| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Diese Webseite kann nicht angezeigt werden - TrojanerWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
25.09.2012, 16:38
| #1 |
 |  Diese Webseite kann nicht angezeigt werden - Trojaner Hallo liebe Community, ich habe auch das Problem, dass sobald ich meinen Laptop mit Windows 7 Ultimate starte, ein weißer Vollbildscreen kommt, auf dem steht "Diese Webseite kann nicht angezeigt werden". Keine Tastenkombination ausser dem Taskmanager funktioniert. Ich habe schon OTL benutzt und folgenden Code benutzt: Code:
ATTFilter activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
Code:
ATTFilter OTL logfile created on: 31.12.2000 23:29:02 - Run 1 OTL by OldTimer - Version 3.2.68.0 Folder = F:\ Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,16 Gb Total Physical Memory | 1,86 Gb Available Physical Memory | 85,94% Memory free 4,33 Gb Paging File | 4,05 Gb Available in Paging File | 93,54% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 49,14 Gb Total Space | 18,79 Gb Free Space | 38,25% Space Free | Partition Type: NTFS Drive E: | 416,30 Gb Total Space | 45,38 Gb Free Space | 10,90% Space Free | Partition Type: HFS Drive F: | 1,86 Gb Total Space | 0,41 Gb Free Space | 22,26% Space Free | Partition Type: FAT Computer Name: HERRBERGMANN-PC | User Name: Herr Bergmann | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.09.25 17:05:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\OTL.exe PRC - [2011.07.16 05:31:12 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.07.14 02:14:15 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe ========== Modules (No Company Name) ========== ========== Services (SafeList) ========== SRV - [2012.09.16 13:26:39 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012.08.13 02:24:48 | 005,167,736 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Programme\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent) SRV - [2012.02.14 03:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Programme\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2011.08.15 17:34:40 | 000,194,432 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\AppleOSSMgr.exe -- (AppleOSSMgr) SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.03.09 00:24:20 | 000,099,640 | ---- | M] (Apple Inc.) [Auto | Stopped] -- C:\Windows\System32\AppleTimeSrv.exe -- (AppleTimeSrv) SRV - [2011.02.07 16:35:37 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2011.02.07 16:35:37 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2011.02.07 16:33:31 | 000,176,128 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2009.08.18 10:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009.07.14 02:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc) ========== Driver Services (SafeList) ========== DRV - [2012.08.24 14:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2012.07.26 02:21:30 | 000,237,408 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2012.04.19 03:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2012.01.31 03:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2011.12.23 12:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2011.12.23 12:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim) DRV - [2011.12.23 12:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter) DRV - [2011.12.23 12:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver) DRV - [2011.08.15 17:34:40 | 000,058,200 | ---- | M] (Apple Inc.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AppleHFS.sys -- (AppleHFS) DRV - [2011.08.15 17:34:40 | 000,015,320 | ---- | M] (Apple Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AppleMNT.sys -- (AppleMNT) DRV - [2011.08.15 17:34:40 | 000,015,064 | ---- | M] (Apple Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\KeyAgent.sys -- (KeyAgent) DRV - [2011.06.28 00:28:37 | 000,018,944 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AppleBtBc.sys -- (AppleBtBc) DRV - [2011.06.02 19:36:46 | 000,026,624 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KeyMagic.sys -- (KeyMagic) DRV - [2011.06.02 19:36:41 | 000,034,304 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\applebmt.sys -- (applebmt) DRV - [2011.03.01 23:08:08 | 000,054,312 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bScsiSDx.sys -- (bScsiSDx) DRV - [2011.02.07 16:35:37 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (MEI) DRV - [2011.02.07 16:35:33 | 000,014,336 | ---- | M] (Cirrus Logic) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CS420x86.sys -- (CirrusFilter) DRV - [2011.02.07 16:34:52 | 000,016,512 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IRFilter.sys -- (IRRemoteFlt) DRV - [2011.02.07 16:34:42 | 000,029,824 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\applemtp.sys -- (applemtp) DRV - [2011.02.07 16:34:42 | 000,010,880 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\applemtm.sys -- (applemtm) DRV - [2011.02.07 16:34:38 | 000,012,928 | ---- | M] (Apple Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\MacHALDriver.sys -- (MacHALDriver) DRV - [2011.02.07 16:33:31 | 006,789,120 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag) DRV - [2011.02.07 16:33:31 | 000,235,520 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap) DRV - [2009.07.14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2009.07.14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009.07.14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009.07.14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009.07.14 00:45:20 | 000,007,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\acpials.sys -- (acpials) DRV - [2009.07.14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009.07.14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5A 72 F5 74 64 0B CD 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..extensions.enabledAddons: DivXWebPlayer@divx.com:2.0.2.039 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012.09.11 09:04:38 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012.08.16 16:37:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.09.16 13:26:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.09.16 13:26:39 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.10.09 12:26:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Herr Bergmann\AppData\Roaming\mozilla\Extensions [2012.05.02 19:10:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Herr Bergmann\AppData\Roaming\mozilla\Firefox\Profiles\xwndc1gg.default\extensions [2011.10.09 19:27:16 | 000,550,833 | ---- | M] () (No name found) -- C:\Users\Herr Bergmann\AppData\Roaming\mozilla\firefox\profiles\xwndc1gg.default\extensions\DivXWebPlayer@divx.com.xpi [2012.01.15 23:19:08 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2012.09.16 13:26:39 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012.09.16 13:26:38 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.09.16 13:26:38 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.09.16 13:26:38 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2012.09.16 13:26:38 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2012.09.16 13:26:38 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2012.09.16 13:26:38 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Programme\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O4 - HKLM..\Run: [Apple_KbdMgr] C:\Programme\Boot Camp\Bootcamp.exe (Apple Inc.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKCU..\Run: [jdmffyypucepojo] C:\ProgramData\jdmffyyp.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Programme\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - c:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - c:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B0931FFE-B8C5-4249-99DE-79F4EA1B05F3}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F3D1F418-B6CB-442B-9A08-202146E2C806}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O31 - SafeBoot: UseAlternatShell - 1 O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {47B3BDBB-F2AE-4B55-95C8-921C25DB3B76} - .NET Framework ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET Framework ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpFolder: C:^Users^Herr Bergmann^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk - C:\Programme\OpenOffice.org 3\program\quickstart.exe - () MsConfig - StartUpReg: StartCCC - hkey= - key= - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) CREATERESTOREPOINT Unable to start System Restore Service. Error code 1084 ========== Files/Folders - Created Within 30 Days ========== [2012.09.25 14:47:21 | 000,000,000 | ---D | C] -- C:\ProgramData\cgaltvububnqbrn [2012.09.11 09:04:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG [2012.08.25 15:42:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 [2012.08.25 15:42:42 | 000,000,000 | ---D | C] -- C:\Program Files\Guild Wars 2 [2012.08.25 15:36:00 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2012.08.25 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\elsterformular [2012.08.25 15:14:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular [2012.08.25 15:14:23 | 000,000,000 | ---D | C] -- C:\ProgramData\elsterformular [2012.08.25 15:14:17 | 000,000,000 | ---D | C] -- C:\Program Files\ElsterFormular [2012.08.24 14:43:18 | 000,301,920 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgtdix.sys [2012.08.15 14:18:12 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Funcom [2012.08.15 14:07:23 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Macromedia [2012.07.26 02:21:30 | 000,237,408 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgldx86.sys [2012.05.17 22:44:44 | 000,000,000 | RH-D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\SecuROM [2012.05.17 22:44:43 | 000,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\System32\CmdLineExt.dll [2012.05.11 00:21:54 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Chromium [2012.05.10 20:43:50 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\Documents\GUILD WARS 2 [2012.05.07 21:39:53 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service [2012.05.07 21:39:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2012.04.19 14:32:47 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\Desktop\view_email.aspx-Dateien [2012.04.19 03:50:26 | 000,024,896 | ---- | C] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidshx.sys [2012.04.12 12:16:48 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\WinRAR [2012.04.12 12:16:47 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2012.04.12 