Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 07.03.2012, 09:06   #1
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



Hallo libes Trojaner-Board,
ich habe gestern meinen Laptop(Windows 7 64 Bit) gestartet. Gleich als er fertig hochgefahren war, erschien ein schwarzer Bildschirm mit roter Schrift, darauf stand "Windows wurde aus Sicherheitsgründen gesperrt". Und unten war ein Button wo stand "bezahlen und herunterladen". Aber im abgesicherten Modus, in dem ich jetzt mit netzwerktreibern schreibe, funktioniert alles einwandfrei. Kann mir bitte jemand helfen diesen ,wenn es einer ist, Virus zu entfernen? Wäre wirklich ultra nett von euch!!!

Alt 07.03.2012, 10:46   #2
markusg
/// Malware-holic
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



hi,
gehe in den abgesicherten modus mit netzwerk, melde dich im betroffenen konto an.
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Starte bitte die
    OTL.exe
    .
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Kopiere nun den Inhalt in die
    Textbox.
Code:
ATTFilter
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
         
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread
__________________

__________________

Alt 07.03.2012, 11:08   #3
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



ich schreibe gerade mit der psp, wie lange dauert es bis die dateien da sind? ich hab auf scan gedrueckt aber es scheint sich nix zu tun.
__________________

Alt 07.03.2012, 11:10   #4
markusg
/// Malware-holic
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



dauert schon ne weile...
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 07.03.2012, 11:12   #5
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



kann ich da zwischendurch weg?


Alt 07.03.2012, 11:48   #6
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



ich kann die datein nicht hochladen sie sind zu groß, was soll ich jetzt machen? Hochladen ging auch als Archiv nicht.

Geändert von Syntas (07.03.2012 um 11:58 Uhr)

Alt 07.03.2012, 12:00   #7
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



erstmal Extras.txt das geht:
OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 07.03.2012 11:58:50 - Run 1
OTL by OldTimer - Version 3.2.35.1     Folder = C:\Users\Paul\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 7,23 Gb Available Physical Memory | 90,63% Memory free
15,96 Gb Paging File | 15,23 Gb Available in Paging File | 95,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 200,28 Gb Total Space | 130,44 Gb Free Space | 65,13% Space Free | Partition Type: NTFS
Drive D: | 240,48 Gb Total Space | 140,84 Gb Free Space | 58,57% Space Free | Partition Type: NTFS
Unable to calculate disk information.
 
Computer Name: PAUL-PC | User Name: Paul | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0919C44F-F18A-4E3B-A737-03685272CE72}" = Windows Live Remote Service Resources
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{0F696557-180C-4813-A754-5D43969B0691}" = Windows Live Family Safety
"{11D96381-C349-60F6-6E95-013D80B6B68B}" = AMD Fuel
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{169C77B7-69C9-4648-9DD0-72B152AF269F}" = Windows Live Family Safety
"{17A4FD95-A507-43F1-BC92-D8572AF8340A}" = Windows Live Remote Service Resources
"{19F09425-3C20-4730-9E2A-FC2E17C9F362}" = Windows Live Remote Service Resources
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1C4C0E06-5E82-FEF7-7A35-6ED0FBA91307}" = AMD Media Foundation Decoders
"{1C55470A-7C9E-4C63-B466-6AFFC69E94E9}" = Windows Live Family Safety
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64)
"{26A24AE4-039D-4CA4-87B4-2F86417002FF}" = Java(TM) 7 Update 2 (64-bit)
"{289809B1-078A-49F3-83D0-7E51715B3915}" = Windows Live Family Safety
"{3946328A-5B3A-434C-A22B-64CF6652FBAD}" = Windows Live Family Safety
"{401C50F6-B443-43EE-8F27-A80DB19B03FD}" = Windows Live Family Safety
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7734509D-A1F7-4A5E-AF9D-77CD17AE41AF}" = Windows Live Family Safety
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{9210D7A2-DC28-43F6-92F9-E6CD4C729F7B}" = Windows Live Family Safety
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{B0BF8602-EA52-4B0A-A2BD-EDABB0977030}" = Windows Live Remote Client Resources
"{B22C8566-D522-4B40-A7AF-525F5A70D832}" = Windows Live Family Safety
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}" = Windows Live Remote Client Resources
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{CB7935EF-43EE-4C0F-AC02-B0E4DD5DAC17}" = Windows Live Family Safety
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}" = Windows Live Remote Client Resources
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E17025A7-39B6-375E-8F1E-20637D19549C}" = AMD Catalyst Install Manager
"{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources
"{FE4BE0BD-1EDB-4D24-9614-847B3C472887}" = Windows Live Family Safety
"{FF91D913-0F96-E8B4-7F24-138D64AEE63A}" = ccc-utility64
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Elantech" = ETDWare PS/2-X64 8.0.5.1_WHQL
"HyperCam 2" = HyperCam 2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}" = Sonic Focus
"{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
"{0A9256E0-C924-46DE-921B-F6C4548A1C64}" = Windows Live Messenger
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1A10EA04-AF48-AB19-DE2B-0F7ABF174B22}" = CCC Help Finnish
"{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
"{1AC6E8CB-B022-A7E1-66DA-E063B6CEC373}" = CCC Help Polish
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216030FF}" = Java(TM) 6 Update 30
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{29AFBD5C-71A8-DA79-508C-53E040EE3E71}" = CCC Help Italian
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2AD2DD70-27F7-4343-BB4E-DE50A32D854B}" = Windows Live Messenger
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{341697D8-9923-445E-B42A-529E5A99CB7A}" = syncables desktop SE
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{36BFE02C-3247-EC65-5B79-C31CA8A2EA6B}" = CCC Help Chinese Traditional
"{36E15666-43C1-91A7-0281-498F9D383B2C}" = simfy
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{38253529-D97D-4901-AE53-5CC9736D3A2E}" = ASUS AI Recovery
"{3993DD42-0739-7DCB-CB1E-512A1D0287B6}" = CCC Help Portuguese
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3D06DD4B-2D97-CB62-1639-66995969E0F7}" = CCC Help Chinese Standard
"{3D0C22FA-96D7-4789-BC5B-991A5A99BFFA}" = Windows Live Messenger
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{40D1F76D-FD54-6FF9-8A83-E2B6849FF755}" = CCC Help Korean
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A275FD1-2F24-4274-8C01-813F5AD1A92D}" = Windows Live Messenger
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4C699616-D8EA-9E2F-0246-68E0298A9081}" = CCC Help German
"{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
"{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
"{50B8CA72-98FD-21A1-3448-601998D44C1D}" = CCC Help Swedish
"{55C6CD22-E3A4-4937-CFFB-C7E11FA6A5A3}" = CCC Help Dutch
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{56050D82-138B-D911-CE56-DC4783CAA22C}" = CCC Help English
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5F6E678A-7E61-448A-86CB-BC2AD1E04138}" = Windows Live Messenger
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{615AA928-1427-735E-C728-55AF614CD3DA}" = Catalyst Control Center Profiles Mobile
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{62D16CB8-4DD5-0314-2AD7-C3C2BCADC234}" = CCC Help Thai
"{63AE67AA-1AB1-4565-B4EF-ABBC5C841E8D}" = Windows Live Messenger
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69424C7F-B6CA-8786-E0CA-89D5915C9486}" = CCC Help Turkish
"{6986737B-F286-40D1-87AF-938339DCF6AB}" = Windows Live Messenger
"{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
"{6A563426-3474-41C6-B847-42B39F1485B2}" = Windows Live Messenger
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E5E0E1B-FADA-9749-80F6-03A0A7967FEC}" = CCC Help Danish
"{709E38A9-7F80-4598-96CC-44B0D553FECE}" = Windows Live Messenger
"{71296ABE-826A-2D27-9FD0-503F39A4D7ED}" = CCC Help Japanese
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
"{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{8150221C-8F7E-4997-AD4E-AFDEE7F4B410}" = Wireless Console 3
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}" = פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A11EFE0E-A256-C423-223F-4808E88024DB}" = CCC Help Greek
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9868A83-9D72-2F2D-F549-A5BD46891987}" = CCC Help Norwegian
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2A07D8D-71DB-4929-9154-2D8A198F0FDA}" = CCC Help Spanish
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B480904D-F73F-4673-B034-8A5F492C9184}" = Nuance PDF Reader
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
"{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}" = Элемент управления Windows Live Mesh ActiveX для удаленных подключений
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C10C5955-9E14-A895-BF90-29388B133FEA}" = CCC Help Russian
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C32CE55C-12BA-4951-8797-0967FDEF556F}" = Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}" = Windows Live Mesh ActiveX Control for Remote Connections
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{C9440B47-2604-44EC-DA52-46DB4FA946ED}" = CCC Help French
"{CA234488-A4E4-FE20-DEF4-D68C43ACACA2}" = CCC Help Czech
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D0CE053E-0E5E-4C12-9BAE-D0F36021E911}" = POV-Ray for Windows v3.62
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D3694B69-6F8C-42D3-8A0A-EB2AB528C02C}" = Atheros Client Installation Program
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{DA9FD67B-0AAF-C83D-E2AC-C7D296FA0FE4}" = Catalyst Control Center Localization All
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE6698C9-53D4-67FB-2A2B-67CB1DEF89E5}" = AMD VISION Engine Control Center
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E18B30AA-6E2D-480C-B918-AF61009F4010}" = عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}" = Controlo ActiveX do Windows Live Mesh para Ligações Remotas
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1" = Game Park Console
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
"{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}" = Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις
"{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
"{F8857969-C550-C462-1785-DB5523AE133C}" = CCC Help Hungarian
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FDB51A10-A57D-29AB-90D1-3EEE29BD388F}" = Catalyst Control Center InstallProxy
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Akamai" = Akamai NetSession Interface
"Asus Vibe2.0" = AsusVibe2.0
"ASUS WebStorage" = ASUS WebStorage
"ASUS_Screensaver" = ASUS_Screensaver
"Avira AntiVir Desktop" = Avira Free Antivirus
"AviSynth" = AviSynth 2.5
"Bookworm Deluxe" = Bookworm Deluxe
"Cooking Dash" = Cooking Dash
"DealBulldog Toolbar" = DealBulldog Toolbar
"Exact Audio Copy" = Exact Audio Copy 1.0beta3
"FlorensiaEN" = FlorensiaEN 1.0
"Free Audio Converter_is1" = Free Audio Converter version 5.0.4.1228
"Free Video Dub_is1" = Free Video Dub version 2.0.3.1228
"Game Booster_is1" = Game Booster 3
"Governor of Poker" = Governor of Poker
"Hotel Dash Suite Success" = Hotel Dash Suite Success
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"Jewel Quest 3" = Jewel Quest 3
"LogMeIn Hamachi" = LogMeIn Hamachi
"Luxor 3" = Luxor 3
"Mahjongg dimensions" = Mahjongg dimensions
"Mozilla Firefox 10.0.2 (x86 de)" = Mozilla Firefox 10.0.2 (x86 de)
"Mozilla Thunderbird 10.0.2 (x86 de)" = Mozilla Thunderbird 10.0.2 (x86 de)
"PhotoScape" = PhotoScape
"Plants vs Zombies" = Plants vs Zombies
"PSP Video 9" = PSP Video 9 6
"Simfy" = simfy
"VLC media player" = VLC media player 1.1.11
"WinLiveSuite" = Windows Live Essentials
"World of Goo" = World of Goo
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"FileZilla Client" = FileZilla Client 3.5.3
"Google Chrome" = Google Chrome
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 27.01.2012 18:34:45 | Computer Name = Paul-PC | Source = Application Hang | ID = 1002
Description = Programm chrome.exe, Version 16.0.912.63 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: e80    Startzeit: 
01ccdd42f1eb121f    Endzeit: 33    Anwendungspfad: C:\Users\Paul\AppData\Local\Google\Chrome\Application\chrome.exe

Berichts-ID:
 19a076cd-4937-11e1-b575-742f68fb053d  
 
Error - 28.01.2012 07:05:14 | Computer Name = Paul-PC | Source = Application Hang | ID = 1002
Description = Programm NOTEPAD.EXE, Version 6.1.7600.16385 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 7c4    Startzeit: 01ccddaca1531b13    Endzeit: 5    Anwendungspfad: C:\Windows\system32\NOTEPAD.EXE

Berichts-ID:
 f0e14d84-499f-11e1-a5af-742f68fb053d  
 
Error - 28.01.2012 07:20:35 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 28.01.2012 18:55:55 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 29.01.2012 13:49:09 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 30.01.2012 10:31:19 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 30.01.2012 13:15:47 | Computer Name = Paul-PC | Source = Application Hang | ID = 1002
Description = Programm chrome.exe, Version 16.0.912.63 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 5c8    Startzeit: 
01ccdf6f381b44be    Endzeit: 23    Anwendungspfad: C:\Users\Paul\AppData\Local\Google\Chrome\Application\chrome.exe

Berichts-ID:
 09dc2788-4b66-11e1-a035-742f68fb053d  
 
Error - 31.01.2012 11:02:26 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 01.02.2012 13:21:58 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
Error - 02.02.2012 12:24:28 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description = 
 
[ System Events ]
Error - 22.02.2012 09:15:37 | Computer Name = Paul-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
 
Error - 22.02.2012 10:05:47 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 22.02.2012 10:18:30 | Computer Name = Paul-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \...\DR2 gefunden.
 
Error - 22.02.2012 10:19:07 | Computer Name = Paul-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \...\DR3 gefunden.
 
Error - 22.02.2012 13:14:52 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 23.02.2012 11:03:34 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 23.02.2012 12:45:17 | Computer Name = Paul-PC | Source = bowser | ID = 8003
Description = 
 
Error - 23.02.2012 14:28:58 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 23.02.2012 18:47:56 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 24.02.2012 17:55:57 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description = 
 
 
< End of report >
         
--- --- ---

Alt 07.03.2012, 12:05   #8
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



Ich glaube ich lad die otl.txt in teilen hoch, es geht einfach nicht anders ich hoffe es stört dich nicht!!!
Code:
ATTFilter
OTL logfile created on: 07.03.2012 11:58:50 - Run 1
OTL by OldTimer - Version 3.2.35.1     Folder = C:\Users\Paul\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 7,23 Gb Available Physical Memory | 90,63% Memory free
15,96 Gb Paging File | 15,23 Gb Available in Paging File | 95,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 200,28 Gb Total Space | 130,44 Gb Free Space | 65,13% Space Free | Partition Type: NTFS
Drive D: | 240,48 Gb Total Space | 140,84 Gb Free Space | 58,57% Space Free | Partition Type: NTFS
Unable to calculate disk information.
 
