nuqel Trojaner - rkill laeuft nicht Malwarebytes auch nicht

ralph.allen · 04.04.2011, 00:24

Hallo an die Helden,
ich habe mir wohl den Nuqel Trojaner eingefangen. Zumindest meldet er sich mit diesem Namen in unzaehligen Fenstern selber.

Das erste Ungewoehnliche
Wenn ich Windows im abgesicherten Modus mit Netzwerktreibern starte, werde ich spaeter in einem Windows-Fenster gefragt, ob ich den abgesicherten Modus fortsetzen moechte (Ja) oder den vorherigen Computerstatus wiederherstellen moechte (Nein).
Ist dies normal?
Mir erscheint es wegen folgenden Phaenomens suspekt:

Ich habe mir von einem anderen Computer RKILL heruntergeladen (leider ist auf meinem Computer das Internet durch den Trojaner ausgeschaltet). Wenn ich RKILL starte, erscheinen erst 3 Fenster mit dem Hinweis "Installation fehlgeschlagen". Anschliessend erscheint genau das selbe oben beschriebene Fenster zum abgesicherten Modus. Ist dies in Ordnung oder schon Teil des Trojaners?

Zumindest erscheinen nach mehrmalige Starten von RKILL immer noch die Fehlermeldungen.

Dann habe ich wieder ueber den anderen Computer Malwarebytes heruntergeladen und installiert. Da ich keine Verbindung zum Internet habe, ist die Virusdatei 104 Tage veraltet. Kann ich diese manuell runterladen und installieren?

Beim ersten Durchlauf von Malwarebytes wurde eine Infizierung gefunden, beim zweiten Mal nicht mehr. Beide Logfiles habe ich angehangen.

Wenn ich jetzt noch einmal Malwarebytes laufen lassen moechte, erscheint die Fehlermeldung "Laufzeitfehler 0" und danach "Laufzeitfehler 440".

Der PC war vor dem Befall wunderbar in Ordnung, aber jetzt klappt kaum mehr etwas. Koennt ihr mir helfen?

Ich haenge die Log-Files von Malwarebytes und OTL an.
Viele Gruesse,
Ralph

kira · 04.04.2011, 06:39

Hallo und Herzlich Willkommen!

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:

Zitat:

"Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
- da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
- also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
Charakteristische Merkmale/Profilinformationen:
- aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
Die Systemprüfung und Bereinigung:
- kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
Innerhalb der Betreuungszeit:
- ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
Die Reihenfolge:
- genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
Ansonsten unsere Forumsregeln:
- Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?

Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen

Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen

Möglichkeiten, die Du noch ausprobieren kannst:

1.
Wenn du glaubst zu kennen die Zeitpunkt wo dein System noch einwandfrei funktioniert hat, die Systemwiederherstellung ist einen Versuch Wert!:

- Gibt es einen "relativ einfachen Weg",wenn eine frische Infektion vorliegt, oder mal bestimmte Probleme bekommt man auch gelöst, was man sogleich ausprobieren sollte. Dies bietet Dir die Möglichkeit, Systemänderungen am Computer ohne Auswirkung auf persönliche Dateien, wie z. B. E-Mails, Dokumente oder Fotos, rückgängig zu machen.

Zitat:

-> Systemwiederherstellung
► Bitte wähle das älteste verfügbare Datum für die Wiederherstellung von Windows aus, wo dein Rechner noch einwandfrei funktioniert hat!

Du musst dich als Administrator oder als Benutzer mit Administratorrechten anmelden.
Die Systemwiederherstellung lässt sich unter Windows Vista/XP/7 wie folgt aufrufen:
► Start → Alle Programme → Zubehör → Systemprogramme → Systemwiederherstellung

->Eine Schritt-für-Schritt-Anleitung zum Einsatz der Systemwiederherstellung unter Windows XP
->Systemwiederherstellung unter Windows Vista
->Unter Win 7
► Falls nötig, kannst Du es im abgesicherten Modus auch tun - (Link bitte unbedingt anklicken & lesen!)

Die Systemwiederherstellung ist nur ein "Notlösung", das Problem wird damit nie 100%ig beseitigt, da dem Zeitpunkt des Eindringen des Trojaners nicht mehr feststellen kann. Aber man kann damit die Funktionsfähigkeit eines Computersystems erhöhen.
(Kannst noch immer bis zum heutigen Zeitpunkt rückgängig machen, falls liefert nicht das gewünschte Ergebnis)

2.
Falls Kein Erfolg, einen weiteren Versuch mit:
Den Computer mit der letzten als funktionierend bekannten Konfiguration starten
Methode D: Letzte als funktionierend bekannte Konfiguration aufrufen

► berichte mir, ob die SWH funktioniert hat, bzw ob Du das System auf einen früheren Wiederherstellungspunkt zurückstellen können?
- Auch ob den Vorschlag unter Punkt 2 funktioniert hat?

gruß
Cf

ralph.allen · 04.04.2011, 08:01

unglaublich, es hat tatsaechlich funktioniert!
und ich dachte die Meldung zur Systemwiederherstellung wurde auch vom Trojaner produziert.
Da ich den PC noch im abgesicherten Modus hatte, habe ich gleich dort die Systemwiederherstellung von Samstag gewaehlt.
Es wurde gleich einwandfrei im normalen Modus gestartet und ich hatte gleich Verbindung zum Internet, wo ich Malwarebytes runterladen und aktualisieren konnte. Auch Windows update habe ich aktualisiert. Nun lasse ich Malwarebytes durchlaufen.
Erstmal vielen Dank. Bin mal gespannt wie der PC heute abend aussieht.
Gibt es noch irgendetwas zu beachten?
Ralph

kira · 04.04.2011, 20:08

na fein

dann poste bitte das Protokoll von Malwarebytes, wenn`s fertig ist

Ausserdem:

Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen

1.
lade Dir HijackThis 2.0.4 von *von hier* herunter
HijackThis starten→ "Do a system scan and save a logfile" klicken→ das erhaltene Logfile "markieren" → "kopieren"→ hier in deinem Thread (rechte Maustaste) "einfügen"

2.
Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken:
System-Dateien und -Ordner unter XP und Vista sichtbar machen
Am Ende unserer Arbeit, kannst wieder rückgängig machen!

3.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - bei Win7 wähle Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.
** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool Ccleaner herunter
→ Download
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:

Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]

gruß
Coverflow

ralph.allen · 04.04.2011, 22:04

so, jetzt geht es weiter.
Vielen Dank fuer deine weiteren Anweisungen.
Ich habe immer noch die böse Ahnung, dass sich Ungeziefer auf meinem PC tummelt. Gerade habe ich eine Fehlermeldung vom Explorer bekommen (Die Anweisung in xx verweist auf Speicher in xx). Dies hatte ich schon einmal und es war ein Indikator für einen Virus.

Nun denn, ich habe deine Schritte befolgt.
Da die Antwort zu gross ist, habe ich sie als als ZIP angehangen.
1) Logfile of HijackThis 2.0.4 --> im ZIP-file
2) Versteckte Dateien sind nun sichtbar
3) hjtscanlist.txt --> im ZIP-file
4) Installierte Programme ausgewertet von "Ccleaner" --> im ZIP-file

Viel Glück,
Ralph

kira · 05.04.2011, 06:23

ich kann nicht die angehängte Logs "sehen"

mache bitte so:

Zitat:

Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]

ralph.allen · 05.04.2011, 07:41

Die 3) alleine ist schon zu groß,
also jetzt
3) erster Teil von hjtscanlist.txt

Code:

ATTFilter

 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows XP [Version 5.1.2600]
 
 
C:

  04.04.2011 20:51      C:\NALCache --------- 0 
  04.04.2011 20:50      C:\WINDOWS --------- 0 
  04.04.2011 20:50      C:\ziswin.hst --------- 101564 
  04.04.2011 04:35      C:\rkill.log --------- 359 
  01.04.2011 16:35      C:\fpRedmon.log --------- 2440 
  26.03.2011 21:14      C:\Config.Msi --------- 0 
  22.03.2011 09:40      C:\Program Files --------- 0 
  06.03.2011 18:19      C:\System Volume Information --------- 0 
  01.03.2011 23:22      C:\SYM_REGISTRY_BACKUP.reg --------- 98261716 
  24.11.2010 13:03      C:\ctapi_out_gr.txt --------- 0 
  09.07.2010 10:40      C:\Documents and Settings --------- 0 
  27.02.2010 19:48      C:\temp --------- 0 
  20.02.2010 22:17      C:\Programme --------- 0 
  21.01.2010 18:28      C:\wiederhergestelltes Dokument.txt --------- 78003 
  15.01.2010 18:11      C:\RECYCLER --------- 0 
  12.01.2010 17:24      C:\Inst-Doku --------- 0 
  12.01.2010 17:24      C:\NDPS --------- 0 
  12.01.2010 15:53      C:\boot.ini --------- 211 
  29.05.2009 08:34      C:\drivers --------- 0 
  22.05.2009 14:13      C:\ntldr --------- 250048 
  22.10.2007 11:35      C:\IO.SYS --------- 0 
  22.10.2007 11:35      C:\MSDOS.SYS --------- 0 
  22.10.2007 11:35      C:\AUTOEXEC.BAT --------- 0 
  22.10.2007 11:35      C:\CONFIG.SYS --------- 0 
  04.08.2004 14:00      C:\NTDETECT.COM --------- 47564 
----------------------------------------