12:16:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2012.04.12 12:16:45 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2012.02.23 23:11:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2012.02.23 23:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2012.02.23 23:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2012.02.22 15:20:01 | 000,000,000 | ---D | C] -- C:\Windows\pss [2012.02.19 02:37:48 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Diagnostics [2012.01.31 03:46:50 | 000,031,952 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgrkx86.sys [2012.01.23 16:28:32 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\vlc [2012.01.23 16:27:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2012.01.23 16:27:04 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN [2012.01.21 13:46:33 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2011.12.23 12:32:14 | 000,041,040 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgmfx86.sys [2011.12.23 12:32:08 | 000,017,232 | ---- | C] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidsshimx.sys [2011.12.23 12:32:06 | 000,024,144 | ---- | C] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidsfilterx.sys [2011.12.23 12:32:00 | 000,139,856 | ---- | C] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidsdriverx.sys [2011.12.17 15:31:57 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\ATI [2011.12.17 15:31:57 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\ATI [2011.12.17 15:31:57 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2011.12.17 15:31:51 | 000,000,000 | ---D | C] -- C:\Program Files\AMD APP [2011.12.17 15:31:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2011.12.17 15:30:32 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2011.12.17 15:29:55 | 000,000,000 | ---D | C] -- C:\ATI [2011.12.17 15:27:21 | 000,000,000 | ---D | C] -- C:\AMD [2011.12.16 22:40:20 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2011.12.16 22:40:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2011.12.16 22:40:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2011.12.07 21:58:39 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\OpenOffice.org [2011.12.07 21:57:39 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 [2011.12.07 21:57:03 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3 [2011.12.07 21:56:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2011.12.07 21:56:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2011.12.07 21:56:27 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2011.11.27 21:51:52 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\Documents\HeroBlade Logs [2011.11.27 18:36:50 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2011.11.27 18:20:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt [2011.11.23 18:31:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\BioWare [2011.11.19 16:22:15 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Apple Computer [2011.11.19 16:22:14 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Apple Computer [2011.11.19 16:21:43 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE [2011.11.19 16:21:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2011.11.19 16:21:17 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2011.11.19 16:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2011.11.19 16:19:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2011.11.10 20:59:46 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Adobe [2011.11.10 20:59:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2011.11.10 20:59:04 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2011.11.10 20:58:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2011.11.09 22:37:46 | 000,044,032 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll [2011.11.06 02:50:28 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\Documents\SimpleMeter [2011.11.06 01:43:34 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\TS3Client [2011.11.06 01:41:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client [2011.11.06 01:41:52 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client [2011.10.23 21:29:34 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2011.10.21 20:16:12 | 001,843,200 | ---- | C] (Multicore Ware) -- C:\Windows\System32\SlotMaximizerBe.dll [2011.10.21 20:15:46 | 000,104,448 | ---- | C] (Multicore Ware) -- C:\Windows\System32\SlotMaximizerAg.dll [2011.10.10 15:38:40 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2011.10.10 14:20:13 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent [2011.10.10 14:19:36 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\uTorrent [2011.10.10 14:19:36 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\uTorrent [2011.10.10 14:13:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx [2011.10.10 14:12:28 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\RIFT [2011.10.09 19:56:45 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2011.10.09 19:56:30 | 000,000,000 | -HSD | C] -- C:\Boot [2011.10.09 18:13:11 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Skype [2011.10.09 18:12:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2011.10.09 17:40:09 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS [2011.10.09 17:35:58 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\Documents\Games for Windows - LIVE Demos [2011.10.09 17:34:11 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Lionhead Studios [2011.10.09 17:33:16 | 000,000,000 | ---D | C] -- C:\Windows\System32\xlive [2011.10.09 17:33:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2011.10.09 17:33:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE [2011.10.09 16:47:26 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\Documents\Belastingdienst [2011.10.09 16:47:26 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Belastingdienst [2011.10.09 13:04:41 | 000,000,000 | ---D | C] -- C:\C92DC0695643F2387664 [2011.10.09 12:49:19 | 000,000,000 | -H-D | C] -- C:\$AVG [2011.10.09 12:47:18 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Macromedia [2011.10.09 12:47:18 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Adobe [2011.10.09 12:47:12 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed [2011.10.09 12:43:13 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam [2011.10.09 12:31:39 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\AVG2012 [2011.10.09 12:31:16 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files [2011.10.09 12:30:50 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2012 [2011.10.09 12:30:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\AVG [2011.10.09 12:30:24 | 000,000,000 | ---D | C] -- C:\Program Files\AVG [2011.10.09 12:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData [2011.10.09 12:26:10 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Mozilla [2011.10.09 12:26:10 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Mozilla [2011.10.09 12:26:06 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2011.10.09 10:17:11 | 000,000,000 | ---D | C] -- C:\Program Files\Boot Camp [2011.10.09 10:16:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent [2011.10.09 10:15:39 | 000,058,656 | R--- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll [2011.10.09 10:15:38 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2011.10.09 10:14:33 | 000,065,824 | ---- | C] (Cirrus Logic Inc.) -- C:\Windows\System32\CirrusAPO_x86.dll [2011.10.09 10:14:33 | 000,014,336 | ---- | C] (Cirrus Logic) -- C:\Windows\System32\drivers\CS420x86.sys [2011.10.09 10:14:32 | 000,000,000 | ---D | C] -- C:\Program Files\Motorola [2011.10.09 10:14:19 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2011.10.09 10:14:19 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2011.10.09 10:14:19 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2011.10.09 10:14:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2011.10.09 10:14:03 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2011.10.09 10:13:45 | 000,000,000 | ---D | C] -- C:\Program Files\IDT [2011.10.09 10:13:22 | 000,397,312 | ---- | C] (AMD) -- C:\Windows\System32\atieclxx.exe [2011.10.09 10:13:22 | 000,176,128 | ---- | C] (AMD) -- C:\Windows\System32\atiesrxx.exe [2011.10.09 10:13:17 | 000,159,744 | ---- | C] (AMD) -- C:\Windows\System32\atitmmxx.dll [2011.10.09 10:13:05 | 000,015,872 | ---- | C] (AMD) -- C:\Windows\System32\atimuixx.dll [2011.10.09 10:12:50 | 000,058,144 | ---- | C] (AMD) -- C:\Windows\System32\coinst.dll [2011.10.09 10:12:47 | 000,000,000 | ---D | C] -- C:\Intel [2011.10.09 10:11:48 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2011.10.09 10:10:49 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Apple [2011.10.09 10:10:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2011.10.09 10:10:18 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2011.10.09 10:07:07 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2011.10.09 10:07:07 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Searches [2011.10.09 10:07:07 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2011.10.09 10:06:57 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Identities [2011.10.09 10:06:55 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Contacts [2011.10.09 10:06:49 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\VirtualStore [2011.10.09 10:06:47 | 000,000,000 | --SD | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Videos [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Saved Games [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Pictures [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Music [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Links [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Favorites [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Downloads [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Documents [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\Desktop [2011.10.09 10:06:47 | 000,000,000 | R--D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Vorlagen [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\AppData\Local\Verlauf [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\AppData\Local\Temporary Internet Files [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Startmenü [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\SendTo [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Recent [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Netzwerkumgebung [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Lokale Einstellungen [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Documents\Eigene