Computer Name: PAUL-PC | User Name: Paul | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Paul\Desktop\OTL.exe (OldTimer Tools)
 
 
========== Modules (No Company Name) ==========
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (Akamai) -- c:\program files (x86)\common files\akamai/netsession_win_7de0ed9.dll ()
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (Atheros Bt&Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Atheros Commnucations)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)
DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)
DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)
DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)
DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amd_xata) -- C:\Windows\SysNative\drivers\amd_xata.sys (Advanced Micro Devices)
DRV:64bit: - (amd_sata) -- C:\Windows\SysNative\drivers\amd_sata.sys (Advanced Micro Devices)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (amdiox64) -- C:\Windows\SysNative\drivers\amdiox64.sys (Advanced Micro Devices)
DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:64bit: - (netr28ux) -- C:\Windows\SysNative\drivers\netr28ux.sys (Ralink Technology Corp.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20) -- C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV:64bit: - (libusb0) -- C:\Windows\SysNative\drivers\libusb0.sys (hxxp://libusb-win32.sourceforge.net)
DRV - (ATKWMIACPIIO) -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys (ASUS)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..network.proxy.type: 0
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.02.26 20:46:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.02.25 15:43:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2012.01.07 14:56:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Extensions
[2012.02.28 16:58:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\ml7vzjyd.default\extensions
[2012.02.21 12:16:48 | 000,000,000 | ---D | M] (DealBulldog Toolbar) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\ml7vzjyd.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2012.02.21 23:51:17 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\ml7vzjyd.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.01.07 15:04:21 | 000,001,632 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\Mozilla\Firefox\Profiles\ml7vzjyd.default\searchplugins\firefox-add-ons.xml
[2012.01.07 14:56:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
() (No name found) -- C:\USERS\PAUL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ML7VZJYD.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI
() (No name found) -- C:\USERS\PAUL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ML7VZJYD.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI
[2012.02.26 20:46:33 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.02.26 20:46:26 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.02.26 20:46:26 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.02.26 20:46:26 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.26 20:46:26 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.26 20:46:26 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.26 20:46:26 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll
CHR - plugin: Zeon Plus (Enabled) = C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\
CHR - Extension: YouTube = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: Google-Suche = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Google Mail = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\DealBulldog Toolbar\tbcore3.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DealBulldog Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\DealBulldog Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Nuance PDF Reader-reminder] C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (Virage Logic Corporation / Sonic Focus)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUS)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Paul\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc)
O4 - HKCU..\Run: [SkypeM] C:\Users\Paul\AppData\Local\Skype\Skype.exe (Rockwell Software, Inc.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Paul\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Paul\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.0)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC40A0DF-AD84-4285-964C-6084333998ED}: DhcpNameServer = 100.100.2.16
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CD314412-FC20-428A-A816-6563F0197C8C}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {47B3BDBB-F2AE-4B55-95C8-921C25DB3B76} - .NET Framework
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {9793EDE2-499E-4A14-8220-523691D8F91B} - .NET Framework
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: {FE600E50-2C69-46D5-ACAA-2B617006245C} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
MsConfig:64bit - StartUpReg: ASUS Screen Saver Protector - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS)
MsConfig:64bit - StartUpReg: CLMLServer - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
MsConfig:64bit - StartUpReg: RtHDVCpl - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
 
CREATERESTOREPOINT
Error creating restore point.
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.03.07 11:56:17 | 000,584,704 | ---- | C] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTL.exe
[2012.03.06 09:25:29 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
[2012.02.29 19:32:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.02.29 19:32:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2012.02.28 21:14:16 | 000,054,272 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\SysNative\libusb0.dll
[2012.02.28 21:14:16 | 000,043,520 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\SysWow64\libusb0.dll
[2012.02.28 21:14:16 | 000,031,744 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\SysNative\drivers\libusb0.sys
[2012.02.28 21:14:15 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\RJL
[2012.02.25 15:43:58 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Thunderbird
[2012.02.25 15:43:58 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Thunderbird
[2012.02.25 15:43:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2012.02.24 15:20:51 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\EAC
[2012.02.24 15:20:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
[2012.02.24 15:20:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Exact Audio Copy
[2012.02.24 15:07:22 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\guetta
[2012.02.23 15:44:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioCon v1.0
[2012.02.23 15:44:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Basement Softworks
[2012.02.21 23:46:19 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Geckofx
[2012.02.21 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
[2012.02.21 23:45:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
[2012.02.21 23:45:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AviSynth 2.5
[2012.02.21 23:45:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Kawa
[2012.02.21 23:45:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Red Kawa
[2012.02.21 22:06:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\win7
[2012.02.21 17:17:54 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\für Michi
[2012.02.21 12:25:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012.02.21 12:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2012.02.21 12:25:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2012.02.21 12:16:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DealBulldog Toolbar
[2012.02.21 12:16:33 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperCam 2
[2012.02.21 12:16:32 | 000,000,000 | ---D | C] -- C:\Program Files\HyperCam 2
[2012.02.21 12:11:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\TempDIR
[2012.02.18 15:44:42 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\minecraft
[2012.02.17 13:33:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
[2012.02.17 13:33:29 | 000,000,000 | ---D | C] -- C:\Fraps
[2012.02.16 22:32:27 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\.Nitrous
[2012.02.14 22:10:06 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\FileZilla
[2012.02.14 22:10:04 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2012.02.14 22:10:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
[2012.02.12 23:07:26 | 000,000,000 | ---D | C] -- C:\Users\Paul\Documents\Planeten
[2012.02.12 22:54:59 | 000,000,000 | ---D | C] -- C:\Users\Paul\Documents\hmmm
[2012.02.12 22:47:50 | 000,000,000 | ---D | C] -- C:\Users\Paul\Documents\gerenderte Bilder
[2012.02.10 23:11:19 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\wichtige Seiten
[2012.02.10 22:58:41 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\.minecraft
[2012.02.10 15:45:27 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Windows Live
[2012.02.10 15:44:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\{58FCCF20-9080-4DE2-8415-3AE280E315B7}
[2012.02.09 19:33:31 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\skinedit
[2012.02.08 20:11:03 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\Texturen Pakete
 