 
C:\WINDOWS

  04.04.2011 22:32     C:\WINDOWS\pfirewall.log --------- 839562 
  04.04.2011 21:57     C:\WINDOWS\setupapi.log --------- 318416 
  04.04.2011 21:52     C:\WINDOWS\WindowsUpdate.log --------- 1825406 
  04.04.2011 21:26     C:\WINDOWS\SchedLgU.Txt --------- 32430 
  04.04.2011 20:50     C:\WINDOWS\0.log --------- 0 
  04.04.2011 20:50     C:\WINDOWS\wiadebug.log --------- 159 
  04.04.2011 20:50     C:\WINDOWS\wiaservc.log --------- 50 
  04.04.2011 20:50     C:\WINDOWS\bootstat.dat --------- 2048 
  04.04.2011 08:51     C:\WINDOWS\iis6.log --------- 1859913 
  04.04.2011 08:51     C:\WINDOWS\comsetup.log --------- 546775 
  04.04.2011 08:51     C:\WINDOWS\tsoc.log --------- 767139 
  04.04.2011 08:51     C:\WINDOWS\ntdtcsetup.log --------- 331862 
  04.04.2011 08:51     C:\WINDOWS\tabletoc.log --------- 83463 
  04.04.2011 08:51     C:\WINDOWS\KB2524375.log --------- 6024 
  04.04.2011 08:51     C:\WINDOWS\ocmsn.log --------- 90140 
  04.04.2011 08:51     C:\WINDOWS\imsins.log --------- 1355 
  04.04.2011 08:51     C:\WINDOWS\MedCtrOC.log --------- 115671 
  04.04.2011 08:51     C:\WINDOWS\ocgen.log --------- 814669 
  04.04.2011 08:51     C:\WINDOWS\msgsocm.log --------- 83190 
  04.04.2011 08:51     C:\WINDOWS\netfxocm.log --------- 289958 
  04.04.2011 08:51     C:\WINDOWS\FaxSetup.log --------- 1647962 
  04.04.2011 08:51     C:\WINDOWS\msmqinst.log --------- 520084 
  04.04.2011 04:40     C:\WINDOWS\ntbtlog.txt --------- 1633000 
  01.04.2011 05:49     C:\WINDOWS\pfirewall.log.old --------- 1049136 
  29.03.2011 01:32     C:\WINDOWS\wmsetup.log --------- 28430 
  26.03.2011 21:00     C:\WINDOWS\pear.ini --------- 614 
  18.03.2011 09:30     C:\WINDOWS\imsins.BAK --------- 1374 
  18.03.2011 09:30     C:\WINDOWS\KB2483614.log --------- 12210 
  18.03.2011 09:30     C:\WINDOWS\KB2479943.log --------- 10599 
  08.03.2011 10:36     C:\WINDOWS\WORDPAD.INI --------- 754 
  08.03.2011 09:31     C:\WINDOWS\KB968930.log --------- 50204 
  07.03.2011 14:13     C:\WINDOWS\spupdsvc.log --------- 87717 
  07.03.2011 14:13     C:\WINDOWS\spupdsvc.log.1.log --------- 352 
  07.03.2011 13:31     C:\WINDOWS\KB971029.log --------- 23090 
  07.03.2011 13:31     C:\WINDOWS\updspapi.log --------- 196688 
  07.03.2011 13:30     C:\WINDOWS\KB2476687.log --------- 22224 
  07.03.2011 13:30     C:\WINDOWS\KB2485376.log --------- 22048 
  07.03.2011 13:30     C:\WINDOWS\KB2393802.log --------- 19065 
  07.03.2011 13:30     C:\WINDOWS\KB2482017-IE8.log --------- 20233 
  07.03.2011 13:30     C:\WINDOWS\KB2478960.log --------- 15510 
  07.03.2011 13:30     C:\WINDOWS\KB2479628.log --------- 15929 
  07.03.2011 13:30     C:\WINDOWS\KB2483185.log --------- 15155 
  07.03.2011 13:29     C:\WINDOWS\KB2478971.log --------- 14509 
  07.03.2011 13:23     C:\WINDOWS\KB976002-v5.log --------- 5462 
  07.03.2011 13:22     C:\WINDOWS\WgaNotify.log --------- 12374 
  07.03.2011 13:21     C:\WINDOWS\KB961118.log --------- 5081 
  07.03.2011 12:19     C:\WINDOWS\KB898461.log --------- 7798 
  07.03.2011 12:19     C:\WINDOWS\KB892130.log --------- 12160 
  02.03.2011 02:56     C:\WINDOWS\Fsinimenipavur.dat --------- 120 
  02.03.2011 02:56     C:\WINDOWS\Gdudex.bin --------- 0 
  31.01.2011 12:35     C:\WINDOWS\NetWare.INI --------- 11 
  13.01.2011 02:37     C:\WINDOWS\KB2447568-IE8.log --------- 19821 
  13.01.2011 02:37     C:\WINDOWS\KB2296199.log --------- 19757 
  13.01.2011 02:37     C:\WINDOWS\KB2443105.log --------- 18961 
  13.01.2011 02:37     C:\WINDOWS\KB2416400-IE8.log --------- 22675 
  13.01.2011 02:36     C:\WINDOWS\KB2440591.log --------- 13775 
  13.01.2011 02:36     C:\WINDOWS\KB2264107.log --------- 13885 
  13.01.2011 02:36     C:\WINDOWS\KB2443685.log --------- 10620 
  13.01.2011 02:36     C:\WINDOWS\KB2436673.log --------- 13472 
  13.01.2011 02:36     C:\WINDOWS\KB2467659.log --------- 12524 
  13.01.2011 02:36     C:\WINDOWS\KB2419632.log --------- 14236 
  13.01.2011 02:36     C:\WINDOWS\KB2423089.log --------- 6188 
  04.11.2010 23:12     C:\WINDOWS\KB2387149.log --------- 18294 
  04.11.2010 23:12     C:\WINDOWS\KB2279986.log --------- 17255 
  04.11.2010 23:12     C:\WINDOWS\KB2345886.log --------- 17714 
  04.11.2010 23:12     C:\WINDOWS\KB2296011.log --------- 13944 
  04.11.2010 23:12     C:\WINDOWS\KB2378111.log --------- 15353 
  04.11.2010 23:12     C:\WINDOWS\KB982132.log --------- 16018 
  04.11.2010 23:11     C:\WINDOWS\KB979687.log --------- 15758 
  04.11.2010 23:11     C:\WINDOWS\KB2360131-IE8.log --------- 17548 
  04.11.2010 23:11     C:\WINDOWS\KB2362765-IE8.log --------- 8915 
  04.11.2010 23:10     C:\WINDOWS\KB981957.log --------- 8577 
  04.11.2010 23:09     C:\WINDOWS\KB2158563.log --------- 4748 
  04.11.2010 23:09     C:\WINDOWS\KB2360937.log --------- 7834 
  24.10.2010 21:49     C:\WINDOWS\Thumbs.db --------- 7680 
  11.10.2010 10:10     C:\WINDOWS\setupact.log --------- 167166 
  06.10.2010 08:56     C:\WINDOWS\KB982214.log --------- 16747 
  06.10.2010 08:56     C:\WINDOWS\KB2259922.log --------- 16396 
  06.10.2010 08:56     C:\WINDOWS\KB2115168.log --------- 16379 
  06.10.2010 08:56     C:\WINDOWS\KB975558.log --------- 16758 
  06.10.2010 08:55     C:\WINDOWS\KB2347290.log --------- 15016 
  06.10.2010 08:55     C:\WINDOWS\KB981852.log --------- 16209 
  06.10.2010 08:55     C:\WINDOWS\KB2079403.log --------- 14500 
  06.10.2010 08:55     C:\WINDOWS\KB2121546.log --------- 13987 
  06.10.2010 08:55     C:\WINDOWS\KB982802.log --------- 13483 
  06.10.2010 08:55     C:\WINDOWS\KB2183461-IE8.log --------- 15570 
  06.10.2010 08:55     C:\WINDOWS\KB2160329.log --------- 8823 
  06.10.2010 08:55     C:\WINDOWS\KB980436.log --------- 8353 
  06.10.2010 08:55     C:\WINDOWS\KB981322.log --------- 7822 
  06.10.2010 08:54     C:\WINDOWS\KB2286198.log --------- 7275 
  06.10.2010 08:53     C:\WINDOWS\KB981997.log --------- 6171 
  06.10.2010 08:53     C:\WINDOWS\KB2141007.log --------- 6182 
  06.10.2010 08:53     C:\WINDOWS\KB982665.log --------- 6099 
  30.09.2010 20:06     C:\WINDOWS\ModemLog_ZTE Proprietary USB Modem.txt --------- 1992 
  30.09.2010 20:01     C:\WINDOWS\ZTEInstallInfo.log --------- 78843 
  30.09.2010 18:26     C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt --------- 5958 
  27.09.2010 23:16     C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #2.txt --------- 8072 
  09.08.2010 23:00     C:\WINDOWS\KB2229593.log --------- 6744 
  09.07.2010 11:03     C:\WINDOWS\KB980218.log --------- 10843 
  09.07.2010 11:03     C:\WINDOWS\KB980195.log --------- 10090 
  09.07.2010 11:02     C:\WINDOWS\KB982632-IE8.log --------- 10595 
  09.07.2010 11:02     C:\WINDOWS\KB981793.log --------- 7770 
  09.07.2010 11:02     C:\WINDOWS\KB979559.log --------- 10579 
  09.07.2010 11:02     C:\WINDOWS\KB982381-IE8.log --------- 13611 
  09.07.2010 11:01     C:\WINDOWS\KB978695.log --------- 6155 
  09.07.2010 11:01     C:\WINDOWS\KB979482.log --------- 6164 
  09.07.2010 11:00     C:\WINDOWS\KB975562.log --------- 6162 
  09.07.2010 10:35     C:\WINDOWS\OEWABLog.txt --------- 3420 
  07.06.2010 19:56     C:\WINDOWS\KB978542.log --------- 6363 
  04.05.2010 07:57     C:\WINDOWS\KB979683.log --------- 8723 
  04.05.2010 07:56     C:\WINDOWS\KB980232.log --------- 7086 
  04.05.2010 07:56     C:\WINDOWS\KB978338.log --------- 7210 
  04.05.2010 07:56     C:\WINDOWS\KB977816.log --------- 6753 
  04.05.2010 07:55     C:\WINDOWS\KB978601.log --------- 7263 
  04.05.2010 07:55     C:\WINDOWS\KB981332-IE8.log --------- 6530 
  04.05.2010 07:55     C:\WINDOWS\KB979309.log --------- 6163 
  02.05.2010 16:38     C:\WINDOWS\setupapi.log.1.old --------- 1028415 
  08.04.2010 09:04     C:\WINDOWS\MAXLINK.INI --------- 412 
  08.04.2010 09:03     C:\WINDOWS\KB980302-IE8.log --------- 12155 
  08.04.2010 09:03     C:\WINDOWS\KB975561.log --------- 11148 
  08.04.2010 09:02     C:\WINDOWS\KB980182-IE8.log --------- 14641 
  22.03.2010 19:32     C:\WINDOWS\cdlli41.INI --------- 109 
  22.03.2010 17:08     C:\WINDOWS\ODBC.INI --------- 400 
  22.03.2010 16:42     C:\WINDOWS\IE8-MUI.log --------- 100140 
  22.03.2010 16:32     C:\WINDOWS\DPRPMLOG.TXT --------- 4636 
  03.03.2010 01:46     C:\WINDOWS\wmsetup10.log --------- 2932 
  28.02.2010 07:01     C:\WINDOWS\KB976662-IE8.log --------- 7947 
  28.02.2010 07:01     C:\WINDOWS\KB971961-IE8.log --------- 7634 
  27.02.2010 19:48     C:\WINDOWS\Q321064.log --------- 278 
  27.02.2010 07:11     C:\WINDOWS\KB978262.log --------- 47035 
  27.02.2010 07:11     C:\WINDOWS\KB971468.log --------- 47544 
  27.02.2010 07:10     C:\WINDOWS\KB978037.log --------- 47360 
  27.02.2010 07:10     C:\WINDOWS\KB975713.log --------- 47166 
  27.02.2010 07:10     C:\WINDOWS\ie8_main.log --------- 199527 
  27.02.2010 07:10     C:\WINDOWS\KB978506-IE8.log --------- 46087 
  27.02.2010 07:10     C:\WINDOWS\KB978207-IE8.log --------- 52931 
  27.02.2010 07:10     C:\WINDOWS\KB976325-IE8.log --------- 60391 
  27.02.2010 07:08     C:\WINDOWS\ie8.log --------- 57183 
  27.02.2010 07:02     C:\WINDOWS\KB978251.log --------- 7070 
  27.02.2010 07:02     C:\WINDOWS\KB975560.log --------- 7158 
  27.02.2010 07:01     C:\WINDOWS\KB977914.log --------- 8041 
  27.02.2010 07:01     C:\WINDOWS\KB978706.log --------- 5991 
  27.02.2010 07:01     C:\WINDOWS\KB977165.log --------- 7935 
  27.02.2010 07:01     C:\WINDOWS\KB979306.log --------- 3718 
  20.02.2010 22:53     C:\WINDOWS\iltwain.ini --------- 37 
  14.02.2010 15:37     C:\WINDOWS\hpoins05.dat --------- 68839 
  14.02.2010 15:28     C:\WINDOWS\hpoins05.dat.temp --------- 68867 
  14.02.2010 14:22     C:\WINDOWS\COM+.log --------- 1450 
  03.02.2010 16:09     C:\WINDOWS\IE4 Error Log.txt --------- 1436 
  27.01.2010 15:26     C:\WINDOWS\KB976098-v2.log --------- 3733 
  26.01.2010 09:52     C:\WINDOWS\KB978207.log --------- 9746 
  26.01.2010 09:52     C:\WINDOWS\KB972270.log --------- 6347 
  21.01.2010 11:24     C:\WINDOWS\vpc32.INI --------- 0 
  12.01.2010 17:29     C:\WINDOWS\KB971737.log --------- 11653 
  12.01.2010 17:29     C:\WINDOWS\KB970430.log --------- 12476 
  12.01.2010 17:29     C:\WINDOWS\msxml4-KB973688-enu.LOG --------- 309632 
  12.01.2010 17:28     C:\WINDOWS\msxml4-KB954430-enu.LOG --------- 308494 
  12.01.2010 17:22     C:\WINDOWS\notes.ini --------- 27 
  12.01.2010 17:13     C:\WINDOWS\nsreg.dat --------- 0 
  12.01.2010 17:06     C:\WINDOWS\KB973904.log --------- 21088 
  12.01.2010 17:06     C:\WINDOWS\KB955759.log --------- 20574 
  12.01.2010 17:06     C:\WINDOWS\KB974392.log --------- 19370 
  12.01.2010 17:06     C:\WINDOWS\KB974318.log --------- 19042 
  12.01.2010 17:06     C:\WINDOWS\KB976325.log --------- 19293 
  12.01.2010 17:06     C:\WINDOWS\KB969084.log --------- 15291 
  12.01.2010 17:06     C:\WINDOWS\KB973687.log --------- 16427 
  12.01.2010 17:06     C:\WINDOWS\KB969947.log --------- 15151 
  12.01.2010 17:06     C:\WINDOWS\KB971513.log --------- 11989 
  12.01.2010 17:06     C:\WINDOWS\KB975467.log --------- 12806 
  12.01.2010 17:06     C:\WINDOWS\KB968389.log --------- 13023 
  12.01.2010 17:06     C:\WINDOWS\KB969059.log --------- 8942 
  12.01.2010 17:06     C:\WINDOWS\KB958869.log --------- 6660 
  12.01.2010 17:06     C:\WINDOWS\KB971486.log --------- 10559 
  12.01.2010 17:05     C:\WINDOWS\KB974112.log --------- 8948 
  12.01.2010 17:05     C:\WINDOWS\KB974571.log --------- 9251 
  12.01.2010 17:05     C:\WINDOWS\KB975025.log --------- 8368 
  12.01.2010 17:05     C:\WINDOWS\KB954155.log --------- 8460 
  12.01.2010 17:05     C:\WINDOWS\KB973525.log --------- 8244 
  12.01.2010 17:05     C:\WINDOWS\KB968816.log --------- 8430 
  12.01.2010 17:05     C:\WINDOWS\KB971961.log --------- 9121 
  12.01.2010 17:05     C:\WINDOWS\KB956844.log --------- 7950 
  12.01.2010 17:05     C:\WINDOWS\KB961371-v2.log --------- 8163 
  12.01.2010 17:05     C:\WINDOWS\KB971657.log --------- 8052 
  12.01.2010 17:05     C:\WINDOWS\KB973815.log --------- 7680 
  12.01.2010 17:05     C:\WINDOWS\KB960859.log --------- 7745 
  12.01.2010 17:05     C:\WINDOWS\KB973507.log --------- 7865 
  12.01.2010 17:05     C:\WINDOWS\KB973354.log --------- 7085 
  12.01.2010 17:05     C:\WINDOWS\KB956744.log --------- 7506 
  12.01.2010 17:05     C:\WINDOWS\KB973869.log --------- 7111 
  12.01.2010 17:05     C:\WINDOWS\KB973540.log --------- 7853 
  12.01.2010 17:05     C:\WINDOWS\KB971557.log --------- 7079 
  12.01.2010 17:05     C:\WINDOWS\KB971633.log --------- 7077 
  12.01.2010 17:05     C:\WINDOWS\KB970238.log --------- 7379 
  12.01.2010 17:05     C:\WINDOWS\KB961501.log --------- 6991 
  12.01.2010 17:03     C:\WINDOWS\DPINST.LOG --------- 10904 
  12.01.2010 17:02     C:\WINDOWS\DirectX.log --------- 503 
  12.01.2010 15:56     C:\WINDOWS\InvAginst.log --------- 38 
  12.01.2010 15:55     C:\WINDOWS\system.ini --------- 250 
  12.01.2010 15:55     C:\WINDOWS\muisetup.log --------- 756 
  12.01.2010 15:55     C:\WINDOWS\regopt.log --------- 5578 
  12.01.2010 15:55     C:\WINDOWS\Q307419.log --------- 170 
  12.01.2010 15:54     C:\WINDOWS\setuplog.txt --------- 15662 
  12.01.2010 15:53     C:\WINDOWS\setuperr.log --------- 348 
  12.01.2010 15:53     C:\WINDOWS\sessmgr.setup.log --------- 4715 
  12.01.2010 15:53     C:\WINDOWS\DtcInstall.log --------- 1383 
  12.01.2010 15:52     C:\WINDOWS\Wdf01005Inst.log --------- 4704 
  12.01.2010 15:52     C:\WINDOWS\setupapi.log.0.old --------- 1274834 
  24.09.2009 13:44     C:\WINDOWS\KIX32.EXE --------- 286720 
  29.05.2009 08:03     C:\WINDOWS\KB941569.log --------- 5912 
  29.05.2009 08:00     C:\WINDOWS\KB929399.log --------- 4757 
  29.05.2009 08:00     C:\WINDOWS\KB939683.log --------- 4515 
  29.05.2009 08:00     C:\WINDOWS\KB959772.log --------- 4610 
  29.05.2009 07:59     C:\WINDOWS\KB954154.log --------- 4167 
  29.05.2009 07:59     C:\WINDOWS\KB936782.log --------- 4767 
  22.05.2009 15:49     C:\WINDOWS\KB952069.log --------- 25878 
  22.05.2009 15:17     C:\WINDOWS\KB951376-v2.log --------- 27173 
  22.05.2009 15:17     C:\WINDOWS\KB952954.log --------- 27201 
  22.05.2009 15:14     C:\WINDOWS\KB959426.log --------- 27636 
  22.05.2009 15:13     C:\WINDOWS\KB946648.log --------- 26581 
  22.05.2009 15:13     C:\WINDOWS\KB961373.log --------- 26324 
  22.05.2009 15:13     C:\WINDOWS\KB956803.log --------- 26819 
  22.05.2009 15:13     C:\WINDOWS\KB951978.log --------- 28510 
  22.05.2009 15:13     C:\WINDOWS\KB950974.log --------- 26190 
  22.05.2009 15:13     C:\WINDOWS\KB960225.log --------- 26016 
  22.05.2009 15:13     C:\WINDOWS\KB956572.log --------- 28912 
  22.05.2009 15:13     C:\WINDOWS\KB938464-v2.log --------- 19592 
  22.05.2009 15:13     C:\WINDOWS\KB952004.log --------- 23100 
  22.05.2009 15:13     C:\WINDOWS\KB950762.log --------- 21176 
  22.05.2009 15:12     C:\WINDOWS\KB952287.log --------- 21348 
  22.05.2009 15:12     C:\WINDOWS\MSCompPackV1.log --------- 17293 
  22.05.2009 15:12     C:\WINDOWS\wmp11.log --------- 27262 
  22.05.2009 15:12     C:\WINDOWS\win.ini --------- 507 
  22.05.2009 15:12     C:\WINDOWS\WMFDist11.log --------- 36994 
  22.05.2009 15:11     C:\WINDOWS\Wudf01000Inst.log --------- 16217 
  22.05.2009 15:11     C:\WINDOWS\KB967715.log --------- 15541 
  22.05.2009 15:10     C:\WINDOWS\KB951066.log --------- 14236 
  22.05.2009 15:10     C:\WINDOWS\KB958690.log --------- 14858 
  22.05.2009 15:10     C:\WINDOWS\KB954459.log --------- 14354 
  22.05.2009 15:10     C:\WINDOWS\KB951748.log --------- 14643 
  22.05.2009 15:10     C:\WINDOWS\KB960803.log --------- 10724 
  22.05.2009 15:10     C:\WINDOWS\KB958644.log --------- 9727 
  22.05.2009 15:10     C:\WINDOWS\KB963027.log --------- 10470 
  22.05.2009 15:10     C:\WINDOWS\KB923561.log --------- 8397 
  22.05.2009 14:46     C:\WINDOWS\WMSysPr9.prx --------- 316640 
  22.05.2009 14:23     C:\WINDOWS\svcpack.log --------- 394582 
  22.05.2009 14:19     C:\WINDOWS\cmsetacl.log --------- 373 
  16.01.2009 11:16     C:\WINDOWS\smscfg.ini --------- 61 
  14.04.2008 05:42     C:\WINDOWS\winhlp32.exe --------- 283648 
  14.04.2008 05:42     C:\WINDOWS\slrundll.exe --------- 32866 
  14.04.2008 05:42     C:\WINDOWS\regedit.exe --------- 146432 
  14.04.2008 05:42     C:\WINDOWS\notepad.exe --------- 69120 
  14.04.2008 05:42     C:\WINDOWS\hh.exe --------- 10752 
  14.04.2008 05:42     C:\WINDOWS\explorer.exe --------- 1033728 
  14.04.2008 05:42     C:\WINDOWS\abawaqif.dll --------- 377344 
  14.04.2008 05:42     C:\WINDOWS\twain_32.dll --------- 50688 
  22.10.2007 13:17     C:\WINDOWS\Sti_Trace.log --------- 0 
  22.10.2007 11:46     C:\WINDOWS\REGLOCS.OLD --------- 8192 
  22.10.2007 11:35     C:\WINDOWS\control.ini --------- 0 
  22.10.2007 11:34     C:\WINDOWS\ODBCINST.INI --------- 4161 
  22.10.2007 11:30     C:\WINDOWS\WindowsShell.Manifest --------- 749 
  22.10.2007 11:25     C:\WINDOWS\vbaddin.ini --------- 37 
  22.10.2007 11:25     C:\WINDOWS\vb.ini --------- 36 
  02.10.2007 08:00     C:\WINDOWS\WKIX32.EXE --------- 294912 
  29.12.2006 00:31     C:\WINDOWS\003020_.tmp --------- 19569 
  15.12.2004 23:59     C:\WINDOWS\hpomdl05.dat --------- 19696 
  15.12.2004 23:59     C:\WINDOWS\hpomdl05.dat.temp --------- 19696 
  20.08.2004 00:26     C:\WINDOWS\Twunk_32.dll --------- 1216 
  20.08.2004 00:26     C:\WINDOWS\Twunk_16.dll --------- 1216 
  04.08.2004 14:00     C:\WINDOWS\twain.dll --------- 94784 
  04.08.2004 14:00     C:\WINDOWS\twunk_32.exe --------- 25600 
  04.08.2004 14:00     C:\WINDOWS\Prairie Wind.bmp --------- 65954 
  04.08.2004 14:00     C:\WINDOWS\explorer.scf --------- 80 
  04.08.2004 14:00     C:\WINDOWS\TASKMAN.EXE --------- 15360 
  04.08.2004 14:00     C:\WINDOWS\desktop.ini --------- 2 
  04.08.2004 14:00     C:\WINDOWS\twunk_16.exe --------- 49680 
  04.08.2004 14:00     C:\WINDOWS\vmmreg32.dll --------- 18944 
  04.08.2004 14:00     C:\WINDOWS\Zapotec.bmp --------- 9522 
  04.08.2004 14:00     C:\WINDOWS\SET3.tmp --------- 1042903 
  04.08.2004 14:00     C:\WINDOWS\Coffee Bean.bmp --------- 17062 
  04.08.2004 14:00     C:\WINDOWS\Greenstone.bmp --------- 26582 
  04.08.2004 14:00     C:\WINDOWS\clock.avi --------- 82944 
  04.08.2004 14:00     C:\WINDOWS\Santa Fe Stucco.bmp --------- 65832 
  04.08.2004 14:00     C:\WINDOWS\SET4.tmp --------- 1086058 
  04.08.2004 14:00     C:\WINDOWS\River Sumida.bmp --------- 26680 
  04.08.2004 14:00     C:\WINDOWS\winhelp.exe --------- 256192 
  04.08.2004 14:00     C:\WINDOWS\Rhododendron.bmp --------- 17362 
  04.08.2004 14:00     C:\WINDOWS\winnt.bmp --------- 48680 
  04.08.2004 14:00     C:\WINDOWS\winnt256.bmp --------- 48680 
  04.08.2004 14:00     C:\WINDOWS\SET8.tmp --------- 13753 
  04.08.2004 14:00     C:\WINDOWS\Gone Fishing.bmp --------- 17336 
  04.08.2004 14:00     C:\WINDOWS\msdfmap.ini --------- 1405 
  04.08.2004 14:00     C:\WINDOWS\FeatherTexture.bmp --------- 16730 
  04.08.2004 14:00     C:\WINDOWS\Blue Lace 16.bmp --------- 1272 
  04.08.2004 14:00     C:\WINDOWS\Soap Bubbles.bmp --------- 65978 
  04.08.2004 14:00     C:\WINDOWS\_default.pif --------- 707 
  06.11.2003 16:24     C:\WINDOWS\nwelcome.bmp --------- 49188 
  20.09.2001 14:00     C:\WINDOWS\WMPrfDeu.prx --------- 34818 
  17.12.1999 11:13     C:\WINDOWS\unvise32.exe --------- 86016 
  29.10.1998 17:45     C:\WINDOWS\IsUninst.exe --------- 306688 
----------------------------------------

 
C:\WINDOWS\System

 12.01.2010 15:55    C:\WINDOWS\System\nls --------- 0 
 14.04.2008 05:42    C:\WINDOWS\System\winspool.drv --------- 146432 
 04.08.2004 14:00    C:\WINDOWS\System\AVIFILE.DLL --------- 109456 
 04.08.2004 14:00    C:\WINDOWS\System\WFWNET.DRV --------- 13600 
 04.08.2004 14:00    C:\WINDOWS\System\VGA.DRV --------- 2176 
 04.08.2004 14:00    C:\WINDOWS\System\VER.DLL --------- 9008 
 04.08.2004 14:00    C:\WINDOWS\System\COMMDLG.DLL --------- 32816 
 04.08.2004 14:00    C:\WINDOWS\System\KEYBOARD.DRV --------- 2000 
 04.08.2004 14:00    C:\WINDOWS\System\OLESVR.DLL --------- 24064 
 04.08.2004 14:00    C:\WINDOWS\System\TIMER.DRV --------- 4048 
 04.08.2004 14:00    C:\WINDOWS\System\TAPI.DLL --------- 19200 
 04.08.2004 14:00    C:\WINDOWS\System\SYSTEM.DRV --------- 3360 
 04.08.2004 14:00    C:\WINDOWS\System\LZEXPAND.DLL --------- 9936 
 04.08.2004 14:00    C:\WINDOWS\System\MCIAVI.DRV --------- 73376 
 04.08.2004 14:00    C:\WINDOWS\System\MCISEQ.DRV --------- 25264 
 04.08.2004 14:00    C:\WINDOWS\System\MCIWAVE.DRV --------- 28160 
 04.08.2004 14:00    C:\WINDOWS\System\MMSYSTEM.DLL --------- 68768 
 04.08.2004 14:00    C:\WINDOWS\System\MMTASK.TSK --------- 1152 
 04.08.2004 14:00    C:\WINDOWS\System\MOUSE.DRV --------- 2032 
 04.08.2004 14:00    C:\WINDOWS\System\MSVIDEO.DLL --------- 126912 
 04.08.2004 14:00    C:\WINDOWS\System\stdole.tlb --------- 5532 
 04.08.2004 14:00    C:\WINDOWS\System\AVICAP.DLL --------- 69584 
 04.08.2004 14:00    C:\WINDOWS\System\SOUND.DRV --------- 1744 
 04.08.2004 14:00    C:\WINDOWS\System\setup.inf --------- 59167 
 04.08.2004 14:00    C:\WINDOWS\System\SHELL.DLL --------- 5120 
 04.08.2004 14:00    C:\WINDOWS\System\OLECLI.DLL --------- 82944 
 12.01.2000 05:53    C:\WINDOWS\System\tli_win.dll --------- 28800 
 04.10.1999 05:34    C:\WINDOWS\System\netwin16.dll --------- 238784 
 05.05.1999 07:57    C:\WINDOWS\System\lgnw3116.dll --------- 177280 
 12.01.1999 12:42    C:\WINDOWS\System\audwin16.dll --------- 14640 
 12.01.1999 12:41    C:\WINDOWS\System\clxwin16.dll --------- 11280 
 12.01.1999 12:33    C:\WINDOWS\System\calwin16.dll --------- 108336 
 12.01.1999 12:18    C:\WINDOWS\System\ncpwin16.dll --------- 142656 
 12.01.1999 12:01    C:\WINDOWS\System\clnwin16.dll --------- 67696 
 12.01.1999 11:53    C:\WINDOWS\System\locwin16.dll --------- 75728 
 11.01.1999 08:45    C:\WINDOWS\System\loginw31.exe --------- 4512 
 11.01.1999 08:45    C:\WINDOWS\System\loginw31.dll --------- 458240 
 22.04.1998 10:33    C:\WINDOWS\System\nwgdi.dll --------- 40464 
 07.10.1997 06:12    C:\WINDOWS\System\nwlocale.dll --------- 43760 
 28.08.1997 04:19    C:\WINDOWS\System\nwnet.dll --------- 225328 
 20.09.1996 11:01    C:\WINDOWS\System\nwcalls.dll --------- 147824 
 30.04.1996 05:09    C:\WINDOWS\System\prtwin16.dll --------- 279260 
 26.01.1996 04:55    C:\WINDOWS\System\nwpsrv.dll --------- 279770 
 18.07.1995 10:19    C:\WINDOWS\System\pnw.dll --------- 106528 
----------------------------------------