Videos [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Documents\Eigene Musik [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Eigene Dateien [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Documents\Eigene Bilder [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Druckumgebung [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Cookies [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\AppData\Local\Anwendungsdaten [2011.10.09 10:06:47 | 000,000,000 | -HSD | C] -- C:\Users\Herr Bergmann\Anwendungsdaten [2011.10.09 10:06:47 | 000,000,000 | -H-D | C] -- C:\Users\Herr Bergmann\AppData [2011.10.09 10:06:47 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Temp [2011.10.09 10:06:47 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Local\Microsoft [2011.10.09 10:06:47 | 000,000,000 | ---D | C] -- C:\Users\Herr Bergmann\AppData\Roaming\Media Center Programs [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Recovery [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Programme [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2011.10.09 10:06:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2011.10.09 10:00:35 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2011.10.09 09:58:25 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2011.10.09 09:57:40 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2009.08.19 07:13:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\ru-RU [2009.08.19 07:13:29 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\ru-RU [2009.08.19 07:13:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\ru [2009.08.19 07:13:19 | 000,000,000 | ---D | C] -- C:\Windows\ru-RU [2009.08.19 07:09:42 | 000,033,792 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\ru-RU\yk62x86.sys.mui [2009.08.19 07:09:42 | 000,011,264 | ---- | C] (Корпорация Intel) -- C:\Windows\System32\drivers\ru-RU\e1q6032.sys.mui [2009.08.19 07:09:42 | 000,011,264 | ---- | C] (Корпорация Intel) -- C:\Windows\System32\drivers\ru-RU\e1k6032.sys.mui [2009.08.19 07:09:42 | 000,010,752 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\ru-RU\BrSerIb.sys.mui [2009.08.19 07:09:42 | 000,010,240 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\ru-RU\ltmdmnt.sys.mui [2009.08.19 07:09:36 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\ru-RU\pscr.sys.mui [2009.08.19 07:09:35 | 000,010,752 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\ru-RU\BrSerId.sys.mui [2009.08.19 07:09:35 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\ru-RU\BrParwdm.sys.mui [2009.08.19 07:09:31 | 000,002,560 | ---- | C] (Корпорация Майкрософт) -- C:\Windows\System32\drivers\ru-RU\mountmgr.sys.mui [2009.08.19 07:09:05 | 000,002,560 | ---- | C] (Корпорация Майкрософт) -- C:\Windows\System32\drivers\ru-RU\volmgrx.sys.mui [2009.08.19 07:03:45 | 000,000,000 | ---D | C] -- C:\Windows\nl-NL [2009.08.19 07:03:43 | 000,000,000 | ---D | C] -- C:\Windows\System32\nl [2009.08.19 07:03:43 | 000,000,000 | ---D | C] -- C:\Windows\System32\0413 [2009.08.19 07:03:34 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\nl-NL [2009.08.19 07:03:34 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\nl-NL [2009.08.19 06:59:55 | 000,033,280 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\nl-NL\yk62x86.sys.mui [2009.08.19 06:59:54 | 000,011,264 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nl-NL\BrSerId.sys.mui [2009.08.19 06:59:54 | 000,011,264 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nl-NL\BrSerIb.sys.mui [2009.08.19 06:59:54 | 000,011,264 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\nl-NL\ltmdmnt.sys.mui [2009.08.19 06:59:49 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\nl-NL\pscr.sys.mui [2009.08.19 06:59:47 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nl-NL\BrParwdm.sys.mui [2009.08.19 06:53:01 | 000,000,000 | ---D | C] -- C:\Windows\it-IT [2009.08.19 06:52:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\it-IT [2009.08.19 06:52:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\it-IT [2009.08.19 06:52:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\0410 [2009.08.19 06:52:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\it [2009.08.19 06:49:53 | 000,033,280 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\it-IT\yk62x86.sys.mui [2009.08.19 06:49:52 | 000,011,264 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\it-IT\BrSerId.sys.mui [2009.08.19 06:49:52 | 000,011,264 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\it-IT\BrSerIb.sys.mui [2009.08.19 06:49:52 | 000,011,264 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\it-IT\ltmdmnt.sys.mui [2009.08.19 06:49:47 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\it-IT\pscr.sys.mui [2009.08.19 06:49:45 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\it-IT\BrParwdm.sys.mui [2009.08.19 06:42:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\es-ES [2009.08.19 06:42:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\es [2009.08.19 06:42:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\0C0A [2009.08.19 06:42:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\es-ES [2009.08.19 06:42:47 | 000,000,000 | ---D | C] -- C:\Windows\es-ES [2009.08.19 06:39:58 | 000,033,792 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\es-ES\yk62x86.sys.mui [2009.08.19 06:39:57 | 000,011,264 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\es-ES\BrSerId.sys.mui [2009.08.19 06:39:57 | 000,011,264 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\es-ES\BrSerIb.sys.mui [2009.08.19 06:39:57 | 000,010,752 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\es-ES\ltmdmnt.sys.mui [2009.08.19 06:39:52 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\es-ES\pscr.sys.mui [2009.08.19 06:39:50 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\es-ES\BrParwdm.sys.mui [2009.08.19 06:33:38 | 000,000,000 | ---D | C] -- C:\Windows\fr-FR [2009.08.19 06:33:29 | 000,000,000 | ---D | C] -- C:\Windows\System32\040C [2009.08.19 06:33:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\fr-FR [2009.08.19 06:33:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\fr-FR [2009.08.19 06:33:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\fr [2009.08.19 06:31:32 | 000,033,280 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\fr-FR\yk62x86.sys.mui [2009.08.19 06:31:32 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\fr-FR\BrSerIb.sys.mui [2009.08.19 06:31:32 | 000,011,264 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\fr-FR\ltmdmnt.sys.mui [2009.08.19 06:31:27 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\fr-FR\pscr.sys.mui [2009.08.19 06:31:24 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\fr-FR\BrSerId.sys.mui [2009.08.19 06:31:24 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\fr-FR\BrParwdm.sys.mui [2009.08.19 06:26:05 | 000,000,000 | ---D | C] -- C:\Windows\de-DE [2009.08.19 06:25:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\XPSViewer [2009.08.19 06:25:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\de-DE [2009.08.19 06:25:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\de-DE [2009.08.19 06:25:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\0407 [2009.08.19 06:25:52 | 000,000,000 | ---D | C] -- C:\Windows\System32\de [2009.08.19 06:24:17 | 000,033,280 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\de-DE\yk62x86.sys.mui [2009.08.19 06:24:17 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerIb.sys.mui [2009.08.19 06:24:17 | 000,010,752 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\de-DE\ltmdmnt.sys.mui [2009.08.19 06:24:12 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\de-DE\pscr.sys.mui [2009.08.19 06:24:11 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerId.sys.mui [2009.08.19 06:24:11 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrParwdm.sys.mui [2009.07.14 08:50:03 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Journal [2009.07.14 08:49:48 | 000,000,000 | ---D | C] -- C:\Windows\ShellNew [2009.07.14 08:49:48 | 000,000,000 | ---D | C] -- C:\Windows\ehome [2009.07.14 08:49:45 | 000,000,000 | -HSD | C] -- C:\Windows\BitLockerDiscoveryVolumeContents [2009.07.14 08:49:45 | 000,000,000 | ---D | C] -- C:\Windows\RemotePackages [2009.07.14 08:49:45 | 000,000,000 | ---D | C] -- C:\Windows\CSC [2009.07.14 08:48:45 | 000,000,000 | RH-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\winrm [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\WCN [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\slmgr [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\en-US [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\en-US [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\en-US [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\en [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\DigitalLocker [2009.07.14 05:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\0409 [2009.07.14 05:56:47 | 000,000,000 | ---D | C] -- C:\Windows\System32\Printing_Admin_Scripts [2009.07.14 05:55:09 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\en-US\pscr.sys.mui [2009.07.14 05:55:07 | 000,032,256 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\en-US\yk62x86.sys.mui [2009.07.14 05:54:41 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerId.sys.mui [2009.07.14 05:54:41 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerIb.sys.mui [2009.07.14 05:54:41 | 000,009,728 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\en-US\ltmdmnt.sys.mui [2009.07.14 05:54:41 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrParwdm.sys.mui [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\ProgramData\Templates [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\ProgramData\Start Menu [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favorites [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\Documents and Settings [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop [2009.07.14 05:53:55 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data [2009.07.14 05:53:23 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2009.07.14 05:52:30 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games [2009.07.14 05:52:30 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Sidebar [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Photo Viewer [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WinBioPlugIns [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WinBioDatabase [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\twain_32 [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\restore [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Performance [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Offline Web Pages [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\FxsTmp [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Maker [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Program Files [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\diagnostics [2009.07.14 05:52:30 | 000,000,000 | ---D | C] -- C:\Windows\addins [2009.07.14 05:34:21 | 000,000,000 | ---D | C] -- C:\Windows\debug [2009.07.14 05:34:16 | 000,000,000 | ---D | C] -- C:\Windows\Setup [2009.07.14 05:34:13 | 000,000,000 | ---D | C] -- C:\Windows\ServiceProfiles [2009.07.14 05:34:06 | 000,000,000 | --SD | C] -- C:\Windows\System32\Microsoft [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-TW [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-HK [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-CN [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\winsxs [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\winevt [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wfp [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Web [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wdi [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wbem [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Vss [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\uk-UA [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\tr-TR [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\tracing [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\th-TH [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Temp [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Tasks [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\Tasks [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\TAPI [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sysprep [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sv-SE [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sr-Latn-CS [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sppui [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\spp [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\spool [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\Speech [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\SMI [2009.07.14 03:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sl-SI [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\sk-SK [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Setup [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ru-RU [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ro-RO [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Recovery [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ras [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pt-PT [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pt-BR [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pl-PL [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\oobe [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\nl-NL [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\NetworkList [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\NDF [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\nb-NO [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\MUI [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Msdtc [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\migwiz [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\migration [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\manifeststore [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\lv-LV [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\lt-LT [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\LogFiles [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ko-KR [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ja-JP [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\it-IT [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\inetsrv [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\IME [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\icsxml [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ias [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\hu-HU [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\hr-HR [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\he-IL [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\GroupPolicyUsers [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\GroupPolicy [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\fr-FR [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\fi-FI [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\et-EE [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\etc [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\es-ES [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\en-US [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\el-GR [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\DriverStore [2009.07.14 03:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32 [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\system [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Speech [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\servicing [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\security [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\schemas [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\SchCache [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Resources [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\rescache [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Registration [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\PolicyDefinitions [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\PLA [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\ModemLogs [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Microsoft.NET [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\Dism [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\de-DE [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\da-DK [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\cs-CZ [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\config [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\com [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\CodeIntegrity [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot2 [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\Boot [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\bg-BG [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\ar-SA [2009.07.14 03:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\AdvancedInstallers [2009.07.14 03:37:06 | 000,000,000 | R-SD | C] -- C:\Windows\Media [2009.07.14 03:37:06 | 000,000,000 | R-SD | C] -- C:\Windows\Fonts [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Logs [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\LiveKernelReports [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\L2Schemas [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\inf [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\IME [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Help [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Globalization [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Cursors [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Branding [2009.07.14 03:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Boot [2009.07.14 03:37:05 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft [2009.07.14 03:37:05 | 000,000,000 | R-SD | C] -- C:\Windows\assembly [2009.07.14 03:37:05 | 000,000,000 | R--D | C] -- C:\Users [2009.07.14 03:37:05 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup [2009.07.14 03:37:05 | 000,000,000 | R--D | C] -- C:\Program Files [2009.07.14 03:37:05 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance [2009.07.14 03:37:05 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories [2009.07.14 03:37:05 | 000,000,000 | -H-D | C] -- C:\ProgramData [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Mail [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Windows [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\PerfLogs [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\microsoft shared [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Windows\AppPatch [2009.07.14 03:37:05 | 000,000,000 | ---D | C] -- C:\Windows\AppCompat [2009.07.14 03:36:15 | 000,000,000 | -HSD | C] -- C:\$Recycle.Bin [2009.07.14 01:59:14 | 000,017,408 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll [2009.07.14 00:25:34 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.09.25 14:58:41 | 095,685,175 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm [2012.09.25 14:56:41 | 000,014,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.09.25 14:56:41 | 000,014,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.09.25 14:47:22 | 000,077,701 | ---- | M] () -- C:\ProgramData\bkciwmswssufmeb [2012.09.25 06:43:15 | 000,086,016 | ---- | M] () -- C:\ProgramData\jdmffyyp.exe [2012.09.25 06:43:15 | 000,086,016 | ---- | M] () -- C:\Users\Herr Bergmann\0.40886653536471984.exe [2012.09.17 20:44:50 | 000,253,411 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\Sofortüberweisung Cheaptickets.xps [2012.09.17 19:13:58 | 000,141,112 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\REVISED MODULE DATES Bali to Thailand.pdf [2012.09.17 14:44:22 | 003,271,682 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\Badesalz - 06 - Daabefuckeler.mp3 [2012.09.16 12:13:18 | 000,249,902 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\schedule1.xps [2012.09.12 18:55:03 | 006,666,057 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\Aitken-Spence-Hotel-Holdings-PLC-11-12.pdf [2012.09.11 09:04:38 | 000,000,959 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2012.lnk [2012.08.25 15:42:43 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Guild Wars 2.lnk [2012.08.25 15:37:20 | 000,012,444 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\komprimierte Steuererklärung_ESt2011_BERGMANN_JULIAN.pdf [2012.08.25 15:35:12 | 000,041,036 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\ESt2011_BERGMANN_JULIAN.elfo [2012.08.25 15:14:24 | 000,001,195 | ---- | M] () -- C:\Users\Public\Desktop\ElsterFormular.lnk [2012.08.24 14:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgtdix.sys [2012.07.26 02:21:30 | 000,237,408 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgldx86.sys [2012.05.17 22:44:43 | 000,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\System32\CmdLineExt.dll [2012.04.27 16:27:29 | 000,246,242 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm [2012.04.19 14:40:31 | 000,244,733 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\Beatport Order Receipt April JBergmann.xps [2012.04.19 14:32:47 | 000,013,992 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\view_email.aspx.htm [2012.04.19 14:30:48 | 000,210,996 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\gageverklaring.pdf [2012.04.19 03:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidshx.sys [2012.04.15 18:11:36 | 000,220,160 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\Group lists period 4 2011-2012 dd 14042012 [2012.04.09 20:11:55 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012.04.02 17:31:45 | 000,032,253 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\381856_282483195121854_109628312407344_717696_693534084_n.jpg [2012.04.02 11:21:46 | 000,085,508 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\Horeca cao English April 2010 to 31 March 2012.pdf [2012.03.19 14:14:59 | 000,032,015 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\swtor_eu_60_days_gamecard_99088848_KVAXBXZZ.jpg [2012.03.15 12:42:06 | 000,013,515 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\P&P Planning1.odt [2012.02.23 23:11:30 | 000,001,761 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2012.02.22 15:19:50 | 000,001,066 | ---- | M] () -- C:\Users\Herr Bergmann\Documents\cc_20120222_151946.reg [2012.01.31 03:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgrkx86.sys [2012.01.23 16:27:19 | 000,001,032 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011.12.23 12:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgmfx86.sys [2011.12.23 12:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidsshimx.sys [2011.12.23 12:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidsfilterx.sys [2011.12.23 12:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\System32\drivers\avgidsdriverx.sys [2011.12.22 22:07:44 | 000,026,728 | ---- | M] () -- C:\Users\Herr Bergmann\Documents\cc_20111222_220736.reg [2011.12.22 15:44:06 | 000,025,457 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\swtor_eu_60_days_gamecard_41237170_X42AW9XU.jpg [2011.12.16 14:17:15 | 000,292,696 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.12.02 18:07:45 | 000,496,082 | ---- | M] () -- C:\Users\Herr Bergmann\Desktop\FLT_2RQ6FR18907_0.pdf [2011.11.27 18:36:52 | 000,000,973 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011.11.09 22:39:44 | 000,059,904 | ---- | M] () -- C:\Windows\System32\OpenVideo.dll [2011.11.09 22:39:32 | 000,054,784 | ---- | M] () -- C:\Windows\System32\OVDecode.dll [2011.11.09 22:37:46 | 000,044,032 | ---- | M] (Khronos Group) -- C:\Windows\System32\OpenCL.dll [2011.10.23 21:32:59 | 000,561,420 | ---- | M] () -- C:\Windows\System32\oem39.inf [2011.10.21 20:16:12 | 001,843,200 | ---- | M] (Multicore Ware) -- C:\Windows\System32\SlotMaximizerBe.dll [2011.10.21 20:15:46 | 000,104,448 | ---- | M] (Multicore Ware) -- C:\Windows\System32\SlotMaximizerAg.dll [2011.10.09 19:56:32 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2011.10.09 10:18:26 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2011.10.09 10:15:22 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_applemtp_01005.Wdf [2011.10.09 10:15:18 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_applemtm_01005.Wdf [2011.10.09 10:14:54 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_applebmt_01005.Wdf [2011.10.09 10:14:43 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_AppleBtBc_01005.Wdf [2011.10.09 10:12:18 | 000,561,420 | ---- | M] () -- C:\Windows\System32\oem7.inf [2011.10.09 10:11:48 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_KeyMagic_01005.Wdf [2011.10.09 10:04:00 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_SensorsAlsDriver_01_09_00.Wdf [2011.10.09 10:02:31 | 000,053,911 | ---- | M] () -- C:\Windows\System32\license.rtf [2011.08.15 17:34:40 | 000,194,432 | ---- | M] () -- C:\Windows\System32\AppleOSSMgr.exe [2011.04.09 17:55:28 | 000,179,261 | ---- | M] () -- C:\Windows\System32\xlive.dll.cat [2011.02.08 02:35:36 | 000,058,656 | R--- | M] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll [2011.02.07 16:35:37 | 000,013,600 | ---- | M] () -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2011.02.07 16:35:33 | 000,065,824 | ---- | M] (Cirrus Logic Inc.) -- C:\Windows\System32\CirrusAPO_x86.dll [2011.02.07 16:35:33 | 000,014,336 | ---- | M] (Cirrus Logic) -- C:\Windows\System32\drivers\CS420x86.sys [2011.02.07 16:33:33 | 000,675,584 | ---- | M] () -- C:\Windows\System32\atiumdva.cap [2011.02.07 16:33:33 | 000,058,144 | ---- | M] (AMD) -- C:\Windows\System32\coinst.dll [2011.02.07 16:33:32 | 000,159,744 | ---- | M] (AMD) -- C:\Windows\System32\atitmmxx.dll [2011.02.07 16:33:32 | 000,022,280 | ---- | M] () -- C:\Windows\atiogl.xml [2011.02.07 16:33:32 | 000,002,975 | ---- | M] () -- C:\Windows\System32\atipblag.dat [2011.02.07 16:33:31 | 000,397,312 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe [2011.02.07 16:33:31 | 000,226,857 | ---- | M] () -- C:\Windows\System32\atiicdxx.dat [2011.02.07 16:33:31 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe [2011.02.07 16:33:31 | 000,138,384 | ---- | M] () -- C:\Windows\System32\atiapfxx.blb [2011.02.07 16:33:31 | 000,015,872 | ---- | M] (AMD) -- C:\Windows\System32\atimuixx.dll [2009.08.19 07:10:56 | 000,336,704 | ---- | M] () -- C:\Windows\System32\perfi019.dat [2009.08.19 07:10:56 | 000,039,446 | ---- | M] () -- C:\Windows\System32\perfd019.dat [2009.08.19 07:09:42 | 000,033,792 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\ru-RU\yk62x86.sys.mui [2009.08.19 07:09:42 | 000,011,264 | ---- | M] (Корпорация Intel) -- C:\Windows\System32\drivers\ru-RU\e1q6032.sys.mui [2009.08.19 07:09:42 | 000,011,264 | ---- | M] (Корпорация Intel) -- C:\Windows\System32\drivers\ru-RU\e1k6032.sys.mui [2009.08.19 07:09:42 | 000,010,752 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\ru-RU\BrSerIb.sys.mui [2009.08.19 07:09:42 | 000,010,240 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\ru-RU\ltmdmnt.sys.mui [2009.08.19 07:09:36 | 000,003,584 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\ru-RU\pscr.sys.mui [2009.08.19 07:09:35 | 000,010,752 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\ru-RU\BrSerId.sys.mui [2009.08.19 07:09:35 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\ru-RU\BrParwdm.sys.mui [2009.08.19 07:09:31 | 000,002,560 | ---- | M] (Корпорация Майкрософт) -- C:\Windows\System32\drivers\ru-RU\mountmgr.sys.mui [2009.08.19 07:09:05 | 000,002,560 | ---- | M] (Корпорация Майкрософт) -- C:\Windows\System32\drivers\ru-RU\volmgrx.sys.mui [2009.08.19 07:01:28 | 000,341,322 | ---- | M] () -- C:\Windows\System32\perfi013.dat [2009.08.19 07:01:28 | 000,043,068 | ---- | M] () -- C:\Windows\System32\perfd013.dat [2009.08.19 06:59:55 | 000,033,280 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\nl-NL\yk62x86.sys.mui [2009.08.19 06:59:54 | 000,011,264 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nl-NL\BrSerId.sys.mui [2009.08.19 06:59:54 | 000,011,264 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nl-NL\BrSerIb.sys.mui [2009.08.19 06:59:54 | 000,011,264 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\nl-NL\ltmdmnt.sys.mui [2009.08.19 06:59:49 | 000,003,584 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\nl-NL\pscr.sys.mui [2009.08.19 06:59:47 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nl-NL\BrParwdm.sys.mui [2009.08.19 06:51:09 | 000,335,478 | ---- | M] () -- C:\Windows\System32\perfi010.dat [2009.08.19 06:51:09 | 000,037,534 | ---- | M] () -- C:\Windows\System32\perfd010.dat [2009.08.19 06:49:53 | 000,033,280 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\it-IT\yk62x86.sys.mui [2009.08.19 06:49:52 | 000,011,264 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\it-IT\BrSerId.sys.mui [2009.08.19 06:49:52 | 000,011,264 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\it-IT\BrSerIb.sys.mui [2009.08.19 06:49:52 | 000,011,264 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\it-IT\ltmdmnt.sys.mui [2009.08.19 06:49:47 | 000,003,584 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\it-IT\pscr.sys.mui [2009.08.19 06:49:45 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\it-IT\BrParwdm.sys.mui [2009.08.19 06:41:20 | 000,341,432 | ---- | M] () -- C:\Windows\System32\perfi00A.dat [2009.08.19 06:41:20 | 000,041,390 | ---- | M] () -- C:\Windows\System32\perfd00A.dat [2009.08.19 06:39:58 | 000,033,792 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\es-ES\yk62x86.sys.mui [2009.08.19 06:39:57 | 000,011,264 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\es-ES\BrSerId.sys.mui [2009.08.19 06:39:57 | 000,011,264 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\es-ES\BrSerIb.sys.mui [2009.08.19 06:39:57 | 000,010,752 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\es-ES\ltmdmnt.sys.mui [2009.08.19 06:39:52 | 000,004,096 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\es-ES\pscr.sys.mui [2009.08.19 06:39:50 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\es-ES\BrParwdm.sys.mui [2009.08.19 06:32:42 | 000,344,522 | ---- | M] () -- C:\Windows\System32\perfi00C.dat [2009.08.19 06:32:42 | 000,038,160 | ---- | M] () -- C:\Windows\System32\perfd00C.dat [2009.08.19 06:31:32 | 000,033,280 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\fr-FR\yk62x86.sys.mui [2009.08.19 06:31:32 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\fr-FR\BrSerIb.sys.mui [2009.08.19 06:31:32 | 000,011,264 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\fr-FR\ltmdmnt.sys.mui [2009.08.19 06:31:27 | 000,004,096 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\fr-FR\pscr.sys.mui [2009.08.19 06:31:24 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\fr-FR\BrSerId.sys.mui [2009.08.19 06:31:24 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\fr-FR\BrParwdm.sys.mui [2009.08.19 06:25:35 | 000,295,922 | ---- | M] () -- C:\Windows\System32\perfi007.dat [2009.08.19 06:25:35 | 000,038,104 | ---- | M] () -- C:\Windows\System32\perfd007.dat [2009.08.19 06:24:17 | 000,033,280 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\de-DE\yk62x86.sys.mui [2009.08.19 06:24:17 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerIb.sys.mui [2009.08.19 06:24:17 | 000,010,752 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\de-DE\ltmdmnt.sys.mui [2009.08.19 06:24:12 | 000,004,096 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\de-DE\pscr.sys.mui [2009.08.19 06:24:11 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrSerId.sys.mui [2009.08.19 06:24:11 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\de-DE\BrParwdm.sys.mui [2009.07.14 05:56:51 | 000,021,504 | ---- | M] () -- C:\Windows\System32\umstartup.etl [2009.07.14 05:47:13 | 000,009,216 | ---- | M] () -- C:\Windows\System32\umstartup000.etl [2009.07.14 05:42:29 | 000,001,244 | ---- | M] () -- C:\Windows\System32\migwiz.lnk [2009.07.14 05:42:26 | 000,000,535 | ---- | M] () -- C:\Windows\System32\mapisvc.inf [2009.07.14 03:09:40 | 000,010,240 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerId.sys.mui [2009.07.14 03:07:42 | 000,009,728 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\en-US\ltmdmnt.sys.mui [2009.07.14 03:04:20 | 000,010,240 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerIb.sys.mui [2009.07.14 03:03:46 | 000,003,584 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\en-US\pscr.sys.mui [2009.07.14 03:03:08 | 000,032,256 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\en-US\yk62x86.sys.mui [2009.07.14 03:02:36 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrParwdm.sys.mui [2009.07.14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2009.07.14 02:15:21 | 000,093,696 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll [2009.07.14 02:15:00 | 000,073,728 | ---- | M] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 02:15:00 | 000,064,000 | ---- | M] () -- C:\Windows\System32\BWContextHandler.dll [2009.07.14 02:15:00 | 000,017,408 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll [2009.07.14 02:14:28 | 000,066,048 | ---- | M] () -- C:\Windows\System32\PrintBrmUi.exe [2009.07.14 01:34:40 | 000,291,294 | ---- | M] () -- C:\Windows\System32\perfi009.dat [2009.07.14 01:34:38 | 000,031,548 | ---- | M] () -- C:\Windows\System32\perfd009.dat [2009.07.14 00:06:14 | 000,004,453 | ---- | M] () -- C:\Windows\System32\odbcconf.rsp [2009.07.13 23:58:08 | 000,043,131 | ---- | M] () -- C:\Windows\mib.bin [2009.07.13 23:38:23 | 000,071,951 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2009.07.13 22:38:33 | 000,000,610 | ---- | M] () -- C:\Windows\System32\WdsUnattendTemplate.xml [2009.07.13 21:29:26 | 000,000,714 | ---- | M] () -- C:\Windows\System32\RestartManager.mof [2009.07.13 21:29:26 | 000,000,176 | ---- | M] () -- C:\Windows\System32\RestartManagerUninstall.mof [2009.07.13 19:59:22 | 000,113,461 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjw.avm [2009.06.10 22:47:11 | 000,047,679 | ---- | M] () -- C:\Windows\System32\diskmgmt.msc [2009.06.10 22:46:53 | 000,008,280 | ---- | M] () -- C:\Windows\System32\spcinstrumentation.man [2009.06.10 22:46:40 | 000,152,516 | ---- | M] () -- C:\Windows\System32\systemsf.ebd [2009.06.10 22:46:28 | 000,105,371 | ---- | M] () -- C:\Windows\System32\RacRules.xml [2009.06.10 22:46:08 | 000,145,640 | ---- | M] () -- C:\Windows\System32\devmgmt.msc [2009.06.10 22:44:34 | 003,170,304 | ---- | M] () -- C:\Windows\System32\boot.sdi [2009.06.10 22:43:22 | 000,000,874 | ---- | M] () -- C:\Windows\System32\manage-bde.wsf [2009.06.10 22:43:20 | 000,144,862 | ---- | M] () -- C:\Windows\System32\tpm.msc [2009.06.10 22:42:54 | 000,028,420 | ---- | M] () -- C:\Windows\System32\bios1.rom [2009.06.10 22:42:54 | 000,018,832 | ---- | M] () -- C:\Windows\System32\v7vga.rom [2009.06.10 22:42:54 | 000,008,191 | ---- | M] () -- C:\Windows\System32\bios4.rom [2009.06.10 22:42:49 | 000,000,707 | ---- | M] () -- C:\Windows\_default.pif [2009.06.10 22:42:32 | 000,021,232 | ---- | M] () -- C:\Windows\System32\graphics.pro [2009.06.10 22:42:20 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2009.06.10 22:42:20 | 000,001,688 | ---- | M] () -- C:\Windows\System32\autoexec.nt [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2009.06.10 22:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys [2009.06.10 22:42:08 | 000,000,843 | ---- | M] () -- C:\Windows\System32\onlinesetup.cmd [2009.06.10 22:42:07 | 000,004,041 | ---- | M] () -- C:\Windows\System32\xwizard.dtd [2009.06.10 22:41:29 | 000,211,938 | ---- | M] () -- C:\Windows\System32\lcphrase.tbl [2009.06.10 22:41:29 | 000,024,114 | ---- | M] () -- C:\Windows\System32\lcptr.tbl [2009.06.10 22:40:51 | 000,146,389 | ---- | M] () -- C:\Windows\System32\printmanagement.msc [2009.06.10 22:40:47 | 000,201,034 | ---- | M] () -- C:\Windows\System32\winrm.vbs [2009.06.10 22:40:47 | 000,004,675 | ---- | M] () -- C:\Windows\System32\wsmanconfig_schema.xml [2009.06.10 22:40:47 | 000,002,426 | ---- | M] () -- C:\Windows\System32\WsmTxt.xsl [2009.06.10 22:40:47 | 000,001,559 | ---- | M] () -- C:\Windows\System32\WsmPty.xsl [2009.06.10 22:40:47 | 000,000,035 | ---- | M] () -- C:\Windows\System32\winrm.cmd [2009.06.10 22:39:59 | 000,001,041 | ---- | M] () -- C:\Windows\System32\tcpbidi.xml [2009.06.10 22:39:54 | 000,003,577 | ---- | M] () -- C:\Windows\System32\sysprtj.sep [2009.06.10 22:39:54 | 000,003,214 | ---- | M] () -- C:\Windows\System32\sysprint.sep [2009.06.10 22:39:53 | 000,000,114 | ---- | M] () -- C:\Windows\System32\pcl.sep [2009.06.10 22:39:53 | 000,000,051 | ---- | M] () -- C:\Windows\System32\pscript.sep [2009.06.10 22:39:44 | 000,144,673 | ---- | M] () -- C:\Windows\System32\WmiMgmt.msc [2009.06.10 22:39:37 | 000,017,463 | ---- | M] () -- C:\Windows\System32\drivers\etc\services [2009.06.10 22:39:37 | 000,003,683 | ---- | M] () -- C:\Windows\System32\drivers\etc\lmhosts.sam [2009.06.10 22:39:37 | 000,001,358 | ---- | M] () -- C:\Windows\System32\drivers\etc\protocol [2009.06.10 22:39:37 | 000,000,824 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2009.06.10 22:39:37 | 000,000,407 | ---- | M] () -- C:\Windows\System32\drivers\etc\networks [2009.06.10 22:39:18 | 000,001,820 | ---- | M] () -- C:\Windows\System32\rasctrnm.h [2009.06.10 22:38:48 | 000,113,629 | ---- | M] () -- C:\Windows\System32\slmgr.vbs [2009.06.10 22:38:43 | 000,145,059 | ---- | M] () -- C:\Windows\System32\taskschd.msc [2009.06.10 22:38:33 | 000,145,127 | ---- | M] () -- C:\Windows\System32\eventvwr.msc [2009.06.10 22:38:10 | 000,017,935 | ---- | M] () -- C:\Windows\System32\EventViewer_EventDetails.xsl [2009.06.10 22:36:33 | 000,063,070 | ---- | M] () -- C:\Windows\System32\certmgr.msc [2009.06.10 22:35:57 | 000,120,458 | ---- | M] () -- C:\Windows\System32\secpol.msc [2009.06.10 22:34:45 | 000,215,943 | ---- | M] () -- C:\Windows\System32\dssec.dat [2009.06.10 22:34:23 | 000,316,640 | ---- | M] () -- C:\Windows\WMSysPr9.prx [2009.06.10 22:32:47 | 000,000,741 | ---- | M] () -- C:\Windows\System32\NOISE.DAT [2009.06.10 22:32:07 | 000,002,060 | ---- | M] () -- C:\Windows\System32\noise.jpn [2009.06.10 22:31:26 | 000,145,519 | ---- | M] () -- C:\Windows\System32\perfmon.msc [2009.06.10 22:29:34 | 000,000,697 | ---- | M] () -- C:\Windows\System32\NOISE.THA [2009.06.10 22:29:29 | 011,967,524 | ---- | M] () -- C:\Windows\System32\korwbrkr.lex [2009.06.10 22:29:29 | 000,001,486 | ---- | M] () -- C:\Windows\System32\noise.kor [2009.06.10 22:29:28 | 000,001,696 | ---- | M] () -- C:\Windows\System32\NOISE.CHT [2009.06.10 22:29:17 | 000,001,696 | ---- | M] () -- C:\Windows\System32\NOISE.CHS [2009.06.10 22:28:59 | 000,147,439 | ---- | M] () -- C:\Windows\System32\gpedit.msc [2009.06.10 22:28:59 | 000,043,566 | ---- | M] () -- C:\Windows\System32\rsop.msc [2009.06.10 22:27:46 | 000,115,091 | ---- | M] () -- C:\Windows\System32\WF.msc [2009.06.10 22:27:38 | 000,000,003 | ---- | M] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [2009.06.10 22:26:15 | 000,144,998 | ---- | M] () -- C:\Windows\System32\lusrmgr.msc [2009.06.10 22:26:10 | 000,673,088 | ---- | M] () -- C:\Windows\System32\mlang.dat [2009.06.10 22:26:01 | 000,127,213 | ---- | M] () -- C:\Windows\System32\ega.cpi [2009.06.10 22:25:52 | 000,063,411 | ---- | M] () -- C:\Windows\System32\NAPCLCFG.MSC [2009.06.10 22:21:09 | 000,092,745 | ---- | M] () -- C:\Windows\System32\services.msc [2009.06.10 22:21:07 | 000,144,909 | ---- | M] () -- C:\Windows\System32\fsmgmt.msc [2009.06.10 22:21:06 | 000,113,256 | ---- | M] () -- C:\Windows\System32\compmgmt.msc [2009.06.10 22:21:06 | 000,041,587 | ---- | M] () -- C:\Windows\System32\azman.msc [2009.06.10 22:19:05 | 000,040,552 | ---- | M] () -- C:\Windows\System32\gatherNetworkInfo.vbs [2009.06.10 22:19:05 | 000,021,812 | ---- | M] () -- C:\Windows\System32\NetTrace.PLA.Diagnostics.xml [2009.06.10 22:18:29 | 000,000,565 | ---- | M] () -- C:\Windows\System32\NdfEventView.xml [2009.06.10 22:17:44 | 000,124,118 | ---- | M] () -- C:\Windows\System32\comexp.msc [2009.06.10 22:16:56 | 000,002,233 | ---- | M] () -- C:\Windows\System32\12520850.cpx [2009.06.10 22:16:56 | 000,002,151 | ---- | M] () -- C:\Windows\System32\12520437.cpx [2009.06.10 22:16:38 | 000,002,727 | ---- | M] () -- C:\Windows\System32\locationnotificationsview.xml [2009.06.10 22:15:19 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat [2009.06.10 22:15:18 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat [2009.06.10 22:15:06 | 000,076,060 | ---- | M] () -- C:\Windows\System32\xpsrchvw.xml [2009.06.10 22:14:45 | 000,051,867 | ---- | M] () -- C:\Windows\Ultimate.xml [2009.06.10 22:14:45 | 000,048,201 | ---- | M] () -- C:\Windows\Starter.xml [2009.06.10 22:14:29 | 003,440,660 | ---- | M] () -- C:\Windows\System32\drivers\gm.dls [2007.11.07 07:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI [2007.11.07 07:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab [2007.11.07 07:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp [2007.11.07 07:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini [2007.11.07 07:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini [2000.12.31 23:24:40 | 000,684,756 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2000.12.31 23:24:40 | 000,683,802 | ---- | M] () -- C:\Windows\System32\perfh00A.dat [2000.12.31 23:24:40 | 000,681,158 | ---- | M] () -- C:\Windows\System32\perfh013.dat [2000.12.31 23:24:40 | 000,679,812 | ---- | M] () -- C:\Windows\System32\perfh010.dat [2000.12.31 23:24:40 | 000,666,534 | ---- | M] () -- C:\Windows\System32\perfh019.dat [2000.12.31 23:24:40 | 000,643,628 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2000.12.31 23:24:40 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2000.12.31 23:24:40 | 000,133,506 | ---- | M] () -- C:\Windows\System32\perfc00A.dat [2000.12.31 23:24:40 | 000,129,410 | ---- | M] () -- C:\Windows\System32\perfc013.dat [2000.12.31 23:24:40 | 000,128,694 | ---- | M] () -- C:\Windows\System32\perfc019.dat [2000.12.31 23:24:40 | 000,126,872 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2000.12.31 23:24:40 | 000,126,188 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2000.12.31 23:24:40 | 000,123,808 | ---- | M] () -- C:\Windows\System32\perfc010.dat [2000.12.31 23:24:40 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2000.12.31 23:01:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2000.12.31 23:00:59 | 1743,310,848 | -HS- | M] () -- C:\hiberfil.sys [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.09.25 14:58:41 | 095,685,175 | ---- | C] () -- C:\Windows\System32\drivers\AVG\incavi.avm [2012.09.25 14:47:21 | 000,086,016 | ---- | C] () -- C:\ProgramData\jdmffyyp.exe [2012.09.25 06:43:17 | 000,077,701 | ---- | C] () -- C:\ProgramData\bkciwmswssufmeb [2012.09.25 06:43:15 | 000,086,016 | ---- | C] () -- C:\Users\Herr Bergmann\0.40886653536471984.exe [2012.09.17 20:44:49 | 000,253,411 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\Sofortüberweisung Cheaptickets.xps [2012.09.17 19:13:49 | 000,141,112 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\REVISED MODULE DATES Bali to Thailand.pdf [2012.09.17 14:44:20 | 003,271,682 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\Badesalz - 06 - Daabefuckeler.mp3 [2012.09.16 12:13:09 | 000,249,902 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\schedule1.xps [2012.09.12 18:55:03 | 006,666,057 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\Aitken-Spence-Hotel-Holdings-PLC-11-12.pdf [2012.08.25 15:42:43 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Guild Wars 2.lnk [2012.08.25 15:37:20 | 000,012,444 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\komprimierte Steuererklärung_ESt2011_BERGMANN_JULIAN.pdf [2012.08.25 15:21:30 | 000,041,036 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\ESt2011_BERGMANN_JULIAN.elfo [2012.08.25 15:14:24 | 000,001,195 | ---- | C] () -- C:\Users\Public\Desktop\ElsterFormular.lnk [2012.08.16 16:37:55 | 000,000,959 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2012.lnk [2012.04.27 16:27:29 | 000,246,242 | ---- | C] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm [2012.04.19 14:40:28 | 000,244,733 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\Beatport Order Receipt April JBergmann.xps [2012.04.19 14:32:46 | 000,013,992 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\view_email.aspx.htm [2012.04.19 14:30:46 | 000,210,996 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\gageverklaring.pdf [2012.04.15 18:11:34 | 000,220,160 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\Group lists period 4 2011-2012 dd 14042012 [2012.04.09 20:11:55 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012.04.02 17:31:41 | 000,032,253 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\381856_282483195121854_109628312407344_717696_693534084_n.jpg [2012.04.02 11:21:46 | 000,085,508 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\Horeca cao English April 2010 to 31 March 2012.pdf [2012.03.19 14:14:55 | 000,032,015 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\swtor_eu_60_days_gamecard_99088848_KVAXBXZZ.jpg [2012.03.15 12:21:27 | 000,013,515 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\P&P Planning1.odt [2012.02.23 23:11:30 | 000,001,761 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2012.02.22 15:19:48 | 000,001,066 | ---- | C] () -- C:\Users\Herr Bergmann\Documents\cc_20120222_151946.reg [2012.01.23 16:27:19 | 000,001,032 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011.12.22 22:07:41 | 000,026,728 | ---- | C] () -- C:\Users\Herr Bergmann\Documents\cc_20111222_220736.reg [2011.12.22 15:44:01 | 000,025,457 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\swtor_eu_60_days_gamecard_41237170_X42AW9XU.jpg [2011.12.02 18:07:31 | 000,496,082 | ---- | C] () -- C:\Users\Herr Bergmann\Desktop\FLT_2RQ6FR18907_0.pdf [2011.11.27 18:36:52 | 000,000,973 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011.11.10 20:59:18 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011.11.09 22:39:44 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll [2011.11.09 22:39:32 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll [2011.10.23 21:33:06 | 000,561,420 | ---- | C] () -- C:\Windows\System32\oem39.inf [2011.10.09 19:56:32 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK [2011.10.09 19:56:30 | 000,383,562 | RHS- | C] () -- C:\bootmgr [2011.10.09 17:33:03 | 000,001,346 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk [2011.10.09 12:26:06 | 000,001,116 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2011.10.09 10:18:26 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011.10.09 10:16:25 | 000,013,600 | ---- | C] () -- C:\Windows\System32\drivers\IntelMEFWVer.dll [2011.10.09 10:15:22 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_applemtp_01005.Wdf [2011.10.09 10:15:18 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_applemtm_01005.Wdf [2011.10.09 10:14:54 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_applebmt_01005.Wdf [2011.10.09 10:14:43 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_AppleBtBc_01005.Wdf [2011.10.09 10:13:37 | 000,022,280 | ---- | C] () -- C:\Windows\atiogl.xml [2011.10.09 10:12:59 | 000,226,857 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2011.10.09 10:12:59 | 000,002,975 | ---- | C] () -- C:\Windows\System32\atipblag.dat [2011.10.09 10:12:54 | 000,675,584 | ---- | C] () -- C:\Windows\System32\atiumdva.cap [2011.10.09 10:12:53 | 000,138,384 | ---- | C] () -- C:\Windows\System32\atiapfxx.blb [2011.10.09 10:12:22 | 000,561,420 | ---- | C] () -- C:\Windows\System32\oem7.inf [2011.10.09 10:11:48 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_KeyMagic_01005.Wdf [2011.10.09 10:10:48 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2011.10.09 10:07:08 | 000,001,409 | ---- | C] () -- C:\Users\Herr Bergmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2011.10.09 10:04:00 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_SensorsAlsDriver_01_09_00.Wdf [2011.10.09 10:02:23 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2011.10.09 10:02:18 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2011.10.09 09:57:40 | 1743,310,848 | -HS- | C] () -- C:\hiberfil.sys [2011.08.15 17:34:40 | 000,194,432 | ---- | C] () -- C:\Windows\System32\AppleOSSMgr.exe [2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat [2009.08.19 07:13:50 | 000,666,534 | ---- | C] () -- C:\Windows\System32\perfh019.dat [2009.08.19 07:13:50 | 000,336,704 | ---- | C] () -- C:\Windows\System32\perfi019.dat [2009.08.19 07:13:50 | 000,128,694 | ---- | C] () -- C:\Windows\System32\perfc019.dat [2009.08.19 07:13:50 | 000,039,446 | ---- | C] () -- C:\Windows\System32\perfd019.dat [2009.08.19 07:04:06 | 000,681,158 | ---- | C] () -- C:\Windows\System32\perfh013.dat [2009.08.19 07:04:06 | 000,341,322 | ---- | C] () -- C:\Windows\System32\perfi013.dat [2009.08.19 07:04:06 | 000,129,410 | ---- | C] () -- C:\Windows\System32\perfc013.dat [2009.08.19 07:04:06 | 000,043,068 | ---- | C] () -- C:\Windows\System32\perfd013.dat [2009.08.19 06:53:20 | 000,679,812 | ---- | C] () -- C:\Windows\System32\perfh010.dat [2009.08.19 06:53:20 | 000,335,478 | ---- | C] () -- C:\Windows\System32\perfi010.dat [2009.08.19 06:53:20 | 000,123,808 | ---- | C] () -- C:\Windows\System32\perfc010.dat [2009.08.19 06:53:20 | 000,037,534 | ---- | C] () -- C:\Windows\System32\perfd010.dat [2009.08.19 06:43:19 | 000,683,802 | ---- | C] () -- C:\Windows\System32\perfh00A.dat [2009.08.19 06:43:19 | 000,341,432 | ---- | C] () -- C:\Windows\System32\perfi00A.dat [2009.08.19 06:43:19 | 000,133,506 | ---- | C] () -- C:\Windows\System32\perfc00A.dat [2009.08.19 06:43:19 | 000,041,390 | ---- | C] () -- C:\Windows\System32\perfd00A.dat [2009.08.19 06:33:57 | 000,344,522 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2009.08.19 06:33:56 | 000,684,756 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2009.08.19 06:33:56 | 000,126,872 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2009.08.19 06:33:56 | 000,038,160 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2009.08.19 06:26:20 | 000,643,628 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2009.08.19 06:26:20 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2009.08.19 06:26:20 | 000,126,188 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2009.08.19 06:26:20 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2009.07.14 08:51:56 | 000,051,867 | ---- | C] () -- C:\Windows\Ultimate.xml [2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 05:48:09 | 000,048,201 | ---- | C] () -- C:\Windows\Starter.xml [2009.07.14 05:46:52 | 000,053,911 | ---- | C] () -- C:\Windows\System32\license.rtf [2009.07.14 05:46:36 | 000,001,515 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2009.07.14 05:42:30 | 000,001,246 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk [2009.07.14 05:42:29 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk [2009.07.14 05:42:29 | 000,001,244 | ---- | C] () -- C:\Windows\System32\migwiz.lnk [2009.07.14 05:42:26 | 000,000,535 | ---- | C] () -- C:\Windows\System32\mapisvc.inf [2009.07.14 05:42:24 | 000,001,210 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk [2009.07.14 05:34:15 | 000,014,784 | -H-- | C] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2009.07.14 05:34:15 | 000,014,784 | -H-- | C] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2009.07.14 05:34:00 | 000,021,504 | ---- | C] () -- C:\Windows\System32\umstartup.etl [2009.07.14 05:34:00 | 000,009,216 | ---- | C] () -- C:\Windows\System32\umstartup000.etl [2009.07.14 05:33:53 | 000,292,696 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009.07.14 03:05:48 | 000,606,992 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009.07.14 03:05:48 | 000,103,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009.07.14 03:05:05 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex [2009.07.14 03:05:05 | 000,001,696 | ---- | C] () -- C:\Windows\System32\NOISE.CHT [2009.07.14 03:05:05 | 000,001,696 | ---- | C] () -- C:\Windows\System32\NOISE.CHS [2009.07.14 03:05:05 | 000,001,486 | ---- | C] () -- C:\Windows\System32\noise.kor [2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009.07.14 03:05:05 | 000,000,697 | ---- | C] () -- C:\Windows\System32\NOISE.THA [2009.07.14 03:05:03 | 000,003,683 | ---- | C] () -- C:\Windows\System32\drivers\etc\lmhosts.sam [2009.07.14 03:04:17 | 000,017,463 | ---- | C] () -- C:\Windows\System32\drivers\etc\services [2009.07.14 03:04:17 | 000,001,358 | ---- | C] () -- C:\Windows\System32\drivers\etc\protocol [2009.07.14 03:04:17 | 000,000,824 | ---- | C] () -- C:\Windows\System32\drivers\etc\hosts [2009.07.14 03:04:17 | 000,000,407 | ---- | C] () -- C:\Windows\System32\drivers\etc\networks [2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009.07.14 03:04:04 | 000,002,577 | ---- | C] () -- C:\Windows\System32\config.nt [2009.07.14 03:04:04 | 000,001,688 | ---- | C] () -- C:\Windows\System32\autoexec.nt [2009.07.14 03:04:04 | 000,000,024 | ---- | C] () -- C:\autoexec.bat [2009.07.14 03:04:04 | 000,000,010 | ---- | C] () -- C:\config.sys [2009.07.14 03:03:57 | 000,008,798 | ---- | C] () -- C:\Windows\System32\icrav03.rat [2009.07.14 03:03:57 | 000,001,988 | ---- | C] () -- C:\Windows\System32\ticrf.rat [2009.07.14 01:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009.07.14 00:11:57 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [2009.07.14 00:08:01 | 000,003,577 | ---- | C] () -- C:\Windows\System32\sysprtj.sep [2009.07.14 00:08:01 | 000,000,114 | ---- | C] () -- C:\Windows\System32\pcl.sep [2009.07.14 00:08:01 | 000,000,051 | ---- | C] () -- C:\Windows\System32\pscript.sep [2009.07.14 00:06:14 | 000,004,453 | ---- | C] () -- C:\Windows\System32\odbcconf.rsp [2009.07.13 23:53:38 | 000,146,389 | ---- | C] () -- C:\Windows\System32\printmanagement.msc [2009.07.13 23:41:10 | 000,002,233 | ---- | C] () -- C:\Windows\System32\12520850.cpx [2009.07.13 23:38:23 | 000,071,951 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2009.07.13 23:12:16 | 000,063,411 | ---- | C] () -- C:\Windows\System32\NAPCLCFG.MSC [2009.07.13 23:11:17 | 000,115,091 | ---- | C] () -- C:\Windows\System32\WF.msc [2009.07.13 23:10:48 | 000,021,812 | ---- | C] () -- C:\Windows\System32\NetTrace.PLA.Diagnostics.xml [2009.07.13 23:06:29 | 000,201,034 | ---- | C] () -- C:\Windows\System32\winrm.vbs [2009.07.13 23:06:29 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml [2009.07.13 23:06:29 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl [2009.07.13 23:06:29 | 000,001,559 | ---- | C] () -- C:\Windows\System32\WsmPty.xsl [2009.07.13 23:01:40 | 000,124,118 | ---- | C] () -- C:\Windows\System32\comexp.msc [2009.07.13 22:55:47 | 000,144,998 | ---- | C] () -- C:\Windows\System32\lusrmgr.msc [2009.07.13 22:53:23 | 000,147,439 | ---- | C] () -- C:\Windows\System32\gpedit.msc [2009.07.13 22:53:23 | 000,043,566 | ---- | C] () -- C:\Windows\System32\rsop.msc [2009.07.13 22:47:53 | 000,063,070 | ---- | C] () -- C:\Windows\System32\certmgr.msc [2009.07.13 22:46:10 | 000,145,127 | ---- | C] () -- C:\Windows\System32\eventvwr.msc [2009.07.13 22:46:10 | 000,017,935 | ---- | C] () -- C:\Windows\System32\EventViewer_EventDetails.xsl [2009.07.13 22:46:09 | 000,145,059 | ---- | C] () -- C:\Windows\System32\taskschd.msc [2009.07.13 22:46:01 | 000,144,673 | ---- | C] () -- C:\Windows\System32\WmiMgmt.msc [2009.07.13 22:44:25 | 000,120,458 | ---- | C] () -- C:\Windows\System32\secpol.msc [2009.07.13 22:44:22 | 000,144,909 | ---- | C] () -- C:\Windows\System32\fsmgmt.msc [2009.07.13 22:44:22 | 000,113,256 | ---- | C] () -- C:\Windows\System32\compmgmt.msc [2009.07.13 22:44:22 | 000,092,745 | ---- | C] () -- C:\Windows\System32\services.msc [2009.07.13 22:44:22 | 000,041,587 | ---- | C] () -- C:\Windows\System32\azman.msc [2009.07.13 22:38:38 | 000,024,114 | ---- | C] () -- C:\Windows\System32\lcptr.tbl [2009.07.13 22:38:33 | 000,000,610 | ---- | C] () -- C:\Windows\System32\WdsUnattendTemplate.xml [2009.07.13 22:34:35 | 000,047,679 | ---- | C] () -- C:\Windows\System32\diskmgmt.msc [2009.07.13 22:33:45 | 000,000,714 | ---- | C] () -- C:\Windows\System32\RestartManager.mof [2009.07.13 22:33:45 | 000,000,176 | ---- | C] () -- C:\Windows\System32\RestartManagerUninstall.mof [2009.07.13 22:30:30 | 000,000,707 | ---- | C] () -- C:\Windows\_default.pif [2009.07.13 22:30:26 | 000,018,832 | ---- | C] () -- C:\Windows\System32\v7vga.rom [2009.07.13 22:30:26 | 000,008,191 | ---- | C] () -- C:\Windows\System32\bios4.rom [2009.07.13 22:28:41 | 000,145,519 | ---- | C] () -- C:\Windows\System32\perfmon.msc [2009.07.13 22:23:44 | 000,145,640 | ---- | C] () -- C:\Windows\System32\devmgmt.msc [2009.07.13 22:20:44 | 000,144,862 | ---- | C] () -- C:\Windows\System32\tpm.msc [2009.07.13 21:31:17 | 000,127,213 | ---- | C] () -- C:\Windows\System32\ega.cpi [2009.07.13 21:30:24 | 000,000,843 | ---- | C] () -- C:\Windows\System32\onlinesetup.cmd [2009.07.13 21:22:04 | 000,000,874 | ---- | C] () -- C:\Windows\System32\manage-bde.wsf [2009.07.13 19:59:22 | 000,113,461 | ---- | C] () -- C:\Windows\System32\drivers\AVG\iavichjw.avm [2009.06.10 22:46:53 | 000,008,280 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man [2009.06.10 22:46:40 | 000,152,516 | ---- | C] () -- C:\Windows\System32\systemsf.ebd [2009.06.10 22:46:28 | 000,105,371 | ---- | C] () -- C:\Windows\System32\RacRules.xml [2009.06.10 22:44:34 | 003,170,304 | ---- | C] () -- C:\Windows\System32\boot.sdi [2009.06.10 22:42:54 | 000,028,420 | ---- | C] () -- C:\Windows\System32\bios1.rom [2009.06.10 22:42:32 | 000,021,232 | ---- | C] () -- C:\Windows\System32\graphics.pro [2009.06.10 22:42:07 | 000,004,041 | ---- | C] () -- C:\Windows\System32\xwizard.dtd [2009.06.10 22:41:29 | 000,211,938 | ---- | C] () -- C:\Windows\System32\lcphrase.tbl [2009.06.10 22:40:47 | 000,000,035 | ---- | C] () -- C:\Windows\System32\winrm.cmd [2009.06.10 22:39:59 | 000,001,041 | ---- | C] () -- C:\Windows\System32\tcpbidi.xml [2009.06.10 22:39:54 | 000,003,214 | ---- | C] () -- C:\Windows\System32\sysprint.sep [2009.06.10 22:39:18 | 000,001,820 | ---- | C] () -- C:\Windows\System32\rasctrnm.h [2009.06.10 22:38:48 | 000,113,629 | ---- | C] () -- C:\Windows\System32\slmgr.vbs [2009.06.10 22:34:23 | 000,316,640 | ---- | C] () -- C:\Windows\WMSysPr9.prx [2009.06.10 22:32:07 | 000,002,060 | ---- | C] () -- C:\Windows\System32\noise.jpn [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2009.06.10 22:19:05 | 000,040,552 | ---- | C] () -- C:\Windows\System32\gatherNetworkInfo.vbs [2009.06.10 22:18:29 | 000,000,565 | ---- | C] () -- C:\Windows\System32\NdfEventView.xml [2009.06.10 22:16:56 | 000,002,151 | ---- | C] () -- C:\Windows\System32\12520437.cpx [2009.06.10 22:16:38 | 000,002,727 | ---- | C] () -- C:\Windows\System32\locationnotificationsview.xml [2009.06.10 22:15:06 | 000,076,060 | ---- | C] () -- C:\Windows\System32\xpsrchvw.xml [2009.06.10 22:14:28 | 003,440,660 | ---- | C] () -- C:\Windows\System32\drivers\gm.dls [2007.11.07 07:12:28 | 000,232,960 | ---- | C] () -- C:\VC_RED.MSI [2007.11.07 07:09:22 | 001,442,522 | ---- | C] () -- C:\VC_RED.cab [2007.11.07 07:00:40 | 000,005,686 | ---- | C] () -- C:\vcredist.bmp [2007.11.07 07:00:40 | 000,001,110 | ---- | C] () -- C:\globdata.ini [2007.11.07 07:00:40 | 000,000,843 | ---- | C] () -- C:\install.ini ========== ZeroAccess Check ========== [2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010.07.27 15:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2011.10.09 12:31:39 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\AVG2012 [2011.10.09 16:47:26 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\Belastingdienst [2012.08.25 15:14:53 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\elsterformular [2011.10.09 17:34:11 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\Lionhead Studios [2011.12.07 21:58:39 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\OpenOffice.org [2012.02.22 15:16:44 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\RIFT [2012.09.11 22:12:57 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\TS3Client [2012.08.25 15:17:46 | 000,000,000 | ---D | M] -- C:\Users\Herr Bergmann\AppData\Roaming\uTorrent ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2012.08.16 16:37:13 | 000,000,000 | -H-D | M] -- C:\$AVG [2011.10.09 10:06:55 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2011.12.17 15:27:21 | 000,000,000 | ---D | M] -- C:\AMD [2011.12.17 15:29:55 | 000,000,000 | ---D | M] -- C:\ATI [2011.10.09 19:56:31 | 000,000,000 | -HSD | M] -- C:\Boot [2011.10.09 13:04:41 | 000,000,000 | ---D | M] -- C:\C92DC0695643F2387664 [2009.07.14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2011.10.09 10:06:39 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2011.10.09 10:12:47 | 000,000,000 | ---D | M] -- C:\Intel [2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs [2012.08.25 15:42:42 | 000,000,000 | R--D | M] -- C:\Program Files [2012.09.25 14:47:21 | 000,000,000 | -H-D | M] -- C:\ProgramData [2011.10.09 10:06:39 | 000,000,000 | -HSD | M] -- C:\Programme [2011.10.09 10:06:39 | 000,000,000 | -HSD | M] -- C:\Recovery [2012.09.02 21:35:41 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2011.10.09 10:06:47 | 000,000,000 | R--D | M] -- C:\Users [2012.09.25 15:00:01 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < MD5 for: AGP440.SYS > [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: EXPLORER.EXE > [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe < MD5 for: IASTORV.SYS > [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\System32\user32.dll [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll < MD5 for: USERINIT.EXE > [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WINLOGON.EXE > [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\system32\*.dll /lockedfiles > < %USERPROFILE%\*.* > [2012.09.25 06:43:15 | 000,086,016 | ---- | M] () -- C:\Users\Herr Bergmann\0.40886653536471984.exe [2000.12.31 23:31:03 | 001,048,576 | -HS- | M] () -- C:\Users\Herr Bergmann\NTUSER.DAT [2000.12.31 23:31:03 | 000,262,144 | -HS- | M] () -- C:\Users\Herr Bergmann\ntuser.dat.LOG1 [2011.10.09 10:06:47 | 000,000,000 | -HS- | M] () -- C:\Users\Herr Bergmann\ntuser.dat.LOG2 [2011.10.09 10:17:33 | 000,065,536 | -HS- | M] () -- C:\Users\Herr Bergmann\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2011.10.09 10:17:33 | 000,524,288 | -HS- | M] () -- C:\Users\Herr Bergmann\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2011.10.09 10:17:33 | 000,524,288 | -HS- | M] () -- C:\Users\Herr Bergmann\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2011.10.09 10:06:47 | 000,000,020 | -HS- | M] () -- C:\Users\Herr Bergmann\ntuser.ini < %USERPROFILE%\Local Settings\Temp\*.exe > < %USERPROFILE%\Local Settings\Temp\*.dll > < %USERPROFILE%\Application Data\*.exe > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < End of report > Vielen Dank im Voraus! Liebe Grüße  |
| Themen zu Diese Webseite kann nicht angezeigt werden - Trojaner |
| adobe, autorun, avg, bho, bonjour, defender, error, firefox, format, helper, installation, logfile, mozilla, nvidia, plug-in, problem, registry, required, rundll, scan, software, tablet, taskmanager, teamspeak, temp, trojaner, windows, windows xp |
Baum-Darstellung