========== Files - Modified Within 30 Days ==========
 
[2012.03.07 11:56:17 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTL.exe
[2012.03.07 11:53:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.03.07 11:53:29 | 2131,529,727 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.07 09:51:15 | 008,650,660 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.03.07 09:51:15 | 000,705,644 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2012.03.07 09:51:15 | 000,704,668 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
[2012.03.07 09:51:15 | 000,702,406 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2012.03.07 09:51:15 | 000,700,322 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat
[2012.03.07 09:51:15 | 000,690,556 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat
[2012.03.07 09:51:15 | 000,687,172 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat
[2012.03.07 09:51:15 | 000,665,340 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.03.07 09:51:15 | 000,627,222 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.03.07 09:51:15 | 000,562,984 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat
[2012.03.07 09:51:15 | 000,445,700 | ---- | M] () -- C:\Windows\SysNative\perfh001.dat
[2012.03.07 09:51:15 | 000,396,534 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat
[2012.03.07 09:51:15 | 000,364,736 | ---- | M] () -- C:\Windows\SysNative\perfh00D.dat
[2012.03.07 09:51:15 | 000,140,616 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
[2012.03.07 09:51:15 | 000,137,306 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat
[2012.03.07 09:51:15 | 000,136,494 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2012.03.07 09:51:15 | 000,136,070 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat
[2012.03.07 09:51:15 | 000,133,694 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2012.03.07 09:51:15 | 000,133,552 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.03.07 09:51:15 | 000,130,698 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat
[2012.03.07 09:51:15 | 000,109,942 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat
[2012.03.07 09:51:15 | 000,109,942 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.03.07 09:51:15 | 000,092,990 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat
[2012.03.07 09:51:15 | 000,082,538 | ---- | M] () -- C:\Windows\SysNative\perfc001.dat
[2012.03.07 09:51:15 | 000,072,648 | ---- | M] () -- C:\Windows\SysNative\perfc00D.dat
[2012.03.06 09:38:35 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.06 09:38:34 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.06 09:25:16 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012.03.06 09:25:12 | 000,002,066 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.03.04 18:20:31 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi06.bmp
[2012.03.04 18:20:30 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi05.bmp
[2012.03.04 18:20:27 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi04.bmp
[2012.03.04 18:20:24 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi03.bmp
[2012.03.04 18:20:21 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi02.bmp
[2012.03.04 18:20:18 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi01.bmp
[2012.03.04 18:20:14 | 000,003,602 | ---- | M] () -- C:\Users\Paul\Documents\testi.pov
[2012.03.04 18:12:21 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi.bmp
[2012.03.03 22:58:50 | 011,850,700 | ---- | M] () -- C:\Users\Paul\Documents\clip0010.avi
[2012.03.03 15:50:35 | 000,000,845 | ---- | M] () -- C:\Users\Paul\Desktop\FlorensiaEN.lnk
[2012.03.02 22:24:50 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi12.bmp
[2012.03.02 22:24:49 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi11.bmp
[2012.03.02 22:24:48 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi10.bmp
[2012.03.02 22:24:47 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi09.bmp
[2012.03.02 22:24:46 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi08.bmp
[2012.03.02 22:24:45 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi07.bmp
[2012.03.02 22:24:27 | 000,003,736 | ---- | M] () -- C:\Users\Paul\Documents\testi.pov.bak
[2012.03.02 22:21:51 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi15.bmp
[2012.03.02 22:21:50 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi14.bmp
[2012.03.02 22:21:49 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi13.bmp
[2012.03.02 22:20:50 | 000,000,199 | ---- | M] () -- C:\Users\Paul\Documents\clock.ini
[2012.03.02 22:20:46 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi008.bmp
[2012.03.02 22:20:46 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi007.bmp
[2012.03.02 22:20:45 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi006.bmp
[2012.03.02 22:20:43 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi005.bmp
[2012.03.02 22:20:42 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi004.bmp
[2012.03.02 22:20:41 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi003.bmp
[2012.03.02 22:20:39 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi002.bmp
[2012.03.02 22:20:38 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi001.bmp
[2012.03.02 22:11:20 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi009.bmp
[2012.03.02 21:18:19 | 000,000,200 | ---- | M] () -- C:\Users\Paul\Documents\clock.ini.bak
[2012.02.29 19:32:16 | 000,000,928 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2012.02.28 21:50:48 | 111,400,428 | ---- | M] () -- C:\Users\Paul\Documents\clip0009.avi
[2012.02.25 15:43:54 | 000,002,088 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012.02.24 15:20:45 | 000,001,072 | ---- | M] () -- C:\Users\Public\Desktop\Exact Audio Copy.lnk
[2012.02.23 15:55:08 | 000,002,230 | ---- | M] () -- C:\Users\Paul\Desktop\Free Audio Converter.lnk
[2012.02.21 23:45:44 | 000,002,192 | ---- | M] () -- C:\Users\Public\Desktop\PSP Video 9.lnk
[2012.02.21 17:25:57 | 192,586,532 | ---- | M] () -- C:\Users\Paul\Documents\clip0008.avi
[2012.02.21 12:39:36 | 037,831,336 | ---- | M] () -- C:\Users\Paul\Documents\clip0007.avi
[2012.02.21 12:36:12 | 074,021,638 | ---- | M] () -- C:\Users\Paul\Documents\clip0006.avi
[2012.02.21 12:33:28 | 000,720,912 | ---- | M] () -- C:\Users\Paul\Documents\clip0005.avi
[2012.02.21 12:32:57 | 005,183,772 | ---- | M] () -- C:\Users\Paul\Documents\clip0004.avi
[2012.02.21 12:27:48 | 011,794,332 | ---- | M] () -- C:\Users\Paul\Documents\clip0003.avi
[2012.02.21 12:16:33 | 000,000,933 | ---- | M] () -- C:\Users\Paul\Desktop\HyperCam 2.lnk
[2012.02.15 17:12:42 | 000,132,320 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012.02.15 13:35:00 | 000,293,616 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.02.14 22:10:04 | 000,002,002 | ---- | M] () -- C:\Users\Paul\Desktop\FileZilla Client.lnk
[2012.02.13 16:03:57 | 000,048,903 | ---- | M] () -- C:\Users\Paul\Documents\Planeten360.png
[2012.02.13 16:03:55 | 000,048,931 | ---- | M] () -- C:\Users\Paul\Documents\Planeten359.png
[2012.02.13 16:03:52 | 000,048,951 | ---- | M] () -- C:\Users\Paul\Documents\Planeten358.png
[2012.02.13 16:03:49 | 000,048,954 | ---- | M] () -- C:\Users\Paul\Documents\Planeten357.png
[2012.02.13 16:03:47 | 000,048,933 | ---- | M] () -- C:\Users\Paul\Documents\Planeten356.png
[2012.02.13 16:03:44 | 000,048,854 | ---- | M] () -- C:\Users\Paul\Documents\Planeten355.png
[2012.02.13 16:03:41 | 000,048,900 | ---- | M] () -- C:\Users\Paul\Documents\Planeten354.png
[2012.02.13 16:03:38 | 000,048,851 | ---- | M] () -- C:\Users\Paul\Documents\Planeten353.png
[2012.02.13 16:03:36 | 000,048,802 | ---- | M] () -- C:\Users\Paul\Documents\Planeten352.png
[2012.02.13 16:03:33 | 000,048,810 | ---- | M] () -- C:\Users\Paul\Documents\Planeten351.png
[2012.02.13 16:03:30 | 000,048,896 | ---- | M] () -- C:\Users\Paul\Documents\Planeten350.png
[2012.02.13 16:03:28 | 000,048,957 | ---- | M] () -- C:\Users\Paul\Documents\Planeten349.png
[2012.02.13 16:03:24 | 000,049,120 | ---- | M] () -- C:\Users\Paul\Documents\Planeten348.png
[2012.02.13 16:03:22 | 000,048,999 | ---- | M] () -- C:\Users\Paul\Documents\Planeten347.png
[2012.02.13 16:03:19 | 000,048,968 | ---- | M] () -- C:\Users\Paul\Documents\Planeten346.png
[2012.02.13 16:03:16 | 000,048,999 | ---- | M] () -- C:\Users\Paul\Documents\Planeten345.png
[2012.02.13 16:03:14 | 000,048,949 | ---- | M] () -- C:\Users\Paul\Documents\Planeten344.png
[2012.02.13 16:03:11 | 000,048,908 | ---- | M] () -- C:\Users\Paul\Documents\Planeten343.png
[2012.02.13 16:03:08 | 000,048,884 | ---- | M] () -- C:\Users\Paul\Documents\Planeten342.png
[2012.02.13 16:03:04 | 000,048,828 | ---- | M] () -- C:\Users\Paul\Documents\Planeten341.png
[2012.02.13 16:03:02 | 000,048,990 | ---- | M] () -- C:\Users\Paul\Documents\Planeten340.png
[2012.02.13 16:02:59 | 000,048,903 | ---- | M] () -- C:\Users\Paul\Documents\Planeten339.png
[2012.02.13 16:02:57 | 000,048,825 | ---- | M] () -- C:\Users\Paul\Documents\Planeten338.png
[2012.02.13 16:02:54 | 000,048,752 | ---- | M] () -- C:\Users\Paul\Documents\Planeten337.png
[2012.02.13 16:02:51 | 000,048,786 | ---- | M] () -- C:\Users\Paul\Documents\Planeten336.png
[2012.02.13 16:02:49 | 000,048,828 | ---- | M] () -- C:\Users\Paul\Documents\Planeten335.png
[2012.02.13 16:02:45 | 000,048,804 | ---- | M] () -- C:\Users\Paul\Documents\Planeten334.png
[2012.02.13 16:02:42 | 000,048,931 | ---- | M] () -- C:\Users\Paul\Documents\Planeten333.png
[2012.02.13 16:02:40 | 000,049,012 | ---- | M] () -- C:\Users\Paul\Documents\Planeten332.png
[2012.02.13 16:02:36 | 000,048,990 | ---- | M] () -- C:\Users\Paul\Documents\Planeten331.png
[2012.02.13 16:02:32 | 000,048,963 | ---- | M] () -- C:\Users\Paul\Documents\Planeten330.png
[2012.02.13 16:02:26 | 000,048,934 | ---- | M] () -- C:\Users\Paul\Documents\Planeten329.png
[2012.02.13 16:02:21 | 000,048,890 | ---- | M] () -- C:\Users\Paul\Documents\Planeten328.png
[2012.02.13 16:02:17 | 000,048,741 | ---- | M] () -- C:\Users\Paul\Documents\Planeten327.png
[2012.02.13 16:02:13 | 000,048,735 | ---- | M] () -- C:\Users\Paul\Documents\Planeten326.png
[2012.02.13 16:02:10 | 000,048,795 | ---- | M] () -- C:\Users\Paul\Documents\Planeten325.png
[2012.02.13 16:02:07 | 000,048,746 | ---- | M] () -- C:\Users\Paul\Documents\Planeten324.png
[2012.02.13 16:02:04 | 000,048,704 | ---- | M] () -- C:\Users\Paul\Documents\Planeten323.png
[2012.02.13 16:02:01 | 000,048,734 | ---- | M] () -- C:\Users\Paul\Documents\Planeten322.png
[2012.02.13 16:01:58 | 000,048,677 | ---- | M] () -- C:\Users\Paul\Documents\Planeten321.png
[2012.02.13 16:01:56 | 000,048,808 | ---- | M] () -- C:\Users\Paul\Documents\Planeten320.png
[2012.02.13 16:01:48 | 000,048,938 | ---- | M] () -- C:\Users\Paul\Documents\Planeten319.png
[2012.02.13 16:01:45 | 000,048,859 | ---- | M] () -- C:\Users\Paul\Documents\Planeten318.png
[2012.02.13 16:01:43 | 000,048,819 | ---- | M] () -- C:\Users\Paul\Documents\Planeten317.png
[2012.02.13 16:01:40 | 000,048,900 | ---- | M] () -- C:\Users\Paul\Documents\Planeten316.png
[2012.02.13 16:01:38 | 000,048,799 | ---- | M] () -- C:\Users\Paul\Documents\Planeten315.png
[2012.02.13 16:01:35 | 000,048,712 | ---- | M] () -- C:\Users\Paul\Documents\Planeten314.png
[2012.02.13 16:01:33 | 000,048,763 | ---- | M] () -- C:\Users\Paul\Documents\Planeten313.png
[2012.02.13 16:01:30 | 000,048,700 | ---- | M] () -- C:\Users\Paul\Documents\Planeten312.png
[2012.02.13 16:01:28 | 000,048,638 | ---- | M] () -- C:\Users\Paul\Documents\Planeten311.png
[2012.02.13 16:01:26 | 000,048,645 | ---- | M] () -- C:\Users\Paul\Documents\Planeten310.png
[2012.02.13 16:01:23 | 000,048,622 | ---- | M] () -- C:\Users\Paul\Documents\Planeten309.png
[2012.02.13 16:01:21 | 000,048,651 | ---- | M] () -- C:\Users\Paul\Documents\Planeten308.png
[2012.02.13 16:01:19 | 000,048,586 | ---- | M] () -- C:\Users\Paul\Documents\Planeten307.png
[2012.02.13 16:01:16 | 000,048,561 | ---- | M] () -- C:\Users\Paul\Documents\Planeten306.png
[2012.02.13 16:01:14 | 000,048,499 | ---- | M] () -- C:\Users\Paul\Documents\Planeten305.png
[2012.02.13 16:01:12 | 000,048,488 | ---- | M] () -- C:\Users\Paul\Documents\Planeten304.png
[2012.02.13 16:01:10 | 000,048,432 | ---- | M] () -- C:\Users\Paul\Documents\Planeten303.png
[2012.02.13 16:01:07 | 000,048,390 | ---- | M] () -- C:\Users\Paul\Documents\Planeten302.png
[2012.02.13 16:01:05 | 000,048,514 | ---- | M] () -- C:\Users\Paul\Documents\Planeten301.png
[2012.02.13 16:01:03 | 000,048,428 | ---- | M] () -- C:\Users\Paul\Documents\Planeten300.png
[2012.02.13 16:01:00 | 000,048,286 | ---- | M] () -- C:\Users\Paul\Documents\Planeten299.png
[2012.02.13 16:00:58 | 000,048,302 | ---- | M] () -- C:\Users\Paul\Documents\Planeten298.png
[2012.02.13 16:00:56 | 000,048,310 | ---- | M] () -- C:\Users\Paul\Documents\Planeten297.png
[2012.02.13 16:00:54 | 000,048,390 | ---- | M] () -- C:\Users\Paul\Documents\Planeten296.png
[2012.02.13 16:00:51 | 000,048,295 | ---- | M] () -- C:\Users\Paul\Documents\Planeten295.png
[2012.02.13 16:00:49 | 000,048,290 | ---- | M] () -- C:\Users\Paul\Documents\Planeten294.png
[2012.02.13 16:00:47 | 000,048,284 | ---- | M] () -- C:\Users\Paul\Documents\Planeten293.png
[2012.02.13 16:00:45 | 000,048,268 | ---- | M] () -- C:\Users\Paul\Documents\Planeten292.png
[2012.02.13 16:00:42 | 000,048,231 | ---- | M] () -- C:\Users\Paul\Documents\Planeten291.png
[2012.02.13 16:00:40 | 000,048,206 | ---- | M] () -- C:\Users\Paul\Documents\Planeten290.png
[2012.02.13 16:00:38 | 000,048,339 | ---- | M] () -- C:\Users\Paul\Documents\Planeten289.png
[2012.02.13 16:00:36 | 000,048,436 | ---- | M] () -- C:\Users\Paul\Documents\Planeten288.png
[2012.02.13 16:00:33 | 000,048,462 | ---- | M] () -- C:\Users\Paul\Documents\Planeten287.png
[2012.02.13 16:00:31 | 000,048,312 | ---- | M] () -- C:\Users\Paul\Documents\Planeten286.png
[2012.02.13 16:00:29 | 000,048,456 | ---- | M] () -- C:\Users\Paul\Documents\Planeten285.png
[2012.02.13 16:00:27 | 000,048,567 | ---- | M] () -- C:\Users\Paul\Documents\Planeten284.png
[2012.02.13 16:00:24 | 000,048,618 | ---- | M] () -- C:\Users\Paul\Documents\Planeten283.png
[2012.02.13 16:00:22 | 000,048,596 | ---- | M] () -- C:\Users\Paul\Documents\Planeten282.png
[2012.02.13 16:00:20 | 000,048,612 | ---- | M] () -- C:\Users\Paul\Documents\Planeten281.png
[2012.02.13 16:00:18 | 000,048,712 | ---- | M] () -- C:\Users\Paul\Documents\Planeten280.png
[2012.02.13 16:00:15 | 000,048,635 | ---- | M] () -- C:\Users\Paul\Documents\Planeten279.png
[2012.02.13 16:00:13 | 000,048,515 | ---- | M] () -- C:\Users\Paul\Documents\Planeten278.png
[2012.02.13 16:00:11 | 000,048,555 | ---- | M] () -- C:\Users\Paul\Documents\Planeten277.png
[2012.02.13 16:00:08 | 000,048,565 | ---- | M] () -- C:\Users\Paul\Documents\Planeten276.png
[2012.02.13 16:00:06 | 000,048,588 | ---- | M] () -- C:\Users\Paul\Documents\Planeten275.png
[2012.02.13 16:00:04 | 000,048,634 | ---- | M] () -- C:\Users\Paul\Documents\Planeten274.png
[2012.02.13 16:00:02 | 000,048,833 | ---- | M] () -- C:\Users\Paul\Documents\Planeten273.png
[2012.02.13 15:59:59 | 000,048,842 | ---- | M] () -- C:\Users\Paul\Documents\Planeten272.png
[2012.02.13 15:59:57 | 000,048,890 | ---- | M] () -- C:\Users\Paul\Documents\Planeten271.png
[2012.02.13 15:59:55 | 000,048,879 | ---- | M] () -- C:\Users\Paul\Documents\Planeten270.png
[2012.02.13 15:59:53 | 000,048,877 | ---- | M] () -- C:\Users\Paul\Documents\Planeten269.png
[2012.02.13 15:59:50 | 000,048,797 | ---- | M] () -- C:\Users\Paul\Documents\Planeten268.png
[2012.02.13 15:59:48 | 000,048,890 | ---- | M] () -- C:\Users\Paul\Documents\Planeten267.png
[2012.02.13 15:59:46 | 000,048,896 | ---- | M] () -- C:\Users\Paul\Documents\Planeten266.png
[2012.02.13 15:59:44 | 000,048,922 | ---- | M] () -- C:\Users\Paul\Documents\Planeten265.png
[2012.02.13 15:59:41 | 000,048,965 | ---- | M] () -- C:\Users\Paul\Documents\Planeten264.png
[2012.02.13 15:59:39 | 000,048,962 | ---- | M] () -- C:\Users\Paul\Documents\Planeten263.png
[2012.02.13 15:59:37 | 000,048,785 | ---- | M] () -- C:\Users\Paul\Documents\Planeten262.png
[2012.02.13 15:59:35 | 000,048,853 | ---- | M] () -- C:\Users\Paul\Documents\Planeten261.png
[2012.02.13 15:59:32 | 000,048,740 | ---- | M] () -- C:\Users\Paul\Documents\Planeten260.png
[2012.02.13 15:59:30 | 000,048,832 | ---- | M] () -- C:\Users\Paul\Documents\Planeten259.png
[2012.02.13 15:59:28 | 000,048,719 | ---- | M] () -- C:\Users\Paul\Documents\Planeten258.png
[2012.02.13 15:59:26 | 000,048,798 | ---- | M] () -- C:\Users\Paul\Documents\Planeten257.png
[2012.02.13 15:59:24 | 000,048,756 | ---- | M] () -- C:\Users\Paul\Documents\Planeten256.png
[2012.02.13 15:59:21 | 000,048,765 | ---- | M] () -- C:\Users\Paul\Documents\Planeten255.png
[2012.02.13 15:59:19 | 000,048,810 | ---- | M] () -- C:\Users\Paul\Documents\Planeten254.png
[2012.02.13 15:59:17 | 000,048,936 | ---- | M] () -- C:\Users\Paul\Documents\Planeten253.png
[2012.02.13 15:59:14 | 000,048,858 | ---- | M] () -- C:\Users\Paul\Documents\Planeten252.png
[2012.02.13 15:59:12 | 000,048,841 | ---- | M] () -- C:\Users\Paul\Documents\Planeten251.png
[2012.02.13 15:59:10 | 000,048,879 | ---- | M] () -- C:\Users\Paul\Documents\Planeten250.png
[2012.02.13 15:59:08 | 000,048,850 | ---- | M] () -- C:\Users\Paul\Documents\Planeten249.png
[2012.02.13 15:59:05 | 000,048,807 | ---- | M] () -- C:\Users\Paul\Documents\Planeten248.png
[2012.02.13 15:59:03 | 000,048,826 | ---- | M] () -- C:\Users\Paul\Documents\Planeten247.png
[2012.02.13 15:59:01 | 000,048,971 | ---- | M] () -- C:\Users\Paul\Documents\Planeten246.png
[2012.02.13 15:58:59 | 000,048,897 | ---- | M] () -- C:\Users\Paul\Documents\Planeten245.png
[2012.02.13 15:58:56 | 000,048,962 | ---- | M] () -- C:\Users\Paul\Documents\Planeten244.png
[2012.02.13 15:58:54 | 000,048,930 | ---- | M] () -- C:\Users\Paul\Documents\Planeten243.png
[2012.02.13 15:58:52 | 000,049,044 | ---- | M] () -- C:\Users\Paul\Documents\Planeten242.png
[2012.02.13 15:58:50 | 000,049,062 | ---- | M] () -- C:\Users\Paul\Documents\Planeten241.png
[2012.02.13 15:58:47 | 000,049,037 | ---- | M] () -- C:\Users\Paul\Documents\Planeten240.png
[2012.02.13 15:58:45 | 000,049,048 | ---- | M] () -- C:\Users\Paul\Documents\Planeten239.png
[2012.02.13 15:58:43 | 000,049,045 | ---- | M] () -- C:\Users\Paul\Documents\Planeten238.png
[2012.02.13 15:58:40 | 000,049,048 | ---- | M] () -- C:\Users\Paul\Documents\Planeten237.png
[2012.02.13 15:58:38 | 000,049,073 | ---- | M] () -- C:\Users\Paul\Documents\Planeten236.png
[2012.02.13 15:58:36 | 000,049,019 | ---- | M] () -- C:\Users\Paul\Documents\Planeten235.png
[2012.02.13 15:58:34 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten234.png
[2012.02.13 15:58:31 | 000,048,938 | ---- | M] () -- C:\Users\Paul\Documents\Planeten233.png
[2012.02.13 15:58:29 | 000,048,945 | ---- | M] () -- C:\Users\Paul\Documents\Planeten232.png
[2012.02.13 15:58:27 | 000,049,039 | ---- | M] () -- C:\Users\Paul\Documents\Planeten231.png
[2012.02.13 15:58:25 | 000,048,943 | ---- | M] () -- C:\Users\Paul\Documents\Planeten230.png
[2012.02.13 15:58:22 | 000,049,017 | ---- | M] () -- C:\Users\Paul\Documents\Planeten229.png
[2012.02.13 15:58:20 | 000,048,965 | ---- | M] () -- C:\Users\Paul\Documents\Planeten228.png
[2012.02.13 15:58:18 | 000,049,015 | ---- | M] () -- C:\Users\Paul\Documents\Planeten227.png
[2012.02.13 15:58:16 | 000,048,988 | ---- | M] () -- C:\Users\Paul\Documents\Planeten226.png
[2012.02.13 15:58:13 | 000,048,950 | ---- | M] () -- C:\Users\Paul\Documents\Planeten225.png
[2012.02.13 15:58:11 | 000,048,948 | ---- | M] () -- C:\Users\Paul\Documents\Planeten224.png
[2012.02.13 15:58:09 | 000,049,120 | ---- | M] () -- C:\Users\Paul\Documents\Planeten223.png
[2012.02.13 15:58:07 | 000,049,149 | ---- | M] () -- C:\Users\Paul\Documents\Planeten222.png
[2012.02.13 15:58:04 | 000,049,128 | ---- | M] () -- C:\Users\Paul\Documents\Planeten221.png
[2012.02.13 15:58:02 | 000,049,021 | ---- | M] () -- C:\Users\Paul\Documents\Planeten220.png
[2012.02.13 15:58:00 | 000,048,908 | ---- | M] () -- C:\Users\Paul\Documents\Planeten219.png
[2012.02.13 15:57:58 | 000,048,766 | ---- | M] () -- C:\Users\Paul\Documents\Planeten218.png
[2012.02.13 15:57:55 | 000,048,819 | ---- | M] () -- C:\Users\Paul\Documents\Planeten217.png
[2012.02.13 15:57:53 | 000,048,910 | ---- | M] () -- C:\Users\Paul\Documents\Planeten216.png
[2012.02.13 15:57:51 | 000,048,880 | ---- | M] () -- C:\Users\Paul\Documents\Planeten215.png
[2012.02.13 15:57:49 | 000,048,857 | ---- | M] () -- C:\Users\Paul\Documents\Planeten214.png