 
C:\WINDOWS\System32

 04.04.2011 22:27     C:\WINDOWS\system32\nvModes.001 --------- 176566 
 04.04.2011 21:12     C:\WINDOWS\system32\wpa.dbl --------- 2206 
 04.04.2011 20:59     C:\WINDOWS\system32\CatRoot2 --------- 0 
 04.04.2011 20:51     C:\WINDOWS\system32\nvapps.xml --------- 189747 
 04.04.2011 08:53     C:\WINDOWS\system32\drivers --------- 0 
 04.04.2011 08:42     C:\WINDOWS\system32\config --------- 0 
 04.04.2011 08:42     C:\WINDOWS\system32\wbem --------- 0 
 04.04.2011 04:38     C:\WINDOWS\system32\perfh009.dat --------- 434230 
 04.04.2011 04:38     C:\WINDOWS\system32\perfc009.dat --------- 68226 
 02.04.2011 10:13     C:\WINDOWS\system32\PerfStringBackup.INI --------- 508780 
 22.03.2011 09:38     C:\WINDOWS\system32\DRVSTORE --------- 0 
 18.03.2011 09:30     C:\WINDOWS\system32\MRT.exe --------- 37943240 
 18.03.2011 09:30     C:\WINDOWS\system32\dllcache --------- 0 
 08.03.2011 09:30     C:\WINDOWS\system32\WindowsPowerShell --------- 0 
 08.03.2011 09:30     C:\WINDOWS\system32\winrm --------- 0 
 08.03.2011 09:30     C:\WINDOWS\system32\GroupPolicy --------- 0 
 07.03.2011 14:13     C:\WINDOWS\system32\FNTCACHE.DAT --------- 146808 
 07.03.2011 13:21     C:\WINDOWS\system32\CatRoot --------- 0 
 07.03.2011 12:48     C:\WINDOWS\system32\XPSViewer --------- 0 
 07.03.2011 12:48     C:\WINDOWS\system32\en-us --------- 0 
 07.03.2011 12:19     C:\WINDOWS\system32\PreInstall --------- 0 
 06.03.2011 18:19     C:\WINDOWS\system32\Restore --------- 0 
 26.02.2011 03:10     C:\WINDOWS\system32\d3d9caps.dat --------- 664 
 18.02.2011 17:36     C:\WINDOWS\system32\usbaaplrc.dll --------- 4184352 
 09.02.2011 15:53     C:\WINDOWS\system32\encdec.dll --------- 186880 
 09.02.2011 15:53     C:\WINDOWS\system32\sbe.dll --------- 270848 
 07.02.2011 19:21     C:\WINDOWS\system32\nvModes.dat --------- 176566 
 21.01.2011 16:44     C:\WINDOWS\system32\shimgvw.dll --------- 439296 
 21.01.2011 16:44     C:\WINDOWS\system32\shell32.dll --------- 8462336 
 13.01.2011 02:36     C:\WINDOWS\system32\TZLog.log --------- 142212 
 07.01.2011 16:09     C:\WINDOWS\system32\atmfd.dll --------- 290048 
 31.12.2010 15:10     C:\WINDOWS\system32\win32k.sys --------- 1854976 
 22.12.2010 14:34     C:\WINDOWS\system32\kerberos.dll --------- 301568 
 22.12.2010 13:20     C:\WINDOWS\system32\aaclient.dll --------- 130560 
 22.12.2010 13:20     C:\WINDOWS\system32\tsgqec.dll --------- 36864 
 22.12.2010 13:20     C:\WINDOWS\system32\mstscax.dll --------- 2690560 
 21.12.2010 13:26     C:\WINDOWS\system32\mstsc.exe --------- 1034240 
 21.12.2010 06:29     C:\WINDOWS\system32\ieframe.dll --------- 11080704 
 21.12.2010 01:59     C:\WINDOWS\system32\mshtml.dll --------- 5961216 
 21.12.2010 01:59     C:\WINDOWS\system32\mshtmled.dll --------- 66560 
 21.12.2010 01:59     C:\WINDOWS\system32\mstime.dll --------- 611840 
 21.12.2010 01:59     C:\WINDOWS\system32\occache.dll --------- 206848 
 21.12.2010 01:59     C:\WINDOWS\system32\wininet.dll --------- 916480 
 21.12.2010 01:59     C:\WINDOWS\system32\urlmon.dll --------- 1210880 
 21.12.2010 01:59     C:\WINDOWS\system32\iepeers.dll --------- 184320 
 21.12.2010 01:59     C:\WINDOWS\system32\jsproxy.dll --------- 25600 
 21.12.2010 01:59     C:\WINDOWS\system32\licmgr10.dll --------- 43520 
 21.12.2010 01:59     C:\WINDOWS\system32\inetcpl.cpl --------- 1469440 
 21.12.2010 01:59     C:\WINDOWS\system32\msfeeds.dll --------- 602112 
 21.12.2010 01:59     C:\WINDOWS\system32\msfeedsbs.dll --------- 55296 
 21.12.2010 01:59     C:\WINDOWS\system32\iertutil.dll --------- 1991680 
 21.12.2010 01:59     C:\WINDOWS\system32\iedkcs32.dll --------- 387584 
 20.12.2010 19:26     C:\WINDOWS\system32\lsasrv.dll --------- 730112 
 20.12.2010 14:55     C:\WINDOWS\system32\ie4uinit.exe --------- 173568 
 20.12.2010 14:55     C:\WINDOWS\system32\html.iec --------- 385024 
 09.12.2010 17:15     C:\WINDOWS\system32\ntdll.dll --------- 718336 
 09.12.2010 16:30     C:\WINDOWS\system32\csrsrv.dll --------- 33280 
 09.12.2010 15:42     C:\WINDOWS\system32\ntoskrnl.exe --------- 2148864 
 09.12.2010 15:07     C:\WINDOWS\system32\ntkrnlpa.exe --------- 2027008 
 08.12.2010 17:41     C:\WINDOWS\system32\mlfcache.dat --------- 19084 
 29.11.2010 18:38     C:\WINDOWS\system32\QuickTimeVR.qtx --------- 94208 
 29.11.2010 18:38     C:\WINDOWS\system32\QuickTime.qts --------- 69632 
 18.11.2010 20:12     C:\WINDOWS\system32\isign32.dll --------- 81920 
 09.11.2010 16:52     C:\WINDOWS\system32\odbc32.dll --------- 249856 
 03.11.2010 15:12     C:\WINDOWS\system32\tzchange.exe --------- 46080 
 07.10.2010 13:23     C:\WINDOWS\system32\dns-sd.exe --------- 107808 
 07.10.2010 13:23     C:\WINDOWS\system32\dnssd.dll --------- 91424 
 18.09.2010 13:23     C:\WINDOWS\system32\mfc42u.dll --------- 974848 
 18.09.2010 08:53     C:\WINDOWS\system32\mfc40u.dll --------- 953856 
 18.09.2010 08:53     C:\WINDOWS\system32\mfc42.dll --------- 974848 
 18.09.2010 08:53     C:\WINDOWS\system32\mfc40.dll --------- 954368 
 27.08.2010 10:02     C:\WINDOWS\system32\t2embed.dll --------- 119808 
 27.08.2010 07:57     C:\WINDOWS\system32\srvsvc.dll --------- 99840 
 26.08.2010 14:52     C:\WINDOWS\system32\xpsp4res.dll --------- 5120 
 26.08.2010 00:36     C:\WINDOWS\system32\wmp.dll --------- 10841088 
 23.08.2010 18:12     C:\WINDOWS\system32\comctl32.dll --------- 617472 
 17.08.2010 15:17     C:\WINDOWS\system32\spoolsv.exe --------- 58880 
 16.08.2010 10:45     C:\WINDOWS\system32\rpcrt4.dll --------- 590848 
 26.07.2010 20:01     C:\WINDOWS\system32\ezsidmv.dat --------- 56 
 16.07.2010 14:05     C:\WINDOWS\system32\ole32.dll --------- 1288192 
 30.06.2010 14:31     C:\WINDOWS\system32\schannel.dll --------- 149504 
 18.06.2010 19:45     C:\WINDOWS\system32\winsrv.dll --------- 293376 
 17.06.2010 16:03     C:\WINDOWS\system32\iccvid.dll --------- 80384 
 15.06.2010 18:17     C:\WINDOWS\system32\l3codecx.ax --------- 143422 
 14.06.2010 22:14     C:\WINDOWS\system32\hpinkcoi8711.dll --------- 213352 
 14.06.2010 22:14     C:\WINDOWS\system32\HPScanMiniDrv_DJ2050_510g.dll --------- 1907560 
 14.06.2010 22:14     C:\WINDOWS\system32\hpinksts8711.dll --------- 232296 
 14.06.2010 22:14     C:\WINDOWS\system32\hpinksts8711LM.dll --------- 264552 
 14.06.2010 09:41     C:\WINDOWS\system32\msxml3.dll --------- 1172480 
 09.06.2010 09:43     C:\WINDOWS\system32\inetcomm.dll --------- 692736 
 16.04.2010 17:36     C:\WINDOWS\system32\usp10.dll --------- 406016 
 08.04.2010 08:56     C:\WINDOWS\system32\CanonIJ Uninstaller Information --------- 0 
 06.04.2010 04:52     C:\WINDOWS\system32\WMVCore.dll --------- 2462720 
 31.03.2010 01:16     C:\WINDOWS\system32\PresentationHostProxy.dll --------- 99176 
 31.03.2010 01:10     C:\WINDOWS\system32\PresentationHost.exe --------- 295264 
 30.03.2010 12:24     C:\WINDOWS\system32\mp4sdecd.dll --------- 317440 
 30.03.2010 00:52     C:\WINDOWS\system32\mpg4ds32.ax --------- 262416 
 22.03.2010 16:42     C:\WINDOWS\system32\tr-tr --------- 0 
 22.03.2010 16:42     C:\WINDOWS\system32\th-th --------- 0 
 22.03.2010 16:42     C:\WINDOWS\system32\sv-se --------- 0 
----------------------------------------

 
C:\WINDOWS\Prefetch

 04.04.2011 22:35     C:\WINDOWS\Prefetch\CMD.EXE-034B0549.pf --------- 30388 
 04.04.2011 22:35     C:\WINDOWS\Prefetch\7ZFM.EXE-346A75B3.pf --------- 58490 
 04.04.2011 22:34     C:\WINDOWS\Prefetch\VERCLSID.EXE-28F52AD2.pf --------- 27578 
 04.04.2011 22:32     C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-1A61B617.pf --------- 57220 
 04.04.2011 22:27     C:\WINDOWS\Prefetch\NOTEPAD.EXE-2F2D61E1.pf --------- 17430 
 04.04.2011 22:27     C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0D449B4F.pf --------- 105706 
 04.04.2011 22:27     C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-209F65EA.pf --------- 23008 
 04.04.2011 22:26     C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-160E1F62.pf --------- 76450 
 04.04.2011 22:24     C:\WINDOWS\Prefetch\DWHWIZRD.EXE-17CA7F40.pf --------- 22414 
 04.04.2011 22:15     C:\WINDOWS\Prefetch\WINWORD.EXE-33AEA629.pf --------- 94546 
 04.04.2011 22:12     C:\WINDOWS\Prefetch\ACRORD32.EXE-32E4AFCD.pf --------- 56500 
 04.04.2011 22:12     C:\WINDOWS\Prefetch\EXPLORER.EXE-02121B1A.pf --------- 123078 
 04.04.2011 22:07     C:\WINDOWS\Prefetch\BIET-O-MATIC.EXE-13559602.pf --------- 98462 
 04.04.2011 22:07     C:\WINDOWS\Prefetch\CURL.EXE-0197E787.pf --------- 18838 
 04.04.2011 21:58     C:\WINDOWS\Prefetch\LUALL.EXE-170845F0.pf --------- 30934 
 04.04.2011 21:58     C:\WINDOWS\Prefetch\VPDN_LU.EXE-0EE59035.pf --------- 127450 
 04.04.2011 21:58     C:\WINDOWS\Prefetch\WMRUNDLL.EXE-2BBAD949.pf --------- 19732 
 04.04.2011 21:57     C:\WINDOWS\Prefetch\IFRMEWRK.EXE-0BC4CEEA.pf --------- 82936 
 04.04.2011 21:56     C:\WINDOWS\Prefetch\LUCOMS~1.EXE-1DF6F3E9.pf --------- 47148 
 04.04.2011 21:55     C:\WINDOWS\Prefetch\RUNDLL32.EXE-71AB9752.pf --------- 18074 
 04.04.2011 21:22     C:\WINDOWS\Prefetch\IWRAP.EXE-03F748A0.pf --------- 53990 
 04.04.2011 21:10     C:\WINDOWS\Prefetch\SEAMONKEY.EXE-169BF7ED.pf --------- 112318 
 04.04.2011 21:09     C:\WINDOWS\Prefetch\IEXPLORE.EXE-2D97EBE6.pf --------- 132062 
 04.04.2011 21:07     C:\WINDOWS\Prefetch\VPC32.EXE-2E316646.pf --------- 52514 
 04.04.2011 21:07     C:\WINDOWS\Prefetch\WUAUCLT.EXE-1360D60A.pf --------- 63400 
 04.04.2011 21:06     C:\WINDOWS\Prefetch\RUNDLL32.EXE-6E0E3853.pf --------- 34810 
 04.04.2011 21:06     C:\WINDOWS\Prefetch\WUPDMGR.EXE-08F70643.pf --------- 27368 
 04.04.2011 20:54     C:\WINDOWS\Prefetch\WMIADAP.EXE-32F99497.pf --------- 51818 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\MBAM.EXE-04191402.pf --------- 67136 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\IPODSERVICE.EXE-37043579.pf --------- 15722 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\ITUNESHELPER.EXE-3A4EB55C.pf --------- 32404 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\OPWARESE4.EXE-292C2857.pf --------- 8262 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\APMSGFWD.EXE-202DCA6E.pf --------- 7668 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\ZCFGSVC.EXE-2C0DDF66.pf --------- 57442 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\NWTRAY.EXE-311F94A6.pf --------- 14350 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\DPMW32.EXE-1B8B3356.pf --------- 17326 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CAE7316.pf --------- 30888 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\APOINT.EXE-28154A30.pf --------- 49822 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\QTTASK.EXE-1876A1A1.pf --------- 8498 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\RUNDLL32.EXE-6ACD0C83.pf --------- 32462 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\SSBKGDUPDATE.EXE-3153B5F9.pf --------- 12182 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\NWIZ.EXE-2D374245.pf --------- 12162 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\ZENTRAY.EXE-2F1F0722.pf --------- 4778 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf --------- 16592 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\WSCNTFY.EXE-0B14C27D.pf --------- 10152 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf --------- 19704 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\USERINIT.EXE-0743FDA9.pf --------- 16354 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\WGATRAY.EXE-350D4455.pf --------- 44782 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\HTTPD.EXE-00244CBC.pf --------- 52140 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-024AD864.pf --------- 14030 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\RTVSCAN.EXE-1697DF1C.pf --------- 24180 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\SVCHOST.EXE-2D5FBD18.pf --------- 17604 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\SAVROAM.EXE-0EDB62CB.pf --------- 25696 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\ZENREM32.EXE-2D13AA47.pf --------- 27780 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\REGSRVC.EXE-25523967.pf --------- 14722 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\HPZIPM12.EXE-02312CF9.pf --------- 7764 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\NVSVC32.EXE-0756FC6B.pf --------- 26720 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\NALNTSRV.EXE-32E2AA1F.pf --------- 28900 
 04.04.2011 20:51     C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 966510 
 04.04.2011 20:49     C:\WINDOWS\Prefetch\UNSECAPP.EXE-16EB9856.pf --------- 19936 
 04.04.2011 20:35     C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-05335A39.pf --------- 49352 
 04.04.2011 14:20     C:\WINDOWS\Prefetch\Layout.ini --------- 317386 
 04.04.2011 14:07     C:\WINDOWS\Prefetch\ICRDCLL.EXE-2D06ADF5.pf --------- 53108 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\COM.YAHOO.GO.SYNC.CLIENT.EXE-05A8F481.pf --------- 65036 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\APPLEMOBILESYNC.EXE-3A38FF8E.pf --------- 83290 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\MINGLER.EXE-1D8C21A5.pf --------- 111552 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\APPLEMOBILEDEVICEHELPER.EXE-2FB47A41.pf --------- 79148 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\MDCRASHREPORTTOOL.EXE-0EF1A052.pf --------- 89562 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\APPLEMOBILEBACKUP.EXE-00158322.pf --------- 87604 
 04.04.2011 09:07     C:\WINDOWS\Prefetch\SYNCSERVER.EXE-1484B592.pf --------- 89382 
 04.04.2011 09:04     C:\WINDOWS\Prefetch\DISTNOTED.EXE-0E8CB6EF.pf --------- 21938 
 04.04.2011 09:04     C:\WINDOWS\Prefetch\ITUNES.EXE-090EA7DD.pf --------- 59016 
 04.04.2011 09:04     C:\WINDOWS\Prefetch\RUNDLL32.EXE-47DCDC4A.pf --------- 104258 
 04.04.2011 08:47     C:\WINDOWS\Prefetch\RUNDLL32.EXE-5841AB92.pf --------- 23940 
----------------------------------------

