small-CA Virus entfernen, AntiVir findet nichts, Windows Update und Defender funktionieren nicht mehr
    Log-Analyse und Auswertung - 20.11.2013 (15)
  8. blockier-trojaner auf windows 7
    Plagegeister aller Art und deren Bekämpfung - 02.08.2012 (7)
  9. Windows blockier Virus
    Log-Analyse und Auswertung - 17.03.2012 (1)
  10. (müll) Trojaner "Windows wurde aus Sicherheitsgründen blockier" mit Logs
    Mülltonne - 14.03.2012 (0)
  11. Windows System blockiert - Virus Windows Vista
    Log-Analyse und Auswertung - 17.02.2012 (13)
  12. Windows 7: Computer wurde aus Sicherheitsgründen blockier
    Plagegeister aller Art und deren Bekämpfung - 16.02.2012 (15)
  13. Achtung! Aus Sicherheitsgründen wurde ihr Windowssystem blockier
    Log-Analyse und Auswertung - 16.02.2012 (5)
  14. ACHTUNG! Aus Sicherheitsgründen wurde Ihr Windowssystem blockier (Roter Text, schwarzer Hintergrund)
    Plagegeister aller Art und deren Bekämpfung - 13.02.2012 (7)
  15. C:\WINDOWS\system32\IE.exe möglicherweise unbekannter Virus NewHeur_PE Virus
    Plagegeister aller Art und deren Bekämpfung - 10.12.2010 (19)
  16. Windows Update und Windows Gadgets durch Virus blockiert
    Plagegeister aller Art und deren Bekämpfung - 01.10.2010 (19)
  17. Windows Update und Windows Gadgets durch Virus blockiert
    Mülltonne - 16.09.2010 (2)

Zum Thema 50 € Windows Blockier Virus - hallo zusammen, leider hat mich dieser ********* virus auch erwischt. "bitte zahlen sie 50 € per paysafe......" Wer kann mir helfen? Vielen Dank schonmal vorab MfG Oehni - 50 € Windows Blockier Virus...
Archiv
Du betrachtest: 50 € Windows Blockier Virus auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.