[2012.02.13 15:57:47 | 000,048,906 | ---- | M] () -- C:\Users\Paul\Documents\Planeten213.png
[2012.02.13 15:57:44 | 000,048,901 | ---- | M] () -- C:\Users\Paul\Documents\Planeten212.png
[2012.02.13 15:57:42 | 000,048,956 | ---- | M] () -- C:\Users\Paul\Documents\Planeten211.png
[2012.02.13 15:57:40 | 000,048,977 | ---- | M] () -- C:\Users\Paul\Documents\Planeten210.png
[2012.02.13 15:57:38 | 000,049,089 | ---- | M] () -- C:\Users\Paul\Documents\Planeten209.png
[2012.02.13 15:57:35 | 000,048,966 | ---- | M] () -- C:\Users\Paul\Documents\Planeten208.png
[2012.02.13 15:57:33 | 000,049,113 | ---- | M] () -- C:\Users\Paul\Documents\Planeten207.png
[2012.02.13 15:57:31 | 000,049,019 | ---- | M] () -- C:\Users\Paul\Documents\Planeten206.png
[2012.02.13 15:57:28 | 000,049,103 | ---- | M] () -- C:\Users\Paul\Documents\Planeten205.png
[2012.02.13 15:57:26 | 000,049,018 | ---- | M] () -- C:\Users\Paul\Documents\Planeten204.png
[2012.02.13 15:57:24 | 000,049,037 | ---- | M] () -- C:\Users\Paul\Documents\Planeten203.png
[2012.02.13 15:57:22 | 000,048,964 | ---- | M] () -- C:\Users\Paul\Documents\Planeten202.png
[2012.02.13 15:57:19 | 000,048,928 | ---- | M] () -- C:\Users\Paul\Documents\Planeten201.png
[2012.02.13 15:57:17 | 000,048,985 | ---- | M] () -- C:\Users\Paul\Documents\Planeten200.png
[2012.02.13 15:57:15 | 000,049,031 | ---- | M] () -- C:\Users\Paul\Documents\Planeten199.png
[2012.02.13 15:57:13 | 000,049,198 | ---- | M] () -- C:\Users\Paul\Documents\Planeten198.png
[2012.02.13 15:57:10 | 000,049,200 | ---- | M] () -- C:\Users\Paul\Documents\Planeten197.png
[2012.02.13 15:57:08 | 000,049,090 | ---- | M] () -- C:\Users\Paul\Documents\Planeten196.png
[2012.02.13 15:57:06 | 000,049,123 | ---- | M] () -- C:\Users\Paul\Documents\Planeten195.png
[2012.02.13 15:57:04 | 000,049,170 | ---- | M] () -- C:\Users\Paul\Documents\Planeten194.png
[2012.02.13 15:57:01 | 000,049,232 | ---- | M] () -- C:\Users\Paul\Documents\Planeten193.png
[2012.02.13 15:56:59 | 000,049,170 | ---- | M] () -- C:\Users\Paul\Documents\Planeten192.png
[2012.02.13 15:56:57 | 000,049,150 | ---- | M] () -- C:\Users\Paul\Documents\Planeten191.png
[2012.02.13 15:56:54 | 000,049,043 | ---- | M] () -- C:\Users\Paul\Documents\Planeten190.png
[2012.02.13 15:56:52 | 000,048,925 | ---- | M] () -- C:\Users\Paul\Documents\Planeten189.png
[2012.02.13 15:56:50 | 000,048,927 | ---- | M] () -- C:\Users\Paul\Documents\Planeten188.png
[2012.02.13 15:56:48 | 000,048,775 | ---- | M] () -- C:\Users\Paul\Documents\Planeten187.png
[2012.02.13 15:56:45 | 000,048,934 | ---- | M] () -- C:\Users\Paul\Documents\Planeten186.png
[2012.02.13 15:56:43 | 000,048,853 | ---- | M] () -- C:\Users\Paul\Documents\Planeten185.png
[2012.02.13 15:56:41 | 000,048,889 | ---- | M] () -- C:\Users\Paul\Documents\Planeten184.png
[2012.02.13 15:56:39 | 000,048,947 | ---- | M] () -- C:\Users\Paul\Documents\Planeten183.png
[2012.02.13 15:56:36 | 000,049,090 | ---- | M] () -- C:\Users\Paul\Documents\Planeten182.png
[2012.02.13 15:56:34 | 000,049,199 | ---- | M] () -- C:\Users\Paul\Documents\Planeten181.png
[2012.02.13 15:56:32 | 000,049,187 | ---- | M] () -- C:\Users\Paul\Documents\Planeten180.png
[2012.02.13 15:56:30 | 000,049,162 | ---- | M] () -- C:\Users\Paul\Documents\Planeten179.png
[2012.02.13 15:56:27 | 000,049,086 | ---- | M] () -- C:\Users\Paul\Documents\Planeten178.png
[2012.02.13 15:56:25 | 000,049,053 | ---- | M] () -- C:\Users\Paul\Documents\Planeten177.png
[2012.02.13 15:56:23 | 000,049,080 | ---- | M] () -- C:\Users\Paul\Documents\Planeten176.png
[2012.02.13 15:56:21 | 000,049,008 | ---- | M] () -- C:\Users\Paul\Documents\Planeten175.png
[2012.02.13 15:56:18 | 000,049,020 | ---- | M] () -- C:\Users\Paul\Documents\Planeten174.png
[2012.02.13 15:56:16 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten173.png
[2012.02.13 15:56:14 | 000,048,880 | ---- | M] () -- C:\Users\Paul\Documents\Planeten172.png
[2012.02.13 15:56:12 | 000,048,957 | ---- | M] () -- C:\Users\Paul\Documents\Planeten171.png
[2012.02.13 15:56:09 | 000,048,911 | ---- | M] () -- C:\Users\Paul\Documents\Planeten170.png
[2012.02.13 15:56:07 | 000,049,058 | ---- | M] () -- C:\Users\Paul\Documents\Planeten169.png
[2012.02.13 15:56:05 | 000,049,155 | ---- | M] () -- C:\Users\Paul\Documents\Planeten168.png
[2012.02.13 15:56:03 | 000,049,125 | ---- | M] () -- C:\Users\Paul\Documents\Planeten167.png
[2012.02.13 15:56:00 | 000,049,131 | ---- | M] () -- C:\Users\Paul\Documents\Planeten166.png
[2012.02.13 15:55:58 | 000,049,144 | ---- | M] () -- C:\Users\Paul\Documents\Planeten165.png
[2012.02.13 15:55:56 | 000,049,157 | ---- | M] () -- C:\Users\Paul\Documents\Planeten164.png
[2012.02.13 15:55:54 | 000,049,068 | ---- | M] () -- C:\Users\Paul\Documents\Planeten163.png
[2012.02.13 15:55:51 | 000,048,952 | ---- | M] () -- C:\Users\Paul\Documents\Planeten162.png
[2012.02.13 15:55:49 | 000,048,969 | ---- | M] () -- C:\Users\Paul\Documents\Planeten161.png
[2012.02.13 15:55:47 | 000,049,005 | ---- | M] () -- C:\Users\Paul\Documents\Planeten160.png
[2012.02.13 15:55:45 | 000,048,839 | ---- | M] () -- C:\Users\Paul\Documents\Planeten159.png
[2012.02.13 15:55:42 | 000,048,842 | ---- | M] () -- C:\Users\Paul\Documents\Planeten158.png
[2012.02.13 15:55:40 | 000,048,843 | ---- | M] () -- C:\Users\Paul\Documents\Planeten157.png
[2012.02.13 15:55:38 | 000,048,833 | ---- | M] () -- C:\Users\Paul\Documents\Planeten156.png
[2012.02.13 15:55:36 | 000,048,743 | ---- | M] () -- C:\Users\Paul\Documents\Planeten155.png
[2012.02.13 15:55:33 | 000,048,715 | ---- | M] () -- C:\Users\Paul\Documents\Planeten154.png
[2012.02.13 15:55:31 | 000,048,811 | ---- | M] () -- C:\Users\Paul\Documents\Planeten153.png
[2012.02.13 15:55:29 | 000,048,965 | ---- | M] () -- C:\Users\Paul\Documents\Planeten152.png
[2012.02.13 15:55:27 | 000,048,911 | ---- | M] () -- C:\Users\Paul\Documents\Planeten151.png
[2012.02.13 15:55:24 | 000,048,752 | ---- | M] () -- C:\Users\Paul\Documents\Planeten150.png
[2012.02.13 15:55:22 | 000,048,810 | ---- | M] () -- C:\Users\Paul\Documents\Planeten149.png
[2012.02.13 15:55:20 | 000,048,840 | ---- | M] () -- C:\Users\Paul\Documents\Planeten148.png
[2012.02.13 15:55:18 | 000,048,797 | ---- | M] () -- C:\Users\Paul\Documents\Planeten147.png
[2012.02.13 15:55:15 | 000,048,802 | ---- | M] () -- C:\Users\Paul\Documents\Planeten146.png
[2012.02.13 15:55:13 | 000,048,781 | ---- | M] () -- C:\Users\Paul\Documents\Planeten145.png
[2012.02.13 15:55:11 | 000,048,764 | ---- | M] () -- C:\Users\Paul\Documents\Planeten144.png
[2012.02.13 15:55:09 | 000,048,780 | ---- | M] () -- C:\Users\Paul\Documents\Planeten143.png
[2012.02.13 15:55:06 | 000,048,827 | ---- | M] () -- C:\Users\Paul\Documents\Planeten142.png
[2012.02.13 15:55:04 | 000,048,783 | ---- | M] () -- C:\Users\Paul\Documents\Planeten141.png
[2012.02.13 15:55:02 | 000,048,836 | ---- | M] () -- C:\Users\Paul\Documents\Planeten140.png
[2012.02.13 15:55:00 | 000,048,804 | ---- | M] () -- C:\Users\Paul\Documents\Planeten139.png
[2012.02.13 15:54:57 | 000,048,799 | ---- | M] () -- C:\Users\Paul\Documents\Planeten138.png
[2012.02.13 15:54:55 | 000,048,753 | ---- | M] () -- C:\Users\Paul\Documents\Planeten137.png
[2012.02.13 15:54:53 | 000,048,869 | ---- | M] () -- C:\Users\Paul\Documents\Planeten136.png
[2012.02.13 15:54:50 | 000,048,818 | ---- | M] () -- C:\Users\Paul\Documents\Planeten135.png
[2012.02.13 15:54:48 | 000,048,859 | ---- | M] () -- C:\Users\Paul\Documents\Planeten134.png
[2012.02.13 15:54:46 | 000,048,712 | ---- | M] () -- C:\Users\Paul\Documents\Planeten133.png
[2012.02.13 15:54:44 | 000,048,636 | ---- | M] () -- C:\Users\Paul\Documents\Planeten132.png
[2012.02.13 15:54:41 | 000,048,606 | ---- | M] () -- C:\Users\Paul\Documents\Planeten131.png
[2012.02.13 15:54:39 | 000,048,599 | ---- | M] () -- C:\Users\Paul\Documents\Planeten130.png
[2012.02.13 15:54:37 | 000,048,629 | ---- | M] () -- C:\Users\Paul\Documents\Planeten129.png
[2012.02.13 15:54:35 | 000,048,557 | ---- | M] () -- C:\Users\Paul\Documents\Planeten128.png
[2012.02.13 15:54:32 | 000,048,591 | ---- | M] () -- C:\Users\Paul\Documents\Planeten127.png
[2012.02.13 15:54:30 | 000,048,556 | ---- | M] () -- C:\Users\Paul\Documents\Planeten126.png
[2012.02.13 15:54:28 | 000,048,561 | ---- | M] () -- C:\Users\Paul\Documents\Planeten125.png
[2012.02.13 15:54:26 | 000,048,512 | ---- | M] () -- C:\Users\Paul\Documents\Planeten124.png
[2012.02.13 15:54:23 | 000,048,547 | ---- | M] () -- C:\Users\Paul\Documents\Planeten123.png
[2012.02.13 15:54:21 | 000,048,543 | ---- | M] () -- C:\Users\Paul\Documents\Planeten122.png
[2012.02.13 15:54:19 | 000,048,612 | ---- | M] () -- C:\Users\Paul\Documents\Planeten121.png
[2012.02.13 15:54:17 | 000,048,549 | ---- | M] () -- C:\Users\Paul\Documents\Planeten120.png
[2012.02.13 15:54:14 | 000,048,596 | ---- | M] () -- C:\Users\Paul\Documents\Planeten119.png
[2012.02.13 15:54:12 | 000,048,523 | ---- | M] () -- C:\Users\Paul\Documents\Planeten118.png
[2012.02.13 15:54:10 | 000,048,582 | ---- | M] () -- C:\Users\Paul\Documents\Planeten117.png
[2012.02.13 15:54:08 | 000,048,497 | ---- | M] () -- C:\Users\Paul\Documents\Planeten116.png
[2012.02.13 15:54:05 | 000,048,651 | ---- | M] () -- C:\Users\Paul\Documents\Planeten115.png
[2012.02.13 15:54:03 | 000,048,460 | ---- | M] () -- C:\Users\Paul\Documents\Planeten114.png
[2012.02.13 15:54:01 | 000,048,570 | ---- | M] () -- C:\Users\Paul\Documents\Planeten113.png
[2012.02.13 15:53:59 | 000,048,563 | ---- | M] () -- C:\Users\Paul\Documents\Planeten112.png
[2012.02.13 15:53:56 | 000,048,540 | ---- | M] () -- C:\Users\Paul\Documents\Planeten111.png
[2012.02.13 15:53:54 | 000,048,586 | ---- | M] () -- C:\Users\Paul\Documents\Planeten110.png
[2012.02.13 15:53:52 | 000,048,628 | ---- | M] () -- C:\Users\Paul\Documents\Planeten109.png
[2012.02.13 15:53:50 | 000,048,486 | ---- | M] () -- C:\Users\Paul\Documents\Planeten108.png
[2012.02.13 15:53:47 | 000,048,506 | ---- | M] () -- C:\Users\Paul\Documents\Planeten107.png
[2012.02.13 15:53:45 | 000,048,482 | ---- | M] () -- C:\Users\Paul\Documents\Planeten106.png
[2012.02.13 15:53:43 | 000,048,432 | ---- | M] () -- C:\Users\Paul\Documents\Planeten105.png
[2012.02.13 15:53:41 | 000,048,344 | ---- | M] () -- C:\Users\Paul\Documents\Planeten104.png
[2012.02.13 15:53:38 | 000,048,396 | ---- | M] () -- C:\Users\Paul\Documents\Planeten103.png
[2012.02.13 15:53:36 | 000,048,366 | ---- | M] () -- C:\Users\Paul\Documents\Planeten102.png
[2012.02.13 15:53:34 | 000,048,280 | ---- | M] () -- C:\Users\Paul\Documents\Planeten101.png
[2012.02.13 15:53:32 | 000,048,209 | ---- | M] () -- C:\Users\Paul\Documents\Planeten100.png
[2012.02.13 15:53:29 | 000,048,139 | ---- | M] () -- C:\Users\Paul\Documents\Planeten099.png
[2012.02.13 15:53:27 | 000,048,223 | ---- | M] () -- C:\Users\Paul\Documents\Planeten098.png
[2012.02.13 15:53:25 | 000,048,253 | ---- | M] () -- C:\Users\Paul\Documents\Planeten097.png
[2012.02.13 15:53:22 | 000,048,173 | ---- | M] () -- C:\Users\Paul\Documents\Planeten096.png
[2012.02.13 15:53:20 | 000,048,060 | ---- | M] () -- C:\Users\Paul\Documents\Planeten095.png
[2012.02.13 15:53:18 | 000,048,122 | ---- | M] () -- C:\Users\Paul\Documents\Planeten094.png
[2012.02.13 15:53:16 | 000,048,014 | ---- | M] () -- C:\Users\Paul\Documents\Planeten093.png
[2012.02.13 15:53:14 | 000,048,114 | ---- | M] () -- C:\Users\Paul\Documents\Planeten092.png
[2012.02.13 15:53:11 | 000,048,141 | ---- | M] () -- C:\Users\Paul\Documents\Planeten091.png
[2012.02.13 15:53:09 | 000,048,222 | ---- | M] () -- C:\Users\Paul\Documents\Planeten090.png
[2012.02.13 15:53:07 | 000,048,231 | ---- | M] () -- C:\Users\Paul\Documents\Planeten089.png
[2012.02.13 15:53:04 | 000,048,236 | ---- | M] () -- C:\Users\Paul\Documents\Planeten088.png
[2012.02.13 15:53:02 | 000,048,269 | ---- | M] () -- C:\Users\Paul\Documents\Planeten087.png
[2012.02.13 15:53:00 | 000,048,362 | ---- | M] () -- C:\Users\Paul\Documents\Planeten086.png
[2012.02.13 15:52:58 | 000,048,271 | ---- | M] () -- C:\Users\Paul\Documents\Planeten085.png
[2012.02.13 15:52:55 | 000,048,316 | ---- | M] () -- C:\Users\Paul\Documents\Planeten084.png
[2012.02.13 15:52:53 | 000,048,342 | ---- | M] () -- C:\Users\Paul\Documents\Planeten083.png
[2012.02.13 15:52:51 | 000,048,314 | ---- | M] () -- C:\Users\Paul\Documents\Planeten082.png
[2012.02.13 15:52:49 | 000,048,333 | ---- | M] () -- C:\Users\Paul\Documents\Planeten081.png
[2012.02.13 15:52:47 | 000,048,302 | ---- | M] () -- C:\Users\Paul\Documents\Planeten080.png
[2012.02.13 15:52:44 | 000,048,360 | ---- | M] () -- C:\Users\Paul\Documents\Planeten079.png
[2012.02.13 15:52:42 | 000,048,481 | ---- | M] () -- C:\Users\Paul\Documents\Planeten078.png
[2012.02.13 15:52:40 | 000,048,514 | ---- | M] () -- C:\Users\Paul\Documents\Planeten077.png
[2012.02.13 15:52:38 | 000,048,434 | ---- | M] () -- C:\Users\Paul\Documents\Planeten076.png
[2012.02.13 15:52:35 | 000,048,520 | ---- | M] () -- C:\Users\Paul\Documents\Planeten075.png
[2012.02.13 15:52:33 | 000,048,494 | ---- | M] () -- C:\Users\Paul\Documents\Planeten074.png
[2012.02.13 15:52:31 | 000,048,549 | ---- | M] () -- C:\Users\Paul\Documents\Planeten073.png
[2012.02.13 15:52:29 | 000,048,480 | ---- | M] () -- C:\Users\Paul\Documents\Planeten072.png
[2012.02.13 15:52:26 | 000,048,620 | ---- | M] () -- C:\Users\Paul\Documents\Planeten071.png
[2012.02.13 15:52:24 | 000,048,636 | ---- | M] () -- C:\Users\Paul\Documents\Planeten070.png
[2012.02.13 15:52:22 | 000,048,590 | ---- | M] () -- C:\Users\Paul\Documents\Planeten069.png
[2012.02.13 15:52:20 | 000,048,676 | ---- | M] () -- C:\Users\Paul\Documents\Planeten068.png
[2012.02.13 15:52:17 | 000,048,654 | ---- | M] () -- C:\Users\Paul\Documents\Planeten067.png
[2012.02.13 15:52:15 | 000,048,646 | ---- | M] () -- C:\Users\Paul\Documents\Planeten066.png
[2012.02.13 15:52:13 | 000,048,714 | ---- | M] () -- C:\Users\Paul\Documents\Planeten065.png
[2012.02.13 15:52:11 | 000,048,699 | ---- | M] () -- C:\Users\Paul\Documents\Planeten064.png
[2012.02.13 15:52:08 | 000,048,732 | ---- | M] () -- C:\Users\Paul\Documents\Planeten063.png
[2012.02.13 15:52:06 | 000,048,813 | ---- | M] () -- C:\Users\Paul\Documents\Planeten062.png
[2012.02.13 15:52:04 | 000,048,970 | ---- | M] () -- C:\Users\Paul\Documents\Planeten061.png
[2012.02.13 15:52:01 | 000,048,912 | ---- | M] () -- C:\Users\Paul\Documents\Planeten060.png
[2012.02.13 15:51:59 | 000,048,988 | ---- | M] () -- C:\Users\Paul\Documents\Planeten059.png
[2012.02.13 15:51:57 | 000,048,960 | ---- | M] () -- C:\Users\Paul\Documents\Planeten058.png
[2012.02.13 15:51:55 | 000,049,059 | ---- | M] () -- C:\Users\Paul\Documents\Planeten057.png
[2012.02.13 15:51:52 | 000,048,994 | ---- | M] () -- C:\Users\Paul\Documents\Planeten056.png
[2012.02.13 15:51:50 | 000,048,954 | ---- | M] () -- C:\Users\Paul\Documents\Planeten055.png
[2012.02.13 15:51:48 | 000,048,939 | ---- | M] () -- C:\Users\Paul\Documents\Planeten054.png
[2012.02.13 15:51:46 | 000,048,864 | ---- | M] () -- C:\Users\Paul\Documents\Planeten053.png
[2012.02.13 15:51:43 | 000,048,800 | ---- | M] () -- C:\Users\Paul\Documents\Planeten052.png
[2012.02.13 15:51:41 | 000,048,745 | ---- | M] () -- C:\Users\Paul\Documents\Planeten051.png
[2012.02.13 15:51:39 | 000,048,829 | ---- | M] () -- C:\Users\Paul\Documents\Planeten050.png
[2012.02.13 15:51:37 | 000,048,894 | ---- | M] () -- C:\Users\Paul\Documents\Planeten049.png
[2012.02.13 15:51:34 | 000,048,857 | ---- | M] () -- C:\Users\Paul\Documents\Planeten048.png
[2012.02.13 15:51:32 | 000,048,870 | ---- | M] () -- C:\Users\Paul\Documents\Planeten047.png
[2012.02.13 15:51:30 | 000,048,813 | ---- | M] () -- C:\Users\Paul\Documents\Planeten046.png
[2012.02.13 15:51:27 | 000,048,854 | ---- | M] () -- C:\Users\Paul\Documents\Planeten045.png
[2012.02.13 15:51:25 | 000,048,869 | ---- | M] () -- C:\Users\Paul\Documents\Planeten044.png
[2012.02.13 15:51:23 | 000,048,885 | ---- | M] () -- C:\Users\Paul\Documents\Planeten043.png
[2012.02.13 15:51:21 | 000,048,956 | ---- | M] () -- C:\Users\Paul\Documents\Planeten042.png
[2012.02.13 15:51:18 | 000,048,930 | ---- | M] () -- C:\Users\Paul\Documents\Planeten041.png
[2012.02.13 15:51:16 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten040.png
[2012.02.13 15:51:14 | 000,048,885 | ---- | M] () -- C:\Users\Paul\Documents\Planeten039.png
[2012.02.13 15:51:11 | 000,048,813 | ---- | M] () -- C:\Users\Paul\Documents\Planeten038.png
[2012.02.13 15:51:09 | 000,048,803 | ---- | M] () -- C:\Users\Paul\Documents\Planeten037.png
[2012.02.13 15:51:07 | 000,048,748 | ---- | M] () -- C:\Users\Paul\Documents\Planeten036.png
[2012.02.13 15:51:05 | 000,048,882 | ---- | M] () -- C:\Users\Paul\Documents\Planeten035.png
[2012.02.13 15:51:02 | 000,048,938 | ---- | M] () -- C:\Users\Paul\Documents\Planeten034.png
[2012.02.13 15:51:00 | 000,048,905 | ---- | M] () -- C:\Users\Paul\Documents\Planeten033.png
[2012.02.13 15:50:58 | 000,048,908 | ---- | M] () -- C:\Users\Paul\Documents\Planeten032.png
[2012.02.13 15:50:56 | 000,049,015 | ---- | M] () -- C:\Users\Paul\Documents\Planeten031.png
[2012.02.13 15:50:53 | 000,048,969 | ---- | M] () -- C:\Users\Paul\Documents\Planeten030.png
[2012.02.13 15:50:51 | 000,048,941 | ---- | M] () -- C:\Users\Paul\Documents\Planeten029.png
[2012.02.13 15:50:49 | 000,048,968 | ---- | M] () -- C:\Users\Paul\Documents\Planeten028.png
[2012.02.13 15:50:47 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten027.png
[2012.02.13 15:50:44 | 000,049,068 | ---- | M] () -- C:\Users\Paul\Documents\Planeten026.png
[2012.02.13 15:50:42 | 000,048,918 | ---- | M] () -- C:\Users\Paul\Documents\Planeten025.png
[2012.02.13 15:50:40 | 000,049,027 | ---- | M] () -- C:\Users\Paul\Documents\Planeten024.png
[2012.02.13 15:50:38 | 000,048,972 | ---- | M] () -- C:\Users\Paul\Documents\Planeten023.png
[2012.02.13 15:50:35 | 000,048,819 | ---- | M] () -- C:\Users\Paul\Documents\Planeten022.png
[2012.02.13 15:50:33 | 000,048,900 | ---- | M] () -- C:\Users\Paul\Documents\Planeten021.png
[2012.02.13 15:50:31 | 000,048,879 | ---- | M] () -- C:\Users\Paul\Documents\Planeten020.png
[2012.02.13 15:50:28 | 000,048,892 | ---- | M] () -- C:\Users\Paul\Documents\Planeten019.png
[2012.02.13 15:50:26 | 000,048,935 | ---- | M] () -- C:\Users\Paul\Documents\Planeten018.png
[2012.02.13 15:50:24 | 000,049,007 | ---- | M] () -- C:\Users\Paul\Documents\Planeten017.png
[2012.02.13 15:50:22 | 000,048,950 | ---- | M] () -- C:\Users\Paul\Documents\Planeten016.png
[2012.02.13 15:50:19 | 000,049,059 | ---- | M] () -- C:\Users\Paul\Documents\Planeten015.png
[2012.02.13 15:50:17 | 000,049,071 | ---- | M] () -- C:\Users\Paul\Documents\Planeten014.png
[2012.02.13 15:50:15 | 000,049,012 | ---- | M] () -- C:\Users\Paul\Documents\Planeten013.png
[2012.02.13 15:50:13 | 000,048,996 | ---- | M] () -- C:\Users\Paul\Documents\Planeten012.png
[2012.02.13 15:50:10 | 000,048,972 | ---- | M] () -- C:\Users\Paul\Documents\Planeten011.png
[2012.02.13 15:50:08 | 000,049,019 | ---- | M] () -- C:\Users\Paul\Documents\Planeten010.png
[2012.02.13 15:50:06 | 000,048,941 | ---- | M] () -- C:\Users\Paul\Documents\Planeten009.png
[2012.02.13 15:50:04 | 000,048,876 | ---- | M] () -- C:\Users\Paul\Documents\Planeten008.png
[2012.02.13 15:50:01 | 000,048,848 | ---- | M] () -- C:\Users\Paul\Documents\Planeten007.png
[2012.02.13 15:49:59 | 000,048,858 | ---- | M] () -- C:\Users\Paul\Documents\Planeten006.png
[2012.02.13 15:49:57 | 000,048,849 | ---- | M] () -- C:\Users\Paul\Documents\Planeten005.png
[2012.02.13 15:49:55 | 000,048,876 | ---- | M] () -- C:\Users\Paul\Documents\Planeten004.png
[2012.02.13 15:49:52 | 000,048,918 | ---- | M] () -- C:\Users\Paul\Documents\Planeten003.png
[2012.02.13 15:49:50 | 000,048,937 | ---- | M] () -- C:\Users\Paul\Documents\Planeten002.png
[2012.02.13 15:49:48 | 000,048,966 | ---- | M] () -- C:\Users\Paul\Documents\Planeten001.png
[2012.02.13 15:45:53 | 000,003,554 | ---- | M] () -- C:\Users\Paul\Documents\Planeten.pov
[2012.02.13 12:43:56 | 000,004,161 | ---- | M] () -- C:\Users\Paul\Documents\Schneemann.pov
[2012.02.12 23:46:43 | 000,004,233 | ---- | M] () -- C:\Users\Paul\Documents\Schneemann.pov.bak
[2012.02.12 23:18:50 | 000,002,997 | ---- | M] () -- C:\Users\Paul\Documents\Planeten.pov.bak
[2012.02.12 22:37:14 | 000,000,233 | ---- | M] () -- C:\Users\Paul\Documents\sphere1.ini
[2012.02.12 22:31:51 | 000,000,230 | ---- | M] () -- C:\Users\Paul\Documents\sphere1.ini.bak
[2012.02.12 22:31:17 | 000,000,837 | ---- | M] () -- C:\Users\Paul\Documents\sphere1.pov
[2012.02.09 19:43:57 | 000,000,200 | ---- | M] () -- C:\Users\Paul\Documents\Minecraft-Skin.png
 