 
C:\WINDOWS\Tasks

 04.04.2011 22:26     C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job --------- 1096 
 04.04.2011 20:50     C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job --------- 1092 
 04.04.2011 20:50     C:\WINDOWS\Tasks\SA.DAT --------- 6 
 04.04.2011 20:35     C:\WINDOWS\Tasks\User_Feed_Synchronization-{8CF58578-A60C-4CC8-8249-08BD75F528E9}.job --------- 424 
 31.03.2011 16:27     C:\WINDOWS\Tasks\AppleSoftwareUpdate.job --------- 284 
 04.08.2004 14:00     C:\WINDOWS\Tasks\desktop.ini --------- 65 
----------------------------------------

 
C:\WINDOWS\Temp

 04.04.2011 20:50     C:\WINDOWS\Temp\WGAErrLog.txt --------- 483 
 04.04.2011 20:50     C:\WINDOWS\Temp\ib2E.tmp --------- 0 
 04.04.2011 20:50     C:\WINDOWS\Temp\ib2D.tmp --------- 0 
 04.04.2011 20:50     C:\WINDOWS\Temp\ib2C.tmp --------- 0 
 04.04.2011 20:50     C:\WINDOWS\Temp\ib2B.tmp --------- 0 
 04.04.2011 20:50     C:\WINDOWS\Temp\ib2A.tmp --------- 0 
 04.04.2011 20:50     C:\WINDOWS\Temp\Perflib_Perfdata_684.dat --------- 16384 
 04.04.2011 04:27     C:\WINDOWS\Temp\RarSFX47 --------- 0 
 04.04.2011 04:26     C:\WINDOWS\Temp\RarSFX45 --------- 0 
 04.04.2011 04:25     C:\WINDOWS\Temp\RarSFX46 --------- 0 
 04.04.2011 04:21     C:\WINDOWS\Temp\RarSFX44 --------- 0 
 04.04.2011 01:33     C:\WINDOWS\Temp\_iu14D2N.tmp --------- 709456 
 04.04.2011 01:32     C:\WINDOWS\Temp\~DF4E5A.tmp --------- 81920 
 04.04.2011 01:25     C:\WINDOWS\Temp\RarSFX43 --------- 0 
 04.04.2011 00:34     C:\WINDOWS\Temp\RarSFX42 --------- 0 
 04.04.2011 00:16     C:\WINDOWS\Temp\RarSFX40 --------- 0 
 04.04.2011 00:14     C:\WINDOWS\Temp\RarSFX41 --------- 0 
 04.04.2011 00:06     C:\WINDOWS\Temp\RarSFX39 --------- 0 
 03.04.2011 23:59     C:\WINDOWS\Temp\RarSFX38 --------- 0 
 03.04.2011 23:59     C:\WINDOWS\Temp\WPDNSE --------- 0 
 03.04.2011 23:58     C:\WINDOWS\Temp\RarSFX37 --------- 0 
 03.04.2011 23:54     C:\WINDOWS\Temp\ib29.tmp --------- 0 
 03.04.2011 23:54     C:\WINDOWS\Temp\ib28.tmp --------- 0 
 03.04.2011 23:54     C:\WINDOWS\Temp\ib25.tmp --------- 0 
 03.04.2011 23:54     C:\WINDOWS\Temp\ib27.tmp --------- 0 
 03.04.2011 23:54     C:\WINDOWS\Temp\ib26.tmp --------- 0 
 03.04.2011 23:54     C:\WINDOWS\Temp\Perflib_Perfdata_22c.dat --------- 16384 
 03.04.2011 23:50     C:\WINDOWS\Temp\RarSFX36 --------- 0 
 03.04.2011 23:48     C:\WINDOWS\Temp\RarSFX35 --------- 0 
 03.04.2011 23:47     C:\WINDOWS\Temp\RarSFX34 --------- 0 
 03.04.2011 23:38     C:\WINDOWS\Temp\RarSFX33 --------- 0 
 03.04.2011 23:38     C:\WINDOWS\Temp\RarSFX30 --------- 0 
 03.04.2011 23:37     C:\WINDOWS\Temp\RarSFX32 --------- 0 
 03.04.2011 23:37     C:\WINDOWS\Temp\~DF5929.tmp --------- 16384 
 03.04.2011 23:37     C:\WINDOWS\Temp\RarSFX31 --------- 0 
 03.04.2011 23:36     C:\WINDOWS\Temp\RarSFX27 --------- 0 
 03.04.2011 23:35     C:\WINDOWS\Temp\RarSFX29 --------- 0 
 03.04.2011 23:34     C:\WINDOWS\Temp\ib24.tmp --------- 0 
 03.04.2011 23:34     C:\WINDOWS\Temp\ib23.tmp --------- 0 
 03.04.2011 23:34     C:\WINDOWS\Temp\ib22.tmp --------- 0 
 03.04.2011 23:34     C:\WINDOWS\Temp\ib21.tmp --------- 0 
 03.04.2011 23:34     C:\WINDOWS\Temp\ib20.tmp --------- 0 
 03.04.2011 23:34     C:\WINDOWS\Temp\Perflib_Perfdata_230.dat --------- 16384 
 03.04.2011 23:32     C:\WINDOWS\Temp\RarSFX28 --------- 0 
 03.04.2011 23:31     C:\WINDOWS\Temp\RarSFX26 --------- 0 
 03.04.2011 23:30     C:\WINDOWS\Temp\RarSFX24 --------- 0 
 03.04.2011 23:30     C:\WINDOWS\Temp\RarSFX25 --------- 0 
 03.04.2011 23:29     C:\WINDOWS\Temp\RarSFX22 --------- 0 
 03.04.2011 23:29     C:\WINDOWS\Temp\RarSFX21 --------- 0 
 03.04.2011 23:29     C:\WINDOWS\Temp\RarSFX23 --------- 0 
 03.04.2011 23:28     C:\WINDOWS\Temp\RarSFX20 --------- 0 
 03.04.2011 23:28     C:\WINDOWS\Temp\RarSFX17 --------- 0 
 03.04.2011 23:28     C:\WINDOWS\Temp\RarSFX18 --------- 0 
 03.04.2011 23:27     C:\WINDOWS\Temp\RarSFX19 --------- 0 
 03.04.2011 23:20     C:\WINDOWS\Temp\ib1F.tmp --------- 0 
 03.04.2011 23:20     C:\WINDOWS\Temp\ib1E.tmp --------- 0 
 03.04.2011 23:20     C:\WINDOWS\Temp\ib1D.tmp --------- 0 
 03.04.2011 23:20     C:\WINDOWS\Temp\ib1B.tmp --------- 0 
 03.04.2011 23:20     C:\WINDOWS\Temp\ib1C.tmp --------- 0 
 03.04.2011 23:20     C:\WINDOWS\Temp\Perflib_Perfdata_244.dat --------- 16384 
 03.04.2011 23:08     C:\WINDOWS\Temp\RarSFX16 --------- 0 
 03.04.2011 23:03     C:\WINDOWS\Temp\RarSFX15 --------- 0 
 03.04.2011 23:01     C:\WINDOWS\Temp\RarSFX14 --------- 0 
 03.04.2011 22:59     C:\WINDOWS\Temp\RarSFX12 --------- 0 
 03.04.2011 22:57     C:\WINDOWS\Temp\RarSFX13 --------- 0 
 03.04.2011 22:55     C:\WINDOWS\Temp\RarSFX5 --------- 0 
 03.04.2011 22:55     C:\WINDOWS\Temp\RarSFX11 --------- 0 
 03.04.2011 22:54     C:\WINDOWS\Temp\~DFF6FB.tmp --------- 81920 
 03.04.2011 22:53     C:\WINDOWS\Temp\RarSFX0 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\is-EPDP1.tmp --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX10 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX9 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX7 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX8 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX1 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX2 --------- 0 
 03.04.2011 22:50     C:\WINDOWS\Temp\RarSFX3 --------- 0 
 03.04.2011 22:49     C:\WINDOWS\Temp\RarSFX6 --------- 0 
 03.04.2011 22:49     C:\WINDOWS\Temp\RarSFX4 --------- 0 
 03.04.2011 10:59     C:\WINDOWS\Temp\ib1A.tmp --------- 0 
 03.04.2011 10:58     C:\WINDOWS\Temp\ib19.tmp --------- 0 
 03.04.2011 10:58     C:\WINDOWS\Temp\ib18.tmp --------- 0 
 03.04.2011 10:58     C:\WINDOWS\Temp\ib17.tmp --------- 0 
 03.04.2011 10:58     C:\WINDOWS\Temp\ib16.tmp --------- 0 
 03.04.2011 10:58     C:\WINDOWS\Temp\Perflib_Perfdata_58c.dat --------- 16384 
 02.04.2011 10:09     C:\WINDOWS\Temp\ib15.tmp --------- 0 
 02.04.2011 10:08     C:\WINDOWS\Temp\ib14.tmp --------- 0 
 02.04.2011 10:08     C:\WINDOWS\Temp\ib13.tmp --------- 0 
 02.04.2011 10:08     C:\WINDOWS\Temp\ib12.tmp --------- 0 
 02.04.2011 10:08     C:\WINDOWS\Temp\ib11.tmp --------- 0 
 02.04.2011 10:08     C:\WINDOWS\Temp\Perflib_Perfdata_6f4.dat --------- 16384 
 01.04.2011 16:35     C:\WINDOWS\Temp\fpRedmon.log --------- 362 
 31.03.2011 22:28     C:\WINDOWS\Temp\php-errors.log --------- 21261619 
 29.03.2011 23:16     C:\WINDOWS\Temp\sess_4a3ofhgjlvr0rrn0ki9nrcb500 --------- 10 
 29.03.2011 08:58     C:\WINDOWS\Temp\sess_nguu4j0f37o8a6fnhhmqu8aeh7 --------- 10 
 27.03.2011 23:28     C:\WINDOWS\Temp\ib10.tmp --------- 0 
 27.03.2011 23:28     C:\WINDOWS\Temp\ibF.tmp --------- 0 
 27.03.2011 23:28     C:\WINDOWS\Temp\ibE.tmp --------- 0 
 27.03.2011 23:28     C:\WINDOWS\Temp\ibD.tmp --------- 0 
 27.03.2011 23:28     C:\WINDOWS\Temp\ibC.tmp --------- 0 
 27.03.2011 23:28     C:\WINDOWS\Temp\Perflib_Perfdata_5a0.dat --------- 16384 
 26.03.2011 18:26     C:\WINDOWS\Temp\sess_cvnu9v7npid7a74m225vb1bd40 --------- 58 
 26.03.2011 16:28     C:\WINDOWS\Temp\sess_lbg9cgfmtag1lmi4e1gt4g4eg2 --------- 58 
 26.03.2011 12:46     C:\WINDOWS\Temp\sess_4379qcjvg5vpkkn09p1fg4vsf7 --------- 58 
 25.03.2011 18:16     C:\WINDOWS\Temp\sess_jdhm9gg4slbot521is817dt1f1 --------- 58 
 25.03.2011 17:43     C:\WINDOWS\Temp\sess_k9pug5n67q4k7e3fk6eh6qdo12 --------- 58 
 24.03.2011 09:49     C:\WINDOWS\Temp\sess_6e8mcsk19n2lmuj587brt8lbc1 --------- 58 
 24.03.2011 01:53     C:\WINDOWS\Temp\sess_v5c8mn6v024112n53n4b5ufm45 --------- 58 
 24.03.2011 01:45     C:\WINDOWS\Temp\sess_2q0n52bgql880qcdg6hntdo052 --------- 58 
 18.03.2011 09:22     C:\WINDOWS\Temp\ibB.tmp --------- 0 
 18.03.2011 09:22     C:\WINDOWS\Temp\ibA.tmp --------- 0 
 18.03.2011 09:22     C:\WINDOWS\Temp\ib7.tmp --------- 0 
 18.03.2011 09:22     C:\WINDOWS\Temp\ib8.tmp --------- 0 
 18.03.2011 09:22     C:\WINDOWS\Temp\ib9.tmp --------- 0 
 18.03.2011 09:22     C:\WINDOWS\Temp\Perflib_Perfdata_5b4.dat --------- 16384 
 15.03.2011 23:00     C:\WINDOWS\Temp\apc.lock.1 --------- 0 
 15.03.2011 23:00     C:\WINDOWS\Temp\apc.lock.2 --------- 0 
 15.03.2011 23:00     C:\WINDOWS\Temp\apc.lock.0 --------- 0 
 07.03.2011 02:17     C:\WINDOWS\Temp\BIT10.tmp --------- 0 
 01.03.2011 00:38     C:\WINDOWS\Temp\f5TunnelServer.txt --------- 32490 
 01.03.2011 00:38     C:\WINDOWS\Temp\f5TunnelServerX.txt --------- 880 
 01.03.2011 00:38     C:\WINDOWS\Temp\f5dskctl.txt --------- 574 
 28.02.2011 23:29     C:\WINDOWS\Temp\f5dsklog.txt --------- 412 
 28.02.2011 23:29     C:\WINDOWS\Temp\f5Install.txt --------- 1946 
 28.02.2011 23:29     C:\WINDOWS\Temp\logterminal.txt --------- 3160 
 28.02.2011 21:52     C:\WINDOWS\Temp\BITB.tmp --------- 0 
 28.02.2011 21:52     C:\WINDOWS\Temp\BITA.tmp --------- 0 
 28.02.2011 21:52     C:\WINDOWS\Temp\GUR5.tmp --------- 0 
 28.02.2011 21:52     C:\WINDOWS\Temp\GUR2.tmp --------- 0 
 28.02.2011 21:49     C:\WINDOWS\Temp\BIT8.tmp --------- 0 
 28.02.2011 21:49     C:\WINDOWS\Temp\BIT7.tmp --------- 0 
 28.02.2011 21:49     C:\WINDOWS\Temp\GUR4.tmp --------- 0 
 28.02.2011 21:49     C:\WINDOWS\Temp\GUR1.tmp --------- 0 
 28.02.2011 21:44     C:\WINDOWS\Temp\BIT6.tmp --------- 0 
 28.02.2011 21:44     C:\WINDOWS\Temp\GUR3.tmp --------- 0 
 27.02.2011 22:08     C:\WINDOWS\Temp\notesE1EF34 --------- 0 
 31.01.2011 15:15     C:\WINDOWS\Temp\JETA34.tmp --------- 0 
 31.01.2011 12:37     C:\WINDOWS\Temp\_ISTMP8.DIR --------- 0 
 31.01.2011 10:28     C:\WINDOWS\Temp\Perflib_Perfdata_4fc.dat --------- 16384 
 18.12.2010 10:43     C:\WINDOWS\Temp\Perflib_Perfdata_658.dat --------- 16384 
 17.12.2010 02:11     C:\WINDOWS\Temp\Perflib_Perfdata_5d4.dat --------- 16384 
 12.12.2010 20:20     C:\WINDOWS\Temp\Perflib_Perfdata_694.dat --------- 16384 
 09.12.2010 16:31     C:\WINDOWS\Temp\HP --------- 0 
 07.11.2010 22:04     C:\WINDOWS\Temp\Perflib_Perfdata_308.dat --------- 16384 
 24.10.2010 21:51     C:\WINDOWS\Temp\NWLogRes.tmp --------- 131 
 23.10.2010 11:35     C:\WINDOWS\Temp\Perflib_Perfdata_640.dat --------- 16384 
 21.10.2010 21:35     C:\WINDOWS\Temp\Perflib_Perfdata_62c.dat --------- 16384 
 09.10.2010 21:10     C:\WINDOWS\Temp\Perflib_Perfdata_600.dat --------- 16384 
 08.10.2010 18:36     C:\WINDOWS\Temp\Perflib_Perfdata_63c.dat --------- 16384 
 04.10.2010 09:17     C:\WINDOWS\Temp\Perflib_Perfdata_5f4.dat --------- 16384 
 28.09.2010 21:33     C:\WINDOWS\Temp\Perflib_Perfdata_2f8.dat --------- 16384 
 27.09.2010 23:10     C:\WINDOWS\Temp\Perflib_Perfdata_688.dat --------- 16384 
 27.09.2010 20:46     C:\WINDOWS\Temp\Perflib_Perfdata_660.dat --------- 16384 
 24.09.2010 10:40     C:\WINDOWS\Temp\Perflib_Perfdata_310.dat --------- 16384 
 07.05.2010 07:21     C:\WINDOWS\Temp\Perflib_Perfdata_728.dat --------- 16384 
 16.04.2010 08:10     C:\WINDOWS\Temp\Perflib_Perfdata_5ac.dat --------- 16384 
 11.04.2010 22:47     C:\WINDOWS\Temp\hpdj00srv02.log --------- 3017 
 11.04.2010 22:47     C:\WINDOWS\Temp\hpzglue02.log --------- 328 
 08.04.2010 09:09     C:\WINDOWS\Temp\History --------- 0 
 02.04.2010 09:41     C:\WINDOWS\Temp\Perflib_Perfdata_29c.dat --------- 16384 
 29.03.2010 21:03     C:\WINDOWS\Temp\Perflib_Perfdata_294.dat --------- 16384 
 26.03.2010 13:50     C:\WINDOWS\Temp\Perflib_Perfdata_1e8.dat --------- 16384 
 23.03.2010 01:32     C:\WINDOWS\Temp\Perflib_Perfdata_2e0.dat --------- 16384 
 22.03.2010 17:08     C:\WINDOWS\Temp\VisioCA.log --------- 199 
 10.03.2010 23:42     C:\WINDOWS\Temp\Perflib_Perfdata_2b4.dat --------- 16384 
 19.02.2010 22:36     C:\WINDOWS\Temp\Perflib_Perfdata_25c.dat --------- 16384 
 14.02.2010 15:36     C:\WINDOWS\Temp\hpzcoi11.log --------- 822 
 14.02.2010 15:36     C:\WINDOWS\Temp\hpzcoi10.log --------- 1069 
 14.02.2010 15:36     C:\WINDOWS\Temp\hpzcoi09.log --------- 596 
 14.02.2010 15:36     C:\WINDOWS\Temp\hpzcoi08.log --------- 596 
 14.02.2010 15:36     C:\WINDOWS\Temp\servic010.log --------- 352 
 14.02.2010 15:36     C:\WINDOWS\Temp\servic009.log --------- 352 
 14.02.2010 15:36     C:\WINDOWS\Temp\_ISTMP7.DIR --------- 0 
 14.02.2010 15:36     C:\WINDOWS\Temp\CIO_NDCS.log --------- 931 
 14.02.2010 15:27     C:\WINDOWS\Temp\servic008.log --------- 352 
 14.02.2010 15:16     C:\WINDOWS\Temp\_ISTMP6.DIR --------- 0 
 14.02.2010 15:11     C:\WINDOWS\Temp\servic007.log --------- 352 
 14.02.2010 14:54     C:\WINDOWS\Temp\_ISTMP5.DIR --------- 0 
 14.02.2010 14:36     C:\WINDOWS\Temp\servic006.log --------- 352 
 14.02.2010 14:35     C:\WINDOWS\Temp\_ISTMP4.DIR --------- 0 
 14.02.2010 14:24     C:\WINDOWS\Temp\hpdj00srv01.log --------- 3017 
 14.02.2010 14:23     C:\WINDOWS\Temp\servic005.log --------- 352 
 14.02.2010 14:23     C:\WINDOWS\Temp\hpzglue01.log --------- 328 
 14.02.2010 14:19     C:\WINDOWS\Temp\hpzcoi07.log --------- 822 
 14.02.2010 14:19     C:\WINDOWS\Temp\hpzcoi06.log --------- 1069 
 14.02.2010 14:19     C:\WINDOWS\Temp\hpzcoi05.log --------- 596 
 14.02.2010 14:19     C:\WINDOWS\Temp\hpzcoi04.log --------- 596 
 14.02.2010 14:19     C:\WINDOWS\Temp\servic004.log --------- 352 
 14.02.2010 14:19     C:\WINDOWS\Temp\servic003.log --------- 352 
 14.02.2010 14:18     C:\WINDOWS\Temp\_ISTMP3.DIR --------- 0 
 10.02.2010 10:04     C:\WINDOWS\Temp\Perflib_Perfdata_274.dat --------- 16384 
 07.02.2010 20:04     C:\WINDOWS\Temp\hpdj00srv00.log --------- 3017 
 07.02.2010 20:04     C:\WINDOWS\Temp\servic002.log --------- 352 
 07.02.2010 20:04     C:\WINDOWS\Temp\hpzglue00.log --------- 328 
 07.02.2010 19:58     C:\WINDOWS\Temp\_ISTMP2.DIR --------- 0 
 07.02.2010 18:26     C:\WINDOWS\Temp\Cookies --------- 0 
 07.02.2010 18:26     C:\WINDOWS\Temp\Verlauf --------- 0 
 07.02.2010 18:26     C:\WINDOWS\Temp\Temporary Internet Files --------- 0 
 28.01.2010 23:02     C:\WINDOWS\Temp\Perflib_Perfdata_298.dat --------- 16384 
 23.01.2010 09:27     C:\WINDOWS\Temp\Perflib_Perfdata_3ac.dat --------- 16384 
 18.01.2010 12:42     C:\WINDOWS\Temp\VBE --------- 0 
 18.01.2010 12:39     C:\WINDOWS\Temp\_ISTMP0.DIR --------- 0 
 18.01.2010 12:07     C:\WINDOWS\Temp\Perflib_Perfdata_7d8.dat --------- 16384 
 17.01.2010 18:58     C:\WINDOWS\Temp\hpzcoi03.log --------- 822 
 17.01.2010 18:58     C:\WINDOWS\Temp\hpzcoi02.log --------- 1069 
 17.01.2010 18:58     C:\WINDOWS\Temp\hpzcoi01.log --------- 596 
 17.01.2010 18:58     C:\WINDOWS\Temp\hpzcoi00.log --------- 596 
 17.01.2010 18:58     C:\WINDOWS\Temp\servic001.log --------- 352 
 17.01.2010 18:58     C:\WINDOWS\Temp\servic000.log --------- 352 
 17.01.2010 18:58     C:\WINDOWS\Temp\_ISTMP1.DIR --------- 0 
 12.01.2010 15:56     C:\WINDOWS\Temp\Perflib_Perfdata_794.dat --------- 16384 
----------------------------------------