========== Files Created - No Company Name ==========
 
[2012.03.03 22:58:09 | 011,850,700 | ---- | C] () -- C:\Users\Paul\Documents\clip0010.avi
[2012.03.03 15:50:35 | 000,000,845 | ---- | C] () -- C:\Users\Paul\Desktop\FlorensiaEN.lnk
[2012.03.02 22:21:50 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi15.bmp
[2012.03.02 22:21:49 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi14.bmp
[2012.03.02 22:21:48 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi13.bmp
[2012.03.02 22:21:05 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi12.bmp
[2012.03.02 22:21:04 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi11.bmp
[2012.03.02 22:21:02 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi10.bmp
[2012.03.02 22:21:01 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi09.bmp
[2012.03.02 22:21:00 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi08.bmp
[2012.03.02 22:20:58 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi07.bmp
[2012.03.02 22:20:57 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi06.bmp
[2012.03.02 22:20:56 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi05.bmp
[2012.03.02 22:20:54 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi04.bmp
[2012.03.02 22:20:53 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi03.bmp
[2012.03.02 22:20:52 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi02.bmp
[2012.03.02 22:20:51 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi01.bmp
[2012.03.02 22:11:19 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi009.bmp
[2012.03.02 22:11:18 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi008.bmp
[2012.03.02 22:11:17 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi007.bmp
[2012.03.02 22:11:16 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi006.bmp
[2012.03.02 21:18:24 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi005.bmp
[2012.03.02 21:18:23 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi004.bmp
[2012.03.02 21:18:21 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi003.bmp
[2012.03.02 21:18:20 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi002.bmp
[2012.03.02 21:18:19 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi001.bmp
[2012.03.02 21:17:06 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi.bmp
[2012.03.02 21:17:06 | 000,003,736 | ---- | C] () --
         

Alt 07.03.2012, 12:06   #9
markusg
/// Malware-holic
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



edit: sehe es mir an, moment
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 07.03.2012, 12:07   #10
markusg
/// Malware-holic
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



edit
.........
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 07.03.2012, 12:08   #11
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



Teil 2!
Code:
ATTFilter
C:\Users\Paul\Documents\testi.pov.bak
[2012.03.02 21:17:06 | 000,003,602 | ---- | C] () -- C:\Users\Paul\Documents\testi.pov
[2012.02.28 21:48:37 | 111,400,428 | ---- | C] () -- C:\Users\Paul\Documents\clip0009.avi
[2012.02.25 15:43:54 | 000,002,100 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2012.02.25 15:43:54 | 000,002,088 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012.02.24 15:20:45 | 000,001,072 | ---- | C] () -- C:\Users\Public\Desktop\Exact Audio Copy.lnk
[2012.02.23 15:55:08 | 000,002,230 | ---- | C] () -- C:\Users\Paul\Desktop\Free Audio Converter.lnk
[2012.02.21 23:45:44 | 000,002,192 | ---- | C] () -- C:\Users\Public\Desktop\PSP Video 9.lnk
[2012.02.21 17:24:12 | 192,586,532 | ---- | C] () -- C:\Users\Paul\Documents\clip0008.avi
[2012.02.21 12:38:23 | 037,831,336 | ---- | C] () -- C:\Users\Paul\Documents\clip0007.avi
[2012.02.21 12:35:00 | 074,021,638 | ---- | C] () -- C:\Users\Paul\Documents\clip0006.avi
[2012.02.21 12:33:27 | 000,720,912 | ---- | C] () -- C:\Users\Paul\Documents\clip0005.avi
[2012.02.21 12:32:51 | 005,183,772 | ---- | C] () -- C:\Users\Paul\Documents\clip0004.avi
[2012.02.21 12:27:36 | 011,794,332 | ---- | C] () -- C:\Users\Paul\Documents\clip0003.avi
[2012.02.21 12:16:33 | 000,000,933 | ---- | C] () -- C:\Users\Paul\Desktop\HyperCam 2.lnk
[2012.02.14 22:10:04 | 000,002,002 | ---- | C] () -- C:\Users\Paul\Desktop\FileZilla Client.lnk
[2012.02.13 16:03:55 | 000,048,903 | ---- | C] () -- C:\Users\Paul\Documents\Planeten360.png
[2012.02.13 16:03:52 | 000,048,931 | ---- | C] () -- C:\Users\Paul\Documents\Planeten359.png
[2012.02.13 16:03:50 | 000,048,951 | ---- | C] () -- C:\Users\Paul\Documents\Planeten358.png
[2012.02.13 16:03:47 | 000,048,954 | ---- | C] () -- C:\Users\Paul\Documents\Planeten357.png
[2012.02.13 16:03:44 | 000,048,933 | ---- | C] () -- C:\Users\Paul\Documents\Planeten356.png
[2012.02.13 16:03:42 | 000,048,854 | ---- | C] () -- C:\Users\Paul\Documents\Planeten355.png
[2012.02.13 16:03:38 | 000,048,900 | ---- | C] () -- C:\Users\Paul\Documents\Planeten354.png
[2012.02.13 16:03:36 | 000,048,851 | ---- | C] () -- C:\Users\Paul\Documents\Planeten353.png
[2012.02.13 16:03:33 | 000,048,802 | ---- | C] () -- C:\Users\Paul\Documents\Planeten352.png
[2012.02.13 16:03:30 | 000,048,810 | ---- | C] () -- C:\Users\Paul\Documents\Planeten351.png
[2012.02.13 16:03:28 | 000,048,896 | ---- | C] () -- C:\Users\Paul\Documents\Planeten350.png
[2012.02.13 16:03:25 | 000,048,957 | ---- | C] () -- C:\Users\Paul\Documents\Planeten349.png
[2012.02.13 16:03:22 | 000,049,120 | ---- | C] () -- C:\Users\Paul\Documents\Planeten348.png
[2012.02.13 16:03:19 | 000,048,999 | ---- | C] () -- C:\Users\Paul\Documents\Planeten347.png
[2012.02.13 16:03:17 | 000,048,968 | ---- | C] () -- C:\Users\Paul\Documents\Planeten346.png
[2012.02.13 16:03:14 | 000,048,999 | ---- | C] () -- C:\Users\Paul\Documents\Planeten345.png
[2012.02.13 16:03:11 | 000,048,949 | ---- | C] () -- C:\Users\Paul\Documents\Planeten344.png
[2012.02.13 16:03:08 | 000,048,908 | ---- | C] () -- C:\Users\Paul\Documents\Planeten343.png
[2012.02.13 16:03:05 | 000,048,884 | ---- | C] () -- C:\Users\Paul\Documents\Planeten342.png
[2012.02.13 16:03:02 | 000,048,828 | ---- | C] () -- C:\Users\Paul\Documents\Planeten341.png
[2012.02.13 16:02:59 | 000,048,990 | ---- | C] () -- C:\Users\Paul\Documents\Planeten340.png
[2012.02.13 16:02:57 | 000,048,903 | ---- | C] () -- C:\Users\Paul\Documents\Planeten339.png
[2012.02.13 16:02:54 | 000,048,825 | ---- | C] () -- C:\Users\Paul\Documents\Planeten338.png
[2012.02.13 16:02:52 | 000,048,752 | ---- | C] () -- C:\Users\Paul\Documents\Planeten337.png
[2012.02.13 16:02:49 | 000,048,786 | ---- | C] () -- C:\Users\Paul\Documents\Planeten336.png
[2012.02.13 16:02:46 | 000,048,828 | ---- | C] () -- C:\Users\Paul\Documents\Planeten335.png
[2012.02.13 16:02:42 | 000,048,804 | ---- | C] () -- C:\Users\Paul\Documents\Planeten334.png
[2012.02.13 16:02:40 | 000,048,931 | ---- | C] () -- C:\Users\Paul\Documents\Planeten333.png
[2012.02.13 16:02:36 | 000,049,012 | ---- | C] () -- C:\Users\Paul\Documents\Planeten332.png
[2012.02.13 16:02:32 | 000,048,990 | ---- | C] () -- C:\Users\Paul\Documents\Planeten331.png
[2012.02.13 16:02:27 | 000,048,963 | ---- | C] () -- C:\Users\Paul\Documents\Planeten330.png
[2012.02.13 16:02:21 | 000,048,934 | ---- | C] () -- C:\Users\Paul\Documents\Planeten329.png
[2012.02.13 16:02:17 | 000,048,890 | ---- | C] () -- C:\Users\Paul\Documents\Planeten328.png
[2012.02.13 16:02:14 | 000,048,741 | ---- | C] () -- C:\Users\Paul\Documents\Planeten327.png
[2012.02.13 16:02:11 | 000,048,735 | ---- | C] () -- C:\Users\Paul\Documents\Planeten326.png
[2012.02.13 16:02:07 | 000,048,795 | ---- | C] () -- C:\Users\Paul\Documents\Planeten325.png
[2012.02.13 16:02:04 | 000,048,746 | ---- | C] () -- C:\Users\Paul\Documents\Planeten324.png
[2012.02.13 16:02:02 | 000,048,704 | ---- | C] () -- C:\Users\Paul\Documents\Planeten323.png
[2012.02.13 16:01:59 | 000,048,734 | ---- | C] () -- C:\Users\Paul\Documents\Planeten322.png
[2012.02.13 16:01:56 | 000,048,677 | ---- | C] () -- C:\Users\Paul\Documents\Planeten321.png
[2012.02.13 16:01:49 | 000,048,808 | ---- | C] () -- C:\Users\Paul\Documents\Planeten320.png
[2012.02.13 16:01:46 | 000,048,938 | ---- | C] () -- C:\Users\Paul\Documents\Planeten319.png
[2012.02.13 16:01:43 | 000,048,859 | ---- | C] () -- C:\Users\Paul\Documents\Planeten318.png
[2012.02.13 16:01:41 | 000,048,819 | ---- | C] () -- C:\Users\Paul\Documents\Planeten317.png
[2012.02.13 16:01:38 | 000,048,900 | ---- | C] () -- C:\Users\Paul\Documents\Planeten316.png
[2012.02.13 16:01:35 | 000,048,799 | ---- | C] () -- C:\Users\Paul\Documents\Planeten315.png
[2012.02.13 16:01:33 | 000,048,712 | ---- | C] () -- C:\Users\Paul\Documents\Planeten314.png
[2012.02.13 16:01:30 | 000,048,763 | ---- | C] () -- C:\Users\Paul\Documents\Planeten313.png
[2012.02.13 16:01:28 | 000,048,700 | ---- | C] () -- C:\Users\Paul\Documents\Planeten312.png
[2012.02.13 16:01:26 | 000,048,638 | ---- | C] () -- C:\Users\Paul\Documents\Planeten311.png
[2012.02.13 16:01:24 | 000,048,645 | ---- | C] () -- C:\Users\Paul\Documents\Planeten310.png
[2012.02.13 16:01:21 | 000,048,622 | ---- | C] () -- C:\Users\Paul\Documents\Planeten309.png
[2012.02.13 16:01:19 | 000,048,651 | ---- | C] () -- C:\Users\Paul\Documents\Planeten308.png
[2012.02.13 16:01:17 | 000,048,586 | ---- | C] () -- C:\Users\Paul\Documents\Planeten307.png
[2012.02.13 16:01:14 | 000,048,561 | ---- | C] () -- C:\Users\Paul\Documents\Planeten306.png
[2012.02.13 16:01:12 | 000,048,499 | ---- | C] () -- C:\Users\Paul\Documents\Planeten305.png
[2012.02.13 16:01:10 | 000,048,488 | ---- | C] () -- C:\Users\Paul\Documents\Planeten304.png
[2012.02.13 16:01:08 | 000,048,432 | ---- | C] () -- C:\Users\Paul\Documents\Planeten303.png
[2012.02.13 16:01:05 | 000,048,390 | ---- | C] () -- C:\Users\Paul\Documents\Planeten302.png
[2012.02.13 16:01:03 | 000,048,514 | ---- | C] () -- C:\Users\Paul\Documents\Planeten301.png
[2012.02.13 16:01:01 | 000,048,428 | ---- | C] () -- C:\Users\Paul\Documents\Planeten300.png
[2012.02.13 16:00:58 | 000,048,286 | ---- | C] () -- C:\Users\Paul\Documents\Planeten299.png
[2012.02.13 16:00:56 | 000,048,302 | ---- | C] () -- C:\Users\Paul\Documents\Planeten298.png
[2012.02.13 16:00:54 | 000,048,310 | ---- | C] () -- C:\Users\Paul\Documents\Planeten297.png
[2012.02.13 16:00:52 | 000,048,390 | ---- | C] () -- C:\Users\Paul\Documents\Planeten296.png
[2012.02.13 16:00:49 | 000,048,295 | ---- | C] () -- C:\Users\Paul\Documents\Planeten295.png
[2012.02.13 16:00:47 | 000,048,290 | ---- | C] () -- C:\Users\Paul\Documents\Planeten294.png
[2012.02.13 16:00:45 | 000,048,284 | ---- | C] () -- C:\Users\Paul\Documents\Planeten293.png
[2012.02.13 16:00:42 | 000,048,268 | ---- | C] () -- C:\Users\Paul\Documents\Planeten292.png
[2012.02.13 16:00:40 | 000,048,231 | ---- | C] () -- C:\Users\Paul\Documents\Planeten291.png
[2012.02.13 16:00:38 | 000,048,206 | ---- | C] () -- C:\Users\Paul\Documents\Planeten290.png
[2012.02.13 16:00:36 | 000,048,339 | ---- | C] () -- C:\Users\Paul\Documents\Planeten289.png
[2012.02.13 16:00:33 | 000,048,436 | ---- | C] () -- C:\Users\Paul\Documents\Planeten288.png
[2012.02.13 16:00:31 | 000,048,462 | ---- | C] () -- C:\Users\Paul\Documents\Planeten287.png
[2012.02.13 16:00:29 | 000,048,312 | ---- | C] () -- C:\Users\Paul\Documents\Planeten286.png
[2012.02.13 16:00:27 | 000,048,456 | ---- | C] () -- C:\Users\Paul\Documents\Planeten285.png
[2012.02.13 16:00:24 | 000,048,567 | ---- | C] () -- C:\Users\Paul\Documents\Planeten284.png
[2012.02.13 16:00:22 | 000,048,618 | ---- | C] () -- C:\Users\Paul\Documents\Planeten283.png
[2012.02.13 16:00:20 | 000,048,596 | ---- | C] () -- C:\Users\Paul\Documents\Planeten282.png
[2012.02.13 16:00:18 | 000,048,612 | ---- | C] () -- C:\Users\Paul\Documents\Planeten281.png
[2012.02.13 16:00:15 | 000,048,712 | ---- | C] () -- C:\Users\Paul\Documents\Planeten280.png
[2012.02.13 16:00:13 | 000,048,635 | ---- | C] () -- C:\Users\Paul\Documents\Planeten279.png
[2012.02.13 16:00:11 | 000,048,515 | ---- | C] () -- C:\Users\Paul\Documents\Planeten278.png
[2012.02.13 16:00:09 | 000,048,555 | ---- | C] () -- C:\Users\Paul\Documents\Planeten277.png
[2012.02.13 16:00:06 | 000,048,565 | ---- | C] () -- C:\Users\Paul\Documents\Planeten276.png
[2012.02.13 16:00:04 | 000,048,588 | ---- | C] () -- C:\Users\Paul\Documents\Planeten275.png
[2012.02.13 16:00:02 | 000,048,634 | ---- | C] () -- C:\Users\Paul\Documents\Planeten274.png
[2012.02.13 16:00:00 | 000,048,833 | ---- | C] () -- C:\Users\Paul\Documents\Planeten273.png
[2012.02.13 15:59:57 | 000,048,842 | ---- | C] () -- C:\Users\Paul\Documents\Planeten272.png
[2012.02.13 15:59:55 | 000,048,890 | ---- | C] () -- C:\Users\Paul\Documents\Planeten271.png
[2012.02.13 15:59:53 | 000,048,879 | ---- | C] () -- C:\Users\Paul\Documents\Planeten270.png
[2012.02.13 15:59:51 | 000,048,877 | ---- | C] () -- C:\Users\Paul\Documents\Planeten269.png
[2012.02.13 15:59:48 | 000,048,797 | ---- | C] () -- C:\Users\Paul\Documents\Planeten268.png
[2012.02.13 15:59:46 | 000,048,890 | ---- | C] () -- C:\Users\Paul\Documents\Planeten267.png
[2012.02.13 15:59:44 | 000,048,896 | ---- | C] () -- C:\Users\Paul\Documents\Planeten266.png
[2012.02.13 15:59:42 | 000,048,922 | ---- | C] () -- C:\Users\Paul\Documents\Planeten265.png
[2012.02.13 15:59:39 | 000,048,965 | ---- | C] () -- C:\Users\Paul\Documents\Planeten264.png
[2012.02.13 15:59:37 | 000,048,962 | ---- | C] () -- C:\Users\Paul\Documents\Planeten263.png
[2012.02.13 15:59:35 | 000,048,785 | ---- | C] () -- C:\Users\Paul\Documents\Planeten262.png
[2012.02.13 15:59:33 | 000,048,853 | ---- | C] () -- C:\Users\Paul\Documents\Planeten261.png
[2012.02.13 15:59:30 | 000,048,740 | ---- | C] () -- C:\Users\Paul\Documents\Planeten260.png
[2012.02.13 15:59:28 | 000,048,832 | ---- | C] () -- C:\Users\Paul\Documents\Planeten259.png
[2012.02.13 15:59:26 | 000,048,719 | ---- | C] () -- C:\Users\Paul\Documents\Planeten258.png
[2012.02.13 15:59:24 | 000,048,798 | ---- | C] () -- C:\Users\Paul\Documents\Planeten257.png
[2012.02.13 15:59:21 | 000,048,756 | ---- | C] () -- C:\Users\Paul\Documents\Planeten256.png
[2012.02.13 15:59:19 | 000,048,765 | ---- | C] () -- C:\Users\Paul\Documents\Planeten255.png
[2012.02.13 15:59:17 | 000,048,810 | ---- | C] () -- C:\Users\Paul\Documents\Planeten254.png
[2012.02.13 15:59:15 | 000,048,936 | ---- | C] () -- C:\Users\Paul\Documents\Planeten253.png
[2012.02.13 15:59:12 | 000,048,858 | ---- | C] () -- C:\Users\Paul\Documents\Planeten252.png
[2012.02.13 15:59:10 | 000,048,841 | ---- | C] () -- C:\Users\Paul\Documents\Planeten251.png
[2012.02.13 15:59:08 | 000,048,879 | ---- | C] () -- C:\Users\Paul\Documents\Planeten250.png
[2012.02.13 15:59:06 | 000,048,850 | ---- | C] () -- C:\Users\Paul\Documents\Planeten249.png
[2012.02.13 15:59:03 | 000,048,807 | ---- | C] () -- C:\Users\Paul\Documents\Planeten248.png
[2012.02.13 15:59:01 | 000,048,826 | ---- | C] () -- C:\Users\Paul\Documents\Planeten247.png
[2012.02.13 15:58:59 | 000,048,971 | ---- | C] () -- C:\Users\Paul\Documents\Planeten246.png
[2012.02.13 15:58:56 | 000,048,897 | ---- | C] () -- C:\Users\Paul\Documents\Planeten245.png
[2012.02.13 15:58:54 | 000,048,962 | ---- | C] () -- C:\Users\Paul\Documents\Planeten244.png
[2012.02.13 15:58:52 | 000,048,930 | ---- | C] () -- C:\Users\Paul\Documents\Planeten243.png
[2012.02.13 15:58:50 | 000,049,044 | ---- | C] () -- C:\Users\Paul\Documents\Planeten242.png
[2012.02.13 15:58:47 | 000,049,062 | ---- | C] () -- C:\Users\Paul\Documents\Planeten241.png
[2012.02.13 15:58:45 | 000,049,037 | ---- | C] () -- C:\Users\Paul\Documents\Planeten240.png
[2012.02.13 15:58:43 | 000,049,048 | ---- | C] () -- C:\Users\Paul\Documents\Planeten239.png
[2012.02.13 15:58:41 | 000,049,045 | ---- | C] () -- C:\Users\Paul\Documents\Planeten238.png
[2012.02.13 15:58:38 | 000,049,048 | ---- | C] () -- C:\Users\Paul\Documents\Planeten237.png
[2012.02.13 15:58:36 | 000,049,073 | ---- | C] () -- C:\Users\Paul\Documents\Planeten236.png
[2012.02.13 15:58:34 | 000,049,019 | ---- | C] () -- C:\Users\Paul\Documents\Planeten235.png
[2012.02.13 15:58:32 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten234.png
[2012.02.13 15:58:29 | 000,048,938 | ---- | C] () -- C:\Users\Paul\Documents\Planeten233.png
[2012.02.13 15:58:27 | 000,048,945 | ---- | C] () -- C:\Users\Paul\Documents\Planeten232.png
[2012.02.13 15:58:25 | 000,049,039 | ---- | C] () -- C:\Users\Paul\Documents\Planeten231.png
[2012.02.13 15:58:23 | 000,048,943 | ---- | C] () -- C:\Users\Paul\Documents\Planeten230.png
[2012.02.13 15:58:20 | 000,049,017 | ---- | C] () -- C:\Users\Paul\Documents\Planeten229.png
[2012.02.13 15:58:18 | 000,048,965 | ---- | C] () -- C:\Users\Paul\Documents\Planeten228.png
[2012.02.13 15:58:16 | 000,049,015 | ---- | C] () -- C:\Users\Paul\Documents\Planeten227.png
[2012.02.13 15:58:14 | 000,048,988 | ---- | C] () -- C:\Users\Paul\Documents\Planeten226.png
[2012.02.13 15:58:11 | 000,048,950 | ---- | C] () -- C:\Users\Paul\Documents\Planeten225.png
[2012.02.13 15:58:09 | 000,048,948 | ---- | C] () -- C:\Users\Paul\Documents\Planeten224.png
[2012.02.13 15:58:07 | 000,049,120 | ---- | C] () -- C:\Users\Paul\Documents\Planeten223.png
[2012.02.13 15:58:05 | 000,049,149 | ---- | C] () -- C:\Users\Paul\Documents\Planeten222.png
[2012.02.13 15:58:02 | 000,049,128 | ---- | C] () -- C:\Users\Paul\Documents\Planeten221.png
[2012.02.13 15:58:00 | 000,049,021 | ---- | C] () -- C:\Users\Paul\Documents\Planeten220.png
[2012.02.13 15:57:58 | 000,048,908 | ---- | C] () -- C:\Users\Paul\Documents\Planeten219.png
[2012.02.13 15:57:56 | 000,048,766 | ---- | C] () -- C:\Users\Paul\Documents\Planeten218.png
[2012.02.13 15:57:53 | 000,048,819 | ---- | C] () -- C:\Users\Paul\Documents\Planeten217.png
[2012.02.13 15:57:51 | 000,048,910 | ---- | C] () -- C:\Users\Paul\Documents\Planeten216.png
[2012.02.13 15:57:49 | 000,048,880 | ---- | C] () -- C:\Users\Paul\Documents\Planeten215.png
[2012.02.13 15:57:47 | 000,048,857 | ---- | C] () -- C:\Users\Paul\Documents\Planeten214.png
[2012.02.13 15:57:44 | 000,048,906 | ---- | C] () -- C:\Users\Paul\Documents\Planeten213.png
[2012.02.13 15:57:42 | 000,048,901 | ---- | C] () -- C:\Users\Paul\Documents\Planeten212.png
[2012.02.13 15:57:40 | 000,048,956 | ---- | C] () -- C:\Users\Paul\Documents\Planeten211.png
[2012.02.13 15:57:38 | 000,048,977 | ---- | C] () -- C:\Users\Paul\Documents\Planeten210.png
[2012.02.13 15:57:36 | 000,049,089 | ---- | C] () -- C:\Users\Paul\Documents\Planeten209.png
[2012.02.13 15:57:33 | 000,048,966 | ---- | C] () -- C:\Users\Paul\Documents\Planeten208.png
[2012.02.13 15:57:31 | 000,049,113 | ---- | C] () -- C:\Users\Paul\Documents\Planeten207.png
[2012.02.13 15:57:29 | 000,049,019 | ---- | C] () -- C:\Users\Paul\Documents\Planeten206.png
[2012.02.13 15:57:26 | 000,049,103 | ---- | C] () -- C:\Users\Paul\Documents\Planeten205.png
[2012.02.13 15:57:24 | 000,049,018 | ---- | C] () -- C:\Users\Paul\Documents\Planeten204.png
[2012.02.13 15:57:22 | 000,049,037 | ---- | C] () -- C:\Users\Paul\Documents\Planeten203.png
[2012.02.13 15:57:20 | 000,048,964 | ---- | C] () -- C:\Users\Paul\Documents\Planeten202.png
[2012.02.13 15:57:17 | 000,048,928 | ---- | C] () -- C:\Users\Paul\Documents\Planeten201.png
[2012.02.13 15:57:15 | 000,048,985 | ---- | C] () -- C:\Users\Paul\Documents\Planeten200.png
[2012.02.13 15:57:13 | 000,049,031 | ---- | C] () -- C:\Users\Paul\Documents\Planeten199.png
[2012.02.13 15:57:11 | 000,049,198 | ---- | C] () -- C:\Users\Paul\Documents\Planeten198.png
[2012.02.13 15:57:08 | 000,049,200 | ---- | C] () -- C:\Users\Paul\Documents\Planeten197.png
[2012.02.13 15:57:06 | 000,049,090 | ---- | C] () -- C:\Users\Paul\Documents\Planeten196.png
[2012.02.13 15:57:04 | 000,049,123 | ---- | C] () -- C:\Users\Paul\Documents\Planeten195.png
[2012.02.13 15:57:02 | 000,049,170 | ---- | C] () -- C:\Users\Paul\Documents\Planeten194.png
[2012.02.13 15:56:59 | 000,049,232 | ---- | C] () -- C:\Users\Paul\Documents\Planeten193.png
[2012.02.13 15:56:57 | 000,049,170 | ---- | C] () -- C:\Users\Paul\Documents\Planeten192.png
[2012.02.13 15:56:55 | 000,049,150 | ---- | C] () -- C:\Users\Paul\Documents\Planeten191.png
[2012.02.13 15:56:52 | 000,049,043 | ---- | C] () -- C:\Users\Paul\Documents\Planeten190.png
[2012.02.13 15:56:50 | 000,048,925 | ---- | C] () -- C:\Users\Paul\Documents\Planeten189.png
[2012.02.13 15:56:48 | 000,048,927 | ---- | C] () -- C:\Users\Paul\Documents\Planeten188.png
[2012.02.13 15:56:46 | 000,048,775 | ---- | C] () -- C:\Users\Paul\Documents\Planeten187.png
[2012.02.13 15:56:43 | 000,048,934 | ---- | C] () -- C:\Users\Paul\Documents\Planeten186.png
[2012.02.13 15:56:41 | 000,048,853 | ---- | C] () -- C:\Users\Paul\Documents\Planeten185.png
[2012.02.13 15:56:39 | 000,048,889 | ---- | C] () -- C:\Users\Paul\Documents\Planeten184.png
[2012.02.13 15:56:37 | 000,048,947 | ---- | C] () -- C:\Users\Paul\Documents\Planeten183.png
[2012.02.13 15:56:34 | 000,049,090 | ---- | C] () -- C:\Users\Paul\Documents\Planeten182.png
[2012.02.13 15:56:32 | 000,049,199 | ---- | C] () -- C:\Users\Paul\Documents\Planeten181.png
[2012.02.13 15:56:30 | 000,049,187 | ---- | C] () -- C:\Users\Paul\Documents\Planeten180.png
[2012.02.13 15:56:28 | 000,049,162 | ---- | C] () -- C:\Users\Paul\Documents\Planeten179.png
[2012.02.13 15:56:25 | 000,049,086 | ---- | C] () -- C:\Users\Paul\Documents\Planeten178.png
[2012.02.13 15:56:23 | 000,049,053 | ---- | C] () -- C:\Users\Paul\Documents\Planeten177.png
[2012.02.13 15:56:21 | 000,049,080 | ---- | C] () -- C:\Users\Paul\Documents\Planeten176.png
[2012.02.13 15:56:19 | 000,049,008 | ---- | C] () -- C:\Users\Paul\Documents\Planeten175.png
[2012.02.13 15:56:16 | 000,049,020 | ---- | C] () -- C:\Users\Paul\Documents\Planeten174.png
[2012.02.13 15:56:14 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten173.png
[2012.02.13 15:56:12 | 000,048,880 | ---- | C] () -- C:\Users\Paul\Documents\Planeten172.png
[2012.02.13 15:56:10 | 000,048,957 | ---- | C] () -- C:\Users\Paul\Documents\Planeten171.png
[2012.02.13 15:56:07 | 000,048,911 | ---- | C] () -- C:\Users\Paul\Documents\Planeten170.png
[2012.02.13 15:56:05 | 000,049,058 | ---- | C] () -- C:\Users\Paul\Documents\Planeten169.png
[2012.02.13 15:56:03 | 000,049,155 | ---- | C] () -- C:\Users\Paul\Documents\Planeten168.png
[2012.02.13 15:56:01 | 000,049,125 | ---- | C] () -- C:\Users\Paul\Documents\Planeten167.png
[2012.02.13 15:55:58 | 000,049,131 | ---- | C] () -- C:\Users\Paul\Documents\Planeten166.png
[2012.02.13 15:55:56 | 000,049,144 | ---- | C] () -- C:\Users\Paul\Documents\Planeten165.png
[2012.02.13 15:55:54 | 000,049,157 | ---- | C] () -- C:\Users\Paul\Documents\Planeten164.png
[2012.02.13 15:55:52 | 000,049,068 | ---- | C] () -- C:\Users\Paul\Documents\Planeten163.png
[2012.02.13 15:55:49 | 000,048,952 | ---- | C] () -- C:\Users\Paul\Documents\Planeten162.png
[2012.02.13 15:55:47 | 000,048,969 | ---- | C] () -- C:\Users\Paul\Documents\Planeten161.png
[2012.02.13 15:55:45 | 000,049,005 | ---- | C] () -- C:\Users\Paul\Documents\Planeten160.png
[2012.02.13 15:55:43 | 000,048,839 | ---- | C] () -- C:\Users\Paul\Documents\Planeten159.png
[2012.02.13 15:55:40 | 000,048,842 | ---- | C] () -- C:\Users\Paul\Documents\Planeten158.png
[2012.02.13 15:55:38 | 000,048,843 | ---- | C] () -- C:\Users\Paul\Documents\Planeten157.png
[2012.02.13 15:55:36 | 000,048,833 | ---- | C] () -- C:\Users\Paul\Documents\Planeten156.png
[2012.02.13 15:55:34 | 000,048,743 | ---- | C] () -- C:\Users\Paul\Documents\Planeten155.png
[2012.02.13 15:55:31 | 000,048,715 | ---- | C] () -- C:\Users\Paul\Documents\Planeten154.png
[2012.02.13 15:55:29 | 000,048,811 | ---- | C] () -- C:\Users\Paul\Documents\Planeten153.png
[2012.02.13 15:55:27 | 000,048,965 | ---- | C] () -- C:\Users\Paul\Documents\Planeten152.png
[2012.02.13 15:55:25 | 000,048,911 | ---- | C] () -- C:\Users\Paul\Documents\Planeten151.png
[2012.02.13 15:55:22 | 000,048,752 | ---- | C] () -- C:\Users\Paul\Documents\Planeten150.png
[2012.02.13 15:55:20 | 000,048,810 | ---- | C] () -- C:\Users\Paul\Documents\Planeten149.png
[2012.02.13 15:55:18 | 000,048,840 | ---- | C] () -- C:\Users\Paul\Documents\Planeten148.png
[2012.02.13 15:55:16 | 000,048,797 | ---- | C] () -- C:\Users\Paul\Documents\Planeten147.png
[2012.02.13 15:55:13 | 000,048,802 | ---- | C] () -- C:\Users\Paul\Documents\Planeten146.png
[2012.02.13 15:55:11 | 000,048,781 | ---- | C] () -- C:\Users\Paul\Documents\Planeten145.png
[2012.02.13 15:55:09 | 000,048,764 | ---- | C] () -- C:\Users\Paul\Documents\Planeten144.png
[2012.02.13 15:55:07 | 000,048,780 | ---- | C] () -- C:\Users\Paul\Documents\Planeten143.png
[2012.02.13 15:55:04 | 000,048,827 | ---- | C] () -- C:\Users\Paul\Documents\Planeten142.png
[2012.02.13 15:55:02 | 000,048,783 | ---- | C] () -- C:\Users\Paul\Documents\Planeten141.png
[2012.02.13 15:55:00 | 000,048,836 | ---- | C] () -- C:\Users\Paul\Documents\Planeten140.png
[2012.02.13 15:54:57 | 000,048,804 | ---- | C] () -- C:\Users\Paul\Documents\Planeten139.png
[2012.02.13 15:54:55 | 000,048,799 | ---- | C] () -- C:\Users\Paul\Documents\Planeten138.png
[2012.02.13 15:54:53 | 000,048,753 | ---- | C] () -- C:\Users\Paul\Documents\Planeten137.png
[2012.02.13 15:54:51 | 000,048,869 | ---- | C] () -- C:\Users\Paul\Documents\Planeten136.png
[2012.02.13 15:54:48 | 000,048,818 | ---- | C] () -- C:\Users\Paul\Documents\Planeten135.png
[2012.02.13 15:54:46 | 000,048,859 | ---- | C] () -- C:\Users\Paul\Documents\Planeten134.png
[2012.02.13 15:54:44 | 000,048,712 | ---- | C] () -- C:\Users\Paul\Documents\Planeten133.png
[2012.02.13 15:54:42 | 000,048,636 | ---- | C] () -- C:\Users\Paul\Documents\Planeten132.png
[2012.02.13 15:54:39 | 000,048,606 | ---- | C] () -- C:\Users\Paul\Documents\Planeten131.png
[2012.02.13 15:54:37 | 000,048,599 | ---- | C] () -- C:\Users\Paul\Documents\Planeten130.png
[2012.02.13 15:54:35 | 000,048,629 | ---- | C] () -- C:\Users\Paul\Documents\Planeten129.png
[2012.02.13 15:54:32 | 000,048,557 | ---- | C] () -- C:\Users\Paul\Documents\Planeten128.png
[2012.02.13 15:54:30 | 000,048,591 | ---- | C] () -- C:\Users\Paul\Documents\Planeten127.png
[2012.02.13 15:54:28 | 000,048,556 | ---- | C] () -- C:\Users\Paul\Documents\Planeten126.png
[2012.02.13 15:54:26 | 000,048,561 | ---- | C] () -- C:\Users\Paul\Documents\Planeten125.png
[2012.02.13 15:54:24 | 000,048,512 | ---- | C] () -- C:\Users\Paul\Documents\Planeten124.png
[2012.02.13 15:54:21 | 000,048,547 | ---- | C] () -- C:\Users\Paul\Documents\Planeten123.png
[2012.02.13 15:54:19 | 000,048,543 | ---- | C] () -- C:\Users\Paul\Documents\Planeten122.png
[2012.02.13 15:54:17 | 000,048,612 | ---- | C] () -- C:\Users\Paul\Documents\Planeten121.png
[2012.02.13 15:54:15 | 000,048,549 | ---- | C] () -- C:\Users\Paul\Documents\Planeten120.png
[2012.02.13 15:54:12 | 000,048,596 | ---- | C] () -- C:\Users\Paul\Documents\Planeten119.png
[2012.02.13 15:54:10 | 000,048,523 | ---- | C] () -- C:\Users\Paul\Documents\Planeten118.png
[2012.02.13 15:54:08 | 000,048,582 | ---- | C] () -- C:\Users\Paul\Documents\Planeten117.png
[2012.02.13 15:54:06 | 000,048,497 | ---- | C] () -- C:\Users\Paul\Documents\Planeten116.png
[2012.02.13 15:54:03 | 000,048,651 | ---- | C] () -- C:\Users\Paul\Documents\Planeten115.png
[2012.02.13 15:54:01 | 000,048,460 | ---- | C] () -- C:\Users\Paul\Documents\Planeten114.png
[2012.02.13 15:53:59 | 000,048,570 | ---- | C] () -- C:\Users\Paul\Documents\Planeten113.png
[2012.02.13 15:53:56 | 000,048,563 | ---- | C] () -- C:\Users\Paul\Documents\Planeten112.png
[2012.02.13 15:53:54 | 000,048,540 | ---- | C] () -- C:\Users\Paul\Documents\Planeten111.png
[2012.02.13 15:53:52 | 000,048,586 | ---- | C] () -- C:\Users\Paul\Documents\Planeten110.png
[2012.02.13 15:53:50 | 000,048,628 | ---- | C] () -- C:\Users\Paul\Documents\Planeten109.png
[2012.02.13 15:53:47 | 000,048,486 | ---- | C] () -- C:\Users\Paul\Documents\Planeten108.png
[2012.02.13 15:53:45 | 000,048,506 | ---- | C] () -- C:\Users\Paul\Documents\Planeten107.png
[2012.02.13 15:53:43 | 000,048,482 | ---- | C] () -- C:\Users\Paul\Documents\Planeten106.png
[2012.02.13 15:53:41 | 000,048,432 | ---- | C] () -- C:\Users\Paul\Documents\Planeten105.png
[2012.02.13 15:53:38 | 000,048,344 | ---- | C] () -- C:\Users\Paul\Documents\Planeten104.png
[2012.02.13 15:53:36 | 000,048,396 | ---- | C] () -- C:\Users\Paul\Documents\Planeten103.png
[2012.02.13 15:53:34 | 000,048,366 | ---- | C] () -- C:\Users\Paul\Documents\Planeten102.png
[2012.02.13 15:53:32 | 000,048,280 | ---- | C] () -- C:\Users\Paul\Documents\Planeten101.png
[2012.02.13 15:53:30 | 000,048,209 | ---- | C] () -- C:\Users\Paul\Documents\Planeten100.png
[2012.02.13 15:53:27 | 000,048,139 | ---- | C] () -- C:\Users\Paul\Documents\Planeten099.png
[2012.02.13 15:53:25 | 000,048,223 | ---- | C] () -- C:\Users\Paul\Documents\Planeten098.png
[2012.02.13 15:53:23 | 000,048,253 | ---- | C] () -- C:\Users\Paul\Documents\Planeten097.png
[2012.02.13 15:53:20 | 000,048,173 | ---- | C] () -- C:\Users\Paul\Documents\Planeten096.png
[2012.02.13 15:53:18 | 000,048,060 | ---- | C] () -- C:\Users\Paul\Documents\Planeten095.png
[2012.02.13 15:53:16 | 000,048,122 | ---- | C] () -- C:\Users\Paul\Documents\Planeten094.png
[2012.02.13 15:53:14 | 000,048,014 | ---- | C] () -- C:\Users\Paul\Documents\Planeten093.png
[2012.02.13 15:53:12 | 000,048,114 | ---- | C] () -- C:\Users\Paul\Documents\Planeten092.png
[2012.02.13 15:53:09 | 000,048,141 | ---- | C] () -- C:\Users\Paul\Documents\Planeten091.png
[2012.02.13 15:53:07 | 000,048,222 | ---- | C] () -- C:\Users\Paul\Documents\Planeten090.png
[2012.02.13 15:53:05 | 000,048,231 | ---- | C] () -- C:\Users\Paul\Documents\Planeten089.png
[2012.02.13 15:53:02 | 000,048,236 | ---- | C] () -- C:\Users\Paul\Documents\Planeten088.png
[2012.02.13 15:53:00 | 000,048,269 | ---- | C] () -- C:\Users\Paul\Documents\Planeten087.png
[2012.02.13 15:52:58 | 000,048,362 | ---- | C] () -- C:\Users\Paul\Documents\Planeten086.png
[2012.02.13 15:52:56 | 000,048,271 | ---- | C] () -- C:\Users\Paul\Documents\Planeten085.png
[2012.02.13 15:52:53 | 000,048,316 | ---- | C] () -- C:\Users\Paul\Documents\Planeten084.png
[2012.02.13 15:52:51 | 000,048,342 | ---- | C] () -- C:\Users\Paul\Documents\Planeten083.png
[2012.02.13 15:52:49 | 000,048,314 | ---- | C] () -- C:\Users\Paul\Documents\Planeten082.png
[2012.02.13 15:52:47 | 000,048,333 | ---- | C] () -- C:\Users\Paul\Documents\Planeten081.png
[2012.02.13 15:52:44 | 000,048,302 | ---- | C] () -- C:\Users\Paul\Documents\Planeten080.png
[2012.02.13 15:52:42 | 000,048,360 | ---- | C] () -- C:\Users\Paul\Documents\Planeten079.png
[2012.02.13 15:52:40 | 000,048,481 | ---- | C] () -- C:\Users\Paul\Documents\Planeten078.png
[2012.02.13 15:52:38 | 000,048,514 | ---- | C] () -- C:\Users\Paul\Documents\Planeten077.png
[2012.02.13 15:52:36 | 000,048,434 | ---- | C] () -- C:\Users\Paul\Documents\Planeten076.png
[2012.02.13 15:52:33 | 000,048,520 | ---- | C] () -- C:\Users\Paul\Documents\Planeten075.png
[2012.02.13 15:52:31 | 000,048,494 | ---- | C] () -- C:\Users\Paul\Documents\Planeten074.png
[2012.02.13 15:52:29 | 000,048,549 | ---- | C] () -- C:\Users\Paul\Documents\Planeten073.png
[2012.02.13 15:52:26 | 000,048,480 | ---- | C] () -- C:\Users\Paul\Documents\Planeten072.png
[2012.02.13 15:52:24 | 000,048,620 | ---- | C] () -- C:\Users\Paul\Documents\Planeten071.png
[2012.02.13 15:52:22 | 000,048,636 | ---- | C] () -- C:\Users\Paul\Documents\Planeten070.png
[2012.02.13 15:52:20 | 000,048,590 | ---- | C] () -- C:\Users\Paul\Documents\Planeten069.png
[2012.02.13 15:52:18 | 000,048,676 | ---- | C] () -- C:\Users\Paul\Documents\Planeten068.png
[2012.02.13 15:52:15 | 000,048,654 | ---- | C] () -- C:\Users\Paul\Documents\Planeten067.png
[2012.02.13 15:52:13 | 000,048,646 | ---- | C] () -- C:\Users\Paul\Documents\Planeten066.png
[2012.02.13 15:52:11 | 000,048,714 | ---- | C] () -- C:\Users\Paul\Documents\Planeten065.png
[2012.02.13 15:52:08 | 000,048,699 | ---- | C] () -- C:\Users\Paul\Documents\Planeten064.png
[2012.02.13 15:52:06 | 000,048,732 | ---- | C] () -- C:\Users\Paul\Documents\Planeten063.png
[2012.02.13 15:52:04 | 000,048,813 | ---- | C] () -- C:\Users\Paul\Documents\Planeten062.png
[2012.02.13 15:52:02 | 000,048,970 | ---- | C] () -- C:\Users\Paul\Documents\Planeten061.png
[2012.02.13 15:51:59 | 000,048,912 | ---- | C] () -- C:\Users\Paul\Documents\Planeten060.png
[2012.02.13 15:51:57 | 000,048,988 | ---- | C] () -- C:\Users\Paul\Documents\Planeten059.png
[2012.02.13 15:51:55 | 000,048,960 | ---- | C] () -- C:\Users\Paul\Documents\Planeten058.png
[2012.02.13 15:51:53 | 000,049,059 | ---- | C] () -- C:\Users\Paul\Documents\Planeten057.png
[2012.02.13 15:51:50 | 000,048,994 | ---- | C] () -- C:\Users\Paul\Documents\Planeten056.png
[2012.02.13 15:51:48 | 000,048,954 | ---- | C] () -- C:\Users\Paul\Documents\Planeten055.png
[2012.02.13 15:51:46 | 000,048,939 | ---- | C] () -- C:\Users\Paul\Documents\Planeten054.png
[2012.02.13 15:51:44 | 000,048,864 | ---- | C] () -- C:\Users\Paul\Documents\Planeten053.png
[2012.02.13 15:51:41 | 000,048,800 | ---- | C] () -- C:\Users\Paul\Documents\Planeten052.png
[2012.02.13 15:51:39 | 000,048,745 | ---- | C] () -- C:\Users\Paul\Documents\Planeten051.png
[2012.02.13 15:51:37 | 000,048,829 | ---- | C] () -- C:\Users\Paul\Documents\Planeten050.png
[2012.02.13 15:51:35 | 000,048,894 | ---- | C] () -- C:\Users\Paul\Documents\Planeten049.png
[2012.02.13 15:51:32 | 000,048,857 | ---- | C] () -- C:\Users\Paul\Documents\Planeten048.png
[2012.02.13 15:51:30 | 000,048,870 | ---- | C] () -- C:\Users\Paul\Documents\Planeten047.png
[2012.02.13 15:51:28 | 000,048,813 | ---- | C] () -- C:\Users\Paul\Documents\Planeten046.png
[2012.02.13 15:51:25 | 000,048,854 | ---- | C] () -- C:\Users\Paul\Documents\Planeten045.png
[2012.02.13 15:51:23 | 000,048,869 | ---- | C] () -- C:\Users\Paul\Documents\Planeten044.png
[2012.02.13 15:51:21 | 000,048,885 | ---- | C] () -- C:\Users\Paul\Documents\Planeten043.png
[2012.02.13 15:51:18 | 000,048,956 | ---- | C] () -- C:\Users\Paul\Documents\Planeten042.png
[2012.02.13 15:51:16 | 000,048,930 | ---- | C] () -- C:\Users\Paul\Documents\Planeten041.png
[2012.02.13 15:51:14 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten040.png
[2012.02.13 15:51:12 | 000,048,885 | ---- | C] () -- C:\Users\Paul\Documents\Planeten039.png
[2012.02.13 15:51:09 | 000,048,813 | ---- | C] () -- C:\Users\Paul\Documents\Planeten038.png
[2012.02.13 15:51:07 | 000,048,803 | ---- | C] () -- C:\Users\Paul\Documents\Planeten037.png
[2012.02.13 15:51:05 | 000,048,748 | ---- | C] () -- C:\Users\Paul\Documents\Planeten036.png
[2012.02.13 15:51:02 | 000,048,882 | ---- | C] () -- C:\Users\Paul\Documents\Planeten035.png
[2012.02.13 15:51:00 | 000,048,938 | ---- | C] () -- C:\Users\Paul\Documents\Planeten034.png
[2012.02.13 15:50:58 | 000,048,905 | ---- | C] () -- C:\Users\Paul\Documents\Planeten033.png
[2012.02.13 15:50:56 | 000,048,908 | ---- | C] () -- C:\Users\Paul\Documents\Planeten032.png
[2012.02.13 15:50:54 | 000,049,015 | ---- | C] () -- C:\Users\Paul\Documents\Planeten031.png
[2012.02.13 15:50:51 | 000,048,969 | ---- | C] () -- C:\Users\Paul\Documents\Planeten030.png
[2012.02.13 15:50:49 | 000,048,941 | ---- | C] () -- C:\Users\Paul\Documents\Planeten029.png
[2012.02.13 15:50:47 | 000,048,968 | ---- | C] () -- C:\Users\Paul\Documents\Planeten028.png
[2012.02.13 15:50:44 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten027.png
[2012.02.13 15:50:42 | 000,049,068 | ---- | C] () -- C:\Users\Paul\Documents\Planeten026.png
[2012.02.13 15:50:40 | 000,048,918 | ---- | C] () -- C:\Users\Paul\Documents\Planeten025.png
[2012.02.13 15:50:38 | 000,049,027 | ---- | C] () -- C:\Users\Paul\Documents\Planeten024.png
[2012.02.13 15:50:35 | 000,048,972 | ---- | C] () -- C:\Users\Paul\Documents\Planeten023.png
[2012.02.13 15:50:33 | 000,048,819 | ---- | C] () -- C:\Users\Paul\Documents\Planeten022.png
[2012.02.13 15:50:31 | 000,048,900 | ---- | C] () -- C:\Users\Paul\Documents\Planeten021.png
[2012.02.13 15:50:29 | 000,048,879 | ---- | C] () -- C:\Users\Paul\Documents\Planeten020.png
[2012.02.13 15:50:26 | 000,048,892 | ---- | C] () -- C:\Users\Paul\Documents\Planeten019.png
[2012.02.13 15:50:24 | 000,048,935 | ---- | C] () -- C:\Users\Paul\Documents\Planeten018.png
[2012.02.13 15:50:22 | 000,049,007 | ---- | C] () -- C:\Users\Paul\Documents\Planeten017.png
[2012.02.13 15:50:20 | 000,048,950 | ---- | C] () -- C:\Users\Paul\Documents\Planeten016.png
[2012.02.13 15:50:17 | 000,049,059 | ---- | C] () -- C:\Users\Paul\Documents\Planeten015.png
[2012.02.13 15:50:15 | 000,049,071 | ---- | C] () -- C:\Users\Paul\Documents\Planeten014.png
[2012.02.13 15:50:13 | 000,049,012 | ---- | C] () -- C:\Users\Paul\Documents\Planeten013.png
[2012.02.13 15:50:11 | 000,048,996 | ---- | C] () -- C:\Users\Paul\Documents\Planeten012.png
[2012.02.13 15:50:08 | 000,048,972 | ---- | C] () -- C:\Users\Paul\Documents\Planeten011.png
[2012.02.13 15:50:06 | 000,049,019 | ---- | C] () -- C:\Users\Paul\Documents\Planeten010.png
[2012.02.13 15:50:04 | 000,048,941 | ---- | C] () -- C:\Users\Paul\Documents\Planeten009.png
[2012.02.13 15:50:02 | 000,048,876 | ---- | C] () -- C:\Users\Paul\Documents\Planeten008.png
[2012.02.13 15:49:59 | 000,048,848 | ---- | C] () -- C:\Users\Paul\Documents\Planeten007.png
[2012.02.13 15:49:57 | 000,048,858 | ---- | C] () -- C:\Users\Paul\Documents\Planeten006.png
[2012.02.13 15:49:55 | 000,048,849 | ---- | C] () -- C:\Users\Paul\Documents\Planeten005.png
[2012.02.13 15:49:52 | 000,048,876 | ---- | C] () -- C:\Users\Paul\Documents\Planeten004.png
[2012.02.13 15:49:48 | 000,048,937 | ---- | C] () -- C:\Users\Paul\Documents\Planeten002.png
[2012.02.13 15:49:16 | 000,048,918 | ---- | C] () -- C:\Users\Paul\Documents\Planeten003.png
[2012.02.13 15:49:03 | 000,048,966 | ---- | C] () -- C:\Users\Paul\Documents\Planeten001.png
[2012.02.12 22:41:39 | 000,000,200 | ---- | C] () -- C:\Users\Paul\Documents\clock.ini.bak
[2012.02.12 22:41:39 | 000,000,199 | ---- | C] () -- C:\Users\Paul\Documents\clock.ini
[2012.02.12 22:31:51 | 000,000,233 | ---- | C] () -- C:\Users\Paul\Documents\sphere1.ini
[2012.02.12 22:31:51 | 000,000,230 | ---- | C] () -- C:\Users\Paul\Documents\sphere1.ini.bak
[2012.02.12 22:31:17 | 000,000,837 | ---- | C] () -- C:\Users\Paul\Documents\sphere1.pov
[2012.02.09 19:43:57 | 000,000,200 | ---- | C] () -- C:\Users\Paul\Documents\Minecraft-Skin.png
[2011.11.09 07:34:47 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.11.09 07:31:31 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.07.14 03:55:06 | 000,053,760 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.04.13 03:48:48 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
========== LOP Check ==========
 