 
C:\DOCUME~1\xxx\LOCALS~1\Temp

 04.04.2011 22:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zO99.tmp --------- 0 
 04.04.2011 22:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\msohtml1 --------- 0 
 04.04.2011 22:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-77 --------- 0 
 04.04.2011 22:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFCB70.tmp --------- 512 
 04.04.2011 22:15      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFB0C8.tmp --------- 512 
 04.04.2011 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFDF8F.tmp --------- 512 
 04.04.2011 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFDF84.tmp --------- 32768 
 04.04.2011 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFDE7C.tmp --------- 16384 
 04.04.2011 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFDE87.tmp --------- 512 
 04.04.2011 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFDDD0.tmp --------- 512 
 04.04.2011 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFDDC5.tmp --------- 32768 
 04.04.2011 20:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DF5C0B.tmp --------- 16384 
 04.04.2011 20:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DF5067.tmp --------- 16384 
 04.04.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\neng2.ico --------- 2238 
 04.04.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\neng1.ico --------- 2238 
 04.04.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\neng0.ico --------- 2238 
 04.04.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\AdobeARM.log --------- 346914 
 04.04.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\~DFD6C3.tmp --------- 16384 
 04.04.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\WPDNSE --------- 0 
 04.04.2011 12:53      C:\DOCUME~1\xxx\LOCALS~1\Temp\Art-260759889445-3.html --------- 62356 
 04.04.2011 12:52      C:\DOCUME~1\xxx\LOCALS~1\Temp\Art-260759889445-1.html --------- 0 
 04.04.2011 04:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX27 --------- 0 
 04.04.2011 01:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX26 --------- 0 
 04.04.2011 00:05      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX25 --------- 0 
 03.04.2011 23:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX24 --------- 0 
 03.04.2011 23:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX23 --------- 0 
 03.04.2011 23:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX21 --------- 0 
 03.04.2011 23:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX19 --------- 0 
 03.04.2011 23:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX22 --------- 0 
 03.04.2011 23:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX20 --------- 0 
 03.04.2011 23:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX18 --------- 0 
 03.04.2011 22:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX17 --------- 0 
 03.04.2011 22:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX16 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX15 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX14 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX13 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX12 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX11 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX10 --------- 0 
 03.04.2011 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX9 --------- 0 
 03.04.2011 22:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX8 --------- 0 
 03.04.2011 20:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\Art-220762749573-3.html --------- 49548 
 03.04.2011 20:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\Art-220762749573-2.html --------- 27169 
 03.04.2011 20:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\Art-220762749573-2-1.html --------- 37664 
 03.04.2011 20:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\Art-220762749573-1.html --------- 13404 
 03.04.2011 20:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\pkypvcbbv --------- 0 
 03.04.2011 20:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\java_install_reg.log --------- 36923 
 03.04.2011 20:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\hsperfdata_xxx --------- 0 
 02.04.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD0444.doc --------- 581 
 02.04.2011 10:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-76 --------- 0 
 01.04.2011 20:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-75 --------- 0 
 01.04.2011 19:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD0236.doc --------- 581 
 01.04.2011 17:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\yKXhI3ay.exe.part --------- 610815 
 01.04.2011 16:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_27fc.dat --------- 16384 
 01.04.2011 15:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\notesE1EF34 --------- 0 
 01.04.2011 12:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\f5TunnelServer.txt --------- 1925864 
 01.04.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\f5TunnelServerX.txt --------- 651855 
 01.04.2011 12:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\logterminal.txt --------- 820278 
 01.04.2011 12:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\f5dskctl.txt --------- 36785 
 01.04.2011 12:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\smkits --------- 0 
 01.04.2011 11:55      C:\DOCUME~1\xxx\LOCALS~1\Temp\f5dsklog.txt --------- 27587 
 01.04.2011 11:55      C:\DOCUME~1\xxx\LOCALS~1\Temp\f5Install.txt --------- 125816 
 31.03.2011 21:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-74 --------- 0 
 28.03.2011 22:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\jarfscachexxx --------- 0 
 26.03.2011 20:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\tmpB0.tmp --------- 0 
 26.03.2011 20:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\pear --------- 0 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3427117589805906361.tmp --------- 2968 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache2588722676165671690.tmp --------- 6144 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1204767225706699445.tmp --------- 6827 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3495492067393033726.tmp --------- 10240 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache6015891764502787555.tmp --------- 16204 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache560888519102215365.tmp --------- 14394 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache2376131980011293026.tmp --------- 14336 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5116500821234749806.tmp --------- 12288 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3982076303423339121.tmp --------- 7004 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache4430220675742281842.tmp --------- 47827 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8998233872437001505.tmp --------- 10240 
 26.03.2011 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5774144863836851421.tmp --------- 32768 
 25.03.2011 17:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1301068628083 --------- 216 
 24.03.2011 10:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-73 --------- 0 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache6897923878226139858.tmp --------- 2968 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache970067199194644763.tmp --------- 6827 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3184718790624682906.tmp --------- 6144 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache11904016941826502.tmp --------- 10240 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache2849267105150475998.tmp --------- 14394 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3290209062059458487.tmp --------- 16204 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3564218314677551797.tmp --------- 14336 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5183177637612770723.tmp --------- 10240 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1463310867260256326.tmp --------- 47827 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache2421661207260850323.tmp --------- 12288 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8749798900056443237.tmp --------- 7004 
 23.03.2011 01:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache858142190187150017.tmp --------- 32768 
 22.03.2011 23:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\7+zMvIj_.zip.part --------- 3065418 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8058518044802400473.tmp --------- 2968 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7364665913989974577.tmp --------- 6827 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3707339493908359806.tmp --------- 6144 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache163064695281120571.tmp --------- 10240 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8084363286825655488.tmp --------- 16204 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7699729147032755332.tmp --------- 14336 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1821182501286419040.tmp --------- 14394 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1640274238178225855.tmp --------- 12288 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5260924701872374202.tmp --------- 47827 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5959897936554476021.tmp --------- 10240 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache947590602702884523.tmp --------- 7004 
 22.03.2011 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache994964034266554177.tmp --------- 32768 
 22.03.2011 20:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\scratch.html --------- 23273 
 22.03.2011 09:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\QTInstallCode.log --------- 15102 
 22.03.2011 09:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\SetupAdmin1108.log --------- 85 
 22.03.2011 09:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\SetupAdmin14A4.log --------- 85 
 22.03.2011 09:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\qtplugin.log --------- 4012 
 20.03.2011 09:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-9.eml --------- 928457 
 20.03.2011 09:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsmail-4.tmp --------- 30 
 20.03.2011 09:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-3.html --------- 264 
 19.03.2011 19:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-72 --------- 0 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache6938350219603124804.tmp --------- 2968 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1213980655091278269.tmp --------- 6827 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8242888946767160930.tmp --------- 6144 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3889144593231011913.tmp --------- 10240 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1420981483445262132.tmp --------- 16204 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7136077755667056345.tmp --------- 14336 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7168390567616309747.tmp --------- 14394 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache309773287662993140.tmp --------- 12288 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7187920635517723229.tmp --------- 47827 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache104482182142342677.tmp --------- 10240 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3503166176409698510.tmp --------- 7004 
 18.03.2011 10:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache1707221971188675208.tmp --------- 32768 
 17.03.2011 21:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\T2pwCojJ.dll.part --------- 155712 
 17.03.2011 18:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\Domino Web Access --------- 0 
 15.03.2011 22:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300220911153 --------- 3880 
 15.03.2011 22:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300220904294 --------- 5962 
 15.03.2011 14:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zOC0.tmp --------- 0 
 15.03.2011 09:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300174012376 --------- 3880 
 15.03.2011 09:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300174005548 --------- 5962 
 15.03.2011 08:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300169551047 --------- 3880 
 15.03.2011 08:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300169544297 --------- 6054 
 15.03.2011 07:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300168568688 --------- 478 
 15.03.2011 07:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300168077907 --------- 3776 
 15.03.2011 07:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300168071078 --------- 5858 
 15.03.2011 07:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1300167370203 --------- 2224 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache9090806948356783680.tmp --------- 2968 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8580950651996981140.tmp --------- 6827 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7703219669696551977.tmp --------- 6144 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache2935349223702111139.tmp --------- 16204 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5535577721371377069.tmp --------- 10240 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache6030792124834527858.tmp --------- 14336 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache4379852109526107937.tmp --------- 14394 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache276464561884262619.tmp --------- 12288 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache989138238057118514.tmp --------- 7004 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3509595518989444579.tmp --------- 10240 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache2924464338699358487.tmp --------- 47827 
 14.03.2011 10:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3286687082648654642.tmp --------- 32768 
 10.03.2011 17:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\output1299770615525 --------- 200 
 10.03.2011 16:58      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zO15A.tmp --------- 0 
 10.03.2011 13:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zOB3.tmp --------- 0 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache6309829417507322663.tmp --------- 2968 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache4210090992010292016.tmp --------- 6144 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache4227205917058737831.tmp --------- 6827 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3889192777648888534.tmp --------- 10240 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache465895984960049041.tmp --------- 14394 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8420840431721755276.tmp --------- 16204 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8335876554628735754.tmp --------- 14336 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache7471300393663859682.tmp --------- 12288 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache8831223838851440296.tmp --------- 7004 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache6755135992137108305.tmp --------- 10240 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache5900215494293656210.tmp --------- 47827 
 09.03.2011 19:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\dict_cache3775657733257603074.tmp --------- 32768 
 09.03.2011 17:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-71 --------- 0 
 08.03.2011 21:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache4275531155231872832.tmp --------- 0 
 07.03.2011 23:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\3mdxdbzP.txt.part --------- 286 
 07.03.2011 13:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB2416473_20110307_112948046.html --------- 87308 
 07.03.2011 13:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB2416473_20110307_112948046-Msi0.txt --------- 827776 
 07.03.2011 13:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_clwireg.txt --------- 104695 
 07.03.2011 13:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2418241_20110307_112842015.html --------- 503126 
 07.03.2011 13:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2418241_20110307_112842015-Msi0.txt --------- 12303826 
 07.03.2011 13:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00006.log --------- 5158 
 07.03.2011 13:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB983583_20110307_112714734.html --------- 504330 
 07.03.2011 13:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB983583_20110307_112714734-Msi0.txt --------- 12282858 
 07.03.2011 13:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00005.log --------- 5158 
 07.03.2011 13:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB977354_20110307_112700750-Msi0.txt --------- 2362340 
 07.03.2011 13:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB977354_20110307_112700750.html --------- 113714 
 07.03.2011 13:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_wcf_retCA6C39.txt --------- 4242 
 07.03.2011 13:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB976576_20110307_112535468.html --------- 503602 
 07.03.2011 13:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB976576_20110307_112535468-Msi0.txt --------- 11700554 
 07.03.2011 13:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00004.log --------- 5158 
 07.03.2011 13:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB979909_20110307_112437890.html --------- 502020 
 07.03.2011 13:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB979909_20110307_112437890-Msi0.txt --------- 11100740 
 07.03.2011 13:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00003.log --------- 5158 
 07.03.2011 13:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB982168_20110307_112315890.html --------- 583928 
 07.03.2011 13:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB982168_20110307_112315890-Msi1.txt --------- 2209476 
 07.03.2011 13:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_wcf_retCA4640.txt --------- 4242 
 07.03.2011 13:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB982168_20110307_112315890-Msi0.txt --------- 10615644 
 07.03.2011 13:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00002.log --------- 5158 
 07.03.2011 13:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB963707_20110307_112308015.html --------- 75896 
 07.03.2011 13:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB963707_20110307_112308015-Msi0.txt --------- 424294 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB958484_20110307_105027269.html --------- 93968 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB958484_20110307_105027269-Msi0.txt --------- 751224 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB958483_20110307_105013691-Msi0.txt --------- 2120630 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 3.0-KB958483_20110307_105013691.html --------- 113126 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_wcf_retCA44A8.txt --------- 4242 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB958481_20110307_104856224.html --------- 503820 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB958481_20110307_104856224-Msi0.txt --------- 9406882 
 07.03.2011 12:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00001.log --------- 5158 
 07.03.2011 12:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\uxeventlog.txt --------- 62106 
 07.03.2011 12:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_dotnetfx35install.txt --------- 288934 
 07.03.2011 12:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_NET_Framework35_MSI40BF.txt --------- 1445706 
 07.03.2011 12:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_NET_Framework30_Setup4032.txt --------- 3927268 
 07.03.2011 12:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_wcf_retCA20FB.txt --------- 4242 
 07.03.2011 12:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_XPS.txt --------- 21480 
 07.03.2011 12:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_NET_Framework20_Setup3E7A.txt --------- 14924008 
 07.03.2011 12:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup_00000.log --------- 5158 
 07.03.2011 12:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_depcheck_NETFX_EXP_35.txt --------- 204421 
 07.03.2011 12:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\dd_dotnetfx35error.txt --------- 2 
 07.03.2011 12:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-70 --------- 0 
 07.03.2011 12:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMTC35.xml --------- 2286 
 07.03.2011 11:40      C:\DOCUME~1\xxx\LOCALS~1\Temp\0YPtr+S+.gz.part --------- 2215465 
 05.03.2011 12:05      C:\DOCUME~1\xxx\LOCALS~1\Temp\h2r1019.tmp --------- 0 
 05.03.2011 12:05      C:\DOCUME~1\xxx\LOCALS~1\Temp\r2h1018.tmp --------- 6100 
 02.03.2011 23:58      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX7 --------- 0 
 01.03.2011 23:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\Norton_SA_Log.txt --------- 999 
 01.03.2011 01:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-69 --------- 0 
 01.03.2011 01:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\urp12.tmp --------- 0 
 01.03.2011 01:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\x2x11.tmp --------- 0 
 28.02.2011 22:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX6 --------- 0

ralph.allen · 05.04.2011, 07:38

kein Problem, dann muss ich zwei Antworten posten:

1) Logfile of HijackThis 2.0.4
HiJackthis Logfile:

Code:

ATTFilter

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:27:46, on 04.04.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
D:\private Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\private Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
D:\private Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\DellTPad\Apoint.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\dpmw32.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\FreePDF_XP\fpassist.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\iprntctl.exe
C:\WINDOWS\system32\iprntlgn.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
D:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
D:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
D:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
D:\private Program Files\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Symantec AntiVirus\vpc32.exe
D:\Program Files\SeaMonkey\seamonkey.exe
D:\Program Files\Biet-O-Matic\Biet-O-Matic.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\xxx\Desktop\nuquel2\HijackThis.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dict.leo.org/ende?lang=de&lp=ende
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [AESTFltr] %SystemRoot%\system32\AESTFltr.exe /NoDlg
O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\system32\dpmw32.exe
O4 - HKLM\..\Run: [ZENRC Tray Icon] C:\WINDOWS\system32\zentray.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [FreePDF Assistant] C:\Program Files\FreePDF_XP\fpassist.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [iPrint Tray] C:\WINDOWS\system32\iprntctl.exe TRAY_ICON
O4 - HKLM\..\Run: [iPrint Event Monitor] C:\WINDOWS\system32\iprntlgn.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "d:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "D:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Monitor Apache Servers.lnk = D:\private Program Files\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe
O8 - Extra context menu item: add to &BOM - D:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
O16 - DPF: {45B69029-F3AB-4204-92DE-D5140C3E8E74} (F5 Networks Auto Update) - C:\DOCUME~1\xxx\LOCALS~1\Temp\IXP000.TMP\InstallerControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1299492997480
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apache2.2 - Apache Software Foundation - D:\private Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Credential Vault Host Control Service - Broadcom Corporation - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
O23 - Service: Credential Vault Host Storage - Broadcom Corporation - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MySQL - Unknown owner - D:\private.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/xxx/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 15418 bytes

--- --- ---

2) Versteckte Dateien sind nun sichtbar
4) Installierte Programme ausgewertet von "Ccleaner"

Code:

ATTFilter

7-Zip 4.42	Igor Pavlov	4.42.00.0
Adobe Flash Player 10 ActiveX	Adobe Systems, Inc.	10.0.32.18
Adobe Flash Player 10 Plugin	Adobe Systems, Inc.	10.0.32.18
Adobe Reader 9.3 - Deutsch	Adobe Systems Incorporated	9.3.0
AFPL Ghostscript 8.54		
AFPL Ghostscript Fonts		
Apache HTTP Server 2.2.17	Apache Software Foundation	2.2.17
Apple Application Support	Apple Inc.	1.5.0
Apple Mobile Device Support	Apple Inc.	3.4.0.25
Apple Software Update	Apple Inc.	2.1.2.120
Biet-O-Matic v2.14.0	BOM Development Team	Biet-O-Matic v2.14.0
Bonjour	Apple Inc.	2.0.4.0
Broadcom USH Host Components	Broadcom Corporation	1.6.8.12
Canon MP Navigator 3.1		
Canon MP140 series		
Canon MP140 series Benutzerregistrierung		
Canon Utilities Easy-LayoutPrint		
Canon Utilities Easy-PhotoPrint		
CCleaner	Piriform	3.05
Citrix XenApp Web Plugin	Citrix Systems, Inc.	11.0.0.5357
Compatibility Pack for the 2007 Office system	Microsoft Corporation	12.0.6514.5001
Dell 5530 Wireless Broadband Package	Dell	1.0.10.3
Dell Touchpad	Alps Electric	7.2.101.209
DVD Shrink 3.2	DVD Shrink	
DVD Shrink 3.2 deutsch (DeCSS-frei)	DVD Shrink	
FreeMind		0.8.1
FreePDF XP (Remove only)		
Google Earth	Google	5.2.1.1588
High Definition Audio Driver Package - KB888111	Microsoft Corporation	20040219.000000
Hotfix for Windows XP (KB969084)	Microsoft Corporation	3
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät	Hewlett-Packard Co.	22.0.334.0
HP Deskjet 2050 J510 series Hilfe	Hewlett Packard	140.0.61.61
HP Update	Hewlett-Packard	5.002.005.003
Intel(R) PROSet/Wireless WiFi-Software	Intel(R) Corporation	12.00.4000
Iomega DVD Wizard		
Iomega HotBurn Pro		
iTunes	Apple Inc.	10.2.1.1
Java(TM) 6 Update 13	Sun Microsystems, Inc.	6.0.130
LiveUpdate 3.0 (Symantec Corporation)	Symantec Corporation	3.0.0.160
Malwarebytes' Anti-Malware	Malwarebytes Corporation	
Microsoft .NET Framework 2.0 Service Pack 2	Microsoft Corporation	2.2.30729
Microsoft .NET Framework 3.0 Service Pack 2	Microsoft Corporation	3.2.30729
Microsoft .NET Framework 3.5 SP1	Microsoft Corporation	
Microsoft Compression Client Pack 1.0 for Windows XP	Microsoft Corporation	1
Microsoft Office Standard Edition 2003	Microsoft Corporation	11.0.8173.0
Microsoft Office Visio Standard 2003	Microsoft Corporation	11.0.7969.0
Microsoft Office Visio Viewer 2007	Microsoft Corporation	12.0.4518.1014
Microsoft redistributable runtime DLLs VS2005 SP1(x86)	SAP	8.0.50727.762
Microsoft User-Mode Driver Framework Feature Pack 1.0	Microsoft Corporation	
MSXML 4.0 SP2 (KB925672)	Microsoft Corporation	4.20.9839.0
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	4.20.9870.0
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	4.20.9876.0
MSXML 6.0 Parser (KB925673)	Microsoft Corporation	6.00.3888.0
MSXML4.0 redistributable	SAP	4.0.0.0
MySQL Server 5.5	Oracle Corporation	5.5.9
NetBeans IDE 6.9.1	NetBeans.org	6.9.1
NICI (Shared) U.S./Worldwide (128 bit) (2.6.8-2)		
NMAS Client	Ihr Firmenname	3.2.0.16
PHP 5.3.5	The PHP Group	5.3.5
PIXMA Extended Survey Program		
PowerDVD 5.5		
Prosis2		2.2.8
Putty	Putty	0.56
QuickTime	Apple Inc.	7.69.80.9
Rapid SQL 7.6.4	Embarcadero Technologies	7.6.4
RedMon - Redirection Port Monitor		
Safari	Apple Inc.	5.33.20.27
ScanSoft OmniPage SE 4	Nuance Communications, Inc.	15.2.0020
SeaMonkey (2.0.13)	Mozilla	2.0.13 (de)
Skype Toolbars	Skype Technologies S.A.	5.0.4137
Skype™ 5.1	Skype Technologies S.A.	5.1.112
Subversion	CollabNet	1.6.15
Symantec AntiVirus	Symantec Corporation	10.1.394.0
Windows Genuine Advantage Validation Tool (KB892130)	Microsoft Corporation	
Windows Internet Explorer 8	Microsoft Corporation	20090308.140743
Windows Management Framework Core	Microsoft Corporation	
Windows Media Format 11 runtime		
Windows Media Player 11		
Windows XP Service Pack 3	Microsoft Corporation	20080414.031525
Winscp	winscp	3.71
ZTE USB Driver	ZTE Corporation	1.0.1.14

ralph.allen · 05.04.2011, 07:42

3) zweiter Teil von hjtscanlist.txt

Code:

ATTFilter

 28.02.2011 21:52      C:\DOCUME~1\xxx\LOCALS~1\Temp\tF3B6.tmp --------- 5184054 
 28.02.2011 21:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\tF608.tmp --------- 5184054 
 28.02.2011 21:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX5 --------- 0 
 28.02.2011 21:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX4 --------- 0 
 28.02.2011 21:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX3 --------- 0 
 28.02.2011 21:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX2 --------- 0 
 28.02.2011 21:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\t9BF.tmp --------- 5184054 
 28.02.2011 00:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5854939156819539299Swap.tmp --------- 930391 
 28.02.2011 00:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3858646168411651664Swap.tmp --------- 812661 
 28.02.2011 00:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2305140082497126694Swap.tmp --------- 991615 
 28.02.2011 00:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1458534766285793739Swap.tmp --------- 977658 
 28.02.2011 00:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6002107360212708873Swap.tmp --------- 1211203 
 28.02.2011 00:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1551243497930865814Swap.tmp --------- 915416 
 28.02.2011 00:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6629212117013310881Swap.tmp --------- 1110561 
 28.02.2011 00:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1893115400285023149Swap.tmp --------- 923837 
 28.02.2011 00:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3989941945009034198Swap.tmp --------- 912097 
 28.02.2011 00:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2149033370357235471Swap.tmp --------- 850605 
 28.02.2011 00:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8356513798053498397Swap.tmp --------- 863627 
 28.02.2011 00:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2888360438477385415Swap.tmp --------- 1337361 
 28.02.2011 00:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ80418411055098629Swap.tmp --------- 1524400 
 28.02.2011 00:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2237858405385889542Swap.tmp --------- 957960 
 27.02.2011 16:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX1 --------- 0 
 27.02.2011 16:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\aFBA.tmp --------- 391 
 27.02.2011 16:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\aF78E.tmp --------- 31 
 27.02.2011 16:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-68 --------- 0 
 27.02.2011 14:53      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zO14DC.tmp --------- 0 
 27.02.2011 01:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\RarSFX0 --------- 0 
 27.02.2011 00:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\3036264323 --------- 12744 
 26.02.2011 18:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-67 --------- 0 
 18.02.2011 01:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\504FD259.tmp --------- 1726 
 18.02.2011 01:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\3E1BB50E.tmp --------- 4319 
 18.02.2011 01:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\72B5AB9C.tmp --------- 18947 
 18.02.2011 01:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\4C1D5BF4.tmp --------- 0 
 18.02.2011 01:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\48B0B6EB.tmp --------- 0 
 18.02.2011 01:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\62CB10DD.tmp --------- 985 
 16.02.2011 00:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\SkypeSetup.exe --------- 21178248 
 10.02.2011 13:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zO3C.tmp --------- 0 
 08.02.2011 09:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\ica23.tmp --------- 1610 
 08.02.2011 09:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\URS7.tmp --------- 586 
 07.02.2011 14:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\r2hA2A.tmp --------- 5982 
 07.02.2011 14:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\h2rA2B.tmp --------- 0 
 07.02.2011 11:15      C:\DOCUME~1\xxx\LOCALS~1\Temp\URS22.tmp --------- 586 
 02.02.2011 17:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\wecerr.txt --------- 168 
 02.02.2011 17:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\POWERPNT.log --------- 415 
 01.02.2011 16:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\r2hA1.tmp --------- 6059 
 01.02.2011 16:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\h2rA2.tmp --------- 0 
 01.02.2011 12:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache8923123158244954718.tmp --------- 1046993 
 01.02.2011 12:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache8146093836832921825.tmp --------- 1046993 
 01.02.2011 12:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache7452857402088908631.tmp --------- 1046993 
 01.02.2011 10:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache553391584059648415.tmp --------- 1046993 
 01.02.2011 10:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache7481117413836820850.tmp --------- 1046993 
 01.02.2011 10:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache2136233044384369674.tmp --------- 1046993 
 01.02.2011 10:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache3130107606526928820.tmp --------- 1046993 
 01.02.2011 10:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache7335100779766098982.tmp --------- 1046993 
 01.02.2011 10:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache6811126972234290605.tmp --------- 1046993 
 31.01.2011 12:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\URSA27.tmp --------- 586 
 31.01.2011 12:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zOA26.tmp --------- 0 
 31.01.2011 12:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zOA25.tmp --------- 0 
 29.01.2011 17:52      C:\DOCUME~1\xxx\LOCALS~1\Temp\h2r4C.tmp --------- 0 
 29.01.2011 17:52      C:\DOCUME~1\xxx\LOCALS~1\Temp\r2h4B.tmp --------- 6622 
 22.01.2011 23:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-66 --------- 0 
 15.01.2011 02:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\72D55FDA.tmp --------- 800 
 15.01.2011 00:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\Music Matters.pcast --------- 658 
 15.01.2011 00:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\Global News.pcast --------- 668 
 14.01.2011 22:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_1474.dat --------- 16384 
 13.01.2011 02:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-65 --------- 0 
 07.01.2011 19:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_OOjLAl64Ve4bLSQG7p9X --------- 0 
 07.01.2011 19:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_OOjLAl64Ve4bLSQG7p9X-journal --------- 0 
 07.01.2011 19:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_b38.dat --------- 16384 
 07.01.2011 17:40      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_eb0.dat --------- 16384 
 06.01.2011 01:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\WDzrSPC_.pdf.part --------- 51260 
 02.01.2011 23:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3990342560895305504Swap.tmp --------- 169008 
 02.01.2011 23:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5570509381365913013Swap.tmp --------- 805064 
 02.01.2011 21:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8461896437758434818Swap.tmp --------- 779927 
 02.01.2011 21:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8528204484029707414Swap.tmp --------- 922498 
 02.01.2011 21:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5830238558447583721Swap.tmp --------- 854823 
 02.01.2011 21:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1847992342758683442Swap.tmp --------- 1205858 
 02.01.2011 21:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8143037429513612183Swap.tmp --------- 1175083 
 02.01.2011 21:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1897682638238308378Swap.tmp --------- 922666 
 02.01.2011 21:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6517345577942510444Swap.tmp --------- 825246 
 02.01.2011 21:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5880213986780034253Swap.tmp --------- 791159 
 02.01.2011 21:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8483989777055856953Swap.tmp --------- 778538 
 02.01.2011 21:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ438538110968546973Swap.tmp --------- 694028 
 02.01.2011 21:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6474931566578084250Swap.tmp --------- 694725 
 02.01.2011 21:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2759058374541939354Swap.tmp --------- 1094517 
 02.01.2011 21:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2923983469928821859Swap.tmp --------- 742917 
 02.01.2011 21:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3318007861360381722Swap.tmp --------- 277703 
 02.01.2011 21:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ159403471610796492Swap.tmp --------- 752405 
 02.01.2011 21:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8657919175195639071Swap.tmp --------- 729875 
 02.01.2011 21:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3025260953070998932Swap.tmp --------- 688260 
 02.01.2011 21:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4759004817020764708Swap.tmp --------- 925979 
 02.01.2011 21:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5045198953549075968Swap.tmp --------- 796924 
 02.01.2011 21:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1103276007327512068Swap.tmp --------- 1072010 
 02.01.2011 21:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8838986068842244675Swap.tmp --------- 763466 
 02.01.2011 21:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6606434063365239522Swap.tmp --------- 1163960 
 02.01.2011 21:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8215368017730184413Swap.tmp --------- 847074 
 02.01.2011 21:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5099720307978687955Swap.tmp --------- 1037584 
 02.01.2011 21:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8510230505926622136Swap.tmp --------- 878739 
 02.01.2011 21:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1253596847033752578Swap.tmp --------- 949919 
 02.01.2011 21:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7553354670338849020Swap.tmp --------- 848271 
 02.01.2011 21:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6058051382725518333Swap.tmp --------- 945580 
 02.01.2011 21:40      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2376403550423535888Swap.tmp --------- 728546 
 02.01.2011 21:40      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8773082017573892480Swap.tmp --------- 792909 
 02.01.2011 21:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2548475182656024520Swap.tmp --------- 576691 
 02.01.2011 21:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7158837069980764327Swap.tmp --------- 1118611 
 02.01.2011 21:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6218246114391409484Swap.tmp --------- 999131 
 02.01.2011 21:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4220009055478288380Swap.tmp --------- 1276870 
 02.01.2011 21:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ423127780893574875Swap.tmp --------- 631088 
 02.01.2011 21:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5059028891579805746Swap.tmp --------- 623212 
 02.01.2011 21:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8001148680410443494Swap.tmp --------- 940105 
 02.01.2011 21:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1584878036350096087Swap.tmp --------- 1238403 
 02.01.2011 21:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3380246928266525610Swap.tmp --------- 697681 
 02.01.2011 21:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1781502804701257448Swap.tmp --------- 588767 
 02.01.2011 21:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8832304163116814955Swap.tmp --------- 982158 
 02.01.2011 21:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4300065800257547399Swap.tmp --------- 1230637 
 02.01.2011 21:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5700511843669321827Swap.tmp --------- 1335353 
 02.01.2011 21:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6855722055780596640Swap.tmp --------- 1216144 
 02.01.2011 21:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ742871431876825084Swap.tmp --------- 670901 
 02.01.2011 21:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6760086844340233809Swap.tmp --------- 591168 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1058327388654126591Swap.tmp --------- 193279 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1062829993483721132Swap.tmp --------- 651488 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3713810270881764597Swap.tmp --------- 278086 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5117143313028101911Swap.tmp --------- 250050 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8610157080129706211Swap.tmp --------- 720020 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1369424595826987638Swap.tmp --------- 219993 
 02.01.2011 21:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5570384843181655122Swap.tmp --------- 690404 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5586344454526076477Swap.tmp --------- 681747 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5234583229782080209Swap.tmp --------- 257052 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2313300335169108957Swap.tmp --------- 228484 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1141048527578295285Swap.tmp --------- 228185 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ9013334535733133567Swap.tmp --------- 208236 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6444167961790338740Swap.tmp --------- 881707 
 02.01.2011 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4539992527435550607Swap.tmp --------- 635608 
 02.01.2011 21:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4489677303819982771Swap.tmp --------- 755299 
 02.01.2011 21:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ597227594913449218Swap.tmp --------- 648732 
 02.01.2011 21:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ403530172034849540Swap.tmp --------- 800145 
 02.01.2011 21:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5951023847629615992Swap.tmp --------- 880775 
 02.01.2011 21:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8502576422468253368Swap.tmp --------- 609109 
 02.01.2011 21:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7585644666290114174Swap.tmp --------- 991431 
 02.01.2011 21:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8879947685051078391Swap.tmp --------- 663156 
 02.01.2011 21:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5089459322350847910Swap.tmp --------- 676167 
 02.01.2011 21:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4580488208837728865Swap.tmp --------- 1286166 
 02.01.2011 21:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2433698060470878232Swap.tmp --------- 1354839 
 02.01.2011 21:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7586137264077024741Swap.tmp --------- 633489 
 02.01.2011 21:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ9057298756803094211Swap.tmp --------- 657513 
 02.01.2011 21:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6143336348339234542Swap.tmp --------- 1124031 
 02.01.2011 21:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5658250771501299203Swap.tmp --------- 926861 
 02.01.2011 21:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7780176746578957142Swap.tmp --------- 1097142 
 02.01.2011 21:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5091234880523791358Swap.tmp --------- 863208 
 02.01.2011 21:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ719751140445489026Swap.tmp --------- 767408 
 02.01.2011 21:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2021529631724282751Swap.tmp --------- 996676 
 02.01.2011 21:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5264362669828237069Swap.tmp --------- 925377 
 02.01.2011 21:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5366089342149927125Swap.tmp --------- 1131280 
 02.01.2011 21:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7086559570486386406Swap.tmp --------- 856529 
 02.01.2011 21:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3490274527327222673Swap.tmp --------- 1182888 
 02.01.2011 21:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5387256580451616434Swap.tmp --------- 981227 
 02.01.2011 21:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6305920215792547676Swap.tmp --------- 894281 
 02.01.2011 21:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1064214595006151502Swap.tmp --------- 851801 
 02.01.2011 21:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7380819602909882926Swap.tmp --------- 1813196 
 02.01.2011 21:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6810569448607220229Swap.tmp --------- 775009 
 02.01.2011 21:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2290936592041973645Swap.tmp --------- 668992 
 02.01.2011 21:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6544729713584161538Swap.tmp --------- 702978 
 02.01.2011 21:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3856191729478215213Swap.tmp --------- 890443 
 02.01.2011 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5271505925714924526Swap.tmp --------- 902210 
 02.01.2011 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6280920691098401837Swap.tmp --------- 978520 
 02.01.2011 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ5838894203694215524Swap.tmp --------- 1277268 
 02.01.2011 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ6957717147144962946Swap.tmp --------- 818164 
 02.01.2011 21:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ9157658007912482307Swap.tmp --------- 848466 
 02.01.2011 21:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2437601656907107751Swap.tmp --------- 778374 
 02.01.2011 21:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4349987495913659643Swap.tmp --------- 763087 
 02.01.2011 21:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ7525576502582555535Swap.tmp --------- 674138 
 02.01.2011 21:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ2743740519444699412Swap.tmp --------- 1173451 
 02.01.2011 21:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ8636931466027596799Swap.tmp --------- 668961 
 02.01.2011 21:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ4527139094667545145Swap.tmp --------- 1075755 
 02.01.2011 21:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ1583044581190877741Swap.tmp --------- 859495 
 02.01.2011 21:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ3123534193930980449Swap.tmp --------- 549634 
 02.01.2011 21:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\IUJ949733077953977079Swap.tmp --------- 883150 
 26.12.2010 01:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\6343E.tmp --------- 0 
 25.12.2010 15:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-64 --------- 0 
 20.12.2010 19:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\h2rE4.tmp --------- 0 
 20.12.2010 19:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\r2hE3.tmp --------- 180 
 18.12.2010 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-63 --------- 0 
 18.12.2010 17:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_12bc.dat --------- 16384 
 18.12.2010 14:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\eastsussexlow.pdf --------- 14630994 
 18.12.2010 14:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\United-Kingdom_London_London-Bridge-Apartments.pdf --------- 254585 
 18.12.2010 11:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\de_Ausschreibung_Fotowettbewerb_2010.pdf --------- 221609 
 18.12.2010 00:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-62 --------- 0 
 16.12.2010 21:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\3BFC4A25.tmp --------- 2364 
 16.12.2010 20:55      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-61 --------- 0 
 11.12.2010 07:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\749F5A30.tmp --------- 2485 
 11.12.2010 01:40      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-60 --------- 0 
 10.12.2010 15:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_1fd8.dat --------- 16384 
 10.12.2010 01:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\760D5CB0.tmp --------- 2439 
 09.12.2010 17:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPDeviceSetupTimeSizeLog.txt --------- 187 
 09.12.2010 17:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPSoftwareTimeSizeLog.txt --------- 287 
 08.12.2010 17:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\QTStreaming Debug Log.txt --------- 22 
 07.12.2010 20:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-59 --------- 0 
 06.12.2010 23:58      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-58 --------- 0 
 02.12.2010 01:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\m1_kcpMU.csv.part --------- 7605 
 27.11.2010 00:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\fla2E1.tmp --------- 75452 
 20.11.2010 21:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache5997286889582463880.tmp --------- 990 
 20.11.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-57 --------- 0 
 20.11.2010 15:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\ge4776 --------- 0 
 20.11.2010 15:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\geColladaModelCacheLock --------- 0 
 20.11.2010 15:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\geIconCacheLock --------- 0 
 20.11.2010 15:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\isAF.tmp --------- 0 
 20.11.2010 15:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\._msige52 --------- 0 
 20.11.2010 13:04      C:\DOCUME~1\xxx\LOCALS~1\Temp\8B.tmp --------- 16384 
 14.11.2010 17:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\__SkypeDialog_Cache --------- 0 
 05.11.2010 20:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-56 --------- 0 
 05.11.2010 11:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\Excel8.0 --------- 0 
 30.10.2010 16:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\vgiWYMoM.csv.part --------- 8066 
 22.10.2010 08:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\text-xml-attachment.xml --------- 1 
 21.10.2010 22:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-55 --------- 0 
 18.10.2010 23:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-54 --------- 0 
 18.10.2010 23:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\fla75.tmp --------- 26775924 
 16.10.2010 20:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\60A96B0C.tmp --------- 889 
 16.10.2010 16:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-53 --------- 0 
 15.10.2010 23:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\your friend-1.doc --------- 120832 
 15.10.2010 23:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\your friend.doc --------- 120832 
 15.10.2010 12:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\40F52CBD.tmp --------- 211 
 10.10.2010 19:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\64176C2A.tmp --------- 2627 
 09.10.2010 19:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-52 --------- 0 
 08.10.2010 21:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-51 --------- 0 
 08.10.2010 18:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_d18.dat --------- 16384 
 08.10.2010 10:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMT36.xml --------- 835160 
 08.10.2010 10:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMT35.xml --------- 426 
 08.10.2010 10:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMT34.xml --------- 2036 
 07.10.2010 00:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\54BCC68D.tmp --------- 2493 
 07.10.2010 00:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-50 --------- 0 
 06.10.2010 17:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD3124.doc --------- 1174 
 06.10.2010 14:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_e0c.dat --------- 16384 
 06.10.2010 12:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\5231C7F7.tmp --------- 2437 
 06.10.2010 09:58      C:\DOCUME~1\xxx\LOCALS~1\Temp\509E0D83.tmp --------- 2471 
 06.10.2010 08:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-49 --------- 0 
 06.10.2010 08:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\50.tmp --------- 16384 
 05.10.2010 20:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD1667.doc --------- 707 
 05.10.2010 08:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_e90.dat --------- 16384 
 05.10.2010 03:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\526F03FC.tmp --------- 801 
 04.10.2010 22:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zOA.tmp --------- 0 
 04.10.2010 09:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_c04.dat --------- 16384 
 02.10.2010 21:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\4DBD9C05.tmp --------- 2674 
 02.10.2010 20:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-48 --------- 0 
 02.10.2010 18:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\3E.tmp --------- 16384 
 02.10.2010 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-8.eml --------- 1387540 
 02.10.2010 18:07      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-7.eml --------- 1387540 
 02.10.2010 16:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_114.dat --------- 16384 
 02.10.2010 12:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\43D61570.tmp --------- 209 
 02.10.2010 11:15      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-47 --------- 0 
 30.09.2010 23:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\5124A0FF.tmp --------- 209 
 30.09.2010 20:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_c24.dat --------- 16384 
 30.09.2010 20:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\{D12B99FC-30BA-46CB-9F1D-BDD053DAAFD7} --------- 0 
 30.09.2010 19:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\DataCardPM32.tmp --------- 1306 
 30.09.2010 19:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\DataCardMonitor.tmp --------- 6648 
 30.09.2010 19:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_dac.dat --------- 16384 
 30.09.2010 19:40      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_dc0.dat --------- 16384 
 30.09.2010 19:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\{76461C38-C6FA-48FE-A520-8F7243D557A1} --------- 0 
 30.09.2010 19:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_aa8.dat --------- 16384 
 30.09.2010 18:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\E220AutoRunLog.tmp --------- 58116 
 30.09.2010 18:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\UTPSDLL --------- 0 
 30.09.2010 18:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_ad8.dat --------- 16384 
 28.09.2010 23:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_f3c.dat --------- 16384 
 28.09.2010 21:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_764.dat --------- 16384 
 27.09.2010 23:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_fe0.dat --------- 16384 
 27.09.2010 23:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_c38.dat --------- 16384 
 27.09.2010 23:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_c84.dat --------- 16384 
 27.09.2010 23:05      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_ff8.dat --------- 16384 
 27.09.2010 21:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_264.dat --------- 16384 
 27.09.2010 20:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_ce0.dat --------- 16384 
 27.09.2010 20:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_ea0.dat --------- 16384 
 27.09.2010 20:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_e14.dat --------- 16384 
 27.09.2010 20:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_e94.dat --------- 16384 
 25.09.2010 13:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_1fe8.dat --------- 16384 
 21.09.2010 21:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsmail-3.tmp --------- 0 
 19.09.2010 22:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\moz_mapi --------- 0 
 19.09.2010 11:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\UMZUG.rtf --------- 1921 
 17.09.2010 19:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-6.eml --------- 1370455 
 17.09.2010 02:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\QqSx0zNy.pdf.part --------- 0 
 15.09.2010 23:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\lqaAD3.tmp --------- 0 
 15.09.2010 21:52      C:\DOCUME~1\xxx\LOCALS~1\Temp\TbgfQU1T.pdf.part --------- 91324 
 11.09.2010 00:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\cp85AE.tmp --------- 0 
 11.09.2010 00:53      C:\DOCUME~1\xxx\LOCALS~1\Temp\sob5AA.tmp --------- 0 
 08.09.2010 21:56      C:\DOCUME~1\xxx\LOCALS~1\Temp\23o81.tmp --------- 0 
 07.09.2010 23:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-46 --------- 0 
 07.09.2010 22:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\nscopy-1.tmp --------- 1023 
 07.09.2010 22:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-5.eml --------- 770 
 07.09.2010 22:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_2bc.dat --------- 16384 
 30.08.2010 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-45 --------- 0 
 30.08.2010 21:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD3345.doc --------- 581 
 30.08.2010 21:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\model_tenancy_agreement.doc --------- 227328 
 30.08.2010 15:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_fc.dat --------- 16384 
 28.08.2010 22:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\rAg9ggyr.part --------- 44353 
 28.08.2010 19:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-44 --------- 0 
 28.08.2010 19:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_5e8.dat --------- 16384 
 28.08.2010 09:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-43 --------- 0 
 27.08.2010 22:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_974.dat --------- 16384 
 23.08.2010 08:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-42 --------- 0 
 22.08.2010 10:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-4.eml --------- 2921333 
 21.08.2010 15:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_c1c.dat --------- 16384 
 20.08.2010 17:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\d8HO6RRq.doc.part --------- 911360 
 20.08.2010 17:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\Zl+bnL9U.doc.part --------- 911360 
 20.08.2010 16:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\7376B9DF.tmp --------- 800 
 20.08.2010 15:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-41 --------- 0 
 20.08.2010 11:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_a1c.dat --------- 16384 
 17.08.2010 08:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\5C4679D9.tmp --------- 208 
 15.08.2010 15:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\BUDa0sl5.wmv.part --------- 1694783 
 12.08.2010 21:55      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-40 --------- 0 
 12.08.2010 21:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\756E1B1D.tmp --------- 208 
 12.08.2010 08:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_f74.dat --------- 16384 
 12.08.2010 01:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_ae4.dat --------- 16384 
 11.08.2010 19:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\flaE.tmp --------- 1590041 
 29.07.2010 08:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_a9c.dat --------- 16384 
 28.07.2010 21:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\555812D9.tmp --------- 2604 
 28.07.2010 09:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_74c.dat --------- 16384 
 28.07.2010 09:01      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-39 --------- 0 
 28.07.2010 09:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\fla740.tmp --------- 15670044 
 28.07.2010 08:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\75DF42F8.tmp --------- 2643 
 28.07.2010 00:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\Perflib_Perfdata_162c.dat --------- 16384 
 26.07.2010 22:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMT552.xml --------- 835160 
 26.07.2010 22:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMT551.xml --------- 426 
 26.07.2010 22:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\IMT550.xml --------- 2036 
 26.07.2010 19:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\SkypeToolbars.msi --------- 2391040 
 26.07.2010 19:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\Skype.msi --------- 19846144 
 25.07.2010 11:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\65D19162.tmp --------- 208 
 21.07.2010 23:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\fla29.tmp --------- 1590041 
 21.07.2010 23:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-38 --------- 0 
 21.07.2010 08:24      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-37 --------- 0 
 21.07.2010 07:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_X9ks5idDxWIqd4V6iPuC-journal --------- 512 
 21.07.2010 07:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_X9ks5idDxWIqd4V6iPuC --------- 0 
 20.07.2010 23:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\Bewerbung xxx.doc --------- 909824 
 20.07.2010 08:26      C:\DOCUME~1\xxx\LOCALS~1\Temp\3E021AE0.tmp --------- 208 
 17.07.2010 22:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD3908.doc --------- 3170 
 17.07.2010 22:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-36 --------- 0 
 17.07.2010 11:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-35 --------- 0 
 15.07.2010 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-34 --------- 0 
 11.07.2010 19:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-33 --------- 0 
 11.07.2010 08:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-32 --------- 0 
 10.07.2010 16:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\Final Schedule.doc --------- 39936 
 10.07.2010 16:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\CELSA Trip Information.doc --------- 42496 
 10.07.2010 16:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\MBA3-Final.doc --------- 136192 
 10.07.2010 16:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\JerdiPresentation.ppt --------- 4683776 
 10.07.2010 15:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD3963.doc --------- 3581 
 09.07.2010 17:53      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-3.eml --------- 3458017 
 09.07.2010 11:07      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-31 --------- 0 
 27.06.2010 10:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\x0a71.tmp --------- 0 
 27.06.2010 10:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\zhs70.tmp --------- 0 
 27.06.2010 09:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\92p5A.tmp --------- 0 
 17.06.2010 20:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\cwjC.tmp --------- 0 
 15.06.2010 08:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_1WgkZtRK8WxCA2YiEEOZ-journal --------- 512 
 15.06.2010 08:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_1WgkZtRK8WxCA2YiEEOZ --------- 1024 
 15.06.2010 08:05      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-30 --------- 0 
 15.06.2010 08:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\SetupAdmin12D0.log --------- 85 
 15.06.2010 07:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\SetupAdmin8B8.log --------- 85 
 09.06.2010 08:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-29 --------- 0 
 08.06.2010 07:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-28 --------- 0 
 08.06.2010 07:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zO5F.tmp --------- 0 
 05.06.2010 12:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\setup~7 --------- 0 
 05.06.2010 12:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\setup~6 --------- 0 
 05.06.2010 12:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\setup~5 --------- 0 
 05.06.2010 12:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\setup~4 --------- 0 
 01.06.2010 08:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-27 --------- 0 
 30.05.2010 22:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-26 --------- 0 
 30.05.2010 18:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\setup~3 --------- 0 
 30.05.2010 18:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\setup~2 --------- 0 
 30.05.2010 14:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-25 --------- 0 
 29.05.2010 13:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\Timo Kaufmann Client Profile.doc --------- 126464 
 27.05.2010 08:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-24 --------- 0 
 27.05.2010 07:50      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_VcfJJimDIFgEOJmVyfB0-journal --------- 512 
 27.05.2010 07:49      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_VcfJJimDIFgEOJmVyfB0 --------- 0 
 26.05.2010 08:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_PeAbaVK3ayatLQakW9Sp-journal --------- 512 
 26.05.2010 08:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-23 --------- 0 
 26.05.2010 07:55      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_PeAbaVK3ayatLQakW9Sp --------- 1024 
 25.05.2010 08:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-22 --------- 0 
 11.05.2010 07:59      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-21 --------- 0 
 07.05.2010 08:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_crfL4G9S5y2jUygihFUL-journal --------- 512 
 07.05.2010 08:07      C:\DOCUME~1\xxx\LOCALS~1\Temp\etilqs_crfL4G9S5y2jUygihFUL --------- 0 
 06.05.2010 08:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-20 --------- 0 
 05.05.2010 08:25      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-19 --------- 0 
 04.05.2010 08:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-18 --------- 0 
 03.05.2010 12:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\URSE4.tmp --------- 586 
 02.05.2010 19:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-17 --------- 0 
 02.05.2010 10:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\Neues aus Nahost.doc --------- 25600 
 02.05.2010 10:07      C:\DOCUME~1\xxx\LOCALS~1\Temp\z9y29.tmp --------- 0 
 01.05.2010 12:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-16 --------- 0 
 01.05.2010 12:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\fla16.tmp --------- 3555975 
 29.04.2010 08:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-15 --------- 0 
 28.04.2010 16:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\ica49.tmp --------- 1581 
 28.04.2010 16:11      C:\DOCUME~1\xxx\LOCALS~1\Temp\URS47.tmp --------- 586 
 28.04.2010 16:04      C:\DOCUME~1\xxx\LOCALS~1\Temp\URS3.tmp --------- 586 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod53.tmp --------- 18018 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod52.tmp --------- 9142 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod51.tmp --------- 18162 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod50.tmp --------- 18118 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod4F.tmp --------- 9144 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod4E.tmp --------- 336 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod4D.tmp --------- 18350 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod4C.tmp --------- 18114 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod4B.tmp --------- 18258 
 28.04.2010 11:39      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod4A.tmp --------- 9888 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod41.tmp --------- 18018 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod40.tmp --------- 9142 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod3F.tmp --------- 18162 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod3E.tmp --------- 18118 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod3D.tmp --------- 9144 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod3C.tmp --------- 336 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod3B.tmp --------- 18350 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod3A.tmp --------- 18114 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod39.tmp --------- 18258 
 28.04.2010 11:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod38.tmp --------- 9888 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod2F.tmp --------- 18018 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod2E.tmp --------- 9142 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod2D.tmp --------- 18162 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod2C.tmp --------- 18118 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod2B.tmp --------- 9144 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod2A.tmp --------- 336 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod29.tmp --------- 18350 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod28.tmp --------- 18114 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod27.tmp --------- 18258 
 28.04.2010 11:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\mod26.tmp --------- 9888 
 25.04.2010 14:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD2592.doc --------- 3617 
 25.04.2010 14:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-14 --------- 0 
 23.04.2010 20:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-13 --------- 0 
 22.04.2010 08:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-12 --------- 0 
 20.04.2010 08:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\AlJva_Of.mp3.part --------- 0 
 19.04.2010 08:03      C:\DOCUME~1\xxx\LOCALS~1\Temp\SetupAdmin8A4.log --------- 3212516 
 16.04.2010 08:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-11 --------- 0 
 11.04.2010 22:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr013.log --------- 28126 
 11.04.2010 22:44      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPOUNI005.2010Apr11-224402.LOG --------- 36542 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzglue02.log --------- 4751 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscrub02.log --------- 408 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi041.log --------- 1365 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpz_UC_{105d9372-3ced-4e84-b864-3afb2245164a}_PC_{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}_uninstall.log --------- 378 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\_remove_ds.log --------- 550 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpz_UC_{4ae0341a-e7d6-432f-9b4f-54b29fdd6e60}_PC_{655CB07D-C944-40BE-B93F-55957CAC7625}_uninstall.log --------- 378 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi040.log --------- 1232 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi039.log --------- 959 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hposcr05.dat --------- 23775 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr012.log --------- 1158 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPQUNI001.2010Apr11-224305.LOG --------- 1663 
 11.04.2010 22:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr011.log --------- 14600 
 11.04.2010 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr011_MSI_0.log --------- 108222 
 11.04.2010 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpqscr01.dat --------- 16265 
 11.04.2010 22:41      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr010.log --------- 979 
 11.04.2010 22:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\Mietvertrag-Albers -cs.doc --------- 36864 
 11.04.2010 22:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-10 --------- 0 
 08.04.2010 09:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\CDM --------- 0 
 08.04.2010 09:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\TWAIN.LOG --------- 24345 
 08.04.2010 09:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\Twain001.Mtx --------- 3 
 08.04.2010 09:13      C:\DOCUME~1\xxx\LOCALS~1\Temp\Twunk001.MTX --------- 156 
 08.04.2010 09:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\ScanSoft --------- 0 
 08.04.2010 09:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\MS41.LOG --------- 7051 
 08.04.2010 09:04      C:\DOCUME~1\xxx\LOCALS~1\Temp\is18A.tmp --------- 0 
 08.04.2010 09:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\isED.tmp --------- 0 
 08.04.2010 08:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\Twunk002.MTX --------- 0 
 02.04.2010 14:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-9 --------- 0 
 02.04.2010 13:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD2309.doc --------- 581 
 02.04.2010 12:51      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-8 --------- 0 
 28.03.2010 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-2.eml --------- 2021526 
 28.03.2010 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsmail-2.tmp --------- 2 
 28.03.2010 21:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-2.html --------- 232 
 28.03.2010 19:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-7 --------- 0 
 28.03.2010 19:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache147386326591113326.tmp --------- 120932 
 28.03.2010 19:09      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache3378129790759633827.tmp --------- 120932 
 27.03.2010 15:58      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-6 --------- 0 
 25.03.2010 09:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\VisioCA.log --------- 1995 
 22.03.2010 19:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\wsreg.log --------- 47 
 16.03.2010 10:27      C:\DOCUME~1\xxx\LOCALS~1\Temp\URS1B.tmp --------- 586 
 13.03.2010 15:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-5 --------- 0 
 12.03.2010 18:08      C:\DOCUME~1\xxx\LOCALS~1\Temp\~WRD0003.doc --------- 581 
 12.03.2010 18:06      C:\DOCUME~1\xxx\LOCALS~1\Temp\8bn53.tmp --------- 0 
 07.03.2010 16:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache1886994469300922397.tmp --------- 0 
 07.03.2010 16:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\jar_cache2643140136029587383.tmp --------- 0 
 06.03.2010 18:55      C:\DOCUME~1\xxx\LOCALS~1\Temp\OIS --------- 0 
 05.03.2010 10:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-4 --------- 0 
 04.03.2010 01:23      C:\DOCUME~1\xxx\LOCALS~1\Temp\hds17.tmp --------- 0 
 04.03.2010 01:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\zy516.tmp --------- 0 
 03.03.2010 20:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\f5TunnelServer.txt.bak --------- 2434213 
 03.03.2010 18:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\ica1D.tmp --------- 1605 
 03.03.2010 01:42      C:\DOCUME~1\xxx\LOCALS~1\Temp\75s2E.tmp --------- 0 
 28.02.2010 21:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-1.eml --------- 1118602 
 28.02.2010 21:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsmail-1.tmp --------- 2 
 28.02.2010 21:10      C:\DOCUME~1\xxx\LOCALS~1\Temp\nsemail-1.html --------- 232 
 28.02.2010 20:02      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-3 --------- 0 
 27.02.2010 19:52      C:\DOCUME~1\xxx\LOCALS~1\Temp\uis96.tmp --------- 0 
 27.02.2010 19:48      C:\DOCUME~1\xxx\LOCALS~1\Temp\pft46~tmp --------- 0 
 27.02.2010 19:45      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-2 --------- 0 
 27.02.2010 19:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\AAX39.tmp --------- 33664 
 27.02.2010 19:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\AAX38.tmp --------- 34356 
 27.02.2010 19:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\TempFolder.aaa --------- 0 
 27.02.2010 19:38      C:\DOCUME~1\xxx\LOCALS~1\Temp\pft35~tmp --------- 0 
 17.02.2010 10:29      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET21B0.tmp --------- 0 
 17.02.2010 10:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET5D.tmp --------- 0 
 17.02.2010 10:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET9498.tmp --------- 0 
 17.02.2010 10:00      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET855F.tmp --------- 0 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPZset007.log --------- 11430 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi038.log --------- 1223 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi037.log --------- 1802 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpoMSI_QFolder.log --------- 378 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp013.log --------- 1320 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv012.log --------- 1217 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi036.log --------- 1338 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis014.log --------- 783 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl032.log --------- 2149 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi035.log --------- 1908 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpoMSI_Scan.log --------- 378 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\_add_ds.log --------- 1757 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi034.log --------- 1792 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpoMSI_AiO_Scan_LOG.txt --------- 378 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp012.log --------- 1437 
 14.02.2010 15:37      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzdui006.log --------- 11364 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi30.log --------- 822 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi29.log --------- 1341 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcon02.log --------- 1293 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpin02.log --------- 2186 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi28.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi27.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi26.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi25.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi24.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi22.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi23.log --------- 596 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp016.log --------- 5482 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl024.log --------- 1419 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp014.log --------- 836 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl031.log --------- 34398 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl030.log --------- 1690 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl029.log --------- 2082 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl023.log --------- 1267 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp013.log --------- 773 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc071.log --------- 965 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc070.log --------- 992 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc069.log --------- 968 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc068.log --------- 968 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc067.log --------- 980 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc066.log --------- 974 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc065.log --------- 971 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc064.log --------- 974 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis013.log --------- 755 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop028.log --------- 1109 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop027.log --------- 1136 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop026.log --------- 798 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcdl007.log --------- 979 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl022.log --------- 9289 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrei007.log --------- 816 
 14.02.2010 15:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc063.log --------- 956 
 14.02.2010 15:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwup007.log --------- 1894 
 14.02.2010 15:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp015.log --------- 7609 
 14.02.2010 15:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl021.log --------- 1445 
 14.02.2010 15:34      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zS108F --------- 0 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr009.log --------- 6373 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpqUNI020.2010Feb14-143349.LOG --------- 512 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi033.log --------- 1028 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr008.log --------- 2897 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr007.log --------- 14600 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPQUNI001.2010Feb14-143343.LOG --------- 1663 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr007_MSI_0.log --------- 108138 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr006.log --------- 979 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr005.log --------- 26617 
 14.02.2010 15:33      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPOUNI005.2010Feb14-143330.LOG --------- 31969 
 14.02.2010 15:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi032.log --------- 1367 
 14.02.2010 15:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi031.log --------- 1234 
 14.02.2010 15:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi030.log --------- 961 
 14.02.2010 15:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr004.log --------- 1158 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPZset006.log --------- 11952 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi029.log --------- 1144 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi028.log --------- 1322 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp011.log --------- 1338 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv011.log --------- 1718 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi027.log --------- 1144 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis012.log --------- 941 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl028.log --------- 1467 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi026.log --------- 1312 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi025.log --------- 1808 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp010.log --------- 1465 
 14.02.2010 15:28      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzdui005.log --------- 11588 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp014.log --------- 2622 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp012.log --------- 882 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl027.log --------- 1446 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl026.log --------- 3334 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl025.log --------- 1474 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl020.log --------- 1313 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp011.log --------- 706 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc062.log --------- 1011 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc061.log --------- 1038 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc060.log --------- 1014 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc059.log --------- 1014 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc058.log --------- 1026 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc057.log --------- 1020 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc056.log --------- 1017 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc055.log --------- 1020 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis011.log --------- 923 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop025.log --------- 1311 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop024.log --------- 1338 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop023.log --------- 1000 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcdl006.log --------- 1005 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl019.log --------- 9335 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrei006.log --------- 828 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc054.log --------- 966 
 14.02.2010 15:16      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwup006.log --------- 1632 
 14.02.2010 15:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp013.log --------- 14047 
 14.02.2010 15:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl018.log --------- 1455 
 14.02.2010 15:14      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zS1560 --------- 0 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPZset005.log --------- 11936 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi024.log --------- 1142 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi023.log --------- 1320 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp009.log --------- 1337 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv010.log --------- 1716 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi022.log --------- 1142 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis010.log --------- 939 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl024.log --------- 1464 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi021.log --------- 1310 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi020.log --------- 1806 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp008.log --------- 1464 
 14.02.2010 15:12      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzdui004.log --------- 11600 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp012.log --------- 2620 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp010.log --------- 880 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl023.log --------- 1443 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl022.log --------- 3331 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl021.log --------- 1471 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl017.log --------- 1311 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp009.log --------- 706 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc053.log --------- 1009 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc052.log --------- 1036 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc051.log --------- 1012 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc050.log --------- 1012 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc049.log --------- 1024 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc048.log --------- 1018 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc047.log --------- 1015 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc046.log --------- 1018 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis009.log --------- 921 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop022.log --------- 1309 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop021.log --------- 1336 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop020.log --------- 998 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcdl005.log --------- 1004 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl016.log --------- 9239 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrei005.log --------- 826 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc045.log --------- 964 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwup005.log --------- 1398 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp011.log --------- 14056 
 14.02.2010 14:54      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl015.log --------- 1453 
 14.02.2010 14:53      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zS64DB --------- 0 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPZset004.log --------- 11945 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi019.log --------- 1142 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi018.log --------- 1320 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp007.log --------- 1337 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv009.log --------- 1716 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi017.log --------- 1142 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis008.log --------- 939 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl020.log --------- 1464 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi016.log --------- 1310 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi015.log --------- 1806 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp006.log --------- 1464 
 14.02.2010 14:47      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzdui003.log --------- 11514 
 14.02.2010 14:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp010.log --------- 2620 
 14.02.2010 14:36      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp008.log --------- 880 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl019.log --------- 1443 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl018.log --------- 3331 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl017.log --------- 1471 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl014.log --------- 1311 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp007.log --------- 706 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc044.log --------- 1009 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc043.log --------- 1036 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc042.log --------- 1012 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc041.log --------- 1012 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc040.log --------- 1024 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc039.log --------- 1018 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc038.log --------- 1015 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc037.log --------- 1018 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis007.log --------- 921 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop019.log --------- 1309 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop018.log --------- 1336 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop017.log --------- 998 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcdl004.log --------- 1004 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl013.log --------- 9217 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrei004.log --------- 826 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc036.log --------- 964 
 14.02.2010 14:35      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwup004.log --------- 1902 
 14.02.2010 14:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp009.log --------- 13561 
 14.02.2010 14:32      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl012.log --------- 1453 
 14.02.2010 14:31      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zS696D --------- 0 
 14.02.2010 14:22      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr003.log --------- 11091 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPOUNI005.2010Feb14-132153.LOG --------- 47715 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi21.log --------- 665 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi20.log --------- 665 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzglue01.log --------- 4751 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscrub01.log --------- 408 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi014.log --------- 1882 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpz_UC_{EC50BF57-3064-11D5-A54A-0090278A1BB8}_PC_{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}_uninstall.log --------- 378 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\ASPNETSetup.log --------- 4570 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpz_UC_{10E65ED7-1CE3-4422-896B-FA5055ABEB5E}_PC_{BD29EBAC-AD7D-4b27-B727-4CC6AC52D36B}_uninstall.log --------- 378 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\MsiExe003.log --------- 1198 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\HPZset003.log --------- 14982 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv008.log --------- 26731 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzscr002.log --------- 1454 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\HP.zip --------- 370164 
 14.02.2010 14:21      C:\DOCUME~1\xxx\LOCALS~1\Temp\msinfo.nfo --------- 1446676 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\enumnt.reg --------- 78046 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\sw_unins.reg --------- 292808 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\sw_hp.reg --------- 63640 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzset_error21234984.log --------- 279 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzset_E.S.C-21234984.log --------- 738 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpz88.tmp --------- 19452 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv007.log --------- 1181 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi013.log --------- 2664 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpoMSI_AiOSW_LOG.txt --------- 670 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp005.log --------- 1362 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi012.log --------- 2046 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpoMSI_Mars.log --------- 378 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\MsiExe002.log --------- 623 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl016.log --------- 2085 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznfx001.log --------- 2078 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi011.log --------- 1680 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzmsi010.log --------- 2642 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzFx_Log.txt --------- 378 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis006.log --------- 994 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl011.log --------- 981 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzarp004.log --------- 1459 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl015.log --------- 3336 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop016.log --------- 1300 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpztim001.log --------- 1328 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp008.log --------- 5044 
 14.02.2010 14:20      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzdui002.log --------- 11470 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi18.log --------- 1341 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi19.log --------- 822 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcon01.log --------- 1293 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpin01.log --------- 2186 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi17.log --------- 596 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi16.log --------- 596 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi15.log --------- 596 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi14.log --------- 596 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi13.log --------- 596 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi12.log --------- 596 
 14.02.2010 14:19      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcoi11.log --------- 596 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp007.log --------- 1703 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp006.log --------- 870 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl014.log --------- 35432 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl013.log --------- 3316 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl012.log --------- 2128 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzsui001.log --------- 1601 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzgat001.log --------- 892 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\mdfix012.log --------- 17 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrcv006.log --------- 1785 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzprl011.log --------- 1438 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl010.log --------- 1301 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwrp005.log --------- 706 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc035.log --------- 999 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc034.log --------- 1026 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc033.log --------- 1002 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc032.log --------- 1002 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc031.log --------- 1014 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc030.log --------- 1008 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc029.log --------- 1005 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc028.log --------- 1008 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwis005.log --------- 918 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop015.log --------- 1306 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop014.log --------- 1333 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzopt002.log --------- 1885 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzchk002.log --------- 540 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop013.log --------- 1221 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpznop012.log --------- 995 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzcdl003.log --------- 1001 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl009.log --------- 8990 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpsc027.log --------- 990 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzwup003.log --------- 1627 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzrei003.log --------- 826 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzpnp006.log --------- 12650 
 14.02.2010 14:18      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpzshl008.log --------- 1453 
 14.02.2010 14:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\hpz89.tmp --------- 14152 
 14.02.2010 14:17      C:\DOCUME~1\xxx\LOCALS~1\Temp\7zS47EF --------- 0 
 13.02.2010 17:30      C:\DOCUME~1\xxx\LOCALS~1\Temp\plugtmp-1 --------- 0 
 12.02.2010 10:46      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET166F.tmp --------- 0 
 12.02.2010 10:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET8FE3.tmp --------- 0 
 12.02.2010 10:43      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET8AA4.tmp --------- 0 
 12.02.2010 09:58      C:\DOCUME~1\xxx\LOCALS~1\Temp\JETC298.tmp --------- 0 
 12.02.2010 09:57      C:\DOCUME~1\xxx\LOCALS~1\Temp\JET37AE.tmp --------- 0 
 12.02.2010 09:53      C:\DOCUME~1\xxx\LOCALS~1\Temp\JETB3E6.tmp --------- 0 
----------------------------------------