[2012.02.24 18:32:06 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\.minecraft
[2012.02.16 22:33:10 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\.Nitrous
[2011.12.24 20:02:05 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ASUS WebStorage
[2012.02.23 15:54:58 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\DVDVideoSoft
[2012.02.21 23:51:16 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.02.24 15:20:52 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\EAC
[2012.02.15 14:16:43 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\FileZilla
[2012.01.17 21:08:38 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\IObit
[2011.12.26 15:07:45 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\OpenOffice.org
[2012.02.03 16:45:36 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\PhotoScape
[2012.02.03 13:28:24 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\POV-Ray
[2012.01.17 16:15:45 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Simfy
[2012.02.25 15:43:58 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Thunderbird
[2012.01.20 16:19:09 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TS3Client
[2012.01.14 12:42:47 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ts3overlay
[2012.01.12 19:04:27 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Zeon
[2012.02.06 16:09:43 | 000,032,572 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.12.24 19:32:43 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2012.03.06 09:25:33 | 000,000,000 | -H-D | M] -- C:\ASUS.DAT
[2011.04.13 03:49:40 | 000,000,000 | ---D | M] -- C:\AsusVibeData
[2009.07.29 07:03:34 | 000,000,000 | -HSD | M] -- C:\Boot
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.11.09 07:42:27 | 000,000,000 | ---D | M] -- C:\eSupport
[2012.02.17 13:41:08 | 000,000,000 | ---D | M] -- C:\Fraps
[2012.01.25 16:47:34 | 000,000,000 | ---D | M] -- C:\Netts
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.02.21 12:16:32 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.02.29 19:32:14 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2012.01.20 17:17:43 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.12.24 19:29:35 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.03.05 17:15:09 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.12.24 19:31:28 | 000,000,000 | R--D | M] -- C:\Users
[2012.03.07 09:46:39 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.20 14:24:46 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2010.11.20 14:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 14:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 14:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 14:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 14:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 14:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.20 13:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.20 13:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010.11.20 14:27:28 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.20 14:27:28 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.20 14:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
< %USERPROFILE%\*.* >
[2012.01.17 16:15:46 | 000,000,032 | ---- | M] () -- C:\Users\Paul\.simfy
[2012.03.07 12:28:56 | 001,572,864 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT
[2012.03.07 12:28:56 | 000,262,144 | -HS- | M] () -- C:\Users\Paul\ntuser.dat.LOG1
[2011.12.24 19:31:29 | 000,000,000 | -HS- | M] () -- C:\Users\Paul\ntuser.dat.LOG2
[2011.12.24 21:10:37 | 000,065,536 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2011.12.24 21:10:37 | 000,524,288 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2011.12.24 21:10:37 | 000,524,288 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2011.12.24 19:31:29 | 000,000,020 | -HS- | M] () -- C:\Users\Paul\ntuser.ini
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 
<           >

< End of report >
         

Alt 07.03.2012, 12:11   #12
markusg
/// Malware-holic
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



hi


dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.



Code:
ATTFilter
:OTL
O4 - HKCU..\Run: [SkypeM] C:\Users\Paul\AppData\Local\Skype\Skype.exe (Rockwell Software, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
 :Files
C:\Users\Paul\AppData\Local\Skype
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         


• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!




Drücke bitte die + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 07.03.2012, 12:24   #13
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



da steht im zip ordner war ein virus

Alt 07.03.2012, 12:27   #14
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



Hier die eine Textdatei:
Code:
ATTFilter
All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SkypeM deleted successfully.
C:\Users\Paul\AppData\Local\Skype\Skype.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 56475 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Paul
->Flash cache emptied: 70409 bytes
 
User: Public
 
Total Flash Files Cleaned = 0,00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Paul
->Temp folder emptied: 105687747 bytes
->Temporary Internet Files folder emptied: 334090858 bytes
->Java cache emptied: 90239 bytes
->FireFox cache emptied: 1133174321 bytes
->Google Chrome cache emptied: 383202932 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 589825119 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 1586494 bytes
 
Total Files Cleaned = 2.430,00 mb
 
 
OTL by OldTimer - Version 3.2.35.1 log created on 03072012_131259

Files\Folders moved on Reboot...
C:\Users\Paul\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
         

Alt 07.03.2012, 12:31   #15
Syntas
 
Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Standard

Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?



avira antivir hat also einen virus in der zip datei gefunden heißt das jetzt , dass wir fertig sind? Naja wenn nicht können wir dann weiter machen. Für das was du bis jetzt für mich getan hast erstmal ein dickes,fettes !!! Ich finds echt genial ,dass es Leute gibt die einem da helfen ich glaube ich wäre sonst völlig verzweifelt^^. Ich finds auf jedenfall klasse was du hier leistest!!! weiter so^^!
Falls wir nochnicht fertig sind muss ich später weiter machen ,weil ich jetzt in die Stadt und zum Friseur muss.

Geändert von Syntas (07.03.2012 um 12:37 Uhr)

Antwort

Themen zu Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?
abgesicherte, abgesicherten, bezahlen, bezahlen und herunterladen, bildschirm, button, entferne, entfernen, fertig, funktioniert, gesperrt, gestern, hochgefahren, laptop, modus, netzwerk, netzwerktreiber, schrift, schwarzer, schwarzer bildschirm, troja, trojaner-board, virus, virus?, windows, windows 7, windows 7 64 bit, windows gesperrt aus sicherheitsgründen bezahlen herunterladen, wirklich



Ähnliche Themen: Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?


  1. Windows gesperrt, Freischaltung gegen "herunterladen und bezahlen"
    Log-Analyse und Auswertung - 06.05.2012 (17)
  2. Windows aus Sicherheitsgründen blockiert => Herunterladen/50 Euro bezahlen
    Log-Analyse und Auswertung - 06.05.2012 (27)
  3. "Windows aus Sicherheitsgründen blockiert - Bezahlen und herunterladen" Virus
    Plagegeister aller Art und deren Bekämpfung - 13.03.2012 (3)
  4. Windows gesperrt - Herunterladen und Bezahlen 50 € - Kapersky ...etc. Version
    Log-Analyse und Auswertung - 18.02.2012 (10)
  5. Windows 7: Achtung Ihr Windows wurde aus Sicherheitsgründen gesperrt! Bezahlen und runterladen
    Log-Analyse und Auswertung - 17.02.2012 (2)
  6. Windows gesperrt - bezahlen und herunterladen
    Plagegeister aller Art und deren Bekämpfung - 17.02.2012 (1)
  7. System aus Sicherheitsgründen blockiert, bezahlen und herunterladen
    Plagegeister aller Art und deren Bekämpfung - 16.02.2012 (5)
  8. Trojaner: Ihr Windows wurde aus Sicherheitsgründen gesperrt! Bezahlen und runterladen
    Log-Analyse und Auswertung - 15.02.2012 (17)
  9. Windows wurde aus Sicherheitsgründen gesperrt - Virus
    Plagegeister aller Art und deren Bekämpfung - 11.02.2012 (8)
  10. Trojaner - Aus Sicherheitsgründen wurde Windowssystem unterbrochen; Bezahlen und Herunterladen
    Log-Analyse und Auswertung - 10.02.2012 (11)
  11. Ihr Windowssystem wurde aus Sicherheitsgründen Blockiert! Bezahlen & Herunterladen
    Log-Analyse und Auswertung - 15.01.2012 (14)
  12. "Windows aus Sicherheitsgründen blockiert - Bezahlen und herunterladen" Der 50Euro Virus/Trojaner
    Plagegeister aller Art und deren Bekämpfung - 10.01.2012 (9)
  13. aus sicherheitsgründen wurde ihr system gesperrt - 50 euro bezahlen
    Plagegeister aller Art und deren Bekämpfung - 07.01.2012 (8)
  14. aus sicherheitsgründen wurde ihr system gesperrt - 50 euro bezahlen
    Log-Analyse und Auswertung - 06.01.2012 (17)
  15. aus Sicherheitsgründen wurde ihr System gesperrt - 50 Euro bezahlen...
    Alles rund um Windows - 02.01.2012 (2)
  16. Aus SIcherheitsgründen wurde WIndows gesperrt, Bitte Bezahlen und Downloaden.
    Plagegeister aller Art und deren Bekämpfung - 02.01.2012 (7)
  17. Ihr Windowssystem wurde aus Sicherheitsgründen Blockiert! Bezahlen & Herunterladen
    Log-Analyse und Auswertung - 27.12.2011 (7)

Zum Thema Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? - Hallo libes Trojaner-Board, ich habe gestern meinen Laptop(Windows 7 64 Bit) gestartet. Gleich als er fertig hochgefahren war, erschien ein schwarzer Bildschirm mit roter Schrift, darauf stand "Windows wurde aus - Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?...
Archiv
Du betrachtest: Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.