 
C:\Program Files

----------------------------------------

 
C:\Documents and Settings\All Users\.. 

Administrator    
xxx    
install    
NetworkService    
LocalService    
All Users    
Default User    
----------------------------------------

 
C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 www.decisionmaker.com.localhost

----------------------------------------

 

Abbildname                  PID Sitzungsname      Sitz.-Nr. Speichernutzung
========================= ===== ================ ========== ===============
System Idle Process           0 Console                   0            28 K
System                        4 Console                   0           256 K
smss.exe                    852 Console                   0           428 K
csrss.exe                   916 Console                   0         5.480 K
winlogon.exe                956 Console                   0         3.868 K
services.exe               1012 Console                   0         3.792 K
lsass.exe                  1024 Console                   0         6.896 K
nslsvice.exe               1216 Console                   0         1.160 K
xtagent.exe                1228 Console                   0         4.364 K
nsl.exe                    1232 Console                   0         1.288 K
svchost.exe                1276 Console                   0         5.144 K
svchost.exe                1340 Console                   0         5.536 K
svchost.exe                1484 Console                   0        32.644 K
S24EvMon.exe               1544 Console                   0        17.168 K
svchost.exe                1732 Console                   0         4.288 K
svchost.exe                1780 Console                   0         3.816 K
svchost.exe                1856 Console                   0         4.052 K
svchost.exe                1884 Console                   0         6.812 K
ccSetMgr.exe                356 Console                   0         4.212 K
ccEvtMgr.exe                432 Console                   0         3.248 K
SPBBCSvc.exe                564 Console                   0         2.468 K
spoolsv.exe                 624 Console                   0        10.724 K
HostControlService.exe      672 Console                   0         3.096 K
HostStorageService.exe      688 Console                   0         2.092 K
scardsvr.exe                704 Console                   0         2.772 K
svchost.exe                 848 Console                   0         3.872 K
httpd.exe                  1108 Console                   0        16.548 K
AppleMobileDeviceService.  1268 Console                   0         7.840 K
mDNSResponder.exe          1308 Console                   0         3.980 K
DefWatch.exe               1408 Console                   0         5.236 K
EvtEng.exe                 1460 Console                   0        15.304 K
ijplmsvc.exe               1760 Console                   0         2.508 K
AppServices.exe            1576 Console                   0         1.604 K
jqs.exe                    1668 Console                   0         1.380 K
MDM.EXE                    1740 Console                   0         3.652 K
ntmulti.exe                1812 Console                   0         1.148 K
mysqld.exe                 2320 Console                   0        27.780 K
NALNTSRV.EXE               2508 Console                   0         4.776 K
nvsvc32.exe                2536 Console                   0         4.484 K
HPZipm12.exe               2560 Console                   0         1.856 K
RegSrvc.exe                2600 Console                   0         3.476 K
ZenRem32.exe               2668 Console                   0         4.340 K
SavRoam.exe                2848 Console                   0         5.808 K
svchost.exe                2876 Console                   0         4.504 K
Rtvscan.exe                2908 Console                   0       246.440 K
WLKEEPER.exe               3592 Console                   0        15.548 K
WM.EXE                      328 Console                   0         5.768 K
wmiprvse.exe               2924 Console                   0         7.596 K
httpd.exe                  3384 Console                   0        17.188 K
explorer.exe               3936 Console                   0        58.168 K
wmiapsrv.exe               2400 Console                   0         4.752 K
wmiprvse.exe               2372 Console                   0         5.764 K
alg.exe                    2768 Console                   0         3.740 K
Apoint.exe                 2276 Console                   0         5.624 K
rundll32.exe               2348 Console                   0         4.092 K
rundll32.exe               2356 Console                   0         4.560 K
dpmw32.exe                 2396 Console                   0         4.288 K
nwtray.exe                 2796 Console                   0         3.808 K
ZCfgSvc.exe                 488 Console                   0        16.692 K
iFrmewrk.exe               3628 Console                   0        20.000 K
ApMsgFwd.exe               3680 Console                   0         2.180 K
fpassist.exe                732 Console                   0         4.112 K
ccApp.exe                  3720 Console                   0         9.488 K
VPTray.exe                 3768 Console                   0        11.668 K
iprntctl.exe                320 Console                   0         4.860 K
iprntlgn.exe               3784 Console                   0         1.476 K
DVDLauncher.exe            3880 Console                   0         3.464 K
Autolaunch.exe             1924 Console                   0         3.312 K
hidfind.exe                2012 Console                   0         2.648 K
ApntEx.exe                 4128 Console                   0         3.124 K
OpWareSE4.exe              4712 Console                   0         2.128 K
hpwuschd2.exe              4764 Console                   0         2.604 K
unsecapp.exe               5204 Console                   0         4.624 K
iTunesHelper.exe           5252 Console                   0        15.092 K
ctfmon.exe                 5288 Console                   0         3.708 K
ApacheMonitor.exe          5332 Console                   0         2.920 K
NalAgent.exe               5348 Console                   0         7.692 K
ERClient7.exe              5460 Console                   0         7.556 K
iPodService.exe            5612 Console                   0         4.756 K
WMRUNDLL.EXE               4200 Console                   0         4.900 K
iexplore.exe               5972 Console                   0        20.284 K
iexplore.exe               1900 Console                   0        44.040 K
VPC32.exe                  4420 Console                   0        10.648 K
seamonkey.exe              5116 Console                   0       152.220 K
WINWORD.EXE                5060 Console                   0        41.132 K
7zFM.exe                   3920 Console                   0         7.288 K
cmd.exe                    5988 Console                   0         2.452 K
tasklist.exe               2100 Console                   0         4.820 K
wmiprvse.exe               4196 Console                   0         6.012 K

 
***** Ende des Scans 04.04.2011 um 22:36:02,96 ***

ralph.allen · 05.04.2011, 07:42

Viele Grüße und viel Erfolg!
Ralph

kira · 06.04.2011, 13:17

Das Protokoll von Malwarebytes bitte posten!

1.
wenn nicht kennst oder nicht absichtlich zugefügt:
Schliesse alle Programme einschliesslich Internet Explorer und fixe mit Hijackthis die Einträge aus der nachfolgenden Codebox (HijackThis starten→ "Do a system scan only"→ Einträge auswählen→ Häckhen setzen→ "Fix checked" klicken→ PC neu aufstarten):
HijackThis erstellt ein Backup, Falls bei "Fixen" etwas schief geht, kann man unter "View the list of backups"- die Objekte wiederherstellen

Code:

ATTFilter

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dict.leo.org/ende?lang=de&lp=ende

2.
starte HijackThis-> wähle: "Open the Misc Tools section"-> "Delete a file on reboot..."-> wähle die zu löschende datei - sehe der Inhalt dieser Code-Box (Text kopieren und einfügen, oder "Durchsuchen"), die frage zum neustart mit JA beantworten

Code:

ATTFilter

C:\ziswin.hst

3.
Deine Javaversion ist nicht aktuell!
Da aufgrund alter Sicherheitslücken ist Java sehr anfällig, deinstalliere zunächst alle vorhandenen Java-Versionen:
→ Systemsteuerung → Software → deinstallieren...
→ Rechner neu aufstarten
→ Downloade nun die Offline-Version von Java Version 6 Update 24 von Oracle herunter
Achte darauf, eventuell angebotene Toolbars abwählen (den Haken bei der Toolbar entfernen)!

4.
alle Anwendungen schließen → Ordner für temporäre Dateien bitte leeren
**Der Temp Ordner,ist für temporäre Dateien,also der Inhalt kann man ohne weiteres löschen.- Dateien, die noch in Benutzung sind, nicht löschbar.
**Lösche nur den Inhalt der Ordner, nicht die Ordner selbst!

`Start → ausführen` "cleanmgr" reinschreiben (ohne "") → "ok" - die Temporary Files, Temporary Internet Files, und der Papierkorb (Recycle Bin) müssen geleert werden→ "Ok"
`Start → ausführen` → %temp% reinschreiben (ohne "")→ "Ok" - - Ordnerinhalt überall markieren und löschen
für jedes Benutzerkonto bitte durchführen
anschließend den Papierkorb leeren

5.
reinige dein System mit Ccleaner: