MSN Hotmail verschickt Spam an Kontakte

privatejoker · 03.05.2011, 05:17

Hallo,

Ich habe das selbe Problem wie die Person in diesem Thread: http://www.trojaner-board.de/98578-m...ickt-spam.html
Hoffe ich habe das jetzt richtig verstanden, das man einen eigenes Topic eröffnen soll. Hatte auch keine Möglichkeit in dem anderen zu antworten

Habe vor kurzer Zeit von einem Bekannten eine email mit einem Link erhalten und mehr aus Reflex draufgeklickt, hab den Tab geschlossen bevor die Seite vollständig geladen war. Hab seitdem zweimal von meiner emailadresse Spam an meine Kontakte verschick. Habe jetzt das Passwort geändert, weiß aber noch nicht ob das was gebracht hat.

Antivir hat zwei Viren od. unerwünschte Programme gefunden, mir keine Möglichkeit zum Löschen gegeben. Eine Datei wurde in Quarantäne verschoben.

Hoffe ihr könnt mir helfen, bin gerade im Ausland und aufs Internet angewiesen (Online - Banking, emails etc....) aber hab auch keine Möglichkeit den Rechner neu aufzusetzen, da meine CD in Deutschland ist.

Hier die diversen Scans:

Antivir:

Code:

ATTFilter

Avira AntiVir Personal
Erstellungsdatum der Reportdatei: Sonntag, 1. Mai 2011  18:34

Es wird nach 2647739 Virenstämmen gesucht.

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira AntiVir Personal - FREE Antivirus
Seriennummer   : 0000149996-ADJIE-0000001
Plattform      : Windows 7 x64
Windowsversion : (plain)  [6.1.7600]
Boot Modus     : Normal gebootet
Benutzername   : Matthias
Computername   : MATTHIAS-PC

Versionsinformationen:
BUILD.DAT      : 10.0.0.648           Bytes  01.04.2011 18:23:00
AVSCAN.EXE     : 10.0.4.2      442024 Bytes  01.05.2011 16:20:48
AVSCAN.DLL     : 10.0.3.0       56168 Bytes  30.03.2010 11:42:16
LUKE.DLL       : 10.0.3.2      104296 Bytes  09.12.2010 18:56:15
LUKERES.DLL    : 10.0.0.0       13672 Bytes  14.01.2010 11:59:47
VBASE000.VDF   : 7.10.0.0    19875328 Bytes  06.11.2009 17:04:32
VBASE001.VDF   : 7.11.0.0    13342208 Bytes  14.12.2010 13:27:44
VBASE002.VDF   : 7.11.3.0     1950720 Bytes  09.02.2011 16:43:11
VBASE003.VDF   : 7.11.5.225   1980416 Bytes  07.04.2011 00:02:29
VBASE004.VDF   : 7.11.5.226      2048 Bytes  07.04.2011 00:02:30
VBASE005.VDF   : 7.11.5.227      2048 Bytes  07.04.2011 00:02:30
VBASE006.VDF   : 7.11.5.228      2048 Bytes  07.04.2011 00:02:30
VBASE007.VDF   : 7.11.5.229      2048 Bytes  07.04.2011 00:02:30
VBASE008.VDF   : 7.11.5.230      2048 Bytes  07.04.2011 00:02:31
VBASE009.VDF   : 7.11.5.231      2048 Bytes  07.04.2011 00:02:31
VBASE010.VDF   : 7.11.5.232      2048 Bytes  07.04.2011 00:02:31
VBASE011.VDF   : 7.11.5.233      2048 Bytes  07.04.2011 00:02:31
VBASE012.VDF   : 7.11.5.234      2048 Bytes  07.04.2011 00:02:32
VBASE013.VDF   : 7.11.6.28     158208 Bytes  11.04.2011 01:14:26
VBASE014.VDF   : 7.11.6.74     116224 Bytes  13.04.2011 16:20:48
VBASE015.VDF   : 7.11.6.113    137728 Bytes  14.04.2011 16:20:48
VBASE016.VDF   : 7.11.6.150    146944 Bytes  18.04.2011 16:20:48
VBASE017.VDF   : 7.11.6.192    138240 Bytes  20.04.2011 16:20:48
VBASE018.VDF   : 7.11.6.237    156160 Bytes  22.04.2011 16:20:48
VBASE019.VDF   : 7.11.7.45     427520 Bytes  27.04.2011 16:20:48
VBASE020.VDF   : 7.11.7.64     192000 Bytes  28.04.2011 16:20:48
VBASE021.VDF   : 7.11.7.65       2048 Bytes  28.04.2011 16:20:48
VBASE022.VDF   : 7.11.7.66       2048 Bytes  28.04.2011 16:20:48
VBASE023.VDF   : 7.11.7.67       2048 Bytes  28.04.2011 16:20:48
VBASE024.VDF   : 7.11.7.68       2048 Bytes  28.04.2011 16:20:48
VBASE025.VDF   : 7.11.7.69       2048 Bytes  28.04.2011 16:20:48
VBASE026.VDF   : 7.11.7.70       2048 Bytes  28.04.2011 16:20:48
VBASE027.VDF   : 7.11.7.71       2048 Bytes  28.04.2011 16:20:48
VBASE028.VDF   : 7.11.7.72       2048 Bytes  28.04.2011 16:20:48
VBASE029.VDF   : 7.11.7.73       2048 Bytes  28.04.2011 16:20:48
VBASE030.VDF   : 7.11.7.74       2048 Bytes  28.04.2011 16:20:48
VBASE031.VDF   : 7.11.7.93     115200 Bytes  01.05.2011 16:20:48
Engineversion  : 8.2.4.224 
AEVDF.DLL      : 8.1.2.1       106868 Bytes  19.11.2010 19:48:53
AESCRIPT.DLL   : 8.1.3.59     1261947 Bytes  01.05.2011 16:20:48
AESCN.DLL      : 8.1.7.2       127349 Bytes  24.11.2010 14:36:05
AESBX.DLL      : 8.1.3.2       254324 Bytes  24.11.2010 14:36:06
AERDL.DLL      : 8.1.9.9       639347 Bytes  11.04.2011 00:03:04
AEPACK.DLL     : 8.2.6.0       549237 Bytes  11.04.2011 00:02:59
AEOFFICE.DLL   : 8.1.1.21      205179 Bytes  01.05.2011 16:20:48
AEHEUR.DLL     : 8.1.2.112    3473784 Bytes  01.05.2011 16:20:48
AEHELP.DLL     : 8.1.16.1      246134 Bytes  04.02.2011 17:09:53
AEGEN.DLL      : 8.1.5.4       397684 Bytes  11.04.2011 00:02:41
AEEMU.DLL      : 8.1.3.0       393589 Bytes  24.11.2010 14:36:02
AECORE.DLL     : 8.1.20.2      196982 Bytes  11.04.2011 00:02:40
AEBB.DLL       : 8.1.1.0        53618 Bytes  19.11.2010 19:48:52
AVWINLL.DLL    : 10.0.0.0       19304 Bytes  14.01.2010 11:59:10
AVPREF.DLL     : 10.0.0.0       44904 Bytes  14.01.2010 11:59:07
AVREP.DLL      : 10.0.0.9      174120 Bytes  01.05.2011 16:20:48
AVREG.DLL      : 10.0.3.2       53096 Bytes  19.11.2010 19:48:53
AVSCPLR.DLL    : 10.0.4.2       84840 Bytes  01.05.2011 16:20:48
AVARKT.DLL     : 10.0.22.6     231784 Bytes  09.12.2010 18:56:15
AVEVTLOG.DLL   : 10.0.0.8      203112 Bytes  26.01.2010 09:53:25
SQLITE3.DLL    : 3.6.19.0      355688 Bytes  28.01.2010 12:57:53
AVSMTP.DLL     : 10.0.0.17      63848 Bytes  16.03.2010 15:38:54
NETNT.DLL      : 10.0.0.0       11624 Bytes  19.02.2010 14:40:55
RCIMAGE.DLL    : 10.0.0.26    2550120 Bytes  28.01.2010 13:10:08
RCTEXT.DLL     : 10.0.58.0      98152 Bytes  19.11.2010 19:48:52

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Lokale Festplatten
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\alldiscs.avp
Protokollierung.......................: niedrig
Primäre Aktion........................: interaktiv
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, 
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: ein
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: mittel
Abweichende Gefahrenkategorien........: +JOKE,

Beginn des Suchlaufs: Sonntag, 1. Mai 2011  18:34

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'WTGU.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'OUTLOOK.EXE' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'olycamdetect.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'plugin-container.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'DivXUpdate.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'DataCardMonitor.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'ATKOSD2.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'HControlUser.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'KiesPDLR.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'KiesTrayAgent.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'phonostarTimer.exe' - '1' Modul(e) wurden durchsucht

Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
    [INFO]      Es wurde kein Virus gefunden!
    [INFO]      Bitte starten Sie den Suchlauf erneut mit Administratorrechten

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'C:\'
    [INFO]      Es wurde kein Virus gefunden!
    [INFO]      Bitte starten Sie den Suchlauf erneut mit Administratorrechten

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '755' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
C:\Users\Matthias\AppData\Local\Temp\jar_cache6757583221320393311.tmp
[0] Archivtyp: ZIP
[FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Exdoer.S
--> folder/Globus.class
[FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Exdoer.S
--> folder/Necode.class
[FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/OpenStream.M

Beginne mit der Desinfektion:
C:\Users\Matthias\AppData\Local\Temp\jar_cache6757583221320393311.tmp
  [FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/OpenStream.M
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4bf38991.qua' verschoben!


Ende des Suchlaufs: Sonntag, 1. Mai 2011  21:02
Benötigte Zeit:  1:08:58 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  32208 Verzeichnisse wurden überprüft
 497134 Dateien wurden geprüft
      2 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      1 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 497132 Dateien ohne Befall
   7584 Archive wurden durchsucht
      0 Warnungen
      1 Hinweise

Hier sind die erforderlichen Scans meines Rechners:

Malware

Code:

ATTFilter

 
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6496

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

02.05.2011 20:50:52
mbam-log-2011-05-02 (20-50-52).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 318817
Laufzeit: 1 Stunde(n), 2 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

OTL

Code:

ATTFilter

 
OTL logfile created on: 02.05.2011 19:35:52 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Matthias\Desktop
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 288,23 Gb Total Space | 36,03 Gb Free Space | 12,50% Space Free | Partition Type: NTFS
 
Computer Name: MATTHIAS-PC | User Name: Matthias | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Matthias\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe ()
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.)
PRC - C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe (Affinegy, Inc.)
PRC - C:\Program Files (x86)\T-Mobile\web'n'walk Manager\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
PRC - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe ()
PRC - C:\Program Files (x86)\T-Mobile\web'n'walk Manager\WTGU.exe ()
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Matthias\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AffinegyService) -- C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe (Affinegy, Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe (ASUS)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (TFsExDisk) -- C:\Windows\SysNative\drivers\TFsExDisk.sys (Teruten Inc)
DRV:64bit: - (dgderdrv) -- C:\Windows\SysNative\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV:64bit: - (sscemdm) -- C:\Windows\SysNative\drivers\sscemdm.sys (MCCI Corporation)
DRV:64bit: - (sscebus) SAMSUNG USB Composite Device V2 driver (WDM) -- C:\Windows\SysNative\drivers\sscebus.sys (MCCI Corporation)
DRV:64bit: - (sscemdfl) -- C:\Windows\SysNative\drivers\sscemdfl.sys (MCCI Corporation)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:64bit: - (ApfiltrService) -- C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (xusb21) -- C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (BthAvrcp) -- C:\Windows\SysNative\drivers\BthAvrcp.sys (CSR, plc)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (AtcL001) -- C:\Windows\SysNative\drivers\l160x64.sys (Atheros Communications, Inc.)
DRV:64bit: - (smserial) -- C:\Windows\SysNative\drivers\SmSerl64.sys (Motorola Inc.)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:64bit: - (hwdatacard) -- C:\Windows\SysNative\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (s217unic) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (WDM) -- C:\Windows\SysNative\drivers\s217unic.sys (MCCI)
DRV:64bit: - (s217nd5) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (NDIS) -- C:\Windows\SysNative\drivers\s217nd5.sys (MCCI Corporation)
DRV:64bit: - (s217bus) Sony Ericsson Device 217 driver (WDM) -- C:\Windows\SysNative\drivers\s217bus.sys (MCCI Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimsptsk) -- C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV - (TFsExDisk) -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys (Teruten Inc)
DRV - (GEARAspiWDM) -- C:\Windows\SysWOW64\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (tcpipBM) -- C:\Windows\SysWow64\drivers\tcpipBM.sys (Bytemobile, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D7 C2 9D 30 7C FC CB 01  [binary data]
IE - HKCU\..\URLSearchHook: {7e111a5c-3d11-4f56-9463-5310c3c69025} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "google.com"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1
FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.81
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.3
FF - prefs.js..extensions.enabledItems: {fc2b8f80-d9a5-4f51-8076-7c7ce3c67ee3}:5.1.0.22
FF - prefs.js..extensions.enabledItems: {e36db930-f18d-4449-b45f-e286cfb9e03a}:4.0.11022100
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.2.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {bee6eb20-01e0-ebd1-da83-080329fb9a3a}:0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.2.1
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.04.19 01:07:35 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.04.29 18:24:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.03.22 19:00:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{857610fe-b36c-47f2-b4fa-6b7affe0cf5a}: C:\Program Files (x86)\Mobile Master\ext\1\ [2010.11.02 09:36:20 | 000,000,000 | ---D | M]
 
[2010.05.12 10:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Matthias\AppData\Roaming\mozilla\Extensions
[2010.05.12 10:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Matthias\AppData\Roaming\mozilla\Extensions\songbird@songbirdnest.com
[2011.04.29 23:06:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Matthias\AppData\Roaming\mozilla\Firefox\Profiles\g5eovb9p.default\extensions
[2011.04.02 07:08:49 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Matthias\AppData\Roaming\mozilla\Firefox\Profiles\g5eovb9p.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.03.20 15:38:24 | 000,000,000 | ---D | M] (Diigo Toolbar) -- C:\Users\Matthias\AppData\Roaming\mozilla\Firefox\Profiles\g5eovb9p.default\extensions\{fc2b8f80-d9a5-4f51-8076-7c7ce3c67ee3}
[2011.03.23 19:11:48 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Matthias\AppData\Roaming\mozilla\Firefox\Profiles\g5eovb9p.default\extensions\engine@conduit.com
[2011.05.01 09:21:11 | 000,002,533 | ---- | M] () -- C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\g5eovb9p.default\searchplugins\diigo--google.xml
[2011.03.22 19:00:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.11.04 22:33:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.01.02 04:58:33 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.13 09:25:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) -- 
() (No name found) -- C:\USERS\MATTHIAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\G5EOVB9P.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
() (No name found) -- C:\USERS\MATTHIAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\G5EOVB9P.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\MATTHIAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\G5EOVB9P.DEFAULT\EXTENSIONS\JOHN@VELVETCACHE.ORG.XPI
[2011.04.29 18:24:21 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.02.02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.01 01:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 01:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010.01.01 01:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.01.01 01:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 01:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 01:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 14:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Programme\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files (x86)\T-Mobile\web'n'walk Manager\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [MDS_Menu] C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Olympus ib] C:\Program Files (x86)\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.)
O4 - HKCU..\Run: [dradio-RecorderTimer] C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe ()
O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [Olympus ib] C:\Program Files (x86)\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.)
O4 - HKCU..\Run: [Updater shortcut] C:\Program Files (x86)\T-Mobile\web'n'walk Manager\WTGU.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Matthias\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Matthias\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3dc614c0-1875-11df-84c0-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{3dc614c0-1875-11df-84c0-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3dc614c7-1875-11df-84c0-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{3dc614c7-1875-11df-84c0-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{699a6166-1b21-11df-9855-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{699a6166-1b21-11df-9855-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{699a6171-1b21-11df-9855-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{699a6171-1b21-11df-9855-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{699a6176-1b21-11df-9855-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{699a6176-1b21-11df-9855-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{6a227a01-1876-11df-9aef-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{6a227a01-1876-11df-9aef-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{72fd59d9-59f2-11df-9695-0022156e70cb}\Shell - "" = AutoRun
O33 - MountPoints2\{72fd59d9-59f2-11df-9695-0022156e70cb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b46-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b46-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b49-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b49-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b63-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b63-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.02 19:22:51 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Matthias\Desktop\OTL.exe
[2011.05.01 18:44:08 | 000,000,000 | ---D | C] -- C:\Users\Matthias\AppData\Roaming\Malwarebytes
[2011.05.01 18:43:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.05.01 18:43:53 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.05.01 18:43:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.05.01 18:43:46 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.05.01 18:43:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.05.01 13:03:05 | 000,000,000 | ---D | C] -- C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OLYMPUS ib
[2011.04.28 10:24:11 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.04.28 10:24:11 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.04.27 09:24:21 | 002,566,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
[2011.04.27 09:24:21 | 001,686,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
[2011.04.27 09:24:21 | 000,187,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2011.04.27 09:24:21 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys
[2011.04.27 09:24:21 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys
[2011.04.27 09:24:20 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutil.exe
[2011.04.27 09:24:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutil.exe
[2011.04.27 09:19:03 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.04.27 09:19:03 | 002,614,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2011.04.27 09:18:46 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2011.04.27 09:18:46 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2011.04.19 14:46:25 | 000,000,000 | ---D | C] -- C:\Users\Matthias\Documents\samsung wave
[2011.04.19 14:35:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2011.04.19 14:35:30 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\Windows\SysWow64\dgderapi.dll
[2011.04.19 13:58:49 | 000,172,032 | ---- | C] (Ricoh Company,Ltd) -- C:\Windows\SysNative\rixdicon.dll
[2011.04.19 13:58:49 | 000,090,112 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\snymsico.dll
[2011.04.19 13:58:49 | 000,065,024 | ---- | C] (REDC) -- C:\Windows\SysNative\drivers\rimmpx64.sys
[2011.04.19 13:58:49 | 000,057,856 | ---- | C] (REDC) -- C:\Windows\SysNative\drivers\rixdpx64.sys
[2011.04.19 13:58:49 | 000,055,296 | ---- | C] (REDC) -- C:\Windows\SysNative\drivers\rimspx64.sys
[2011.04.19 13:55:11 | 000,000,000 | ---D | C] -- C:\Users\Matthias\AppData\Local\Samsung
[2011.04.19 13:52:23 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2011.04.19 13:50:03 | 000,000,000 | ---D | C] -- C:\Users\Matthias\AppData\Local\Downloaded Installations
[2011.04.15 00:20:26 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.04.15 00:20:25 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.04.15 00:20:22 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.04.15 00:20:22 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.04.15 00:20:22 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.04.15 00:20:17 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll
[2011.04.15 00:20:17 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll
[2011.04.15 00:20:17 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2011.04.15 00:20:16 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2011.04.15 00:20:14 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.04.15 00:20:13 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.04.15 00:20:13 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.04.15 00:20:13 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.04.15 00:20:01 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.04.15 00:20:01 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.04.15 00:20:01 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.04.15 00:20:01 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.04.15 00:20:01 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.04.15 00:20:01 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.04.15 00:20:01 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.04.15 00:20:01 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.04.15 00:20:01 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.04.15 00:20:00 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.04.15 00:20:00 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.04.15 00:20:00 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.04.15 00:20:00 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.04.15 00:20:00 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.04.15 00:19:40 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2011.04.15 00:19:40 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe
[2011.04.15 00:19:40 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2011.04.15 00:19:34 | 000,640,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2011.04.15 00:19:34 | 000,603,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2011.04.15 00:19:34 | 000,556,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2011.04.15 00:19:34 | 000,518,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2011.04.15 00:19:34 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll
[2011.04.15 00:19:34 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll
[2011.04.15 00:19:34 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll
[2011.04.15 00:19:31 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2011.04.12 19:28:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype Extras
[2011.04.12 19:28:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.04.12 19:28:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2011.04.10 17:10:47 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2011.04.05 16:53:41 | 000,000,000 | ---D | C] -- C:\Users\Matthias\Documents\apex
[2011.04.05 16:50:24 | 000,000,000 | ---D | C] -- C:\Users\Matthias\AppData\Roaming\ApexDC++
[2011.04.05 16:50:24 | 000,000,000 | ---D | C] -- C:\Users\Matthias\AppData\Local\ApexDC++
[2011.04.05 16:50:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ApexDC++ - The Pinnacle of File-Sharing
[2011.04.05 16:50:14 | 000,000,000 | ---D | C] -- C:\Programme\ApexDC++
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.02 19:22:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Matthias\Desktop\OTL.exe
[2011.05.02 19:14:15 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.02 19:14:15 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.02 19:10:01 | 000,001,114 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.05.02 19:06:56 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.05.02 19:06:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.02 19:06:33 | 3220,676,608 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.01 12:51:32 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.05.01 12:51:32 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.05.01 12:51:32 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.05.01 12:51:32 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.05.01 12:51:32 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.04.27 16:23:05 | 000,183,929 | ---- | M] () -- C:\Users\Matthias\Desktop\vancouver unterkunft.pdf
[2011.04.23 18:20:33 | 000,124,447 | ---- | M] () -- C:\Users\Matthias\Desktop\Alamo Reservierung Roadtrip.pdf
[2011.04.21 12:39:05 | 000,108,537 | ---- | M] () -- C:\Users\Matthias\Documents\Flight Beijing.pdf
[2011.04.19 15:17:03 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_wpdcomp_01_09_00.Wdf
[2011.04.15 18:06:20 | 000,533,020 | ---- | M] () -- C:\Users\Matthias\Desktop\Antragsfomular.pdf
[2011.04.15 08:22:37 | 000,413,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.04.07 00:21:34 | 000,085,756 | ---- | M] () -- C:\Users\Matthias\Desktop\hotwire san diego.pdf
[2011.04.06 22:46:48 | 000,140,655 | ---- | M] () -- C:\Users\Matthias\Desktop\Us airways hinflug.pdf
[2011.04.06 22:31:34 | 000,112,714 | ---- | M] () -- C:\Users\Matthias\Desktop\US Airways _ Airline tickets, vacations & business flights.pdf
 
========== Files Created - No Company Name ==========
 
[2011.04.27 16:23:04 | 000,183,929 | ---- | C] () -- C:\Users\Matthias\Desktop\vancouver unterkunft.pdf
[2011.04.23 18:20:32 | 000,124,447 | ---- | C] () -- C:\Users\Matthias\Desktop\Alamo Reservierung Roadtrip.pdf
[2011.04.23 16:23:22 | 002,318,115 | ---- | C] () -- C:\Users\Matthias\Desktop\P2130384.JPG
[2011.04.21 12:39:02 | 000,108,537 | ---- | C] () -- C:\Users\Matthias\Documents\Flight Beijing.pdf
[2011.04.19 15:17:03 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_wpdcomp_01_09_00.Wdf
[2011.04.15 18:06:18 | 000,533,020 | ---- | C] () -- C:\Users\Matthias\Desktop\Antragsfomular.pdf
[2011.04.07 00:21:32 | 000,085,756 | ---- | C] () -- C:\Users\Matthias\Desktop\hotwire san diego.pdf
[2011.04.06 22:46:46 | 000,140,655 | ---- | C] () -- C:\Users\Matthias\Desktop\Us airways hinflug.pdf
[2011.04.06 22:31:32 | 000,112,714 | ---- | C] () -- C:\Users\Matthias\Desktop\US Airways _ Airline tickets, vacations & business flights.pdf
[2011.03.08 14:41:04 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011.03.08 14:41:04 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011.03.08 14:41:04 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011.03.08 14:41:04 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.01.29 17:00:24 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2010.06.13 08:39:28 | 000,000,023 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2010.01.24 11:17:17 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.01.19 04:42:46 | 000,007,597 | ---- | C] () -- C:\Users\Matthias\AppData\Local\Resmon.ResmonCfg
[2009.12.06 05:24:54 | 000,009,728 | ---- | C] () -- C:\Users\Matthias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.10.06 00:16:00 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009.07.13 22:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.13 19:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.13 19:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.13 17:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.13 16:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 14:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 14:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2008.10.07 01:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2008.10.07 01:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2008.10.07 01:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2006.11.11 14:52:50 | 000,454,656 | ---- | C] () -- C:\Windows\SysWow64\mmSQL.dll
[2002.07.31 09:32:03 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll

< End of report >

Code:

ATTFilter

OTL Extras logfile created on: 02.05.2011 19:35:52 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Matthias\Desktop
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 288,23 Gb Total Space | 36,03 Gb Free Space | 12,50% Space Free | Partition Type: NTFS
 
Computer Name: MATTHIAS-PC | User Name: Matthias | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C682623-8F66-46A8-B9B3-93FE1E66A001}" = iTunes
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series" = Canon MP190 series MP Drivers
"{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1" = Media Player Classic - Home Cinema v1.4.2499.0 x64
"{43D1A6DC-F2D3-4EBC-8851-CC8B9C0C8763}_is1" = ApexDC++ 1.4.2
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{963BFE7E-C350-4346-B43C-B02358306A45}" = Apple Mobile Device Support
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}" = Microsoft Xbox 360 Accessories 1.2
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB" = Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0138F525-6C8A-333F-A105-14AE030B9A54}" = Visual C++ 9.0 CRT (x86) WinSXS MSM
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 24
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{5731C0A8-B266-451A-8D3F-8066AA21836F}" = Tom Clancy's Rainbow Six Vegas
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.03
"{5C358088-A837-44EC-91D0-9FD06FF40896}" = Mobile Master
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{64F8B9AF-983F-48CE-ABBB-F62BEC02C5A0}" = System Requirements Lab
"{679F739E-5C76-4A41-B562-F9392156B6DD}" = System Requirements Lab CYRI
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}" = OLYMPUS ib
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ULTIMATER_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ULTIMATER_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ULTIMATER_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_ULTIMATER_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ULTIMATER_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ULTIMATER_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95140000-007A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.1 - Deutsch
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FB4F9000-04FC-11E0-85D2-001AA037B01E}" = Google Earth Plug-in
"AC3Filter_is1" = AC3Filter 1.63b
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.10
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.5
"AudibleManager" = AudibleManager
"Audiograbber" = Audiograbber 1.83 SE 
"Audiograbber-Lame" = Audiograbber Lame-MP3-Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Belkin Setup and Router Monitor_is1" = Belkin Setup and Router Monitor
"Debut" = Debut Video Capture Software
"DivX Setup.divx.com" = DivX-Setup
"dradio-Recorder_is1" = dradio-Recorder Version 3.02.0
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free YouTube Download_is1" = Free YouTube Download 2.3
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"HD Tune_is1" = HD Tune 2.55
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}" = OLYMPUS ib
"MagicDisc 2.5.79" = MagicDisc 2.5.79
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mobile Master" = Mobile Master 7.7.4
"Mozilla Firefox 4.0.1 (x86 de)" = Mozilla Firefox 4.0.1 (x86 de)
"MP Navigator EX 1.2" = Canon MP Navigator EX 1.2
"Philips Songbird" = Philips Songbird
"RealPlayer 12.0" = RealPlayer
"Steam App 30" = Day of Defeat
"Tropico3" = Tropico 3 1.00
"ULTIMATER" = Microsoft Office Ultimate 2007
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"web'n'walk Manager" = web'n'walk Manager
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 01.05.2011 23:12:13 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3104
 
Error - 01.05.2011 23:12:14 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.05.2011 23:12:14 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4180
 
Error - 01.05.2011 23:12:14 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4180
 
Error - 01.05.2011 23:12:15 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.05.2011 23:12:15 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 5194
 
Error - 01.05.2011 23:12:15 | Computer Name = Matthias-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 5194
 
Error - 02.05.2011 03:28:25 | Computer Name = Matthias-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 02.05.2011 17:26:56 | Computer Name = Matthias-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "c:\program files
 (x86)\dradio-recorder\phonostar.exe". Fehler in  Manifest- oder Richtliniendatei 
"" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
 
Error - 02.05.2011 17:28:16 | Computer Name = Matthias-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
[ OSession Events ]
Error - 27.11.2009 15:42:12 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1860
 seconds with 120 seconds of active time.  This session ended with a crash.
 
Error - 05.12.2009 05:02:35 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1869
 seconds with 300 seconds of active time.  This session ended with a crash.
 
Error - 15.12.2009 03:12:29 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 387
 seconds with 60 seconds of active time.  This session ended with a crash.
 
Error - 22.03.2010 13:58:40 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1901
 seconds with 120 seconds of active time.  This session ended with a crash.
 
Error - 12.04.2010 06:49:00 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1817
 seconds with 300 seconds of active time.  This session ended with a crash.
 
Error - 18.04.2010 08:09:12 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1877
 seconds with 180 seconds of active time.  This session ended with a crash.
 
Error - 18.05.2010 13:09:16 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 392
 seconds with 240 seconds of active time.  This session ended with a crash.
 
Error - 05.06.2010 02:56:22 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 339
 seconds with 120 seconds of active time.  This session ended with a crash.
 
Error - 05.06.2010 06:59:39 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1844
 seconds with 240 seconds of active time.  This session ended with a crash.
 
Error - 15.06.2010 02:44:22 | Computer Name = Matthias-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1890
 seconds with 0 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 01.05.2011 12:17:21 | Computer Name = Matthias-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\tcpipBM.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 01.05.2011 12:17:40 | Computer Name = Matthias-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "ASInsHelp" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 01.05.2011 12:17:47 | Computer Name = Matthias-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   tcpipBM
 
Error - 01.05.2011 15:49:32 | Computer Name = Matthias-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 02.05.2011 12:38:32 | Computer Name = Matthias-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\tcpipBM.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 02.05.2011 12:38:51 | Computer Name = Matthias-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "ASInsHelp" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 02.05.2011 12:38:57 | Computer Name = Matthias-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   tcpipBM
 
Error - 02.05.2011 22:06:31 | Computer Name = Matthias-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\tcpipBM.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 02.05.2011 22:06:48 | Computer Name = Matthias-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "ASInsHelp" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 02.05.2011 22:07:00 | Computer Name = Matthias-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   tcpipBM
 
 
< End of report >

privatejoker · 03.05.2011, 05:23

HJTscanlist

Code:

ATTFilter

 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows [Version 6.1.7600]
 
 
C:

        C:\pagefile.sys ---------  
        C:\hiberfil.sys ---------  
  01.05.2011 19:32      C:\System Volume Information --------- 24576 
  01.05.2011 18:43      C:\ProgramData --------- 8192 
  01.05.2011 18:43      C:\Program Files (x86) --------- 28672 
  28.04.2011 10:16      C:\Windows --------- 20480 
  05.04.2011 16:50      C:\Program Files --------- 8192 
  23.07.2010 05:45      C:\aqua_bitmap.cpp --------- 2006 
  25.06.2010 17:15      C:\6c45ce1487e14f902cfee433c5 --------- 4096 
  12.05.2010 11:58      C:\Users --------- 4096 
  12.05.2010 10:53      C:\Temp --------- 0 
  06.03.2010 08:10      C:\NVIDIA --------- 0 
  01.03.2010 00:10      C:\SoftUpdateLog.txt --------- 1450 
  25.02.2010 05:16      C:\$Recycle.Bin --------- 0 
  31.10.2009 15:05      C:\MSOCache --------- 0 
  31.10.2009 13:27      C:\Recovery --------- 0 
  31.10.2009 13:27      C:\Programme --------- 0 
  31.10.2009 13:27      C:\Dokumente und Einstellungen --------- 0 
  13.07.2009 22:08      C:\Documents and Settings --------- 0 
  13.07.2009 20:20      C:\PerfLogs --------- 0 
  23.09.2005 01:39      C:\msdia80.dll --------- 894976 
----------------------------------------

 
C:\Windows

  02.05.2011 19:24     C:\Windows\WindowsUpdate.log --------- 1397721 
  02.05.2011 19:06     C:\Windows\setupact.log --------- 122758 
  02.05.2011 19:06     C:\Windows\bootstat.dat --------- 67584 
       C:\Windows\"›î ---------  
  16.03.2011 09:08     C:\Windows\PFRO.log --------- 7220 
  25.02.2011 23:23     C:\Windows\explorer.exe --------- 2870272 
  31.01.2011 17:50     C:\Windows\DPINST.LOG --------- 9826 
  31.01.2011 00:16     C:\Windows\ODBCINST.INI --------- 23 
  29.01.2011 17:00     C:\Windows\MASetupCaller.dll --------- 325552 
  29.01.2011 17:00     C:\Windows\MAMCityDownload.ocx --------- 90112 
  29.01.2011 17:00     C:\Windows\MusiccityDownload.exe --------- 30568 
  30.10.2010 02:44     C:\Windows\DirectX.log --------- 107608 
  02.10.2010 14:16     C:\Windows\MEMORY.DMP --------- 430959582 
  01.11.2009 23:50     C:\Windows\win.ini --------- 478 
  31.10.2009 13:19     C:\Windows\DtcInstall.log --------- 1774 
  31.10.2009 13:19     C:\Windows\TSSysprep.log --------- 1313 
  13.07.2009 21:54     C:\Windows\WindowsShell.Manifest --------- 749 
  13.07.2009 21:51     C:\Windows\setuperr.log --------- 0 
  13.07.2009 18:39     C:\Windows\write.exe --------- 10240 
  13.07.2009 18:39     C:\Windows\splwow64.exe --------- 61952 
  13.07.2009 18:39     C:\Windows\regedit.exe --------- 427008 
  13.07.2009 18:39     C:\Windows\notepad.exe --------- 193536 
  13.07.2009 18:39     C:\Windows\hh.exe --------- 16896 
  13.07.2009 18:39     C:\Windows\HelpPane.exe --------- 733696 
  13.07.2009 18:39     C:\Windows\fveupdate.exe --------- 15360 
  13.07.2009 18:38     C:\Windows\bfsvc.exe --------- 71168 
  13.07.2009 18:16     C:\Windows\twain_32.dll --------- 51200 
  13.07.2009 18:14     C:\Windows\winhlp32.exe --------- 9728 
  13.07.2009 18:14     C:\Windows\twunk_32.exe --------- 31232 
  13.07.2009 16:06     C:\Windows\mib.bin --------- 43131 
  10.07.2009 05:10     C:\Windows\WLXPGSS.SCR --------- 307568 
  10.06.2009 14:41     C:\Windows\twunk_16.exe --------- 49680 
  10.06.2009 14:41     C:\Windows\twain.dll --------- 94784 
  10.06.2009 14:08     C:\Windows\system.ini --------- 219 
  10.06.2009 13:52     C:\Windows\WMSysPr9.prx --------- 316640 
  10.06.2009 13:36     C:\Windows\msdfmap.ini --------- 1405 
  10.06.2009 13:31     C:\Windows\Starter.xml --------- 48201 
  10.06.2009 13:30     C:\Windows\Professional.xml --------- 53551 
  17.03.2009 05:58     C:\Windows\RtlExUpd.dll --------- 540672 
----------------------------------------

 
C:\Windows\System

----------------------------------------

 
C:\Windows\System32

 02.05.2011 19:14     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 13472 
 02.05.2011 19:14     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 13472 
 02.05.2011 15:07     C:\Windows\system32\config --------- 32768 
 01.05.2011 18:43     C:\Windows\system32\drivers --------- 65536 
 01.05.2011 13:02     C:\Windows\system32\Tasks --------- 8192 
 01.05.2011 12:51     C:\Windows\system32\perfh009.dat --------- 616008 
 01.05.2011 12:51     C:\Windows\system32\perfc009.dat --------- 106388 
 01.05.2011 12:51     C:\Windows\system32\perfh007.dat --------- 654166 
 01.05.2011 12:51     C:\Windows\system32\perfc007.dat --------- 130006 
 01.05.2011 12:51     C:\Windows\system32\PerfStringBackup.INI --------- 1498506 
 28.04.2011 10:22     C:\Windows\system32\catroot --------- 4096 
 28.04.2011 10:22     C:\Windows\system32\catroot2 --------- 20480 
 28.04.2011 10:16     C:\Windows\system32\de-DE --------- 327680 
 28.04.2011 10:16     C:\Windows\system32\DriverStore --------- 4096 
 18.04.2011 16:22     C:\Windows\system32\MRT.exe --------- 43802056 
 15.04.2011 08:22     C:\Windows\system32\FNTCACHE.DAT --------- 413656 
 15.04.2011 08:21     C:\Windows\system32\migration --------- 0 
 15.04.2011 08:21     C:\Windows\system32\Boot --------- 0 
 29.03.2011 08:23     C:\Windows\system32\wdi --------- 4096 
 22.03.2011 21:34     C:\Windows\system32\NDF --------- 0 
 20.03.2011 22:05     C:\Windows\system32\LogFiles --------- 4096 
 12.03.2011 05:03     C:\Windows\system32\XpsPrint.dll --------- 662528 
 10.03.2011 23:19     C:\Windows\system32\mfc42u.dll --------- 1359872 
 10.03.2011 23:19     C:\Windows\system32\mfc42.dll --------- 1395712 
 10.03.2011 23:18     C:\Windows\system32\esent.dll --------- 2566144 
 10.03.2011 23:15     C:\Windows\system32\fsutil.exe --------- 96768 
 07.03.2011 23:14     C:\Windows\system32\inetcomm.dll --------- 976896 
 02.03.2011 23:17     C:\Windows\system32\dnsrslvr.dll --------- 182272 
 02.03.2011 23:17     C:\Windows\system32\dnsapi.dll --------- 356352 
 02.03.2011 23:14     C:\Windows\system32\dnscacheugc.exe --------- 30208 
 02.03.2011 20:58     C:\Windows\system32\win32k.sys --------- 3133440 
 23.02.2011 23:30     C:\Windows\system32\XpsGdiConverter.dll --------- 476160 
 23.02.2011 23:29     C:\Windows\system32\wininet.dll --------- 1197056 
 23.02.2011 23:28     C:\Windows\system32\urlmon.dll --------- 1499136 
 23.02.2011 23:25     C:\Windows\system32\mstime.dll --------- 1026560 
 23.02.2011 23:25     C:\Windows\system32\mshtmled.dll --------- 97280 
 23.02.2011 23:25     C:\Windows\system32\mshtml.dll --------- 9311744 
 23.02.2011 23:25     C:\Windows\system32\msfeedsbs.dll --------- 82944 
 23.02.2011 23:25     C:\Windows\system32\msfeeds.dll --------- 703488 
 23.02.2011 23:24     C:\Windows\system32\licmgr10.dll --------- 57856 
 23.02.2011 23:24     C:\Windows\system32\jsproxy.dll --------- 64512 
 23.02.2011 23:24     C:\Windows\system32\ieui.dll --------- 247808 
 23.02.2011 23:24     C:\Windows\system32\iertutil.dll --------- 2447872 
 23.02.2011 23:24     C:\Windows\system32\iepeers.dll --------- 256000 
 23.02.2011 23:24     C:\Windows\system32\ieframe.dll --------- 12369408 
 23.02.2011 23:24     C:\Windows\system32\iedkcs32.dll --------- 445952 
 23.02.2011 23:21     C:\Windows\system32\msfeedssync.exe --------- 12288 
 23.02.2011 22:05     C:\Windows\system32\html.iec --------- 482816 
 23.02.2011 21:24     C:\Windows\system32\mshtml.tlb --------- 1638912 
 18.02.2011 23:37     C:\Windows\system32\FntCache.dll --------- 1135104 
 18.02.2011 23:37     C:\Windows\system32\DWrite.dll --------- 1540608 
 18.02.2011 23:36     C:\Windows\system32\d2d1.dll --------- 902656 
 18.02.2011 23:36     C:\Windows\system32\atmlib.dll --------- 46080 
 18.02.2011 21:13     C:\Windows\system32\atmfd.dll --------- 367104 
 17.02.2011 23:37     C:\Windows\system32\vbscript.dll --------- 612352 
 17.02.2011 23:36     C:\Windows\system32\jscript.dll --------- 852480 
 17.02.2011 23:33     C:\Windows\system32\prevhost.exe --------- 31232 
 11.02.2011 23:14     C:\Windows\system32\FXSCOVER.exe --------- 267776 
 05.02.2011 05:41     C:\Windows\system32\winresume.efi --------- 556928 
 05.02.2011 05:41     C:\Windows\system32\winload.efi --------- 640896 
 05.02.2011 05:41     C:\Windows\system32\kdusb.dll --------- 20352 
 05.02.2011 05:41     C:\Windows\system32\kd1394.dll --------- 19328 
 05.02.2011 05:41     C:\Windows\system32\kdcom.dll --------- 17792 
 05.02.2011 05:39     C:\Windows\system32\winresume.exe --------- 518160 
 05.02.2011 05:39     C:\Windows\system32\winload.exe --------- 603976 
 02.02.2011 18:11     C:\Windows\system32\MpSigStub.exe --------- 270720 
 25.01.2011 23:31     C:\Windows\system32\cdd.dll --------- 144384 
 16.01.2011 16:35     C:\Windows\system32\DRVSTORE --------- 0 
 11.01.2011 22:03     C:\Windows\system32\Wat --------- 0 
 22.12.2010 23:07     C:\Windows\system32\sbe.dll --------- 1118720 
 22.12.2010 23:07     C:\Windows\system32\EncDec.dll --------- 723968 
 22.12.2010 23:07     C:\Windows\system32\CPFilters.dll --------- 961024 
 22.12.2010 23:02     C:\Windows\system32\mpg2splt.ax --------- 259072 
 20.12.2010 23:16     C:\Windows\system32\wscsvc.dll --------- 97280 
 20.12.2010 23:16     C:\Windows\system32\wscapi.dll --------- 62976 
 20.12.2010 23:16     C:\Windows\system32\winsrv.dll --------- 214016 
 20.12.2010 23:16     C:\Windows\system32\winhttp.dll --------- 442880 
 20.12.2010 23:16     C:\Windows\system32\WebClnt.dll --------- 258048 
 20.12.2010 23:15     C:\Windows\system32\upnp.dll --------- 264192 
 20.12.2010 23:15     C:\Windows\system32\slwga.dll --------- 15360 
 20.12.2010 23:13     C:\Windows\system32\msxml3.dll --------- 1880576 
 20.12.2010 23:13     C:\Windows\system32\msxml6.dll --------- 2003968 
 20.12.2010 23:10     C:\Windows\system32\davclnt.dll --------- 100864 
 17.12.2010 23:12     C:\Windows\system32\mstscax.dll --------- 3138048 
 17.12.2010 23:11     C:\Windows\system32\kerberos.dll --------- 714752 
 17.12.2010 23:08     C:\Windows\system32\mstsc.exe --------- 1097216 
 08.11.2010 06:25     C:\Windows\system32\appmgmt --------- 0 
 01.11.2010 22:18     C:\Windows\system32\XpsRasterService.dll --------- 229888 
 01.11.2010 22:18     C:\Windows\system32\wmicmiplugin.dll --------- 524288 
 01.11.2010 22:17     C:\Windows\system32\taskschd.dll --------- 1169408 
 01.11.2010 22:17     C:\Windows\system32\taskcomp.dll --------- 473600 
 01.11.2010 22:16     C:\Windows\system32\schedsvc.dll --------- 1114624 
 01.11.2010 22:12     C:\Windows\system32\d3d10warp.dll --------- 1837568 
 01.11.2010 22:12     C:\Windows\system32\d3d10_1core.dll --------- 320512 
 01.11.2010 22:12     C:\Windows\system32\d3d10_1.dll --------- 197120 
 01.11.2010 22:10     C:\Windows\system32\taskeng.exe --------- 464384 
 01.11.2010 22:10     C:\Windows\system32\schtasks.exe --------- 285696 
 26.10.2010 22:18     C:\Windows\system32\ntoskrnl.exe --------- 5510528 
 26.10.2010 22:16     C:\Windows\system32\ntdll.dll --------- 1739176 
 26.10.2010 22:06     C:\Windows\system32\tzres.dll --------- 2048 
----------------------------------------

 
C:\Windows\Prefetch

----------------------------------------

 
C:\Windows\Tasks

 02.05.2011 19:10     C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1114 
 02.05.2011 19:06     C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1110 
 02.05.2011 19:06     C:\Windows\Tasks\SA.DAT --------- 6 
 23.04.2011 14:26     C:\Windows\Tasks\SCHEDLGU.TXT --------- 32632 
----------------------------------------

 
C:\Windows\Temp

----------------------------------------

 
C:\Users\Matthias\AppData\Local\Temp

 02.05.2011 20:00      C:\Users\Matthias\AppData\Local\Temp\plugtmp-126 --------- 4096 
 02.05.2011 19:47      C:\Users\Matthias\AppData\Local\Temp\~DF6FEE200E3EC0A2D5.TMP --------- 81920 
 02.05.2011 19:12      C:\Users\Matthias\AppData\Local\Temp\jusched.log --------- 578646 
 02.05.2011 19:07      C:\Users\Matthias\AppData\Local\Temp\divD161.tmp --------- 0 
 02.05.2011 19:07      C:\Users\Matthias\AppData\Local\Temp\DataCardMonitor.tmp --------- 205573 
 02.05.2011 19:07      C:\Users\Matthias\AppData\Local\Temp\WPDNSE --------- 0 
 02.05.2011 09:40      C:\Users\Matthias\AppData\Local\Temp\99091.od --------- 134 
 02.05.2011 09:40      C:\Users\Matthias\AppData\Local\Temp\CVR8313.tmp.cvr --------- 0 
 02.05.2011 09:39      C:\Users\Matthias\AppData\Local\Temp\div1E68.tmp --------- 0 
 02.05.2011 00:05      C:\Users\Matthias\AppData\Local\Temp\msohtmlclip1 --------- 0 
 01.05.2011 21:26      C:\Users\Matthias\AppData\Local\Temp\4C33.tmp --------- 3245 
 01.05.2011 21:24      C:\Users\Matthias\AppData\Local\Temp\BA02.tmp --------- 3083 
 01.05.2011 21:23      C:\Users\Matthias\AppData\Local\Temp\E6EA.tmp --------- 2664 
 01.05.2011 21:22      C:\Users\Matthias\AppData\Local\Temp\1CA8.tmp --------- 2942 
 01.05.2011 21:21      C:\Users\Matthias\AppData\Local\Temp\2C9E.tmp --------- 4694 
 01.05.2011 21:20      C:\Users\Matthias\AppData\Local\Temp\26D3.tmp --------- 3955 
 01.05.2011 18:23      C:\Users\Matthias\AppData\Local\Temp\32762456.od --------- 134 
 01.05.2011 18:23      C:\Users\Matthias\AppData\Local\Temp\CVREA58.tmp.cvr --------- 0 
 01.05.2011 13:23      C:\Users\Matthias\AppData\Local\Temp\7549.tmp --------- 3440 
 01.05.2011 13:22      C:\Users\Matthias\AppData\Local\Temp\5421.tmp --------- 5234 
 01.05.2011 12:56      C:\Users\Matthias\AppData\Local\Temp\13154675.od --------- 134 
 01.05.2011 12:56      C:\Users\Matthias\AppData\Local\Temp\CVRB973.tmp.cvr --------- 0 
 01.05.2011 12:51      C:\Users\Matthias\AppData\Local\Temp\ib --------- 0 
 01.05.2011 12:00      C:\Users\Matthias\AppData\Local\Temp\9796862.od --------- 134 
 01.05.2011 12:00      C:\Users\Matthias\AppData\Local\Temp\CVR7CB0.tmp.cvr --------- 0 
 01.05.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\divDF94.tmp --------- 0 
 01.05.2011 01:11      C:\Users\Matthias\AppData\Local\Temp\57945463.od --------- 134 
 01.05.2011 01:11      C:\Users\Matthias\AppData\Local\Temp\CVR2D77.tmp.cvr --------- 0 
 30.04.2011 10:07      C:\Users\Matthias\AppData\Local\Temp\cookies.sqlite --------- 1048576 
 30.04.2011 09:07      C:\Users\Matthias\AppData\Local\Temp\106439.od --------- 134 
 30.04.2011 09:07      C:\Users\Matthias\AppData\Local\Temp\CVR9FC7.tmp.cvr --------- 0 
 30.04.2011 09:07      C:\Users\Matthias\AppData\Local\Temp\divF0F2.tmp --------- 0 
 29.04.2011 20:37      C:\Users\Matthias\AppData\Local\Temp\divD0C6.tmp --------- 0 
 29.04.2011 18:24      C:\Users\Matthias\AppData\Local\Temp\81229.od --------- 134 
 29.04.2011 18:24      C:\Users\Matthias\AppData\Local\Temp\CVR3CFF.tmp.cvr --------- 0 
 29.04.2011 10:43      C:\Users\Matthias\AppData\Local\Temp\divCA31.tmp --------- 0 
 29.04.2011 10:43      C:\Users\Matthias\AppData\Local\Temp\86315.od --------- 134 
 29.04.2011 10:43      C:\Users\Matthias\AppData\Local\Temp\CVR4FD4.tmp.cvr --------- 0 
 29.04.2011 08:30      C:\Users\Matthias\AppData\Local\Temp\AdobeARM.log --------- 339899 
 29.04.2011 08:30      C:\Users\Matthias\AppData\Local\Temp\ArmUI.ini --------- 148526 
 29.04.2011 08:10      C:\Users\Matthias\AppData\Local\Temp\100605.od --------- 134 
 29.04.2011 08:10      C:\Users\Matthias\AppData\Local\Temp\CVR88FD.tmp.cvr --------- 0 
 29.04.2011 08:09      C:\Users\Matthias\AppData\Local\Temp\divCD7B.tmp --------- 0 
 28.04.2011 23:10      C:\Users\Matthias\AppData\Local\Temp\coredmp --------- 88737 
 28.04.2011 23:10      C:\Users\Matthias\AppData\Local\Temp\hsperfdata_Matthias --------- 0 
 28.04.2011 23:10      C:\Users\Matthias\AppData\Local\Temp\AUCHECK_CORE.txt --------- 7960 
 28.04.2011 23:10      C:\Users\Matthias\AppData\Local\Temp\AUCHECK_PARSER.txt --------- 3937 
 28.04.2011 23:04      C:\Users\Matthias\AppData\Local\Temp\div14E6.tmp --------- 0 
 28.04.2011 22:10      C:\Users\Matthias\AppData\Local\Temp\98514.od --------- 134 
 28.04.2011 22:10      C:\Users\Matthias\AppData\Local\Temp\CVR80D2.tmp.cvr --------- 0 
 28.04.2011 22:09      C:\Users\Matthias\AppData\Local\Temp\divEE73.tmp --------- 0 
 28.04.2011 12:29      C:\Users\Matthias\AppData\Local\Temp\plugtmp-125 --------- 0 
 28.04.2011 12:24      C:\Users\Matthias\AppData\Local\Temp\divE10B.tmp --------- 0 
 28.04.2011 10:18      C:\Users\Matthias\AppData\Local\Temp\CVR52D0.tmp.cvr --------- 0 
 28.04.2011 10:18      C:\Users\Matthias\AppData\Local\Temp\86736.od --------- 134 
 28.04.2011 10:18      C:\Users\Matthias\AppData\Local\Temp\CVR52B1.tmp.cvr --------- 0 
 28.04.2011 10:18      C:\Users\Matthias\AppData\Local\Temp\div117D.tmp --------- 0 
 27.04.2011 22:08      C:\Users\Matthias\AppData\Local\Temp\CVRC10D.tmp --------- 0 
 27.04.2011 22:01      C:\Users\Matthias\AppData\Local\Temp\238587.od --------- 134 
 27.04.2011 22:01      C:\Users\Matthias\AppData\Local\Temp\CVRA3DC.tmp.cvr --------- 0 
 27.04.2011 21:59      C:\Users\Matthias\AppData\Local\Temp\divE771.tmp --------- 0 
 27.04.2011 18:04      C:\Users\Matthias\AppData\Local\Temp\2584499.od --------- 134 
 27.04.2011 18:04      C:\Users\Matthias\AppData\Local\Temp\CVR6FB3.tmp.cvr --------- 0 
 27.04.2011 17:27      C:\Users\Matthias\AppData\Local\Temp\div7751.tmp --------- 0 
 27.04.2011 16:33      C:\Users\Matthias\AppData\Local\Temp\AdobeARM_NotLocked.log --------- 745 
 27.04.2011 16:24      C:\Users\Matthias\AppData\Local\Temp\StructuredQuery.log --------- 98849 
 27.04.2011 16:24      C:\Users\Matthias\AppData\Local\Temp\Low --------- 0 
 27.04.2011 16:17      C:\Users\Matthias\AppData\Local\Temp\ExchangePerflog_8484fa31c049bb0ecfcccd43.dat --------- 28 
 27.04.2011 13:16      C:\Users\Matthias\AppData\Local\Temp\545005.od --------- 134 
 27.04.2011 13:16      C:\Users\Matthias\AppData\Local\Temp\CVR50ED.tmp.cvr --------- 0 
 27.04.2011 13:13      C:\Users\Matthias\AppData\Local\Temp\div8B6D.tmp --------- 0 
 27.04.2011 08:50      C:\Users\Matthias\AppData\Local\Temp\138809.od --------- 134 
 27.04.2011 08:50      C:\Users\Matthias\AppData\Local\Temp\CVR1E2A.tmp.cvr --------- 0 
 27.04.2011 08:48      C:\Users\Matthias\AppData\Local\Temp\divB2BB.tmp --------- 0 
 27.04.2011 01:42      C:\Users\Matthias\AppData\Local\Temp\divD45E.tmp --------- 0 
 26.04.2011 19:00      C:\Users\Matthias\AppData\Local\Temp\divB49F.tmp --------- 0 
 26.04.2011 18:36      C:\Users\Matthias\AppData\Local\Temp\446677.od --------- 134 
 26.04.2011 18:36      C:\Users\Matthias\AppData\Local\Temp\CVRD0B6.tmp.cvr --------- 0 
 26.04.2011 09:17      C:\Users\Matthias\AppData\Local\Temp\242051.od --------- 134 
 26.04.2011 09:17      C:\Users\Matthias\AppData\Local\Temp\CVRB183.tmp.cvr --------- 0 
 26.04.2011 09:16      C:\Users\Matthias\AppData\Local\Temp\divDDC0.tmp --------- 0 
 25.04.2011 17:33      C:\Users\Matthias\AppData\Local\Temp\14229381.od --------- 134 
 25.04.2011 17:33      C:\Users\Matthias\AppData\Local\Temp\CVR1F75.tmp.cvr --------- 0 
 25.04.2011 15:19      C:\Users\Matthias\AppData\Local\Temp\6201679.od --------- 134 
 25.04.2011 15:19      C:\Users\Matthias\AppData\Local\Temp\CVRA14F.tmp.cvr --------- 0 
 25.04.2011 13:37      C:\Users\Matthias\AppData\Local\Temp\divBE6E.tmp --------- 0 
 25.04.2011 09:49      C:\Users\Matthias\AppData\Local\Temp\CVR273E.tmp.cvr --------- 0 
 25.04.2011 09:49      C:\Users\Matthias\AppData\Local\Temp\272190.od --------- 134 
 25.04.2011 09:45      C:\Users\Matthias\AppData\Local\Temp\divBB93.tmp --------- 0 
 24.04.2011 19:06      C:\Users\Matthias\AppData\Local\Temp\113646.od --------- 134 
 24.04.2011 19:06      C:\Users\Matthias\AppData\Local\Temp\CVRBB43.tmp.cvr --------- 0 
 24.04.2011 19:05      C:\Users\Matthias\AppData\Local\Temp\div26E0.tmp --------- 0 
 24.04.2011 14:00      C:\Users\Matthias\AppData\Local\Temp\plugtmp-124 --------- 0 
 24.04.2011 10:27      C:\Users\Matthias\AppData\Local\Temp\5585069.od --------- 134 
 24.04.2011 10:27      C:\Users\Matthias\AppData\Local\Temp\CVR38AD.tmp.cvr --------- 0 
 24.04.2011 08:56      C:\Users\Matthias\AppData\Local\Temp\divC6A8.tmp --------- 0 
 23.04.2011 18:37      C:\Users\Matthias\AppData\Local\Temp\divF797.tmp --------- 0 
 23.04.2011 18:08      C:\Users\Matthias\AppData\Local\Temp\wmsetup.log --------- 29399 
 23.04.2011 15:00      C:\Users\Matthias\AppData\Local\Temp\2054501.od --------- 134 
 23.04.2011 15:00      C:\Users\Matthias\AppData\Local\Temp\CVR5965.tmp.cvr --------- 0 
 23.04.2011 10:17      C:\Users\Matthias\AppData\Local\Temp\6088141.od --------- 134 
 23.04.2011 10:17      C:\Users\Matthias\AppData\Local\Temp\CVRE5CD.tmp.cvr --------- 0 
 23.04.2011 08:43      C:\Users\Matthias\AppData\Local\Temp\plugtmp-123 --------- 0 
 23.04.2011 08:40      C:\Users\Matthias\AppData\Local\Temp\267838.od --------- 134 
 23.04.2011 08:40      C:\Users\Matthias\AppData\Local\Temp\CVR163E.tmp.cvr --------- 0 
 23.04.2011 08:37      C:\Users\Matthias\AppData\Local\Temp\divCA9F.tmp --------- 0 
 22.04.2011 15:35      C:\Users\Matthias\AppData\Local\Temp\1523162.od --------- 134 
 22.04.2011 15:35      C:\Users\Matthias\AppData\Local\Temp\CVR3DDA.tmp --------- 0 
 22.04.2011 15:11      C:\Users\Matthias\AppData\Local\Temp\divD190.tmp --------- 0 
 22.04.2011 15:07      C:\Users\Matthias\AppData\Local\Temp\plugtmp-122 --------- 0 
 22.04.2011 14:45      C:\Users\Matthias\AppData\Local\Temp\11102419.od --------- 134 
 22.04.2011 14:45      C:\Users\Matthias\AppData\Local\Temp\CVR68D3.tmp.cvr --------- 0 
 22.04.2011 11:41      C:\Users\Matthias\AppData\Local\Temp\divE7DE.tmp --------- 0 
 22.04.2011 11:01      C:\Users\Matthias\AppData\Local\Temp\CVR5D0E.tmp.cvr --------- 0 
 22.04.2011 11:01      C:\Users\Matthias\AppData\Local\Temp\2776334.od --------- 134 
 22.04.2011 10:16      C:\Users\Matthias\AppData\Local\Temp\divD299.tmp --------- 0 
 22.04.2011 04:00      C:\Users\Matthias\AppData\Local\Temp\76939.od --------- 134 
 22.04.2011 04:00      C:\Users\Matthias\AppData\Local\Temp\CVR2C0E.tmp.cvr --------- 0 
 22.04.2011 04:00      C:\Users\Matthias\AppData\Local\Temp\divDCA7.tmp --------- 0 
 21.04.2011 13:38      C:\Users\Matthias\AppData\Local\Temp\plugtmp-121 --------- 0 
 21.04.2011 13:35      C:\Users\Matthias\AppData\Local\Temp\SkypeSetup.exe --------- 21255560 
 21.04.2011 11:24      C:\Users\Matthias\AppData\Local\Temp\1477173.od --------- 134 
 21.04.2011 11:24      C:\Users\Matthias\AppData\Local\Temp\CVR8A35.tmp.cvr --------- 0 
 21.04.2011 11:00      C:\Users\Matthias\AppData\Local\Temp\divD603.tmp --------- 0 
 21.04.2011 07:38      C:\Users\Matthias\AppData\Local\Temp\1811873.od --------- 134 
 21.04.2011 07:38      C:\Users\Matthias\AppData\Local\Temp\CVRA5A1.tmp.cvr --------- 0 
 21.04.2011 07:08      C:\Users\Matthias\AppData\Local\Temp\divDD53.tmp --------- 0 
 20.04.2011 23:30      C:\Users\Matthias\AppData\Local\Temp\33963882.od --------- 134 
 20.04.2011 23:30      C:\Users\Matthias\AppData\Local\Temp\CVR3F6A.tmp.cvr --------- 0 
 20.04.2011 17:36      C:\Users\Matthias\AppData\Local\Temp\divD87.tmp --------- 0 
 20.04.2011 14:15      C:\Users\Matthias\AppData\Local\Temp\672660.od --------- 134 
 20.04.2011 14:15      C:\Users\Matthias\AppData\Local\Temp\CVR4394.tmp.cvr --------- 0 
 20.04.2011 09:56      C:\Users\Matthias\AppData\Local\Temp\4689046.od --------- 134 
 20.04.2011 09:56      C:\Users\Matthias\AppData\Local\Temp\CVR8C96.tmp.cvr --------- 0 
 20.04.2011 08:39      C:\Users\Matthias\AppData\Local\Temp\94942.od --------- 134 
 20.04.2011 08:39      C:\Users\Matthias\AppData\Local\Temp\CVR7290.tmp.cvr --------- 0 
 20.04.2011 08:39      C:\Users\Matthias\AppData\Local\Temp\divF5A4.tmp --------- 0 
 19.04.2011 20:41      C:\Users\Matthias\AppData\Local\Temp\17231964.od --------- 134 
 19.04.2011 20:41      C:\Users\Matthias\AppData\Local\Temp\CVRF05C.tmp.cvr --------- 0 
 19.04.2011 19:31      C:\Users\Matthias\AppData\Local\Temp\13037128.od --------- 134 
 19.04.2011 19:31      C:\Users\Matthias\AppData\Local\Temp\CVREE48.tmp.cvr --------- 0 
 19.04.2011 18:02      C:\Users\Matthias\AppData\Local\Temp\7720832.od --------- 134 
 19.04.2011 18:02      C:\Users\Matthias\AppData\Local\Temp\CVRCF80.tmp.cvr --------- 0 
 19.04.2011 16:00      C:\Users\Matthias\AppData\Local\Temp\CVRE61.tmp.cvr --------- 0 
 19.04.2011 16:00      C:\Users\Matthias\AppData\Local\Temp\396897.od --------- 134 
 19.04.2011 16:00      C:\Users\Matthias\AppData\Local\Temp\DMI9A00.tmp --------- 0 
 19.04.2011 16:00      C:\Users\Matthias\AppData\Local\Temp\DMI81FD.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI6BDD.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI5698.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI42F8.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI2B52.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI1A9E.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI2F8.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMIEC1D.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMID65B.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\{63ACBE9B-97F3-4821-865A-95EE669ACE9F} --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMIC319.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMIA9BE.tmp --------- 0 
 19.04.2011 15:59      C:\Users\Matthias\AppData\Local\Temp\DMI93FC.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMI46D5.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMI3AF2.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMI2DE6.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMI125A.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMI1C6.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMIEADB.tmp --------- 0 
 19.04.2011 15:58      C:\Users\Matthias\AppData\Local\Temp\DMICEC3.tmp --------- 0 
 19.04.2011 15:57      C:\Users\Matthias\AppData\Local\Temp\{e96ee4f0-4eb9-417b-927b-a6ed4c53949a} --------- 0 
 19.04.2011 15:57      C:\Users\Matthias\AppData\Local\Temp\{BE65C0AD-6062-4F95-99F0-FE25EC07F7D6} --------- 0 
 19.04.2011 15:55      C:\Users\Matthias\AppData\Local\Temp\divF19E.tmp --------- 0 
 19.04.2011 15:53      C:\Users\Matthias\AppData\Local\Temp\DMIFF08.tmp.log.xml --------- 6768 
 19.04.2011 15:53      C:\Users\Matthias\AppData\Local\Temp\DMIFF08.tmp --------- 0 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\DMIA70E.tmp.log.xml --------- 6768 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\DMIA70E.tmp --------- 0 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\DMI8CE9.tmp --------- 0 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\{51F898CC-8DEC-4762-B30A-F852E5E5DE86} --------- 0 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\DMI8192.tmp --------- 0 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\DMI59A7.tmp --------- 0 
 19.04.2011 15:52      C:\Users\Matthias\AppData\Local\Temp\DMI1F83.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMI944.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMIEA50.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMID376.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMIBEBE.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMIA545.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\{0B2EC670-4E89-4A43-9216-C00DDDB4CB20} --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMI8FE1.tmp --------- 0 
 19.04.2011 15:51      C:\Users\Matthias\AppData\Local\Temp\DMI78A9.tmp --------- 0 
 19.04.2011 15:45      C:\Users\Matthias\AppData\Local\Temp\DMI8088.tmp --------- 0 
 19.04.2011 15:45      C:\Users\Matthias\AppData\Local\Temp\DMI6366.tmp --------- 0 
 19.04.2011 15:45      C:\Users\Matthias\AppData\Local\Temp\DMI4B53.tmp --------- 0 
 19.04.2011 15:45      C:\Users\Matthias\AppData\Local\Temp\DMI3238.tmp --------- 0 
 19.04.2011 15:45      C:\Users\Matthias\AppData\Local\Temp\DMI191C.tmp --------- 0 
 19.04.2011 15:45      C:\Users\Matthias\AppData\Local\Temp\SAMSUNG --------- 0 
 19.04.2011 15:39      C:\Users\Matthias\AppData\Local\Temp\DMI4CBA.tmp --------- 0 
 19.04.2011 15:21      C:\Users\Matthias\AppData\Local\Temp\DMI90DA.tmp --------- 0 
 19.04.2011 15:14      C:\Users\Matthias\AppData\Local\Temp\DMI8066.tmp --------- 0 
 19.04.2011 15:10      C:\Users\Matthias\AppData\Local\Temp\2c7f18cb-9b30-465a-9ab0-3f2473d7a2cb --------- 0 
 19.04.2011 14:56      C:\Users\Matthias\AppData\Local\Temp\DMIE060.tmp --------- 0 
 19.04.2011 14:39      C:\Users\Matthias\AppData\Local\Temp\DMIA036.tmp --------- 0 
 19.04.2011 14:39      C:\Users\Matthias\AppData\Local\Temp\DMI8748.tmp --------- 0 
 19.04.2011 14:36      C:\Users\Matthias\AppData\Local\Temp\DMI28B6.tmp --------- 0 
 19.04.2011 14:36      C:\Users\Matthias\AppData\Local\Temp\6bf42878-b9fe-490c-b6ca-c742df2feeaf --------- 0 
 19.04.2011 14:36      C:\Users\Matthias\AppData\Local\Temp\DMI914.tmp --------- 0 
 19.04.2011 14:36      C:\Users\Matthias\AppData\Local\Temp\{305EA197-ACE5-4976-ADB8-91BDC492AD6A} --------- 0 
 19.04.2011 14:36      C:\Users\Matthias\AppData\Local\Temp\KiesInstall.Log --------- 16223 
 19.04.2011 14:34      C:\Users\Matthias\AppData\Local\Temp\MarkAny --------- 0 
 19.04.2011 14:33      C:\Users\Matthias\AppData\Local\Temp\Kies_Real_Setup.exe --------- 87340080 
 19.04.2011 14:24      C:\Users\Matthias\AppData\Local\Temp\{69bdfecf-1088-4fa3-85be-c55f287470d6} --------- 0 
 19.04.2011 14:19      C:\Users\Matthias\AppData\Local\Temp\divCD2D.tmp --------- 0 
 19.04.2011 14:09      C:\Users\Matthias\AppData\Local\Temp\DMI5B6C.tmp --------- 0 
 19.04.2011 14:09      C:\Users\Matthias\AppData\Local\Temp\DMI406C.tmp --------- 0 
 19.04.2011 14:09      C:\Users\Matthias\AppData\Local\Temp\DMI2AD9.tmp --------- 0 
 19.04.2011 14:09      C:\Users\Matthias\AppData\Local\Temp\DMI1390.tmp --------- 0 
 19.04.2011 14:09      C:\Users\Matthias\AppData\Local\Temp\DMIF334.tmp --------- 0 
 19.04.2011 14:01      C:\Users\Matthias\AppData\Local\Temp\div22DB.tmp --------- 0 
 19.04.2011 13:59      C:\Users\Matthias\AppData\Local\Temp\{99986604-596E-49BB-AB1D-4973BE4540E3} --------- 0 
 19.04.2011 13:55      C:\Users\Matthias\AppData\Local\Temp\e3c74ee6-7482-4280-b9c3-f233b390296e --------- 0 
 19.04.2011 13:55      C:\Users\Matthias\AppData\Local\Temp\DMI71A8.tmp --------- 0 
 19.04.2011 13:54      C:\Users\Matthias\AppData\Local\Temp\DMI58EB.tmp --------- 0 
 19.04.2011 13:54      C:\Users\Matthias\AppData\Local\Temp\DMI40C9.tmp --------- 0 
 19.04.2011 13:54      C:\Users\Matthias\AppData\Local\Temp\DMI29FF.tmp --------- 0 
 19.04.2011 13:54      C:\Users\Matthias\AppData\Local\Temp\DMI10D4.tmp --------- 0 
 19.04.2011 13:54      C:\Users\Matthias\AppData\Local\Temp\DMIF99C.tmp --------- 0 
 19.04.2011 13:54      C:\Users\Matthias\AppData\Local\Temp\DMIDBA1.tmp --------- 0 
 19.04.2011 13:17      C:\Users\Matthias\AppData\Local\Temp\plugtmp-120 --------- 0 
 19.04.2011 12:49      C:\Users\Matthias\AppData\Local\Temp\4832068.od --------- 134 
 19.04.2011 12:49      C:\Users\Matthias\AppData\Local\Temp\CVRBB44.tmp.cvr --------- 0 
 19.04.2011 12:49      C:\Users\Matthias\AppData\Local\Temp\4826842.od --------- 134 
 19.04.2011 12:49      C:\Users\Matthias\AppData\Local\Temp\CVRA6DA.tmp.cvr --------- 0 
 19.04.2011 11:30      C:\Users\Matthias\AppData\Local\Temp\91229.od --------- 134 
 19.04.2011 11:30      C:\Users\Matthias\AppData\Local\Temp\CVR644D.tmp.cvr --------- 0 
 19.04.2011 11:30      C:\Users\Matthias\AppData\Local\Temp\divC40A.tmp --------- 0 
 19.04.2011 08:12      C:\Users\Matthias\AppData\Local\Temp\112367.od --------- 134 
 19.04.2011 08:12      C:\Users\Matthias\AppData\Local\Temp\CVRB6DF.tmp.cvr --------- 0 
 19.04.2011 08:11      C:\Users\Matthias\AppData\Local\Temp\divCB3A.tmp --------- 0 
 19.04.2011 00:04      C:\Users\Matthias\AppData\Local\Temp\33430905.od --------- 134 
 19.04.2011 00:04      C:\Users\Matthias\AppData\Local\Temp\CVR1D79.tmp.cvr --------- 0 
 19.04.2011 00:04      C:\Users\Matthias\AppData\Local\Temp\33419969.od --------- 134 
 19.04.2011 00:04      C:\Users\Matthias\AppData\Local\Temp\CVRF2C1.tmp.cvr --------- 0 
 18.04.2011 22:06      C:\Users\Matthias\AppData\Local\Temp\26312361.od --------- 134 
 18.04.2011 22:06      C:\Users\Matthias\AppData\Local\Temp\CVR7EA9.tmp.cvr --------- 0 
 18.04.2011 22:06      C:\Users\Matthias\AppData\Local\Temp\26310925.od --------- 134 
 18.04.2011 22:06      C:\Users\Matthias\AppData\Local\Temp\CVR790D.tmp.cvr --------- 0 
 18.04.2011 21:54      C:\Users\Matthias\AppData\Local\Temp\25613195.od --------- 134 
 18.04.2011 21:54      C:\Users\Matthias\AppData\Local\Temp\CVRD38B.tmp.cvr --------- 0 
 18.04.2011 16:22      C:\Users\Matthias\AppData\Local\Temp\5683069.od --------- 134 
 18.04.2011 16:22      C:\Users\Matthias\AppData\Local\Temp\CVRB77D.tmp.cvr --------- 0 
 18.04.2011 16:22      C:\Users\Matthias\AppData\Local\Temp\CVRA47A.tmp.cvr --------- 0 
 18.04.2011 16:22      C:\Users\Matthias\AppData\Local\Temp\5678202.od --------- 134 
 18.04.2011 16:21      C:\Users\Matthias\AppData\Local\Temp\CVR5773.tmp --------- 0 
 18.04.2011 14:55      C:\Users\Matthias\AppData\Local\Temp\469765.od --------- 134 
 18.04.2011 14:55      C:\Users\Matthias\AppData\Local\Temp\CVR2AF6.tmp.cvr --------- 0 
 18.04.2011 14:49      C:\Users\Matthias\AppData\Local\Temp\divF66E.tmp --------- 0 
 18.04.2011 11:57      C:\Users\Matthias\AppData\Local\Temp\divD2B9.tmp --------- 0 
 18.04.2011 11:38      C:\Users\Matthias\AppData\Local\Temp\~DFB7D38D3A0545F4D4.TMP --------- 512 
 18.04.2011 11:38      C:\Users\Matthias\AppData\Local\Temp\10971768.od --------- 134 
 18.04.2011 11:38      C:\Users\Matthias\AppData\Local\Temp\CVR6A78.tmp.cvr --------- 0 
 18.04.2011 11:34      C:\Users\Matthias\AppData\Local\Temp\10763054.od --------- 134 
 18.04.2011 11:34      C:\Users\Matthias\AppData\Local\Temp\CVR3B2E.tmp.cvr --------- 0 
 18.04.2011 10:38      C:\Users\Matthias\AppData\Local\Temp\dat49CD.tmp --------- 27968 
 18.04.2011 08:36      C:\Users\Matthias\AppData\Local\Temp\79716.od --------- 134 
 18.04.2011 08:36      C:\Users\Matthias\AppData\Local\Temp\CVR3726.tmp.cvr --------- 0 
 18.04.2011 08:36      C:\Users\Matthias\AppData\Local\Temp\divD2D9.tmp --------- 0 
 17.04.2011 23:26      C:\Users\Matthias\AppData\Local\Temp\31156020.od --------- 134 
 17.04.2011 23:26      C:\Users\Matthias\AppData\Local\Temp\CVR6734.tmp.cvr --------- 0 
 17.04.2011 23:25      C:\Users\Matthias\AppData\Local\Temp\31123759.od --------- 134 
 17.04.2011 23:25      C:\Users\Matthias\AppData\Local\Temp\CVRE92F.tmp.cvr --------- 0 
 17.04.2011 23:25      C:\Users\Matthias\AppData\Local\Temp\31103666.od --------- 134 
 17.04.2011 23:25      C:\Users\Matthias\AppData\Local\Temp\CVR9AB2.tmp.cvr --------- 0 
 17.04.2011 23:24      C:\Users\Matthias\AppData\Local\Temp\31088612.od --------- 134 
 17.04.2011 23:24      C:\Users\Matthias\AppData\Local\Temp\CVR5FE4.tmp.cvr --------- 0 
 17.04.2011 23:24      C:\Users\Matthias\AppData\Local\Temp\31066226.od --------- 134 
 17.04.2011 23:24      C:\Users\Matthias\AppData\Local\Temp\CVR872.tmp.cvr --------- 0 
 17.04.2011 23:24      C:\Users\Matthias\AppData\Local\Temp\31042108.od --------- 134 
 17.04.2011 23:24      C:\Users\Matthias\AppData\Local\Temp\CVRAA3C.tmp.cvr --------- 0 
 17.04.2011 23:23      C:\Users\Matthias\AppData\Local\Temp\31016789.od --------- 134 
 17.04.2011 23:23      C:\Users\Matthias\AppData\Local\Temp\CVR4755.tmp.cvr --------- 0 
 17.04.2011 23:23      C:\Users\Matthias\AppData\Local\Temp\31001626.od --------- 134 
 17.04.2011 23:23      C:\Users\Matthias\AppData\Local\Temp\CVRC0A.tmp.cvr --------- 0 
 17.04.2011 23:23      C:\Users\Matthias\AppData\Local\Temp\30984278.od --------- 134 
 17.04.2011 23:23      C:\Users\Matthias\AppData\Local\Temp\CVRC856.tmp.cvr --------- 0 
 17.04.2011 23:22      C:\Users\Matthias\AppData\Local\Temp\30964934.od --------- 134 
 17.04.2011 23:22      C:\Users\Matthias\AppData\Local\Temp\CVR7CC6.tmp.cvr --------- 0 
 17.04.2011 23:22      C:\Users\Matthias\AppData\Local\Temp\30927884.od --------- 134 
 17.04.2011 23:22      C:\Users\Matthias\AppData\Local\Temp\CVREC0C.tmp.cvr --------- 0 
 17.04.2011 17:17      C:\Users\Matthias\AppData\Local\Temp\divD0D5.tmp --------- 0 
 17.04.2011 16:21      C:\Users\Matthias\AppData\Local\Temp\5658218.od --------- 134 
 17.04.2011 16:21      C:\Users\Matthias\AppData\Local\Temp\CVR566A.tmp.cvr --------- 0 
 17.04.2011 14:43      C:\Users\Matthias\AppData\Local\Temp\~DF1D9369A2A3BF2F83.TMP --------- 512 
 17.04.2011 12:55      C:\Users\Matthias\AppData\Local\Temp\16798203.od --------- 134 
 17.04.2011 12:55      C:\Users\Matthias\AppData\Local\Temp\CVR51FB.tmp.cvr --------- 0 
 17.04.2011 08:17      C:\Users\Matthias\AppData\Local\Temp\86440.od --------- 134 
 17.04.2011 08:17      C:\Users\Matthias\AppData\Local\Temp\CVR514A.tmp.cvr --------- 0 
 17.04.2011 08:16      C:\Users\Matthias\AppData\Local\Temp\divD47D.tmp --------- 0 
 16.04.2011 23:30      C:\Users\Matthias\AppData\Local\Temp\iZhRuJ79.pptx.part --------- 784492 
 16.04.2011 21:23      C:\Users\Matthias\AppData\Local\Temp\1018078.od --------- 134 
 16.04.2011 21:23      C:\Users\Matthias\AppData\Local\Temp\CVR8890.tmp.cvr --------- 0 
 16.04.2011 21:07      C:\Users\Matthias\AppData\Local\Temp\E408.dir --------- 0 
 16.04.2011 21:07      C:\Users\Matthias\AppData\Local\Temp\divE223.tmp --------- 0 
 16.04.2011 21:07      C:\Users\Matthias\AppData\Local\Temp\E408.tmp --------- 0 
 16.04.2011 20:34      C:\Users\Matthias\AppData\Local\Temp\plugtmp-119 --------- 0 
 16.04.2011 18:37      C:\Users\Matthias\AppData\Local\Temp\17680435.od --------- 134 
 16.04.2011 18:37      C:\Users\Matthias\AppData\Local\Temp\CVRC833.tmp.cvr --------- 0 
 16.04.2011 16:00      C:\Users\Matthias\AppData\Local\Temp\8231548.od --------- 134 
 16.04.2011 16:00      C:\Users\Matthias\AppData\Local\Temp\CVR9A7C.tmp.cvr --------- 0 
 16.04.2011 13:43      C:\Users\Matthias\AppData\Local\Temp\divB76C.tmp --------- 0 
 16.04.2011 12:00      C:\Users\Matthias\AppData\Local\Temp\divBE01.tmp --------- 0 
 16.04.2011 11:49      C:\Users\Matthias\AppData\Local\Temp\plugtmp-118 --------- 0 
 16.04.2011 10:27      C:\Users\Matthias\AppData\Local\Temp\CVRC716.tmp --------- 0 
 16.04.2011 10:27      C:\Users\Matthias\AppData\Local\Temp\3786518.od --------- 134 
 16.04.2011 09:25      C:\Users\Matthias\AppData\Local\Temp\divDCD6.tmp --------- 0 
 16.04.2011 07:59      C:\Users\Matthias\AppData\Local\Temp\divD4BB.tmp --------- 0 
 15.04.2011 19:48      C:\Users\Matthias\AppData\Local\Temp\405899.od --------- 134 
 15.04.2011 19:48      C:\Users\Matthias\AppData\Local\Temp\CVR313D.tmp.cvr --------- 0 
 15.04.2011 19:42      C:\Users\Matthias\AppData\Local\Temp\divF8BF.tmp --------- 0 
 15.04.2011 17:56      C:\Users\Matthias\AppData\Local\Temp\461965.od --------- 134 
 15.04.2011 17:56      C:\Users\Matthias\AppData\Local\Temp\CVRC7E.tmp.cvr --------- 0 
 15.04.2011 17:51      C:\Users\Matthias\AppData\Local\Temp\divFA16.tmp --------- 0 
 15.04.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\3427607.od --------- 134 
 15.04.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\CVR4CF7.tmp.cvr --------- 0 
 15.04.2011 09:02      C:\Users\Matthias\AppData\Local\Temp\plugtmp-117 --------- 0 
 15.04.2011 08:24      C:\Users\Matthias\AppData\Local\Temp\div3699.tmp --------- 0 
 14.04.2011 17:07      C:\Users\Matthias\AppData\Local\Temp\divE732.tmp --------- 0 
 14.04.2011 12:26      C:\Users\Matthias\AppData\Local\Temp\CVR67F5.tmp.cvr --------- 0 
 14.04.2011 12:26      C:\Users\Matthias\AppData\Local\Temp\92196.od --------- 134 
 14.04.2011 12:12      C:\Users\Matthias\AppData\Local\Temp\~DF05A462E0EDA6F553.TMP --------- 512 
 14.04.2011 12:12      C:\Users\Matthias\AppData\Local\Temp\11299979.od --------- 134 
 14.04.2011 12:12      C:\Users\Matthias\AppData\Local\Temp\CVR6C4C.tmp.cvr --------- 0 
 14.04.2011 11:53      C:\Users\Matthias\AppData\Local\Temp\plugtmp-115 --------- 0 
 14.04.2011 11:37      C:\Users\Matthias\AppData\Local\Temp\9236600.od --------- 134 
 14.04.2011 11:37      C:\Users\Matthias\AppData\Local\Temp\CVRF078.tmp.cvr --------- 0 
 14.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\8888375.od --------- 134 
 14.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\CVRA008.tmp.cvr --------- 0 
 14.04.2011 10:49      C:\Users\Matthias\AppData\Local\Temp\6342953.od --------- 134 
 14.04.2011 10:49      C:\Users\Matthias\AppData\Local\Temp\CVRC929.tmp.cvr --------- 0 
 14.04.2011 09:04      C:\Users\Matthias\AppData\Local\Temp\divF804.tmp --------- 0 
 13.04.2011 17:15      C:\Users\Matthias\AppData\Local\Temp\21913834.od --------- 134 
 13.04.2011 17:15      C:\Users\Matthias\AppData\Local\Temp\CVR60BC.tmp.cvr --------- 0 
 13.04.2011 11:11      C:\Users\Matthias\AppData\Local\Temp\CVR6C68.tmp --------- 0 
 13.04.2011 11:11      C:\Users\Matthias\AppData\Local\Temp\93319.od --------- 134 
 13.04.2011 11:11      C:\Users\Matthias\AppData\Local\Temp\divD76A.tmp --------- 0 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\CVR49CC.tmp.cvr --------- 0 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\2378188.od --------- 134 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\2375598.od --------- 134 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\CVR3FAE.tmp.cvr --------- 0 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\2372884.od --------- 134 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\CVR3514.tmp --------- 0 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\2370060.od --------- 134 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\CVR2A0C.tmp.cvr --------- 0 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\CVR1D6F.tmp.cvr --------- 0 
 13.04.2011 07:21      C:\Users\Matthias\AppData\Local\Temp\2366831.od --------- 134 
 13.04.2011 06:45      C:\Users\Matthias\AppData\Local\Temp\221817.od --------- 134 
 13.04.2011 06:45      C:\Users\Matthias\AppData\Local\Temp\CVR624B.tmp --------- 0 
 13.04.2011 06:44      C:\Users\Matthias\AppData\Local\Temp\div36A9.tmp --------- 0 
 12.04.2011 21:20      C:\Users\Matthias\AppData\Local\Temp\11324564.od --------- 134 
 12.04.2011 21:20      C:\Users\Matthias\AppData\Local\Temp\CVRCC94.tmp.cvr --------- 0 
 12.04.2011 19:25      C:\Users\Matthias\AppData\Local\Temp\4396622.od --------- 134 
 12.04.2011 19:25      C:\Users\Matthias\AppData\Local\Temp\CVR164E.tmp.cvr --------- 0 
 12.04.2011 18:24      C:\Users\Matthias\AppData\Local\Temp\CVR702.tmp --------- 0 
 12.04.2011 18:13      C:\Users\Matthias\AppData\Local\Temp\100059.od --------- 134 
 12.04.2011 18:13      C:\Users\Matthias\AppData\Local\Temp\CVR86AC.tmp.cvr --------- 0 
 12.04.2011 18:12      C:\Users\Matthias\AppData\Local\Temp\divC0DE.tmp --------- 0 
 11.04.2011 18:51      C:\Users\Matthias\AppData\Local\Temp\plugtmp-114 --------- 0 
 11.04.2011 14:38      C:\Users\Matthias\AppData\Local\Temp\div12A5.tmp --------- 0 
 11.04.2011 11:32      C:\Users\Matthias\AppData\Local\Temp\5324329.od --------- 134 
 11.04.2011 11:32      C:\Users\Matthias\AppData\Local\Temp\CVR3E1A.tmp.cvr --------- 0 
 11.04.2011 11:32      C:\Users\Matthias\AppData\Local\Temp\CVR34E6.tmp.cvr --------- 0 
 11.04.2011 11:32      C:\Users\Matthias\AppData\Local\Temp\5321958.od --------- 134 
 11.04.2011 11:32      C:\Users\Matthias\AppData\Local\Temp\5318963.od --------- 134 
 11.04.2011 11:32      C:\Users\Matthias\AppData\Local\Temp\CVR2933.tmp.cvr --------- 0 
 11.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\CVR21E3.tmp.cvr --------- 0 
 11.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\5317091.od --------- 134 
 11.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\5313877.od --------- 134 
 11.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\CVR1555.tmp.cvr --------- 0 
 11.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\5309852.od --------- 134 
 11.04.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\CVR59C.tmp.cvr --------- 0 
 11.04.2011 10:07      C:\Users\Matthias\AppData\Local\Temp\CVR2BE.tmp.cvr --------- 0 
 11.04.2011 10:07      C:\Users\Matthias\AppData\Local\Temp\262877.od --------- 134 
 10.04.2011 22:58      C:\Users\Matthias\AppData\Local\Temp\7884.tmp --------- 3131 
 10.04.2011 21:56      C:\Users\Matthias\AppData\Local\Temp\plugtmp-113 --------- 0 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\9234276.od --------- 134 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\CVRE764.tmp.cvr --------- 0 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\9231203.od --------- 134 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\CVRDB63.tmp.cvr --------- 0 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\9227802.od --------- 134 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\CVRCE1A.tmp.cvr --------- 0 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\9224151.od --------- 134 
 10.04.2011 19:33      C:\Users\Matthias\AppData\Local\Temp\CVRBFD7.tmp.cvr --------- 0 
 10.04.2011 19:32      C:\Users\Matthias\AppData\Local\Temp\9220766.od --------- 134 
 10.04.2011 19:32      C:\Users\Matthias\AppData\Local\Temp\CVRB29E.tmp.cvr --------- 0 
 10.04.2011 19:07      C:\Users\Matthias\AppData\Local\Temp\7666357.od --------- 134 
 10.04.2011 19:07      C:\Users\Matthias\AppData\Local\Temp\CVRFAB5.tmp.cvr --------- 0 
 10.04.2011 17:00      C:\Users\Matthias\AppData\Local\Temp\div9684.tmp --------- 0 
 09.04.2011 16:14      C:\Users\Matthias\AppData\Local\Temp\5772754.od --------- 134 
 09.04.2011 16:14      C:\Users\Matthias\AppData\Local\Temp\CVR15D2.tmp.cvr --------- 0 
 09.04.2011 16:13      C:\Users\Matthias\AppData\Local\Temp\5711305.od --------- 134 
 09.04.2011 16:13      C:\Users\Matthias\AppData\Local\Temp\CVR25BA.tmp.cvr --------- 0 
 09.04.2011 14:52      C:\Users\Matthias\AppData\Local\Temp\849363.od --------- 134 
 09.04.2011 14:52      C:\Users\Matthias\AppData\Local\Temp\CVRF5D3.tmp.cvr --------- 0 
 09.04.2011 14:49      C:\Users\Matthias\AppData\Local\Temp\0okwIOiA.ppt.part --------- 3741560 
 09.04.2011 14:48      C:\Users\Matthias\AppData\Local\Temp\YgQLJtGg.pptx.part --------- 1193396 
 09.04.2011 14:39      C:\Users\Matthias\AppData\Local\Temp\divB450.tmp --------- 0 
 08.04.2011 14:16      C:\Users\Matthias\AppData\Local\Temp\divAD10.tmp --------- 0 
 08.04.2011 14:04      C:\Users\Matthias\AppData\Local\Temp\1140866.od --------- 134 
 08.04.2011 14:04      C:\Users\Matthias\AppData\Local\Temp\CVR6882.tmp.cvr --------- 0 
 07.04.2011 21:46      C:\Users\Matthias\AppData\Local\Temp\divABE7.tmp --------- 0 
 07.04.2011 13:14      C:\Users\Matthias\AppData\Local\Temp\divB6FF.tmp --------- 0 
 07.04.2011 08:21      C:\Users\Matthias\AppData\Local\Temp\divF41E.tmp --------- 0 
 06.04.2011 16:54      C:\Users\Matthias\AppData\Local\Temp\78140.od --------- 134 
 06.04.2011 16:54      C:\Users\Matthias\AppData\Local\Temp\CVR312D.tmp.cvr --------- 0 
 06.04.2011 16:54      C:\Users\Matthias\AppData\Local\Temp\divC715.tmp --------- 0 
 06.04.2011 11:01      C:\Users\Matthias\AppData\Local\Temp\mozilla-media-cache --------- 0 
 06.04.2011 09:44      C:\Users\Matthias\AppData\Local\Temp\5362471.od --------- 134 
 06.04.2011 09:44      C:\Users\Matthias\AppData\Local\Temp\CVRD327.tmp.cvr --------- 0 
 06.04.2011 08:18      C:\Users\Matthias\AppData\Local\Temp\foxtab --------- 0 
 06.04.2011 08:17      C:\Users\Matthias\AppData\Local\Temp\div86CB.tmp --------- 0 
 05.04.2011 12:32      C:\Users\Matthias\AppData\Local\Temp\725935.od --------- 134 
 05.04.2011 12:32      C:\Users\Matthias\AppData\Local\Temp\CVR13AF.tmp.cvr --------- 0 
 05.04.2011 12:21      C:\Users\Matthias\AppData\Local\Temp\divD316.tmp --------- 0 
 05.04.2011 09:44      C:\Users\Matthias\AppData\Local\Temp\div9C2F.tmp --------- 0 
 05.04.2011 09:44      C:\Users\Matthias\AppData\Local\Temp\divAC65.tmp --------- 0 
 05.04.2011 09:44      C:\Users\Matthias\AppData\Local\Temp\divAD9C.tmp --------- 0 
 05.04.2011 09:43      C:\Users\Matthias\AppData\Local\Temp\div8FE0.tmp --------- 0 
 05.04.2011 09:09      C:\Users\Matthias\AppData\Local\Temp\90277.od --------- 134 
 05.04.2011 09:09      C:\Users\Matthias\AppData\Local\Temp\CVR6048.tmp.cvr --------- 0 
 05.04.2011 01:24      C:\Users\Matthias\AppData\Local\Temp\div9DE3.tmp --------- 0 
 04.04.2011 18:57      C:\Users\Matthias\AppData\Local\Temp\plugtmp-112 --------- 0 
 04.04.2011 16:08      C:\Users\Matthias\AppData\Local\Temp\221147.od --------- 134 
 04.04.2011 16:08      C:\Users\Matthias\AppData\Local\Temp\CVR5FDB.tmp.cvr --------- 0 
 04.04.2011 16:08      C:\Users\Matthias\AppData\Local\Temp\divEEA2.tmp --------- 0 
 04.04.2011 08:45      C:\Users\Matthias\AppData\Local\Temp\div6FF1.tmp --------- 0 
 04.04.2011 02:53      C:\Users\Matthias\AppData\Local\Temp\CVR3986.tmp.cvr --------- 0 
 04.04.2011 02:53      C:\Users\Matthias\AppData\Local\Temp\80652.od --------- 134 
 04.04.2011 02:53      C:\Users\Matthias\AppData\Local\Temp\divC68A.tmp --------- 0 
 03.04.2011 19:29      C:\Users\Matthias\AppData\Local\Temp\plugtmp-111 --------- 0 
 03.04.2011 16:57      C:\Users\Matthias\AppData\Local\Temp\84271.od --------- 134 
 03.04.2011 16:57      C:\Users\Matthias\AppData\Local\Temp\CVR4910.tmp.cvr --------- 0 
 03.04.2011 16:57      C:\Users\Matthias\AppData\Local\Temp\divBF19.tmp --------- 0 
 03.04.2011 12:08      C:\Users\Matthias\AppData\Local\Temp\plugtmp-110 --------- 0 
 03.04.2011 09:02      C:\Users\Matthias\AppData\Local\Temp\CVRA15E.tmp.cvr --------- 0 
 03.04.2011 09:02      C:\Users\Matthias\AppData\Local\Temp\4170078.od --------- 134 
 03.04.2011 07:54      C:\Users\Matthias\AppData\Local\Temp\divCA21.tmp --------- 0 
 02.04.2011 17:02      C:\Users\Matthias\AppData\Local\Temp\1021026.od --------- 134 
 02.04.2011 17:02      C:\Users\Matthias\AppData\Local\Temp\CVR9462.tmp.cvr --------- 0 
 02.04.2011 16:46      C:\Users\Matthias\AppData\Local\Temp\divB559.tmp --------- 0 
 02.04.2011 09:25      C:\Users\Matthias\AppData\Local\Temp\8267194.od --------- 134 
 02.04.2011 09:25      C:\Users\Matthias\AppData\Local\Temp\CVR25AB.tmp.cvr --------- 0 
 02.04.2011 07:38      C:\Users\Matthias\AppData\Local\Temp\divBA87.tmp --------- 0 
 02.04.2011 02:00      C:\Users\Matthias\AppData\Local\Temp\478127.od --------- 134 
 02.04.2011 02:00      C:\Users\Matthias\AppData\Local\Temp\CVR4B80.tmp.cvr --------- 0 
 02.04.2011 01:53      C:\Users\Matthias\AppData\Local\Temp\divBC5B.tmp --------- 0 
 01.04.2011 06:22      C:\Users\Matthias\AppData\Local\Temp\CVR3294.tmp.cvr --------- 0 
 01.04.2011 06:22      C:\Users\Matthias\AppData\Local\Temp\144020.od --------- 134 
 01.04.2011 06:21      C:\Users\Matthias\AppData\Local\Temp\divC7D0.tmp --------- 0 
 31.03.2011 22:03      C:\Users\Matthias\AppData\Local\Temp\40909265.od --------- 134 
 31.03.2011 22:03      C:\Users\Matthias\AppData\Local\Temp\CVR39C1.tmp.cvr --------- 0 
 31.03.2011 14:32      C:\Users\Matthias\AppData\Local\Temp\13830409.od --------- 134 
 31.03.2011 14:32      C:\Users\Matthias\AppData\Local\Temp\CVR909.tmp.cvr --------- 0 
 31.03.2011 10:42      C:\Users\Matthias\AppData\Local\Temp\divD94D.tmp --------- 0 
 31.03.2011 08:23      C:\Users\Matthias\AppData\Local\Temp\274702.od --------- 134 
 31.03.2011 08:23      C:\Users\Matthias\AppData\Local\Temp\CVR310E.tmp.cvr --------- 0 
 31.03.2011 08:21      C:\Users\Matthias\AppData\Local\Temp\div3EE3.tmp --------- 0 
 30.03.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\1946518.od --------- 134 
 30.03.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\CVRB396.tmp.cvr --------- 0 
 30.03.2011 08:48      C:\Users\Matthias\AppData\Local\Temp\div94BF.tmp --------- 0 
 30.03.2011 00:14      C:\Users\Matthias\AppData\Local\Temp\divDE3D.tmp --------- 0 
 29.03.2011 22:20      C:\Users\Matthias\AppData\Local\Temp\plugtmp-109 --------- 0 
 29.03.2011 19:46      C:\Users\Matthias\AppData\Local\Temp\4962157.od --------- 134 
 29.03.2011 19:46      C:\Users\Matthias\AppData\Local\Temp\CVRB76D.tmp.cvr --------- 0 
 29.03.2011 17:46      C:\Users\Matthias\AppData\Local\Temp\~DFA9642B6DAE8CCF04.TMP --------- 512 
 29.03.2011 17:33      C:\Users\Matthias\AppData\Local\Temp\~DF147F9D72A8CB01A9.TMP --------- 512 
 29.03.2011 17:13      C:\Users\Matthias\AppData\Local\Temp\3976044.od --------- 134 
 29.03.2011 17:13      C:\Users\Matthias\AppData\Local\Temp\CVRAB5C.tmp.cvr --------- 0 
 29.03.2011 17:02      C:\Users\Matthias\AppData\Local\Temp\plugtmp-108 --------- 0 
 29.03.2011 16:42      C:\Users\Matthias\AppData\Local\Temp\2132424.od --------- 134 
 29.03.2011 16:42      C:\Users\Matthias\AppData\Local\Temp\CVR89C8.tmp.cvr --------- 0 
 29.03.2011 16:08      C:\Users\Matthias\AppData\Local\Temp\div1737.tmp --------- 0 
 29.03.2011 12:36      C:\Users\Matthias\AppData\Local\Temp\CVR5CDE.tmp --------- 0 
 29.03.2011 12:27      C:\Users\Matthias\AppData\Local\Temp\divB921.tmp --------- 0 
 29.03.2011 09:00      C:\Users\Matthias\AppData\Local\Temp\2439247.od --------- 134 
 29.03.2011 09:00      C:\Users\Matthias\AppData\Local\Temp\CVR383F.tmp.cvr --------- 0 
 29.03.2011 08:22      C:\Users\Matthias\AppData\Local\Temp\div7C50.tmp --------- 0 
 28.03.2011 23:46      C:\Users\Matthias\AppData\Local\Temp\divD029.tmp --------- 0 
 28.03.2011 21:56      C:\Users\Matthias\AppData\Local\Temp\2612860.od --------- 134 
 28.03.2011 21:56      C:\Users\Matthias\AppData\Local\Temp\CVRDE6D.tmp.cvr --------- 0 
 28.03.2011 21:14      C:\Users\Matthias\AppData\Local\Temp\divE916.tmp --------- 0 
 28.03.2011 20:39      C:\Users\Matthias\AppData\Local\Temp\9544187.od --------- 134 
 28.03.2011 20:39      C:\Users\Matthias\AppData\Local\Temp\CVRA1FB.tmp.cvr --------- 0 
 28.03.2011 20:30      C:\Users\Matthias\AppData\Local\Temp\plugtmp-107 --------- 0 
 28.03.2011 18:01      C:\Users\Matthias\AppData\Local\Temp\divC428.tmp --------- 0 
 28.03.2011 08:12      C:\Users\Matthias\AppData\Local\Temp\divA8CC.tmp --------- 0 
 27.03.2011 22:41      C:\Users\Matthias\AppData\Local\Temp\divAE48.tmp --------- 0 
 27.03.2011 17:16      C:\Users\Matthias\AppData\Local\Temp\divFD42.tmp --------- 0 
 27.03.2011 17:11      C:\Users\Matthias\AppData\Local\Temp\2724900.od --------- 134 
 27.03.2011 17:11      C:\Users\Matthias\AppData\Local\Temp\CVR9424.tmp.cvr --------- 0 
 27.03.2011 17:10      C:\Users\Matthias\AppData\Local\Temp\plugtmp-106 --------- 0 
 27.03.2011 16:27      C:\Users\Matthias\AppData\Local\Temp\divC206.tmp --------- 0 
 27.03.2011 16:25      C:\Users\Matthias\AppData\Local\Temp\Cab48DA.tmp --------- 30436 
 27.03.2011 16:21      C:\Users\Matthias\AppData\Local\Temp\plugtmp-105 --------- 0 
 27.03.2011 12:55      C:\Users\Matthias\AppData\Local\Temp\14952680.od --------- 134 
 27.03.2011 12:55      C:\Users\Matthias\AppData\Local\Temp\CVR28E8.tmp.cvr --------- 0 
 27.03.2011 09:14      C:\Users\Matthias\AppData\Local\Temp\1652721.od --------- 134 
 27.03.2011 09:14      C:\Users\Matthias\AppData\Local\Temp\CVR37F1.tmp.cvr --------- 0

privatejoker · 03.05.2011, 05:23

zweiter teil von hjtscanlist

Code:

ATTFilter

 27.03.2011 08:47      C:\Users\Matthias\AppData\Local\Temp\divB79B.tmp --------- 0 
 26.03.2011 23:50      C:\Users\Matthias\AppData\Local\Temp\divBAD5.tmp --------- 0 
 26.03.2011 23:05      C:\Users\Matthias\AppData\Local\Temp\899813.od --------- 134 
 26.03.2011 23:05      C:\Users\Matthias\AppData\Local\Temp\CVRBAE5.tmp.cvr --------- 0 
 26.03.2011 22:42      C:\Users\Matthias\AppData\Local\Temp\~DF12AE063AB3267C76.TMP --------- 512 
 26.03.2011 22:42      C:\Users\Matthias\AppData\Local\Temp\~DFE543E86DF89D8B84.TMP --------- 512 
 26.03.2011 22:40      C:\Users\Matthias\AppData\Local\Temp\~DFB986D44EB985928E.TMP --------- 16384 
 26.03.2011 21:59      C:\Users\Matthias\AppData\Local\Temp\~DF86B5D03C9816F9ED.TMP --------- 512 
 26.03.2011 21:22      C:\Users\Matthias\AppData\Local\Temp\plugtmp-104 --------- 0 
 26.03.2011 20:47      C:\Users\Matthias\AppData\Local\Temp\6042293.od --------- 134 
 26.03.2011 20:47      C:\Users\Matthias\AppData\Local\Temp\CVR32B5.tmp.cvr --------- 0 
 26.03.2011 20:07      C:\Users\Matthias\AppData\Local\Temp\3618068.od --------- 134 
 26.03.2011 20:07      C:\Users\Matthias\AppData\Local\Temp\CVR3514.tmp.cvr --------- 0 
 26.03.2011 19:07      C:\Users\Matthias\AppData\Local\Temp\divAD6D.tmp --------- 0 
 26.03.2011 11:56      C:\Users\Matthias\AppData\Local\Temp\10909274.od --------- 134 
 26.03.2011 11:56      C:\Users\Matthias\AppData\Local\Temp\CVR765A.tmp.cvr --------- 0 
 26.03.2011 11:23      C:\Users\Matthias\AppData\Local\Temp\plugtmp-103 --------- 0 
 26.03.2011 08:55      C:\Users\Matthias\AppData\Local\Temp\D614.dir --------- 0 
 26.03.2011 08:55      C:\Users\Matthias\AppData\Local\Temp\D614.tmp --------- 0 
 26.03.2011 08:55      C:\Users\Matthias\AppData\Local\Temp\divC3AB.tmp --------- 0 
 26.03.2011 01:51      C:\Users\Matthias\AppData\Local\Temp\17427027.od --------- 134 
 26.03.2011 01:51      C:\Users\Matthias\AppData\Local\Temp\CVREA53.tmp.cvr --------- 0 
 25.03.2011 21:02      C:\Users\Matthias\AppData\Local\Temp\CVRC715.tmp --------- 0 
 25.03.2011 21:02      C:\Users\Matthias\AppData\Local\Temp\div7C8E.tmp --------- 0 
 25.03.2011 20:01      C:\Users\Matthias\AppData\Local\Temp\CMNS247%20Assignment0-2.doc --------- 34304 
 25.03.2011 19:09      C:\Users\Matthias\AppData\Local\Temp\CMNS247%20Assignment0-1.doc --------- 34304 
 25.03.2011 15:36      C:\Users\Matthias\AppData\Local\Temp\plugtmp-102 --------- 0 
 25.03.2011 14:05      C:\Users\Matthias\AppData\Local\Temp\CMNS247%20Assignment0.doc --------- 34304 
 25.03.2011 14:04      C:\Users\Matthias\AppData\Local\Temp\Reilly%20247%20Full%20Syllabus%20winter%202011-1.doc --------- 44032 
 25.03.2011 13:42      C:\Users\Matthias\AppData\Local\Temp\4372817.od --------- 134 
 25.03.2011 13:42      C:\Users\Matthias\AppData\Local\Temp\CVRB951.tmp.cvr --------- 0 
 25.03.2011 12:30      C:\Users\Matthias\AppData\Local\Temp\divC33F.tmp --------- 0 
 25.03.2011 10:44      C:\Users\Matthias\AppData\Local\Temp\plugtmp-101 --------- 0 
 25.03.2011 08:16      C:\Users\Matthias\AppData\Local\Temp\divC36D.tmp --------- 0 
 24.03.2011 23:42      C:\Users\Matthias\AppData\Local\Temp\19031716.od --------- 134 
 24.03.2011 23:42      C:\Users\Matthias\AppData\Local\Temp\CVR66A4.tmp.cvr --------- 0 
 24.03.2011 21:54      C:\Users\Matthias\AppData\Local\Temp\12530437.od --------- 134 
 24.03.2011 21:54      C:\Users\Matthias\AppData\Local\Temp\CVR32A7.tmp.cvr --------- 0 
 24.03.2011 18:27      C:\Users\Matthias\AppData\Local\Temp\divC14B.tmp --------- 0 
 24.03.2011 17:53      C:\Users\Matthias\AppData\Local\Temp\divB490.tmp --------- 0 
 24.03.2011 16:16      C:\Users\Matthias\AppData\Local\Temp\5198858.od --------- 134 
 24.03.2011 16:16      C:\Users\Matthias\AppData\Local\Temp\CVR540A.tmp.cvr --------- 0 
 24.03.2011 15:22      C:\Users\Matthias\AppData\Local\Temp\plugtmp-100 --------- 0 
 24.03.2011 14:51      C:\Users\Matthias\AppData\Local\Temp\divBC9B.tmp --------- 0 
 24.03.2011 10:33      C:\Users\Matthias\AppData\Local\Temp\divDB41.tmp --------- 0 
 24.03.2011 09:11      C:\Users\Matthias\AppData\Local\Temp\2865473.od --------- 134 
 24.03.2011 09:11      C:\Users\Matthias\AppData\Local\Temp\CVRB941.tmp.cvr --------- 0 
 24.03.2011 08:25      C:\Users\Matthias\AppData\Local\Temp\divFE2C.tmp --------- 0 
 23.03.2011 23:36      C:\Users\Matthias\AppData\Local\Temp\divE2C0.tmp --------- 0 
 23.03.2011 22:03      C:\Users\Matthias\AppData\Local\Temp\plugtmp-99 --------- 0 
 23.03.2011 21:32      C:\Users\Matthias\AppData\Local\Temp\369223.od --------- 134 
 23.03.2011 21:32      C:\Users\Matthias\AppData\Local\Temp\CVRA247.tmp.cvr --------- 0 
 23.03.2011 21:27      C:\Users\Matthias\AppData\Local\Temp\divAA52.tmp --------- 0 
 23.03.2011 20:34      C:\Users\Matthias\AppData\Local\Temp\divB940.tmp --------- 0 
 23.03.2011 19:11      C:\Users\Matthias\AppData\Local\Temp\divAB5B.tmp --------- 0 
 23.03.2011 18:27      C:\Users\Matthias\AppData\Local\Temp\divAF51.tmp --------- 0 
 23.03.2011 18:03      C:\Users\Matthias\AppData\Local\Temp\CVR5215.tmp.cvr --------- 0 
 23.03.2011 18:03      C:\Users\Matthias\AppData\Local\Temp\86549.od --------- 134 
 23.03.2011 18:02      C:\Users\Matthias\AppData\Local\Temp\divAE0A.tmp --------- 0 
 23.03.2011 10:37      C:\Users\Matthias\AppData\Local\Temp\plugtmp-98 --------- 0 
 23.03.2011 08:58      C:\Users\Matthias\AppData\Local\Temp\368567.od --------- 134 
 23.03.2011 08:58      C:\Users\Matthias\AppData\Local\Temp\CVR9FB7.tmp.cvr --------- 0 
 23.03.2011 08:56      C:\Users\Matthias\AppData\Local\Temp\divFAE1.tmp --------- 0 
 23.03.2011 00:47      C:\Users\Matthias\AppData\Local\Temp\12436696.od --------- 134 
 23.03.2011 00:47      C:\Users\Matthias\AppData\Local\Temp\CVRC4D8.tmp.cvr --------- 0 
 22.03.2011 21:35      C:\Users\Matthias\AppData\Local\Temp\msdt --------- 0 
 22.03.2011 21:21      C:\Users\Matthias\AppData\Local\Temp\div9433.tmp --------- 0 
 22.03.2011 08:09      C:\Users\Matthias\AppData\Local\Temp\86642.od --------- 134 
 22.03.2011 08:09      C:\Users\Matthias\AppData\Local\Temp\CVR5272.tmp.cvr --------- 0 
 22.03.2011 08:08      C:\Users\Matthias\AppData\Local\Temp\divBB81.tmp --------- 0 
 21.03.2011 22:17      C:\Users\Matthias\AppData\Local\Temp\VEpcedsE.ppt.part --------- 1787904 
 21.03.2011 19:53      C:\Users\Matthias\AppData\Local\Temp\105675.od --------- 134 
 21.03.2011 19:53      C:\Users\Matthias\AppData\Local\Temp\CVR9CCB.tmp.cvr --------- 0 
 21.03.2011 19:52      C:\Users\Matthias\AppData\Local\Temp\divA755.tmp --------- 0 
 21.03.2011 18:58      C:\Users\Matthias\AppData\Local\Temp\plugtmp-97 --------- 0 
 21.03.2011 17:32      C:\Users\Matthias\AppData\Local\Temp\392545.od --------- 134 
 21.03.2011 17:32      C:\Users\Matthias\AppData\Local\Temp\CVRFD61.tmp.cvr --------- 0 
 21.03.2011 17:27      C:\Users\Matthias\AppData\Local\Temp\divAEC6.tmp --------- 0 
 21.03.2011 08:54      C:\Users\Matthias\AppData\Local\Temp\plugtmp-96 --------- 0 
 21.03.2011 08:35      C:\Users\Matthias\AppData\Local\Temp\2957794.od --------- 134 
 21.03.2011 08:35      C:\Users\Matthias\AppData\Local\Temp\CVR21E2.tmp.cvr --------- 0 
 21.03.2011 08:05      C:\Users\Matthias\AppData\Local\Temp\CVR229D.tmp.cvr --------- 0 
 21.03.2011 08:05      C:\Users\Matthias\AppData\Local\Temp\1122973.od --------- 134 
 21.03.2011 07:49      C:\Users\Matthias\AppData\Local\Temp\divDA09.tmp --------- 0 
 20.03.2011 23:15      C:\Users\Matthias\AppData\Local\Temp\divB683.tmp --------- 0 
 20.03.2011 22:49      C:\Users\Matthias\AppData\Local\Temp\CVR972F.tmp.cvr --------- 0 
 20.03.2011 22:49      C:\Users\Matthias\AppData\Local\Temp\300847.od --------- 134 
 20.03.2011 22:41      C:\Users\Matthias\AppData\Local\Temp\~DF00072A09A3CD2A88.TMP --------- 512 
 20.03.2011 22:24      C:\Users\Matthias\AppData\Local\Temp\1174016.od --------- 134 
 20.03.2011 22:24      C:\Users\Matthias\AppData\Local\Temp\CVREA00.tmp.cvr --------- 0 
 20.03.2011 22:05      C:\Users\Matthias\AppData\Local\Temp\divC090.tmp --------- 0 
 20.03.2011 21:39      C:\Users\Matthias\AppData\Local\Temp\divBD18.tmp --------- 0 
 20.03.2011 21:10      C:\Users\Matthias\AppData\Local\Temp\divD7A8.tmp --------- 0 
 20.03.2011 20:17      C:\Users\Matthias\AppData\Local\Temp\~DFDC96C644BF18BBEE.TMP --------- 16384 
 20.03.2011 19:49      C:\Users\Matthias\AppData\Local\Temp\plugtmp-95 --------- 0 
 20.03.2011 18:28      C:\Users\Matthias\AppData\Local\Temp\10493953.od --------- 134 
 20.03.2011 18:28      C:\Users\Matthias\AppData\Local\Temp\CVR2001.tmp.cvr --------- 0 
 20.03.2011 18:26      C:\Users\Matthias\AppData\Local\Temp\~DFDA333424F31DEF6E.TMP --------- 512 
 20.03.2011 18:26      C:\Users\Matthias\AppData\Local\Temp\10355315.od --------- 134 
 20.03.2011 18:26      C:\Users\Matthias\AppData\Local\Temp\CVR273.tmp.cvr --------- 0 
 20.03.2011 15:39      C:\Users\Matthias\AppData\Local\Temp\plugtmp-94 --------- 0 
 20.03.2011 15:34      C:\Users\Matthias\AppData\Local\Temp\divDC1B.tmp --------- 0 
 20.03.2011 13:52      C:\Users\Matthias\AppData\Local\Temp\SSRN-id1473864.pdf --------- 108911 
 20.03.2011 13:52      C:\Users\Matthias\AppData\Local\Temp\SSRN-id1473864-2.pdf --------- 108911 
 20.03.2011 13:31      C:\Users\Matthias\AppData\Local\Temp\plugtmp-93 --------- 0 
 20.03.2011 11:51      C:\Users\Matthias\AppData\Local\Temp\SSRN-id1473864-1.pdf --------- 108911 
 20.03.2011 10:59      C:\Users\Matthias\AppData\Local\Temp\7AD2.tmp --------- 3413 
 20.03.2011 08:11      C:\Users\Matthias\AppData\Local\Temp\CVR9201.tmp.cvr --------- 0 
 20.03.2011 08:11      C:\Users\Matthias\AppData\Local\Temp\233985.od --------- 134 
 20.03.2011 08:10      C:\Users\Matthias\AppData\Local\Temp\div1322.tmp --------- 0 
 19.03.2011 22:48      C:\Users\Matthias\AppData\Local\Temp\CVR37E1.tmp --------- 0 
 19.03.2011 10:05      C:\Users\Matthias\AppData\Local\Temp\6859067.od --------- 134 
 19.03.2011 10:05      C:\Users\Matthias\AppData\Local\Temp\CVRA8FD.tmp.cvr --------- 0 
 19.03.2011 08:17      C:\Users\Matthias\AppData\Local\Temp\380455.od --------- 134 
 19.03.2011 08:17      C:\Users\Matthias\AppData\Local\Temp\CVRCD4C.tmp.cvr --------- 0 
 19.03.2011 08:12      C:\Users\Matthias\AppData\Local\Temp\divB71E.tmp --------- 0 
 18.03.2011 22:17      C:\Users\Matthias\AppData\Local\Temp\6810332.od --------- 134 
 18.03.2011 22:17      C:\Users\Matthias\AppData\Local\Temp\CVREADC.tmp.cvr --------- 0 
 18.03.2011 20:25      C:\Users\Matthias\AppData\Local\Temp\divCD4C.tmp --------- 0 
 18.03.2011 16:30      C:\Users\Matthias\AppData\Local\Temp\CVR4D2.tmp.cvr --------- 0 
 18.03.2011 16:30      C:\Users\Matthias\AppData\Local\Temp\6554834.od --------- 134 
 18.03.2011 14:42      C:\Users\Matthias\AppData\Local\Temp\divB4EC.tmp --------- 0 
 18.03.2011 13:38      C:\Users\Matthias\AppData\Local\Temp\divF102.tmp --------- 0 
 18.03.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\9829170.od --------- 134 
 18.03.2011 11:31      C:\Users\Matthias\AppData\Local\Temp\CVRFB32.tmp.cvr --------- 0 
 18.03.2011 08:49      C:\Users\Matthias\AppData\Local\Temp\85847.od --------- 134 
 18.03.2011 08:49      C:\Users\Matthias\AppData\Local\Temp\CVR4F28.tmp.cvr --------- 0 
 18.03.2011 08:48      C:\Users\Matthias\AppData\Local\Temp\divCAEC.tmp --------- 0 
 17.03.2011 22:51      C:\Users\Matthias\AppData\Local\Temp\divD104.tmp --------- 0 
 17.03.2011 18:46      C:\Users\Matthias\AppData\Local\Temp\13384074.od --------- 134 
 17.03.2011 18:46      C:\Users\Matthias\AppData\Local\Temp\CVR398A.tmp.cvr --------- 0 
 17.03.2011 18:24      C:\Users\Matthias\AppData\Local\Temp\12042606.od --------- 134 
 17.03.2011 18:24      C:\Users\Matthias\AppData\Local\Temp\CVRC16E.tmp.cvr --------- 0 
 17.03.2011 18:24      C:\Users\Matthias\AppData\Local\Temp\CVRC16F.tmp.cvr --------- 0 
 17.03.2011 14:47      C:\Users\Matthias\AppData\Local\Temp\plugtmp-92 --------- 0 
 17.03.2011 08:56      C:\Users\Matthias\AppData\Local\Temp\1116733.od --------- 134 
 17.03.2011 08:56      C:\Users\Matthias\AppData\Local\Temp\CVRA3D.tmp.cvr --------- 0 
 17.03.2011 08:39      C:\Users\Matthias\AppData\Local\Temp\div80C3.tmp --------- 0 
 17.03.2011 00:53      C:\Users\Matthias\AppData\Local\Temp\56722525.od --------- 134 
 17.03.2011 00:53      C:\Users\Matthias\AppData\Local\Temp\CVR845D.tmp.cvr --------- 0 
 16.03.2011 09:10      C:\Users\Matthias\AppData\Local\Temp\134316.od --------- 134 
 16.03.2011 09:10      C:\Users\Matthias\AppData\Local\Temp\CVRC5E.tmp.cvr --------- 0 
 16.03.2011 09:08      C:\Users\Matthias\AppData\Local\Temp\divB48F.tmp --------- 0 
 15.03.2011 16:49      C:\Users\Matthias\AppData\Local\Temp\Set24FF.tmp --------- 107512 
 15.03.2011 16:31      C:\Users\Matthias\AppData\Local\Temp\CDBurnerXP-updates --------- 0 
 15.03.2011 15:53      C:\Users\Matthias\AppData\Local\Temp\83335.od --------- 134 
 15.03.2011 15:53      C:\Users\Matthias\AppData\Local\Temp\CVR4578.tmp.cvr --------- 0 
 15.03.2011 15:53      C:\Users\Matthias\AppData\Local\Temp\divCCC0.tmp --------- 0 
 15.03.2011 10:09      C:\Users\Matthias\AppData\Local\Temp\divD2E8.tmp --------- 0 
 15.03.2011 08:55      C:\Users\Matthias\AppData\Local\Temp\75816.od --------- 134 
 15.03.2011 08:55      C:\Users\Matthias\AppData\Local\Temp\CVR2828.tmp.cvr --------- 0 
 15.03.2011 08:55      C:\Users\Matthias\AppData\Local\Temp\divBC9A.tmp --------- 0 
 15.03.2011 01:22      C:\Users\Matthias\AppData\Local\Temp\div3735.tmp --------- 0 
 14.03.2011 22:41      C:\Users\Matthias\AppData\Local\Temp\7337319.od --------- 134 
 14.03.2011 22:41      C:\Users\Matthias\AppData\Local\Temp\CVRF567.tmp.cvr --------- 0 
 14.03.2011 22:39      C:\Users\Matthias\AppData\Local\Temp\div3D8C.tmp --------- 0 
 14.03.2011 17:59      C:\Users\Matthias\AppData\Local\Temp\fla300.tmp --------- 90164738 
 14.03.2011 17:59      C:\Users\Matthias\AppData\Local\Temp\plugtmp-91 --------- 0 
 14.03.2011 17:08      C:\Users\Matthias\AppData\Local\Temp\scoped_dir20115 --------- 0 
 14.03.2011 17:08      C:\Users\Matthias\AppData\Local\Temp\scoped_dir18337 --------- 0 
 14.03.2011 16:47      C:\Users\Matthias\AppData\Local\Temp\82649.od --------- 134 
 14.03.2011 16:47      C:\Users\Matthias\AppData\Local\Temp\CVR42BA.tmp.cvr --------- 0 
 14.03.2011 16:47      C:\Users\Matthias\AppData\Local\Temp\divAE19.tmp --------- 0 
 13.03.2011 23:05      C:\Users\Matthias\AppData\Local\Temp\349816.od --------- 134 
 13.03.2011 23:05      C:\Users\Matthias\AppData\Local\Temp\CVR5678.tmp.cvr --------- 0 
 13.03.2011 23:04      C:\Users\Matthias\AppData\Local\Temp\divE55E.tmp --------- 0 
 13.03.2011 11:28      C:\Users\Matthias\AppData\Local\Temp\plugtmp-89 --------- 0 
 13.03.2011 09:25      C:\Users\Matthias\AppData\Local\Temp\JAUReg.log --------- 575 
 13.03.2011 09:25      C:\Users\Matthias\AppData\Local\Temp\java_install_reg.log --------- 41913 
 13.03.2011 09:23      C:\Users\Matthias\AppData\Local\Temp\java_install_sp.log --------- 7378 
 13.03.2011 09:23      C:\Users\Matthias\AppData\Local\Temp\jinstall.cfg --------- 1275 
 13.03.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\CVR2D85.tmp.cvr --------- 0 
 13.03.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\208370.od --------- 134 
 13.03.2011 09:18      C:\Users\Matthias\AppData\Local\Temp\divB5F6.tmp --------- 0 
 13.03.2011 00:19      C:\Users\Matthias\AppData\Local\Temp\div9EED.tmp --------- 0 
 12.03.2011 23:05      C:\Users\Matthias\AppData\Local\Temp\plugtmp-88 --------- 0 
 12.03.2011 11:14      C:\Users\Matthias\AppData\Local\Temp\74287.od --------- 134 
 12.03.2011 11:14      C:\Users\Matthias\AppData\Local\Temp\CVR222F.tmp.cvr --------- 0 
 12.03.2011 11:14      C:\Users\Matthias\AppData\Local\Temp\divAF9F.tmp --------- 0 
 11.03.2011 21:30      C:\Users\Matthias\AppData\Local\Temp\divB337.tmp --------- 0 
 10.03.2011 07:37      C:\Users\Matthias\AppData\Local\Temp\div2FC.tmp --------- 0 
 09.03.2011 10:17      C:\Users\Matthias\AppData\Local\Temp\WMPBurn --------- 0 
 09.03.2011 08:44      C:\Users\Matthias\AppData\Local\Temp\213518.od --------- 134 
 09.03.2011 08:44      C:\Users\Matthias\AppData\Local\Temp\CVR41EF.tmp.cvr --------- 0 
 09.03.2011 08:43      C:\Users\Matthias\AppData\Local\Temp\div8DFC.tmp --------- 0 
 08.03.2011 15:39      C:\Users\Matthias\AppData\Local\Temp\divB7AA.tmp --------- 0 
 08.03.2011 10:08      C:\Users\Matthias\AppData\Local\Temp\2759876.od --------- 134 
 08.03.2011 10:08      C:\Users\Matthias\AppData\Local\Temp\CVR1CC4.tmp.cvr --------- 0 
 08.03.2011 09:24      C:\Users\Matthias\AppData\Local\Temp\107313.od --------- 134 
 08.03.2011 09:24      C:\Users\Matthias\AppData\Local\Temp\CVRA321.tmp.cvr --------- 0 
 07.03.2011 17:30      C:\Users\Matthias\AppData\Local\Temp\84646.od --------- 134 
 07.03.2011 17:30      C:\Users\Matthias\AppData\Local\Temp\CVR4A96.tmp.cvr --------- 0 
 07.03.2011 17:30      C:\Users\Matthias\AppData\Local\Temp\divAD7D.tmp --------- 0 
 07.03.2011 09:47      C:\Users\Matthias\AppData\Local\Temp\79872.od --------- 134 
 07.03.2011 09:46      C:\Users\Matthias\AppData\Local\Temp\divA68B.tmp --------- 0 
 06.03.2011 22:40      C:\Users\Matthias\AppData\Local\Temp\divACF1.tmp --------- 0 
 06.03.2011 13:14      C:\Users\Matthias\AppData\Local\Temp\14088590.od --------- 134 
 06.03.2011 13:14      C:\Users\Matthias\AppData\Local\Temp\CVRF98E.tmp.cvr --------- 0 
 06.03.2011 09:20      C:\Users\Matthias\AppData\Local\Temp\divA811.tmp --------- 0 
 06.03.2011 04:58      C:\Users\Matthias\AppData\Local\Temp\CVR711A.tmp.cvr --------- 0 
 06.03.2011 04:58      C:\Users\Matthias\AppData\Local\Temp\880922.od --------- 134 
 06.03.2011 04:44      C:\Users\Matthias\AppData\Local\Temp\divCDC9.tmp --------- 0 
 05.03.2011 15:25      C:\Users\Matthias\AppData\Local\Temp\div36D8.tmp --------- 0 
 05.03.2011 10:26      C:\Users\Matthias\AppData\Local\Temp\245732.od --------- 134 
 05.03.2011 10:26      C:\Users\Matthias\AppData\Local\Temp\CVRBFE4.tmp.cvr --------- 0 
 05.03.2011 00:58      C:\Users\Matthias\AppData\Local\Temp\129761.od --------- 134 
 05.03.2011 00:58      C:\Users\Matthias\AppData\Local\Temp\CVRFAC2.tmp.cvr --------- 0 
 05.03.2011 00:57      C:\Users\Matthias\AppData\Local\Temp\divC051.tmp --------- 0 
 04.03.2011 17:48      C:\Users\Matthias\AppData\Local\Temp\11485682.od --------- 134 
 04.03.2011 17:48      C:\Users\Matthias\AppData\Local\Temp\CVR41F2.tmp.cvr --------- 0 
 04.03.2011 17:06      C:\Users\Matthias\AppData\Local\Temp\8973161.od --------- 134 
 04.03.2011 17:06      C:\Users\Matthias\AppData\Local\Temp\CVREB69.tmp.cvr --------- 0 
 04.03.2011 14:59      C:\Users\Matthias\AppData\Local\Temp\1347489.od --------- 134 
 04.03.2011 14:59      C:\Users\Matthias\AppData\Local\Temp\CVR8FA1.tmp.cvr --------- 0 
 04.03.2011 14:37      C:\Users\Matthias\AppData\Local\Temp\divA88D.tmp --------- 0 
 04.03.2011 14:34      C:\Users\Matthias\AppData\Local\Temp\77548.od --------- 134 
 04.03.2011 14:34      C:\Users\Matthias\AppData\Local\Temp\CVR2DE2.tmp.cvr --------- 0 
 04.03.2011 14:34      C:\Users\Matthias\AppData\Local\Temp\divC264.tmp --------- 0 
 04.03.2011 12:19      C:\Users\Matthias\AppData\Local\Temp\jar_cache3329656530103768022.tmp --------- 0 
 04.03.2011 12:19      C:\Users\Matthias\AppData\Local\Temp\jar_cache5327999718360826186.tmp --------- 0 
 04.03.2011 12:18      C:\Users\Matthias\AppData\Local\Temp\plugtmp-86 --------- 0 
 04.03.2011 10:13      C:\Users\Matthias\AppData\Local\Temp\84724.od --------- 134 
 04.03.2011 10:13      C:\Users\Matthias\AppData\Local\Temp\CVR4AC5.tmp.cvr --------- 0 
 04.03.2011 10:12      C:\Users\Matthias\AppData\Local\Temp\divB579.tmp --------- 0 
 03.03.2011 19:29      C:\Users\Matthias\AppData\Local\Temp\35656898.od --------- 134 
 03.03.2011 19:29      C:\Users\Matthias\AppData\Local\Temp\CVR14C2.tmp.cvr --------- 0 
 03.03.2011 18:05      C:\Users\Matthias\AppData\Local\Temp\CVREA9.tmp --------- 0 
 03.03.2011 10:00      C:\Users\Matthias\AppData\Local\Temp\1459202.od --------- 134 
 03.03.2011 10:00      C:\Users\Matthias\AppData\Local\Temp\CVR4402.tmp.cvr --------- 0 
 03.03.2011 09:38      C:\Users\Matthias\AppData\Local\Temp\div5CCE.tmp --------- 0 
 02.03.2011 23:26      C:\Users\Matthias\AppData\Local\Temp\41337269.od --------- 134 
 02.03.2011 23:26      C:\Users\Matthias\AppData\Local\Temp\CVRC1B5.tmp.cvr --------- 0 
 02.03.2011 15:36      C:\Users\Matthias\AppData\Local\Temp\13096705.od --------- 134 
 02.03.2011 15:36      C:\Users\Matthias\AppData\Local\Temp\CVRD701.tmp.cvr --------- 0 
 02.03.2011 15:20      C:\Users\Matthias\AppData\Local\Temp\divCCA1.tmp --------- 0 
 02.03.2011 09:35      C:\Users\Matthias\AppData\Local\Temp\206935.od --------- 134 
 02.03.2011 09:35      C:\Users\Matthias\AppData\Local\Temp\CVR2838.tmp.cvr --------- 0 
 02.03.2011 09:32      C:\Users\Matthias\AppData\Local\Temp\divB77B.tmp --------- 0 
 02.03.2011 00:19      C:\Users\Matthias\AppData\Local\Temp\53605703.od --------- 134 
 02.03.2011 00:19      C:\Users\Matthias\AppData\Local\Temp\CVRF547.tmp.cvr --------- 0 
 02.03.2011 00:19      C:\Users\Matthias\AppData\Local\Temp\CVRF3D0.tmp --------- 0 
 01.03.2011 16:42      C:\Users\Matthias\AppData\Local\Temp\Tar48DB.tmp --------- 84055 
 01.03.2011 09:34      C:\Users\Matthias\AppData\Local\Temp\485397.od --------- 134 
 01.03.2011 09:34      C:\Users\Matthias\AppData\Local\Temp\CVR6805.tmp.cvr --------- 0 
 01.03.2011 09:27      C:\Users\Matthias\AppData\Local\Temp\divC62B.tmp --------- 0 
 28.02.2011 23:07      C:\Users\Matthias\AppData\Local\Temp\ge3736 --------- 0 
 28.02.2011 22:52      C:\Users\Matthias\AppData\Local\Temp\11575040.od --------- 134 
 28.02.2011 22:52      C:\Users\Matthias\AppData\Local\Temp\CVR9F00.tmp.cvr --------- 0 
 28.02.2011 22:50      C:\Users\Matthias\AppData\Local\Temp\~DFEE90D0650DE5360A.TMP --------- 16384 
 28.02.2011 22:50      C:\Users\Matthias\AppData\Local\Temp\VBE --------- 0 
 28.02.2011 22:49      C:\Users\Matthias\AppData\Local\Temp\11346982.od --------- 134 
 28.02.2011 22:49      C:\Users\Matthias\AppData\Local\Temp\CVR2426.tmp.cvr --------- 0 
 28.02.2011 22:11      C:\Users\Matthias\AppData\Local\Temp\ge3212 --------- 0 
 28.02.2011 22:05      C:\Users\Matthias\AppData\Local\Temp\geColladaModelCacheLock --------- 0 
 28.02.2011 22:05      C:\Users\Matthias\AppData\Local\Temp\geIconCacheLock --------- 0 
 28.02.2011 22:03      C:\Users\Matthias\AppData\Local\Temp\is822C.tmp --------- 0 
 28.02.2011 22:03      C:\Users\Matthias\AppData\Local\Temp\._msigeplugin60 --------- 0 
 28.02.2011 21:11      C:\Users\Matthias\AppData\Local\Temp\5496055.od --------- 134 
 28.02.2011 21:11      C:\Users\Matthias\AppData\Local\Temp\CVRDCF7.tmp.cvr --------- 0 
 28.02.2011 19:41      C:\Users\Matthias\AppData\Local\Temp\div73D7.tmp --------- 0 
 28.02.2011 18:37      C:\Users\Matthias\AppData\Local\Temp\plugtmp-85 --------- 0 
 28.02.2011 13:34      C:\Users\Matthias\AppData\Local\Temp\divC773.tmp --------- 0 
 28.02.2011 13:34      C:\Users\Matthias\AppData\Local\Temp\71557.od --------- 134 
 28.02.2011 13:34      C:\Users\Matthias\AppData\Local\Temp\CVR16F9.tmp.cvr --------- 0 
 28.02.2011 09:43      C:\Users\Matthias\AppData\Local\Temp\plugtmp-84 --------- 0 
 28.02.2011 09:08      C:\Users\Matthias\AppData\Local\Temp\divC689.tmp --------- 0 
 28.02.2011 00:32      C:\Users\Matthias\AppData\Local\Temp\plugtmp-83 --------- 0 
 27.02.2011 18:58      C:\Users\Matthias\AppData\Local\Temp\106455.od --------- 134 
 27.02.2011 18:58      C:\Users\Matthias\AppData\Local\Temp\CVR9F98.tmp.cvr --------- 0 
 27.02.2011 18:57      C:\Users\Matthias\AppData\Local\Temp\divC447.tmp --------- 0 
 27.02.2011 17:37      C:\Users\Matthias\AppData\Local\Temp\plugtmp-82 --------- 0 
 27.02.2011 14:53      C:\Users\Matthias\AppData\Local\Temp\div3B5A.tmp --------- 0 
 27.02.2011 10:27      C:\Users\Matthias\AppData\Local\Temp\205968.od --------- 134 
 27.02.2011 10:27      C:\Users\Matthias\AppData\Local\Temp\CVR2490.tmp.cvr --------- 0 
 26.02.2011 12:35      C:\Users\Matthias\AppData\Local\Temp\10046355.od --------- 134 
 26.02.2011 12:35      C:\Users\Matthias\AppData\Local\Temp\CVR4B83.tmp.cvr --------- 0 
 26.02.2011 09:51      C:\Users\Matthias\AppData\Local\Temp\FlashPlayerUpdate.exe --------- 2871968 
 26.02.2011 09:51      C:\Users\Matthias\AppData\Local\Temp\div254B.tmp --------- 0 
 25.02.2011 09:29      C:\Users\Matthias\AppData\Local\Temp\269476.od --------- 134 
 25.02.2011 09:29      C:\Users\Matthias\AppData\Local\Temp\CVR17D3.tmp.cvr --------- 0 
 25.02.2011 09:27      C:\Users\Matthias\AppData\Local\Temp\div63F0.tmp --------- 0 
 24.02.2011 12:35      C:\Users\Matthias\AppData\Local\Temp\11358557.od --------- 134 
 24.02.2011 12:35      C:\Users\Matthias\AppData\Local\Temp\CVR515D.tmp.cvr --------- 0 
 24.02.2011 12:25      C:\Users\Matthias\AppData\Local\Temp\10717409.od --------- 134 
 24.02.2011 12:25      C:\Users\Matthias\AppData\Local\Temp\CVR88D1.tmp.cvr --------- 0 
 24.02.2011 09:57      C:\Users\Matthias\AppData\Local\Temp\div250.tmp --------- 0 
 24.02.2011 09:28      C:\Users\Matthias\AppData\Local\Temp\CVRD029.tmp.cvr --------- 0 
 24.02.2011 09:28      C:\Users\Matthias\AppData\Local\Temp\118841.od --------- 134 
 24.02.2011 00:00      C:\Users\Matthias\AppData\Local\Temp\51831722.od --------- 134 
 24.02.2011 00:00      C:\Users\Matthias\AppData\Local\Temp\CVRE3AA.tmp.cvr --------- 0 
 23.02.2011 23:42      C:\Users\Matthias\AppData\Local\Temp\50737749.od --------- 134 
 23.02.2011 23:42      C:\Users\Matthias\AppData\Local\Temp\CVR3255.tmp.cvr --------- 0 
 23.02.2011 22:38      C:\Users\Matthias\AppData\Local\Temp\46927128.od --------- 134 
 23.02.2011 22:38      C:\Users\Matthias\AppData\Local\Temp\CVRD18.tmp.cvr --------- 0 
 23.02.2011 21:11      C:\Users\Matthias\AppData\Local\Temp\41723793.od --------- 134 
 23.02.2011 21:11      C:\Users\Matthias\AppData\Local\Temp\CVRA791.tmp.cvr --------- 0 
 23.02.2011 21:11      C:\Users\Matthias\AppData\Local\Temp\41695666.od --------- 134 
 23.02.2011 21:11      C:\Users\Matthias\AppData\Local\Temp\CVR39B2.tmp.cvr --------- 0 
 23.02.2011 21:00      C:\Users\Matthias\AppData\Local\Temp\41031102.od --------- 134 
 23.02.2011 21:00      C:\Users\Matthias\AppData\Local\Temp\CVR15AE.tmp.cvr --------- 0 
 23.02.2011 21:00      C:\Users\Matthias\AppData\Local\Temp\41010915.od --------- 134 
 23.02.2011 21:00      C:\Users\Matthias\AppData\Local\Temp\CVRC6E3.tmp.cvr --------- 0 
 23.02.2011 20:59      C:\Users\Matthias\AppData\Local\Temp\40994785.od --------- 134 
 23.02.2011 20:59      C:\Users\Matthias\AppData\Local\Temp\CVR87E1.tmp.cvr --------- 0 
 23.02.2011 20:59      C:\Users\Matthias\AppData\Local\Temp\40968015.od --------- 134 
 23.02.2011 20:59      C:\Users\Matthias\AppData\Local\Temp\CVR1F4F.tmp.cvr --------- 0 
 23.02.2011 20:58      C:\Users\Matthias\AppData\Local\Temp\40947298.od --------- 134 
 23.02.2011 20:58      C:\Users\Matthias\AppData\Local\Temp\CVRCE62.tmp.cvr --------- 0 
 23.02.2011 20:20      C:\Users\Matthias\AppData\Local\Temp\38608250.od --------- 134 
 23.02.2011 20:20      C:\Users\Matthias\AppData\Local\Temp\CVR1D7A.tmp.cvr --------- 0 
 23.02.2011 20:11      C:\Users\Matthias\AppData\Local\Temp\38089313.od --------- 134 
 23.02.2011 20:11      C:\Users\Matthias\AppData\Local\Temp\CVR3261.tmp.cvr --------- 0 
 23.02.2011 19:32      C:\Users\Matthias\AppData\Local\Temp\35769687.od --------- 134 
 23.02.2011 19:32      C:\Users\Matthias\AppData\Local\Temp\CVRCD57.tmp.cvr --------- 0 
 23.02.2011 19:32      C:\Users\Matthias\AppData\Local\Temp\35756957.od --------- 134 
 23.02.2011 19:32      C:\Users\Matthias\AppData\Local\Temp\CVR9B8E.tmp.cvr --------- 0 
 23.02.2011 18:00      C:\Users\Matthias\AppData\Local\Temp\30225630.od --------- 134 
 23.02.2011 18:00      C:\Users\Matthias\AppData\Local\Temp\CVR34DE.tmp.cvr --------- 0 
 23.02.2011 17:48      C:\Users\Matthias\AppData\Local\Temp\29490444.od --------- 134 
 23.02.2011 17:48      C:\Users\Matthias\AppData\Local\Temp\CVRFD0C.tmp.cvr --------- 0 
 23.02.2011 10:05      C:\Users\Matthias\AppData\Local\Temp\1741751.od --------- 134 
 23.02.2011 10:05      C:\Users\Matthias\AppData\Local\Temp\CVR93B7.tmp.cvr --------- 0 
 23.02.2011 10:05      C:\Users\Matthias\AppData\Local\Temp\1741688.od --------- 134 
 23.02.2011 10:05      C:\Users\Matthias\AppData\Local\Temp\CVR9378.tmp.cvr --------- 0 
 23.02.2011 09:37      C:\Users\Matthias\AppData\Local\Temp\divC4D6.tmp --------- 0 
 23.02.2011 01:27      C:\Users\Matthias\AppData\Local\Temp\plugtmp-81 --------- 0 
 22.02.2011 23:32      C:\Users\Matthias\AppData\Local\Temp\5406183.od --------- 134 
 22.02.2011 23:32      C:\Users\Matthias\AppData\Local\Temp\CVR7DE7.tmp.cvr --------- 0 
 22.02.2011 23:26      C:\Users\Matthias\AppData\Local\Temp\5050641.od --------- 134 
 22.02.2011 23:26      C:\Users\Matthias\AppData\Local\Temp\CVR1101.tmp.cvr --------- 0 
 22.02.2011 22:03      C:\Users\Matthias\AppData\Local\Temp\divC225.tmp --------- 0 
 22.02.2011 22:01      C:\Users\Matthias\AppData\Local\Temp\48413709.od --------- 134 
 22.02.2011 22:01      C:\Users\Matthias\AppData\Local\Temp\CVRBC0D.tmp.cvr --------- 0 
 22.02.2011 21:57      C:\Users\Matthias\AppData\Local\Temp\48206071.od --------- 134 
 22.02.2011 21:57      C:\Users\Matthias\AppData\Local\Temp\CVR90F7.tmp.cvr --------- 0 
 22.02.2011 21:48      C:\Users\Matthias\AppData\Local\Temp\~DF095DA7D788BBF50C.TMP --------- 512 
 22.02.2011 21:17      C:\Users\Matthias\AppData\Local\Temp\45789210.od --------- 134 
 22.02.2011 21:17      C:\Users\Matthias\AppData\Local\Temp\CVRB01A.tmp.cvr --------- 0 
 22.02.2011 20:43      C:\Users\Matthias\AppData\Local\Temp\43767562.od --------- 134 
 22.02.2011 20:43      C:\Users\Matthias\AppData\Local\Temp\CVRD6FA.tmp.cvr --------- 0 
 22.02.2011 20:40      C:\Users\Matthias\AppData\Local\Temp\43580454.od --------- 134 
 22.02.2011 20:40      C:\Users\Matthias\AppData\Local\Temp\CVRFC26.tmp.cvr --------- 0 
 22.02.2011 17:44      C:\Users\Matthias\AppData\Local\Temp\33014148.od --------- 134 
 22.02.2011 17:44      C:\Users\Matthias\AppData\Local\Temp\CVRC184.tmp.cvr --------- 0 
 22.02.2011 17:35      C:\Users\Matthias\AppData\Local\Temp\32460828.od --------- 134 
 22.02.2011 17:35      C:\Users\Matthias\AppData\Local\Temp\CVR501C.tmp.cvr --------- 0 
 22.02.2011 14:33      C:\Users\Matthias\AppData\Local\Temp\wX7AiaQt.doc.part --------- 30208 
 22.02.2011 08:35      C:\Users\Matthias\AppData\Local\Temp\81385.od --------- 134 
 22.02.2011 08:35      C:\Users\Matthias\AppData\Local\Temp\CVR3DDA.tmp.cvr --------- 0 
 22.02.2011 08:35      C:\Users\Matthias\AppData\Local\Temp\divB588.tmp --------- 0 
 21.02.2011 17:11      C:\Users\Matthias\AppData\Local\Temp\Term%20paper%20ideas0.doc --------- 30208 
 21.02.2011 17:10      C:\Users\Matthias\AppData\Local\Temp\CVR981.tmp --------- 0 
 21.02.2011 16:52      C:\Users\Matthias\AppData\Local\Temp\CVR4BFD.tmp.cvr --------- 0 
 21.02.2011 16:52      C:\Users\Matthias\AppData\Local\Temp\85036.od --------- 134 
 21.02.2011 16:51      C:\Users\Matthias\AppData\Local\Temp\divC032.tmp --------- 0 
 21.02.2011 09:53      C:\Users\Matthias\AppData\Local\Temp\2342932.od --------- 134 
 21.02.2011 09:53      C:\Users\Matthias\AppData\Local\Temp\CVRC014.tmp.cvr --------- 0 
 21.02.2011 09:45      C:\Users\Matthias\AppData\Local\Temp\divC8AC.tmp --------- 0 
 21.02.2011 09:27      C:\Users\Matthias\AppData\Local\Temp\CVR1045.tmp.cvr --------- 0 
 21.02.2011 09:27      C:\Users\Matthias\AppData\Local\Temp\790597.od --------- 134 
 21.02.2011 01:10      C:\Users\Matthias\AppData\Local\Temp\55765599.od --------- 134 
 21.02.2011 01:10      C:\Users\Matthias\AppData\Local\Temp\CVREA4F.tmp.cvr --------- 0 
 21.02.2011 00:41      C:\Users\Matthias\AppData\Local\Temp\plugtmp-80 --------- 0 
 20.02.2011 09:45      C:\Users\Matthias\AppData\Local\Temp\267416.od --------- 134 
 20.02.2011 09:45      C:\Users\Matthias\AppData\Local\Temp\CVR1489.tmp.cvr --------- 0 
 20.02.2011 09:43      C:\Users\Matthias\AppData\Local\Temp\div479A.tmp --------- 0 
 19.02.2011 10:45      C:\Users\Matthias\AppData\Local\Temp\CVR8017.tmp.cvr --------- 0 
 19.02.2011 10:45      C:\Users\Matthias\AppData\Local\Temp\491543.od --------- 134 
 19.02.2011 10:39      C:\Users\Matthias\AppData\Local\Temp\divE05F.tmp --------- 0 
 19.02.2011 01:22      C:\Users\Matthias\AppData\Local\Temp\divC753.tmp --------- 0 
 18.02.2011 19:49      C:\Users\Matthias\AppData\Local\Temp\divCE28.tmp --------- 0 
 18.02.2011 17:23      C:\Users\Matthias\AppData\Local\Temp\plugtmp-79 --------- 0 
 18.02.2011 17:07      C:\Users\Matthias\AppData\Local\Temp\3047495.od --------- 134 
 18.02.2011 17:07      C:\Users\Matthias\AppData\Local\Temp\CVR8047.tmp.cvr --------- 0 
 18.02.2011 16:17      C:\Users\Matthias\AppData\Local\Temp\divBAC6.tmp --------- 0 
 18.02.2011 13:31      C:\Users\Matthias\AppData\Local\Temp\1523037.od --------- 134 
 18.02.2011 13:31      C:\Users\Matthias\AppData\Local\Temp\CVR3D5D.tmp --------- 0 
 18.02.2011 13:08      C:\Users\Matthias\AppData\Local\Temp\140556.od --------- 134 
 18.02.2011 13:08      C:\Users\Matthias\AppData\Local\Temp\CVR24FD.tmp.cvr --------- 0 
 18.02.2011 13:07      C:\Users\Matthias\AppData\Local\Temp\CVR5DD8.tmp.cvr --------- 0 
 18.02.2011 13:07      C:\Users\Matthias\AppData\Local\Temp\89606.od --------- 134 
 18.02.2011 13:06      C:\Users\Matthias\AppData\Local\Temp\divB7F9.tmp --------- 0 
 18.02.2011 11:08      C:\Users\Matthias\AppData\Local\Temp\2651252.od --------- 134 
 18.02.2011 11:08      C:\Users\Matthias\AppData\Local\Temp\CVR7464.tmp.cvr --------- 0 
 18.02.2011 10:24      C:\Users\Matthias\AppData\Local\Temp\divB4FC.tmp --------- 0 
 18.02.2011 02:29      C:\Users\Matthias\AppData\Local\Temp\divB4CD.tmp --------- 0 
 18.02.2011 02:05      C:\Users\Matthias\AppData\Local\Temp\391032.od --------- 134 
 18.02.2011 02:05      C:\Users\Matthias\AppData\Local\Temp\CVRF778.tmp.cvr --------- 0 
 17.02.2011 20:54      C:\Users\Matthias\AppData\Local\Temp\CVR9C0.tmp --------- 0 
 17.02.2011 20:54      C:\Users\Matthias\AppData\Local\Temp\divB644.tmp --------- 0 
 17.02.2011 20:03      C:\Users\Matthias\AppData\Local\Temp\divA3DC.tmp --------- 0 
 16.02.2011 18:36      C:\Users\Matthias\AppData\Local\Temp\divB25D.tmp --------- 0 
 16.02.2011 18:25      C:\Users\Matthias\AppData\Local\Temp\divAFAF.tmp --------- 0 
 16.02.2011 18:22      C:\Users\Matthias\AppData\Local\Temp\CVREB93.tmp.cvr --------- 0 
 16.02.2011 18:22      C:\Users\Matthias\AppData\Local\Temp\195619731.od --------- 134 
 16.02.2011 16:31      C:\Users\Matthias\AppData\Local\Temp\188986397.od --------- 134 
 16.02.2011 16:31      C:\Users\Matthias\AppData\Local\Temp\CVRB41D.tmp.cvr --------- 0 
 14.02.2011 22:39      C:\Users\Matthias\AppData\Local\Temp\38279150.od --------- 134 
 14.02.2011 22:39      C:\Users\Matthias\AppData\Local\Temp\CVR17EE.tmp.cvr --------- 0 
 14.02.2011 14:42      C:\Users\Matthias\AppData\Local\Temp\9611674.od --------- 134 
 14.02.2011 14:42      C:\Users\Matthias\AppData\Local\Temp\CVRA98A.tmp.cvr --------- 0 
 14.02.2011 14:23      C:\Users\Matthias\AppData\Local\Temp\divA6C9.tmp --------- 0 
 14.02.2011 14:20      C:\Users\Matthias\AppData\Local\Temp\CVR9992.tmp.cvr --------- 0 
 14.02.2011 14:20      C:\Users\Matthias\AppData\Local\Temp\8296850.od --------- 134 
 14.02.2011 14:17      C:\Users\Matthias\AppData\Local\Temp\8127761.od --------- 134 
 14.02.2011 14:17      C:\Users\Matthias\AppData\Local\Temp\CVR511.tmp.cvr --------- 0 
 14.02.2011 14:17      C:\Users\Matthias\AppData\Local\Temp\8113736.od --------- 134 
 14.02.2011 14:17      C:\Users\Matthias\AppData\Local\Temp\CVRCE48.tmp.cvr --------- 0 
 14.02.2011 14:13      C:\Users\Matthias\AppData\Local\Temp\7886162.od --------- 134 
 14.02.2011 14:13      C:\Users\Matthias\AppData\Local\Temp\CVR5552.tmp.cvr --------- 0 
 14.02.2011 12:06      C:\Users\Matthias\AppData\Local\Temp\CVR5B0A.tmp.cvr --------- 0 
 14.02.2011 12:06      C:\Users\Matthias\AppData\Local\Temp\285450.od --------- 134 
 13.02.2011 23:48      C:\Users\Matthias\AppData\Local\Temp\29264539.od --------- 134 
 13.02.2011 23:48      C:\Users\Matthias\AppData\Local\Temp\CVR8A6C.tmp.cvr --------- 0 
 13.02.2011 21:08      C:\Users\Matthias\AppData\Local\Temp\BFB1.tmp --------- 2493 
 13.02.2011 17:03      C:\Users\Matthias\AppData\Local\Temp\5000487.od --------- 134 
 13.02.2011 17:03      C:\Users\Matthias\AppData\Local\Temp\CVR4D27.tmp.cvr --------- 0 
 13.02.2011 15:41      C:\Users\Matthias\AppData\Local\Temp\divAB6B.tmp --------- 0 
 12.02.2011 19:16      C:\Users\Matthias\AppData\Local\Temp\180040.od --------- 134 
 12.02.2011 19:16      C:\Users\Matthias\AppData\Local\Temp\CVRBF48.tmp.cvr --------- 0 
 12.02.2011 19:14      C:\Users\Matthias\AppData\Local\Temp\divB04B.tmp --------- 0 
 11.02.2011 14:20      C:\Users\Matthias\AppData\Local\Temp\divB846.tmp --------- 0 
 11.02.2011 14:03      C:\Users\Matthias\AppData\Local\Temp\AUCHECK_MAP_41.xml --------- 2533 
 11.02.2011 11:34      C:\Users\Matthias\AppData\Local\Temp\divD113.tmp --------- 0 
 10.02.2011 15:47      C:\Users\Matthias\AppData\Local\Temp\22166696.od --------- 134 
 10.02.2011 15:47      C:\Users\Matthias\AppData\Local\Temp\CVR3CA8.tmp.cvr --------- 0 
 10.02.2011 09:40      C:\Users\Matthias\AppData\Local\Temp\132320.od --------- 134 
 10.02.2011 09:40      C:\Users\Matthias\AppData\Local\Temp\CVR4B1.tmp.cvr --------- 0 
 10.02.2011 09:39      C:\Users\Matthias\AppData\Local\Temp\div91B3.tmp --------- 0 
 09.02.2011 17:48      C:\Users\Matthias\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe --------- 885536 
 09.02.2011 09:38      C:\Users\Matthias\AppData\Local\Temp\95082.od --------- 134 
 09.02.2011 09:38      C:\Users\Matthias\AppData\Local\Temp\CVR735B.tmp.cvr --------- 0 
 09.02.2011 09:37      C:\Users\Matthias\AppData\Local\Temp\divC9D4.tmp --------- 0 
 08.02.2011 21:23      C:\Users\Matthias\AppData\Local\Temp\2017607.od --------- 134 
 08.02.2011 21:23      C:\Users\Matthias\AppData\Local\Temp\CVRC947.tmp.cvr --------- 0 
 08.02.2011 20:50      C:\Users\Matthias\AppData\Local\Temp\div50E.tmp --------- 0 
 08.02.2011 19:05      C:\Users\Matthias\AppData\Local\Temp\plugtmp-78 --------- 0 
 08.02.2011 18:53      C:\Users\Matthias\AppData\Local\Temp\Reilly%20247%20Full%20Syllabus%20winter%202011.doc --------- 44032 
 08.02.2011 10:25      C:\Users\Matthias\AppData\Local\Temp\7673299.od --------- 134 
 08.02.2011 10:25      C:\Users\Matthias\AppData\Local\Temp\CVR15D3.tmp.cvr --------- 0 
 08.02.2011 09:41      C:\Users\Matthias\AppData\Local\Temp\CVRFA95.tmp --------- 0 
 08.02.2011 09:40      C:\Users\Matthias\AppData\Local\Temp\xxx995_20110207.pdf --------- 82321 
 08.02.2011 09:40      C:\Users\Matthias\AppData\Local\Temp\oUyj4rf5.pdf.part --------- 82321 
 08.02.2011 08:29      C:\Users\Matthias\AppData\Local\Temp\681708.od --------- 134 
 08.02.2011 08:29      C:\Users\Matthias\AppData\Local\Temp\CVR66DD.tmp.cvr --------- 0 
 08.02.2011 08:22      C:\Users\Matthias\AppData\Local\Temp\fla9E72.tmp --------- 6666476 
 08.02.2011 08:21      C:\Users\Matthias\AppData\Local\Temp\div7C6F.tmp --------- 0 
 07.02.2011 23:42      C:\Users\Matthias\AppData\Local\Temp\plugtmp-77 --------- 0 
 07.02.2011 23:03      C:\Users\Matthias\AppData\Local\Temp\div58B.tmp --------- 0 
 07.02.2011 22:35      C:\Users\Matthias\AppData\Local\Temp\ReadingsSpring2011.doc --------- 32256 
 07.02.2011 22:34      C:\Users\Matthias\AppData\Local\Temp\plugtmp-76 --------- 0 
 07.02.2011 09:41      C:\Users\Matthias\AppData\Local\Temp\WS10_2011-01-03_Macroeconomics_Vieregge.pdf --------- 9131 
 07.02.2011 09:41      C:\Users\Matthias\AppData\Local\Temp\WS10_2011-01-17_Macroeconomics_Vieregge.pdf --------- 8341 
 07.02.2011 08:52      C:\Users\Matthias\AppData\Local\Temp\CVRD49C.tmp.cvr --------- 0 
 07.02.2011 08:52      C:\Users\Matthias\AppData\Local\Temp\251036.od --------- 134 
 06.02.2011 19:25      C:\Users\Matthias\AppData\Local\Temp\63788.od --------- 134 
 06.02.2011 19:25      C:\Users\Matthias\AppData\Local\Temp\CVRF92C.tmp.cvr --------- 0 
 06.02.2011 19:24      C:\Users\Matthias\AppData\Local\Temp\divAF61.tmp --------- 0 
 06.02.2011 10:33      C:\Users\Matthias\AppData\Local\Temp\plugtmp-75 --------- 0 
 06.02.2011 09:15      C:\Users\Matthias\AppData\Local\Temp\210226.od --------- 134 
 06.02.2011 09:15      C:\Users\Matthias\AppData\Local\Temp\CVR34F4.tmp.cvr --------- 0 
 06.02.2011 09:14      C:\Users\Matthias\AppData\Local\Temp\divE12A.tmp --------- 0 
 05.02.2011 22:44      C:\Users\Matthias\AppData\Local\Temp\plugtmp-74 --------- 0 
 05.02.2011 22:40      C:\Users\Matthias\AppData\Local\Temp\mod99FF.tmp --------- 222 
 05.02.2011 22:40      C:\Users\Matthias\AppData\Local\Temp\mod8737.tmp --------- 5 
 05.02.2011 09:49      C:\Users\Matthias\AppData\Local\Temp\239539.od --------- 134 
 05.02.2011 09:49      C:\Users\Matthias\AppData\Local\Temp\CVRA784.tmp --------- 0 
 05.02.2011 09:46      C:\Users\Matthias\AppData\Local\Temp\divBB92.tmp --------- 0 
 04.02.2011 22:54      C:\Users\Matthias\AppData\Local\Temp\divB624.tmp --------- 0 
 04.02.2011 16:21      C:\Users\Matthias\AppData\Local\Temp\15327191.od --------- 134 
 04.02.2011 16:21      C:\Users\Matthias\AppData\Local\Temp\CVRDFD7.tmp.cvr --------- 0 
 04.02.2011 12:07      C:\Users\Matthias\AppData\Local\Temp\77360.od --------- 134 
 04.02.2011 12:07      C:\Users\Matthias\AppData\Local\Temp\CVR2C6C.tmp.cvr --------- 0 
 04.02.2011 11:52      C:\Users\Matthias\AppData\Local\Temp\6312564.od --------- 134 
 04.02.2011 11:52      C:\Users\Matthias\AppData\Local\Temp\CVR5246.tmp.cvr --------- 0 
 04.02.2011 10:08      C:\Users\Matthias\AppData\Local\Temp\divC8AB.tmp --------- 0 
 03.02.2011 10:32      C:\Users\Matthias\AppData\Local\Temp\4862660.od --------- 134 
 03.02.2011 10:32      C:\Users\Matthias\AppData\Local\Temp\CVR32C4.tmp.cvr --------- 0 
 03.02.2011 09:12      C:\Users\Matthias\AppData\Local\Temp\98124.od --------- 134 
 03.02.2011 09:12      C:\Users\Matthias\AppData\Local\Temp\CVR7F2D.tmp.cvr --------- 0 
 03.02.2011 09:12      C:\Users\Matthias\AppData\Local\Temp\divD99B.tmp --------- 0 
 02.02.2011 21:39      C:\Users\Matthias\AppData\Local\Temp\plugtmp-73 --------- 0 
 02.02.2011 13:42      C:\Users\Matthias\AppData\Local\Temp\17830259.od --------- 134 
 02.02.2011 13:42      C:\Users\Matthias\AppData\Local\Temp\CVR1163.tmp.cvr --------- 0 
 02.02.2011 10:40      C:\Users\Matthias\AppData\Local\Temp\6906866.od --------- 134 
 02.02.2011 10:40      C:\Users\Matthias\AppData\Local\Temp\CVR63F2.tmp.cvr --------- 0 
 02.02.2011 08:46      C:\Users\Matthias\AppData\Local\Temp\divDE1E.tmp --------- 0 
 02.02.2011 00:03      C:\Users\Matthias\AppData\Local\Temp\141368.od --------- 134 
 02.02.2011 00:03      C:\Users\Matthias\AppData\Local\Temp\CVR27AB.tmp.cvr --------- 0 
 02.02.2011 00:02      C:\Users\Matthias\AppData\Local\Temp\divF324.tmp --------- 0 
 01.02.2011 20:36      C:\Users\Matthias\AppData\Local\Temp\plugtmp-72 --------- 0 
 01.02.2011 19:08      C:\Users\Matthias\AppData\Local\Temp\divD01A.tmp --------- 0 
 01.02.2011 18:22      C:\Users\Matthias\AppData\Local\Temp\flaEA01.tmp --------- 90824904 
 01.02.2011 17:39      C:\Users\Matthias\AppData\Local\Temp\33418596.od --------- 134 
 01.02.2011 17:39      C:\Users\Matthias\AppData\Local\Temp\CVRED64.tmp.cvr --------- 0 
 01.02.2011 13:52      C:\Users\Matthias\AppData\Local\Temp\~DF8244445C594115A1.TMP --------- 512 
 01.02.2011 13:52      C:\Users\Matthias\AppData\Local\Temp\19783313.od --------- 134 
 01.02.2011 13:52      C:\Users\Matthias\AppData\Local\Temp\CVRDE91.tmp.cvr --------- 0 
----------------------------------------

 
C:\Program Files

----------------------------------------

 
C:\ProgramData\.. 

pagefile.sys    
hiberfil.sys    
System Volume Information    
ProgramData    
Program Files (x86)    
Windows    
Program Files    
aqua_bitmap.cpp    
6c45ce1487e14f902cfee433c5    
Users    
Temp    
NVIDIA    
SoftUpdateLog.txt    
$Recycle.Bin    
MSOCache    
Recovery    
Programme    
Dokumente und Einstellungen    
Documents and Settings    
PerfLogs    
msdia80.dll    
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts


----------------------------------------

 

Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                   0            24 K
System                           4 Services                   0           828 K
smss.exe                       264 Services                   0         1.140 K
csrss.exe                      424 Services                   0         4.116 K
wininit.exe                    484 Services                   0         4.364 K
csrss.exe                      508 Console                    1         7.652 K
services.exe                   540 Services                   0         9.280 K
lsass.exe                      556 Services                   0        10.568 K
lsm.exe                        564 Services                   0         4.408 K
svchost.exe                    672 Services                   0         9.092 K
nvvsvc.exe                     756 Services                   0         3.816 K
svchost.exe                    796 Services                   0         7.748 K
svchost.exe                    856 Services                   0        19.924 K
svchost.exe                    888 Services                   0       153.292 K
svchost.exe                    924 Services                   0        37.704 K
svchost.exe                    300 Services                   0        10.748 K
svchost.exe                   1020 Services                   0        16.784 K
winlogon.exe                  1076 Console                    1         7.012 K
AsLdrSrv.exe                  1136 Services                   0         3.768 K
spoolsv.exe                   1276 Services                   0        15.276 K
sched.exe                     1308 Services                   0         2.188 K
svchost.exe                   1428 Services                   0         7.320 K
nvvsvc.exe                    1460 Console                    1         7.964 K
BelkinService.exe             1544 Services                   0         7.300 K
avguard.exe                   1616 Services                   0        27.216 K
AppleMobileDeviceService.     1640 Services                   0         8.420 K
mDNSResponder.exe             1692 Services                   0         6.344 K
avshadow.exe                  1712 Services                   0         3.952 K
svchost.exe                   1736 Services                   0        15.344 K
svchost.exe                   1800 Services                   0         5.340 K
conhost.exe                   1904 Services                   0         2.584 K
taskhost.exe                  2004 Console                    1         9.808 K
taskeng.exe                   2092 Console                    1         6.308 K
dwm.exe                       2180 Console                    1        32.868 K
explorer.exe                  2188 Console                    1        62.848 K
wcourier.exe                  2196 Console                    1         1.156 K
HControl.exe                  2328 Console                    1         6.340 K
Atouch64.exe                  2336 Console                    1         5.392 K
ATKOSD.exe                    2364 Console                    1         5.684 K
WDC.exe                       2504 Console                    1         5.144 K
Apoint.exe                    2544 Console                    1         9.584 K
RAVCpl64.exe                  2552 Console                    1        10.320 K
XBoxStat.exe                  2620 Console                    1         6.100 K
sidebar.exe                   2840 Console                    1        48.136 K
phonostarTimer.exe            2888 Console                    1        10.160 K
olycamdetect.exe              2960 Console                    1         6.916 K
KiesTrayAgent.exe             3004 Console                    1         7.912 K
KiesPDLR.exe                  2224 Console                    1        22.624 K
svchost.exe                   2496 Services                   0         5.092 K
avgnt.exe                     3152 Console                    1         2.580 K
HControlUser.exe              3204 Console                    1         3.288 K
SearchIndexer.exe             3228 Services                   0        26.056 K
ATKOSD2.exe                   3276 Console                    1        12.248 K
DataCardMonitor.exe           3332 Console                    1         6.328 K
ApMsgFwd.exe                  3376 Console                    1         3.516 K
iTunesHelper.exe              3392 Console                    1        13.368 K
jusched.exe                   3476 Console                    1         4.344 K
DivXUpdate.exe                3484 Console                    1        14.836 K
ApntEx.exe                    3508 Console                    1         4.740 K
hidfind.exe                   3544 Console                    1         4.356 K
conhost.exe                   3552 Console                    1         4.692 K
Apvfb.exe                     3580 Console                    1         4.572 K
iPodService.exe               3952 Services                   0         6.880 K
PresentationFontCache.exe     2416 Services                   0        18.980 K
firefox.exe                   2700 Console                    1       329.120 K
plugin-container.exe          4664 Console                    1        41.904 K
svchost.exe                   4064 Services                   0        32.324 K
wmpnetwk.exe                  4120 Services                   0         9.116 K
mbam.exe                      4712 Console                    1       101.872 K
WTGU.exe                      3948 Console                    1        12.652 K
SearchProtocolHost.exe        3168 Services                   0         7.208 K
cmd.exe                       3132 Console                    1         3.808 K
conhost.exe                   3692 Console                    1         5.692 K
SearchFilterHost.exe          4680 Services                   0         6.444 K
tasklist.exe                  3188 Console                    1         5.328 K
WmiPrvSE.exe                  4020 Services                   0         5.996 K
dllhost.exe                   2288 Console                    1         5.636 K

 
***** Ende des Scans 02.05.2011 um 20:01:36,81 ***

Ccleaner

Code:

ATTFilter

 

AC3Filter 1.63b	Alexander Vigovsky	12.10.2010		1.63b
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	03.11.2009		10.0.32.18
Adobe Flash Player 10 Plugin	Adobe Systems Incorporated	16.04.2011	6,00MB	10.2.159.1
Adobe Reader 9.4.1 - Deutsch	Adobe Systems Incorporated	18.01.2011	166,4MB	9.4.1
ALPS Touch Pad Driver		31.10.2009		
Amazon MP3 Downloader 1.0.10		29.01.2011		
Amazon MP3-Downloader 1.0.5		22.01.2010		
ApexDC++ 1.4.2	ApexDC++ Development Team	05.04.2011	35,7MB	1.4.2
Apple Application Support	Apple Inc.	16.01.2011	52,8MB	1.4.1
Apple Mobile Device Support	Apple Inc.	16.01.2011	22,3MB	3.3.0.69
Apple Software Update	Apple Inc.	16.01.2011	2,26MB	2.1.2.120
Assassin's Creed II	Ubisoft	05.03.2010		1.01
ATK Hotkey	ASUS	01.11.2009	5,75MB	1.0.0052
ATKOSD2	ASUS	01.11.2009	6,53MB	7.0.0006
AudibleManager	Audible, Inc.	12.05.2010		2130567168.1996885722.1638264.2002650141
Audiograbber 1.83 SE	Audiograbber Deutschland	29.05.2010		1.83 SE 
Audiograbber Lame-MP3-Plugin	AG	29.05.2010		1.0
Avira AntiVir Personal - Free Antivirus	Avira GmbH	01.05.2011	61,8MB	10.0.0.648
Belkin Setup and Router Monitor		03.10.2010	36,3MB	
Bonjour	Apple Inc.	16.01.2011	1,58MB	2.0.4.0
Canon MP Navigator EX 1.2		12.04.2010		
Canon MP190 series MP Drivers		02.11.2009		
CCleaner	Piriform	02.05.2011		3.06
CDBurnerXP	CDBurnerXP	15.03.2011	11,8MB	4.3.8.2523
Day of Defeat	Valve	29.10.2010		
Debut Video Capture Software	NCH Software	25.11.2010		
DivX Player	DivX, Inc.	01.11.2009		7.2.0
DivX-Setup	DivX, LLC	05.04.2011		2.4.1.4
dradio-Recorder Version 3.02.0		19.12.2010		
Free Audio CD Burner version 1.4.7	DVDVideoSoft Limited.	30.03.2011	10,7MB	
Free YouTube Download 2.3	DVDVideoSoft Limited.	05.12.2009		
Free YouTube to MP3 Converter version 3.9.35.324	DVDVideoSoft Limited.	30.03.2011	36,0MB	
Futuremark SystemInfo	Futuremark Corporation	08.03.2010		3.21.2.1
Google Earth Plug-in	Google	28.02.2011	39,8MB	6.0.1.2032
HD Tune 2.55	EFD Software	30.10.2010		
ICQ6.5	ICQ	02.11.2009		6.5
iTunes	Apple Inc.	16.01.2011	145,7MB	10.1.1.4
Java(TM) 6 Update 24	Sun Microsystems, Inc.	01.11.2009	95,0MB	6.0.240
MagicDisc 2.5.79		04.11.2009		
Malwarebytes' Anti-Malware	Malwarebytes Corporation	01.05.2011	10,5MB	
Media Player Classic - Home Cinema v1.4.2499.0 x64	MPC-HC Team	02.10.2010	12,6MB	1.4.2499.0
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	25.06.2010	38,8MB	4.0.30319
Microsoft Age of Empires II		22.02.2010		
Microsoft Age of Empires II: The Conquerors Expansion		28.02.2010		
Microsoft Office Outlook Connector	Microsoft Corporation	02.10.2010	3,37MB	14.0.5118.5000
Microsoft Office Ultimate 2007	Microsoft Corporation	01.11.2009		12.0.6425.1000
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053	Microsoft Corporation	02.02.2011	0,25MB	8.0.50727.4053
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053	Microsoft Corporation	06.03.2010	0,25MB	8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	05.03.2010	0,41MB	8.0.56336
Microsoft Visual C++ 2005 Redistributable (x64)	Microsoft Corporation	31.01.2011	0,82MB	8.0.50727.42
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175	Microsoft Corporation	27.04.2011	0,57MB	8.0.51011
Microsoft Visual C++ 2005 Redistributable - KB2467175	Microsoft Corporation	27.04.2011	0,30MB	8.0.51011
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148	Microsoft Corporation	01.11.2009	0,20MB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570	Microsoft Corporation	27.04.2011	0,58MB	9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	31.10.2009	0,58MB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	15.11.2010	0,58MB	9.0.30729.4148
Microsoft Xbox 360 Accessories 1.2	Microsoft	05.03.2010	7,82MB	1.20.146.0
Mobile Master 7.7.4	Jumping Bytes	02.11.2010		7.7.4
Mozilla Firefox 4.0.1 (x86 de)	Mozilla	29.04.2011	32,3MB	4.0.1
NVIDIA Display Control Panel	NVIDIA Corporation	06.03.2010		1.10
NVIDIA Drivers	NVIDIA Corporation	06.03.2010		1.10
NVIDIA PhysX	NVIDIA Corporation	06.03.2010	120,1MB	9.09.0814
OLYMPUS ib	OLYMPUS IMAGING CORP.	31.01.2011	130,3MB	1.1.1404
PDFCreator	Frank Heindörfer, Philip Chinery	08.07.2010		1.0.1
Philips Songbird	Koninklijke Philips Electronics N.V.	12.05.2010		2.0.1517 (1517)
QuickTime	Apple Inc.	16.01.2011	73,7MB	7.69.80.9
RealPlayer	RealNetworks	19.04.2010		
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	02.11.2009		6.0.1.5817
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.03	RICOH	19.04.2011		3.55.03
Samsung Kies	Samsung Electronics Co., Ltd.	19.04.2011	167,1MB	2.0.0.11014_49
SAMSUNG USB Driver for Mobile Phones	SAMSUNG Electronics Co., Ltd.	19.04.2011	38,7MB	1.3.2250.0
Skype™ 5.3	Skype Technologies S.A.	21.04.2011	22,6MB	5.3.111
Steam	Valve Corporation	29.10.2010	1,49MB	1.0.0.0
System Requirements Lab	Husdawg, LLC	22.02.2010	0,60MB	4.1.64.0
System Requirements Lab CYRI	Husdawg, LLC	14.03.2011	0,44MB	4.4.21.0
Tom Clancy's Rainbow Six Vegas	Ubisoft	25.02.2010		1.00.000
Tropico 3 1.00	Kalypso Media	06.02.2010		1.00
Ubisoft Game Launcher	UBISOFT	05.03.2010		1.0.0.0
Uninstall 1.0.0.1		30.03.2011	10,9MB	
web'n'walk Manager	T-Mobile D	13.02.2010		11.002.03.00.108
Windows Live Anmelde-Assistent	Microsoft Corporation	05.12.2009	1,92MB	5.000.818.5
Windows Live Essentials	Microsoft Corporation	05.12.2009		14.0.8089.0726
Windows Live Sync	Microsoft Corporation	05.12.2009	2,79MB	14.0.8089.726
Windows Live-Uploadtool	Microsoft Corporation	05.12.2009	0,22MB	14.0.8014.1029
Windows Media Player Firefox Plugin	Microsoft Corp	03.11.2009	0,29MB	1.0.0.8
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0)	OLYMPUS IMAGING CORP.	31.01.2011		09/09/2009 1.0.0.0
WinRAR		02.11.2009		
Wireless Console 3	ASUS	01.11.2009	2,43MB	3.0.12
µTorrent		05.12.2009		1.8.5

cosinus · 04.05.2011, 14:06

Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.

privatejoker · 04.05.2011, 16:46

Hallo, hatte vorher zwei Scans mit Malware durchgeführt, waren aber beide male nur Quickscans. Trotzdem hier die Logs:

Code:

ATTFilter

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6487

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01.05.2011 18:58:47
mbam-log-2011-05-01 (18-58-47).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 163568
Laufzeit: 14 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Code:

ATTFilter

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6487

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

02.05.2011 10:52:34
mbam-log-2011-05-02 (10-52-34).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 163452
Laufzeit: 6 Minute(n), 13 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

cosinus · 04.05.2011, 18:00

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

ATTFilter

:OTL
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3dc614c0-1875-11df-84c0-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{3dc614c0-1875-11df-84c0-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3dc614c7-1875-11df-84c0-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{3dc614c7-1875-11df-84c0-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{699a6166-1b21-11df-9855-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{699a6166-1b21-11df-9855-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{699a6171-1b21-11df-9855-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{699a6171-1b21-11df-9855-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{699a6176-1b21-11df-9855-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{699a6176-1b21-11df-9855-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{6a227a01-1876-11df-9aef-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{6a227a01-1876-11df-9aef-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{72fd59d9-59f2-11df-9695-0022156e70cb}\Shell - "" = AutoRun
O33 - MountPoints2\{72fd59d9-59f2-11df-9695-0022156e70cb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b46-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b46-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b49-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b49-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{be026b63-1b3e-11df-b7d7-0022154c62e2}\Shell - "" = AutoRun
O33 - MountPoints2\{be026b63-1b3e-11df-b7d7-0022154c62e2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
:Commands
[purity]
[resethosts]
[emptytemp]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

privatejoker · 05.05.2011, 06:17

Okay, das wurde angezeigt nachdem der Rechner neu gestartet hat:

Code:

ATTFilter

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3dc614c0-1875-11df-84c0-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3dc614c0-1875-11df-84c0-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3dc614c0-1875-11df-84c0-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3dc614c0-1875-11df-84c0-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3dc614c7-1875-11df-84c0-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3dc614c7-1875-11df-84c0-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3dc614c7-1875-11df-84c0-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3dc614c7-1875-11df-84c0-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{699a6166-1b21-11df-9855-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{699a6166-1b21-11df-9855-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{699a6166-1b21-11df-9855-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{699a6166-1b21-11df-9855-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{699a6171-1b21-11df-9855-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{699a6171-1b21-11df-9855-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{699a6171-1b21-11df-9855-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{699a6171-1b21-11df-9855-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{699a6176-1b21-11df-9855-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{699a6176-1b21-11df-9855-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{699a6176-1b21-11df-9855-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{699a6176-1b21-11df-9855-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6a227a01-1876-11df-9aef-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6a227a01-1876-11df-9aef-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6a227a01-1876-11df-9aef-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6a227a01-1876-11df-9aef-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72fd59d9-59f2-11df-9695-0022156e70cb}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72fd59d9-59f2-11df-9695-0022156e70cb}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{72fd59d9-59f2-11df-9695-0022156e70cb}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72fd59d9-59f2-11df-9695-0022156e70cb}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b46-1b3e-11df-b7d7-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b46-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b46-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b46-1b3e-11df-b7d7-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b49-1b3e-11df-b7d7-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b49-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b49-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b49-1b3e-11df-b7d7-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b5c-1b3e-11df-b7d7-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b5f-1b3e-11df-b7d7-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b63-1b3e-11df-b7d7-0022154c62e2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b63-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be026b63-1b3e-11df-b7d7-0022154c62e2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be026b63-1b3e-11df-b7d7-0022154c62e2}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File F:\AutoRun.exe not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Matthias
->Temp folder emptied: 1257314553 bytes
->Temporary Internet Files folder emptied: 690524157 bytes
->Java cache emptied: 68997118 bytes
->FireFox cache emptied: 102014727 bytes
->Flash cache emptied: 126848 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 33044731 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50434 bytes
RecycleBin emptied: 5673360073 bytes
 
Total Files Cleaned = 7.463,00 mb
 
 
OTL by OldTimer - Version 3.2.22.3 log created on 05042011_220818

Files\Folders moved on Reboot...
C:\Users\Matthias\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

cosinus · 05.05.2011, 11:09

Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - also beide Haken setzen, auf Start scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )

Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen!

privatejoker · 05.05.2011, 17:38

Code:

ATTFilter

2011/05/05 09:36:36.0942 4396	TDSS rootkit removing tool 2.5.0.0 May  1 2011 14:20:16
2011/05/05 09:36:37.0598 4396	================================================================================
2011/05/05 09:36:37.0598 4396	SystemInfo:
2011/05/05 09:36:37.0598 4396	
2011/05/05 09:36:37.0598 4396	OS Version: 6.1.7600 ServicePack: 0.0
2011/05/05 09:36:37.0598 4396	Product type: Workstation
2011/05/05 09:36:37.0598 4396	ComputerName: MATTHIAS-PC
2011/05/05 09:36:37.0598 4396	UserName: Matthias
2011/05/05 09:36:37.0598 4396	Windows directory: C:\Windows
2011/05/05 09:36:37.0598 4396	System windows directory: C:\Windows
2011/05/05 09:36:37.0598 4396	Running under WOW64
2011/05/05 09:36:37.0598 4396	Processor architecture: Intel x64
2011/05/05 09:36:37.0598 4396	Number of processors: 2
2011/05/05 09:36:37.0598 4396	Page size: 0x1000
2011/05/05 09:36:37.0598 4396	Boot type: Normal boot
2011/05/05 09:36:37.0598 4396	================================================================================
2011/05/05 09:36:38.0003 4396	Initialize success
2011/05/05 09:36:45.0429 2100	================================================================================
2011/05/05 09:36:45.0429 2100	Scan started
2011/05/05 09:36:45.0429 2100	Mode: Manual; 
2011/05/05 09:36:45.0429 2100	================================================================================
2011/05/05 09:36:46.0349 2100	1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
2011/05/05 09:36:46.0427 2100	ACPI            (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
2011/05/05 09:36:46.0458 2100	AcpiPmi         (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
2011/05/05 09:36:46.0521 2100	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
2011/05/05 09:36:46.0599 2100	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
2011/05/05 09:36:46.0646 2100	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
2011/05/05 09:36:46.0755 2100	AFD             (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys
2011/05/05 09:36:47.0036 2100	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
2011/05/05 09:36:47.0098 2100	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
2011/05/05 09:36:47.0145 2100	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
2011/05/05 09:36:47.0192 2100	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
2011/05/05 09:36:47.0238 2100	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
2011/05/05 09:36:47.0316 2100	amdsata         (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
2011/05/05 09:36:47.0363 2100	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
2011/05/05 09:36:47.0410 2100	amdxata         (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
2011/05/05 09:36:47.0504 2100	ApfiltrService  (6be098cb81e946123a018a824ee8de4a) C:\Windows\system32\DRIVERS\Apfiltr.sys
2011/05/05 09:36:47.0550 2100	AppID           (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
2011/05/05 09:36:47.0675 2100	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
2011/05/05 09:36:47.0706 2100	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
2011/05/05 09:36:47.0847 2100	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/05/05 09:36:47.0878 2100	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
2011/05/05 09:36:47.0925 2100	AtcL001         (e32f41de9c204f020da5141a03e81601) C:\Windows\system32\DRIVERS\l160x64.sys
2011/05/05 09:36:48.0003 2100	avgntflt        (39c2e2870fc0c2ae0595b883cbe716b4) C:\Windows\system32\DRIVERS\avgntflt.sys
2011/05/05 09:36:48.0096 2100	avipbb          (c98fa6e5ad0e857d22716bd2b8b1f399) C:\Windows\system32\DRIVERS\avipbb.sys
2011/05/05 09:36:48.0174 2100	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
2011/05/05 09:36:48.0252 2100	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
2011/05/05 09:36:48.0315 2100	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
2011/05/05 09:36:48.0377 2100	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
2011/05/05 09:36:48.0486 2100	bowser          (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
2011/05/05 09:36:48.0533 2100	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
2011/05/05 09:36:48.0564 2100	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
2011/05/05 09:36:48.0627 2100	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
2011/05/05 09:36:48.0674 2100	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
2011/05/05 09:36:48.0705 2100	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
2011/05/05 09:36:48.0736 2100	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
2011/05/05 09:36:48.0798 2100	BthAvrcp        (832b121e4532919cc49f2438f1dcaa21) C:\Windows\system32\DRIVERS\BthAvrcp.sys
2011/05/05 09:36:48.0861 2100	BthEnum         (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
2011/05/05 09:36:48.0923 2100	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
2011/05/05 09:36:48.0954 2100	BthPan          (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
2011/05/05 09:36:49.0032 2100	BTHPORT         (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys
2011/05/05 09:36:49.0095 2100	BTHUSB          (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys
2011/05/05 09:36:49.0142 2100	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/05/05 09:36:49.0220 2100	cdrom           (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
2011/05/05 09:36:49.0266 2100	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
2011/05/05 09:36:49.0329 2100	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
2011/05/05 09:36:49.0438 2100	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/05/05 09:36:49.0469 2100	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
2011/05/05 09:36:49.0516 2100	CNG             (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
2011/05/05 09:36:49.0594 2100	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
2011/05/05 09:36:49.0641 2100	CompositeBus    (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
2011/05/05 09:36:49.0688 2100	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
2011/05/05 09:36:49.0766 2100	CSC             (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
2011/05/05 09:36:49.0875 2100	DfsC            (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
2011/05/05 09:36:49.0968 2100	dgderdrv        (867fa8b9e9e3078f68c4089904bbf4b0) C:\Windows\system32\drivers\dgderdrv.sys
2011/05/05 09:36:50.0000 2100	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
2011/05/05 09:36:50.0062 2100	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
2011/05/05 09:36:50.0140 2100	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
2011/05/05 09:36:50.0234 2100	DXGKrnl         (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
2011/05/05 09:36:50.0390 2100	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
2011/05/05 09:36:50.0577 2100	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
2011/05/05 09:36:50.0639 2100	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
2011/05/05 09:36:50.0717 2100	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
2011/05/05 09:36:50.0764 2100	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
2011/05/05 09:36:50.0811 2100	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
2011/05/05 09:36:50.0873 2100	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
2011/05/05 09:36:50.0920 2100	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
2011/05/05 09:36:50.0936 2100	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/05/05 09:36:50.0982 2100	FltMgr          (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
2011/05/05 09:36:51.0060 2100	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
2011/05/05 09:36:51.0092 2100	Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
2011/05/05 09:36:51.0170 2100	fvevol          (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
2011/05/05 09:36:51.0216 2100	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
2011/05/05 09:36:51.0310 2100	GEARAspiWDM     (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
2011/05/05 09:36:51.0404 2100	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
2011/05/05 09:36:51.0466 2100	HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
2011/05/05 09:36:51.0528 2100	HDAudBus        (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/05/05 09:36:51.0560 2100	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
2011/05/05 09:36:51.0622 2100	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
2011/05/05 09:36:51.0669 2100	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
2011/05/05 09:36:51.0731 2100	HidUsb          (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
2011/05/05 09:36:51.0825 2100	HpSAMD          (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
2011/05/05 09:36:51.0918 2100	HTTP            (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
2011/05/05 09:36:52.0028 2100	hwdatacard      (c8f3119ad72a507d12ef389df4c266ef) C:\Windows\system32\DRIVERS\ewusbmdm.sys
2011/05/05 09:36:52.0059 2100	hwpolicy        (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
2011/05/05 09:36:52.0137 2100	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/05/05 09:36:52.0215 2100	iaStorV         (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
2011/05/05 09:36:52.0277 2100	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
2011/05/05 09:36:52.0433 2100	IntcAzAudAddService (60b48cf9bf8b5b8ce7e0a4675c7a061a) C:\Windows\system32\drivers\RTKVHD64.sys
2011/05/05 09:36:52.0480 2100	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
2011/05/05 09:36:52.0527 2100	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
2011/05/05 09:36:52.0574 2100	IpFilterDriver  (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/05/05 09:36:52.0620 2100	IPMIDRV         (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
2011/05/05 09:36:52.0667 2100	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
2011/05/05 09:36:52.0730 2100	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
2011/05/05 09:36:52.0761 2100	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
2011/05/05 09:36:52.0808 2100	iScsiPrt        (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/05/05 09:36:52.0886 2100	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/05/05 09:36:52.0917 2100	kbdhid          (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/05/05 09:36:52.0964 2100	KSecDD          (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
2011/05/05 09:36:53.0042 2100	KSecPkg         (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
2011/05/05 09:36:53.0073 2100	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
2011/05/05 09:36:53.0182 2100	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
2011/05/05 09:36:53.0260 2100	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
2011/05/05 09:36:53.0307 2100	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
2011/05/05 09:36:53.0354 2100	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
2011/05/05 09:36:53.0400 2100	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
2011/05/05 09:36:53.0447 2100	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
2011/05/05 09:36:53.0510 2100	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
2011/05/05 09:36:53.0556 2100	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
2011/05/05 09:36:53.0619 2100	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
2011/05/05 09:36:53.0666 2100	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
2011/05/05 09:36:53.0697 2100	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
2011/05/05 09:36:53.0744 2100	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
2011/05/05 09:36:53.0790 2100	mountmgr        (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
2011/05/05 09:36:53.0837 2100	mpio            (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
2011/05/05 09:36:53.0868 2100	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
2011/05/05 09:36:53.0915 2100	MRxDAV          (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
2011/05/05 09:36:53.0978 2100	mrxsmb          (b7f3d2c40bdf8ffb73ebfb19c77734e2) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/05/05 09:36:54.0024 2100	mrxsmb10        (86c6f88b5168ce21cf8d69d0b3ff5d19) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/05/05 09:36:54.0102 2100	mrxsmb20        (b081069251c8e9f42cb8769d07148f9c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/05/05 09:36:54.0134 2100	msahci          (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
2011/05/05 09:36:54.0180 2100	msdsm           (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
2011/05/05 09:36:54.0243 2100	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
2011/05/05 09:36:54.0290 2100	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
2011/05/05 09:36:54.0336 2100	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
2011/05/05 09:36:54.0399 2100	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
2011/05/05 09:36:54.0430 2100	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/05/05 09:36:54.0461 2100	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
2011/05/05 09:36:54.0508 2100	MsRPC           (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
2011/05/05 09:36:54.0570 2100	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/05/05 09:36:54.0602 2100	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
2011/05/05 09:36:54.0633 2100	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
2011/05/05 09:36:54.0695 2100	MTsensor        (032d35c996f21d19a205a7c8f0b76f3c) C:\Windows\system32\DRIVERS\ATK64AMD.sys
2011/05/05 09:36:54.0742 2100	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
2011/05/05 09:36:54.0820 2100	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
2011/05/05 09:36:54.0898 2100	NDIS            (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
2011/05/05 09:36:54.0960 2100	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
2011/05/05 09:36:55.0023 2100	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/05/05 09:36:55.0054 2100	Ndisuio         (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/05/05 09:36:55.0101 2100	NdisWan         (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/05/05 09:36:55.0132 2100	NDProxy         (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
2011/05/05 09:36:55.0179 2100	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
2011/05/05 09:36:55.0210 2100	NetBT           (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
2011/05/05 09:36:55.0491 2100	netw5v64        (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys
2011/05/05 09:36:55.0694 2100	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
2011/05/05 09:36:55.0772 2100	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
2011/05/05 09:36:55.0818 2100	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
2011/05/05 09:36:55.0943 2100	Ntfs            (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
2011/05/05 09:36:56.0021 2100	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
2011/05/05 09:36:56.0505 2100	nvlddmkm        (325520227cc568052ae1d7ad49d90951) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/05/05 09:36:56.0770 2100	nvraid          (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
2011/05/05 09:36:56.0864 2100	nvstor          (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
2011/05/05 09:36:56.0942 2100	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
2011/05/05 09:36:57.0004 2100	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/05/05 09:36:57.0113 2100	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
2011/05/05 09:36:57.0176 2100	partmgr         (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
2011/05/05 09:36:57.0222 2100	pci             (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
2011/05/05 09:36:57.0269 2100	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
2011/05/05 09:36:57.0300 2100	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
2011/05/05 09:36:57.0347 2100	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
2011/05/05 09:36:57.0410 2100	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
2011/05/05 09:36:57.0659 2100	PptpMiniport    (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
2011/05/05 09:36:57.0690 2100	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
2011/05/05 09:36:57.0753 2100	Psched          (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
2011/05/05 09:36:57.0846 2100	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
2011/05/05 09:36:57.0940 2100	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
2011/05/05 09:36:58.0002 2100	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
2011/05/05 09:36:58.0034 2100	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
2011/05/05 09:36:58.0080 2100	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
2011/05/05 09:36:58.0127 2100	Rasl2tp         (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/05/05 09:36:58.0190 2100	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/05/05 09:36:58.0236 2100	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
2011/05/05 09:36:58.0268 2100	rdbss           (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
2011/05/05 09:36:58.0314 2100	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
2011/05/05 09:36:58.0346 2100	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/05/05 09:36:58.0408 2100	RDPDR           (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
2011/05/05 09:36:58.0455 2100	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
2011/05/05 09:36:58.0502 2100	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
2011/05/05 09:36:58.0548 2100	RDPWD           (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
2011/05/05 09:36:58.0611 2100	rdyboost        (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
2011/05/05 09:36:58.0704 2100	RFCOMM          (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
2011/05/05 09:36:58.0798 2100	rimmptsk        (528d70eabe8305a02f387fec839b9a47) C:\Windows\system32\DRIVERS\rimmpx64.sys
2011/05/05 09:36:58.0845 2100	rimsptsk        (bb9edc55b0b8cb4fcd713428820e0776) C:\Windows\system32\DRIVERS\rimspx64.sys
2011/05/05 09:36:58.0892 2100	rismxdp         (481c3fdeacaae04b74c58288dbc91df9) C:\Windows\system32\DRIVERS\rixdpx64.sys
2011/05/05 09:36:58.0985 2100	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
2011/05/05 09:36:59.0048 2100	s217bus         (b49951a2c8fd81307707443d01936e37) C:\Windows\system32\DRIVERS\s217bus.sys
2011/05/05 09:36:59.0141 2100	s217nd5         (7bc7d18351b846f4544b54db38fb4208) C:\Windows\system32\DRIVERS\s217nd5.sys
2011/05/05 09:36:59.0172 2100	s217unic        (43512d0c3a59eb20fda06ce4265a1549) C:\Windows\system32\DRIVERS\s217unic.sys
2011/05/05 09:36:59.0235 2100	s3cap           (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
2011/05/05 09:36:59.0297 2100	sbp2port        (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
2011/05/05 09:36:59.0328 2100	scfilter        (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
2011/05/05 09:36:59.0422 2100	sdbus           (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
2011/05/05 09:36:59.0484 2100	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2011/05/05 09:36:59.0562 2100	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
2011/05/05 09:36:59.0594 2100	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
2011/05/05 09:36:59.0625 2100	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
2011/05/05 09:36:59.0718 2100	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
2011/05/05 09:36:59.0781 2100	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
2011/05/05 09:36:59.0812 2100	sffp_sd         (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
2011/05/05 09:36:59.0843 2100	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
2011/05/05 09:36:59.0921 2100	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
2011/05/05 09:36:59.0952 2100	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
2011/05/05 09:37:00.0015 2100	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
2011/05/05 09:37:00.0108 2100	smserial        (7ae8bca90539ecbde87ac45ba1436be3) C:\Windows\system32\DRIVERS\SmSerl64.sys
2011/05/05 09:37:00.0233 2100	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
2011/05/05 09:37:00.0342 2100	srv             (148d50904d2a0df29a19778715eb35bb) C:\Windows\system32\DRIVERS\srv.sys
2011/05/05 09:37:00.0436 2100	srv2            (ce2189fe31d36678ac9eb7ddee08ec96) C:\Windows\system32\DRIVERS\srv2.sys
2011/05/05 09:37:00.0514 2100	srvnet          (cb69edeb069a49577592835659cd0e46) C:\Windows\system32\DRIVERS\srvnet.sys
2011/05/05 09:37:00.0576 2100	sscebus         (f74634f46692c8315e7f37f698af3225) C:\Windows\system32\DRIVERS\sscebus.sys
2011/05/05 09:37:00.0639 2100	sscemdfl        (82732b391efd69b0548044be9cb37bfc) C:\Windows\system32\DRIVERS\sscemdfl.sys
2011/05/05 09:37:00.0701 2100	sscemdm         (43d56ace4469d90f9790e8352d87d9b5) C:\Windows\system32\DRIVERS\sscemdm.sys
2011/05/05 09:37:00.0810 2100	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
2011/05/05 09:37:00.0873 2100	storflt         (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
2011/05/05 09:37:00.0935 2100	storvsc         (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
2011/05/05 09:37:00.0966 2100	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
2011/05/05 09:37:01.0138 2100	Tcpip           (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys
2011/05/05 09:37:01.0294 2100	TCPIP6          (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys
2011/05/05 09:37:01.0419 2100	tcpipreg        (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
2011/05/05 09:37:01.0466 2100	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
2011/05/05 09:37:01.0497 2100	TDTCP           (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
2011/05/05 09:37:01.0559 2100	tdx             (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
2011/05/05 09:37:01.0590 2100	TermDD          (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
2011/05/05 09:37:01.0653 2100	TFsExDisk       (ce4b6956e4e12492715a53076e58761f) C:\Windows\System32\Drivers\TFsExDisk.sys
2011/05/05 09:37:01.0746 2100	tssecsrv        (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/05/05 09:37:01.0809 2100	tunnel          (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
2011/05/05 09:37:01.0856 2100	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
2011/05/05 09:37:01.0902 2100	udfs            (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
2011/05/05 09:37:01.0996 2100	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
2011/05/05 09:37:02.0027 2100	umbus           (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
2011/05/05 09:37:02.0058 2100	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
2011/05/05 09:37:02.0168 2100	usbaudio        (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
2011/05/05 09:37:02.0230 2100	usbccgp         (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/05/05 09:37:02.0261 2100	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
2011/05/05 09:37:02.0308 2100	usbehci         (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
2011/05/05 09:37:02.0355 2100	usbhub          (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
2011/05/05 09:37:02.0402 2100	usbohci         (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
2011/05/05 09:37:02.0448 2100	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
2011/05/05 09:37:02.0511 2100	usbscan         (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
2011/05/05 09:37:02.0573 2100	USBSTOR         (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\drivers\USBSTOR.SYS
2011/05/05 09:37:02.0604 2100	usbuhci         (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/05/05 09:37:02.0698 2100	usbvideo        (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
2011/05/05 09:37:02.0760 2100	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
2011/05/05 09:37:02.0807 2100	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/05/05 09:37:02.0854 2100	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
2011/05/05 09:37:02.0901 2100	vhdmp           (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
2011/05/05 09:37:02.0963 2100	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
2011/05/05 09:37:03.0010 2100	vmbus           (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
2011/05/05 09:37:03.0057 2100	VMBusHID        (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
2011/05/05 09:37:03.0104 2100	volmgr          (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
2011/05/05 09:37:03.0150 2100	volmgrx         (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
2011/05/05 09:37:03.0197 2100	volsnap         (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
2011/05/05 09:37:03.0260 2100	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
2011/05/05 09:37:03.0322 2100	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
2011/05/05 09:37:03.0384 2100	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
2011/05/05 09:37:03.0431 2100	WANARP          (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/05 09:37:03.0462 2100	Wanarpv6        (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/05 09:37:03.0572 2100	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
2011/05/05 09:37:03.0634 2100	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
2011/05/05 09:37:03.0774 2100	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
2011/05/05 09:37:03.0806 2100	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
2011/05/05 09:37:03.0977 2100	WinUsb          (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
2011/05/05 09:37:04.0024 2100	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/05/05 09:37:04.0133 2100	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
2011/05/05 09:37:04.0211 2100	WudfPf          (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
2011/05/05 09:37:04.0289 2100	WUDFRd          (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/05/05 09:37:04.0414 2100	xusb21          (2c6bc21b2d5b58d8b1d638c1704cb494) C:\Windows\system32\DRIVERS\xusb21.sys
2011/05/05 09:37:04.0523 2100	================================================================================
2011/05/05 09:37:04.0523 2100	Scan finished
2011/05/05 09:37:04.0523 2100	================================================================================

cosinus · 05.05.2011, 19:25

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.

Dann folgende Anleitung durchlesen und abarbeiten -> CCleaner Systembereinigung

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

privatejoker · 06.05.2011, 08:13

Combofix Logfile:

Code:

ATTFilter

ComboFix 11-05-05.01 - Matthias 05.05.2011  23:53:43.1.2 - x64
Microsoft Windows 7 Professional   6.1.7600.0.1252.49.1031.18.4095.2887 [GMT -7:00]
ausgeführt von:: c:\users\Matthias\Desktop\cofi.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Matthias\AppData\Local\Temp\e3c74ee6-7482-4280-b9c3-f233b390296e\CliSecureRT.dll
c:\windows\system32\drivers\etc\lmhosts
c:\windows\SysWow64\muzapp.exe
c:\windows\SysWow64\system32
c:\windows\SysWow64\system32\3DAudio.ax
c:\windows\SysWow64\system32\cis-2.4.dll
c:\windows\SysWow64\system32\issacapi_bs-2.3.dll
c:\windows\SysWow64\system32\issacapi_pe-2.3.dll
c:\windows\SysWow64\system32\issacapi_se-2.3.dll
c:\windows\SysWow64\system32\MACXMLProto.dll
c:\windows\SysWow64\system32\MaDRM.dll
c:\windows\SysWow64\system32\MaJGUILib.dll
c:\windows\SysWow64\system32\MaJUtilLib.dll
c:\windows\SysWow64\system32\MAMACExtract.dll
c:\windows\SysWow64\system32\MASetupCaller.dll
c:\windows\SysWow64\system32\MASetupCleaner.exe
c:\windows\SysWow64\system32\MaXMLProto.dll
c:\windows\SysWow64\system32\MetaStore2.dll
c:\windows\SysWow64\system32\Microsoft.Synchronization.dll
c:\windows\SysWow64\system32\MK_Lyric.dll
c:\windows\SysWow64\system32\MSCLib.dll
c:\windows\SysWow64\system32\MSFLib.dll
c:\windows\SysWow64\system32\MSLUR71.dll
c:\windows\SysWow64\system32\msvcp60.dll
c:\windows\SysWow64\system32\MTTELECHIP.dll
c:\windows\SysWow64\system32\MTXSYNCICON.dll
c:\windows\SysWow64\system32\muzaf1.dll
c:\windows\SysWow64\system32\muzapp.dll
c:\windows\SysWow64\system32\muzapp.exe
c:\windows\SysWow64\system32\muzdecode.ax
c:\windows\SysWow64\system32\muzeffect.ax
c:\windows\SysWow64\system32\muzmp4sp.ax
c:\windows\SysWow64\system32\muzmpgsp.ax
c:\windows\SysWow64\system32\muzoggsp.ax
c:\windows\SysWow64\system32\muzwmts.dll
c:\windows\SysWow64\system32\psapi.dll
c:\windows\SysWow64\system32\Synchronization2.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-04-06 bis 2011-05-06  ))))))))))))))))))))))))))))))
.
.
2011-05-06 07:00 . 2011-05-06 07:00	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-05-05 05:08 . 2011-05-05 05:08	--------	d-----w-	C:\_OTL
2011-05-03 15:53 . 2011-04-11 08:21	8802128	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{1A00F537-EB5A-4255-96E3-DB409A9851BA}\mpengine.dll
2011-05-03 03:53 . 2011-05-03 03:53	--------	d-----w-	c:\program files\CCleaner
2011-05-02 01:44 . 2011-05-02 01:44	--------	d-----w-	c:\users\Matthias\AppData\Roaming\Malwarebytes
2011-05-02 01:43 . 2010-12-21 01:09	38224	----a-w-	c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-02 01:43 . 2011-05-02 01:43	--------	d-----w-	c:\programdata\Malwarebytes
2011-05-02 01:43 . 2011-05-02 01:44	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2011-05-02 01:43 . 2010-12-21 01:08	24152	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-04-28 17:24 . 2011-03-12 12:03	662528	----a-w-	c:\windows\system32\XpsPrint.dll
2011-04-28 17:24 . 2011-03-12 11:31	442880	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2011-04-27 16:24 . 2011-03-11 06:23	187264	----a-w-	c:\windows\system32\drivers\storport.sys
2011-04-27 16:24 . 2011-03-11 06:23	166272	----a-w-	c:\windows\system32\drivers\nvstor.sys
2011-04-27 16:24 . 2011-03-11 06:23	1657216	----a-w-	c:\windows\system32\drivers\ntfs.sys
2011-04-27 16:24 . 2011-03-11 06:23	148352	----a-w-	c:\windows\system32\drivers\nvraid.sys
2011-04-27 16:24 . 2011-03-11 06:23	410496	----a-w-	c:\windows\system32\drivers\iaStorV.sys
2011-04-27 16:24 . 2011-03-11 06:22	107904	----a-w-	c:\windows\system32\drivers\amdsata.sys
2011-04-27 16:24 . 2011-03-11 06:22	27008	----a-w-	c:\windows\system32\drivers\amdxata.sys
2011-04-27 16:24 . 2011-03-11 06:18	2566144	----a-w-	c:\windows\system32\esent.dll
2011-04-27 16:24 . 2011-03-11 05:39	1686016	----a-w-	c:\windows\SysWow64\esent.dll
2011-04-27 16:24 . 2011-03-11 06:15	96768	----a-w-	c:\windows\system32\fsutil.exe
2011-04-27 16:24 . 2011-03-11 05:37	74240	----a-w-	c:\windows\SysWow64\fsutil.exe
2011-04-27 16:19 . 2011-02-26 06:23	2870272	----a-w-	c:\windows\explorer.exe
2011-04-27 16:19 . 2011-02-26 05:33	2614784	----a-w-	c:\windows\SysWow64\explorer.exe
2011-04-27 16:18 . 2011-02-18 06:33	31232	----a-w-	c:\windows\system32\prevhost.exe
2011-04-27 16:18 . 2011-02-18 05:33	31232	----a-w-	c:\windows\SysWow64\prevhost.exe
2011-04-19 21:35 . 2011-01-30 00:00	821824	----a-w-	c:\windows\SysWow64\dgderapi.dll
2011-04-19 20:58 . 2008-06-24 20:50	65024	----a-w-	c:\windows\system32\drivers\rimmpx64.sys
2011-04-19 20:58 . 2007-07-28 02:45	57856	----a-w-	c:\windows\system32\drivers\rixdpx64.sys
2011-04-19 20:58 . 2007-07-27 03:33	55296	----a-w-	c:\windows\system32\drivers\rimspx64.sys
2011-04-19 20:58 . 2007-07-25 19:48	172032	----a-w-	c:\windows\system32\rixdicon.dll
2011-04-19 20:58 . 2004-09-04 10:00	90112	----a-w-	c:\windows\system32\snymsico.dll
2011-04-19 20:55 . 2011-04-19 21:36	--------	d-----w-	c:\users\Matthias\AppData\Local\Samsung
2011-04-19 20:52 . 2011-01-30 00:00	4659712	----a-w-	c:\windows\SysWow64\Redemption.dll
2011-04-19 20:50 . 2011-04-19 21:33	--------	d-----w-	c:\users\Matthias\AppData\Local\Downloaded Installations
2011-04-19 20:49 . 2011-03-18 01:18	77557544	----a-w-	c:\users\Matthias\AppData\Roaming\Microsoft\Windows\Templates\SamsungKiesSetup.exe
2011-04-15 07:19 . 2011-03-03 06:17	182272	----a-w-	c:\windows\system32\dnsrslvr.dll
2011-04-13 02:28 . 2011-05-03 07:03	--------	d-----w-	c:\programdata\Skype Extras
2011-04-13 02:28 . 2011-04-13 02:28	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2011-04-11 00:10 . 2011-04-11 00:10	--------	d-----w-	c:\programdata\CyberLink
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-18 06:06 . 2011-03-18 06:06	30632	----a-w-	c:\windows\SysWow64\MASetupCleaner.exe
2011-03-08 21:41 . 2011-03-08 21:41	974848	----a-w-	c:\windows\SysWow64\cis-2.4.dll
2011-03-08 21:41 . 2011-03-08 21:41	81920	----a-w-	c:\windows\SysWow64\issacapi_bs-2.3.dll
2011-03-08 21:41 . 2011-03-08 21:41	65536	----a-w-	c:\windows\SysWow64\issacapi_pe-2.3.dll
2011-03-08 21:41 . 2011-03-08 21:41	57344	----a-w-	c:\windows\SysWow64\MTXSYNCICON.dll
2011-03-08 21:41 . 2011-03-08 21:41	57344	----a-w-	c:\windows\SysWow64\MK_Lyric.dll
2011-03-08 21:41 . 2011-03-08 21:41	57344	----a-w-	c:\windows\SysWow64\issacapi_se-2.3.dll
2011-03-08 21:41 . 2011-03-08 21:41	569344	----a-w-	c:\windows\SysWow64\muzdecode.ax
2011-03-08 21:41 . 2011-03-08 21:41	491520	----a-w-	c:\windows\SysWow64\muzapp.dll
2011-03-08 21:41 . 2011-03-08 21:41	49152	----a-w-	c:\windows\SysWow64\MaJGUILib.dll
2011-03-08 21:41 . 2011-03-08 21:41	45056	----a-w-	c:\windows\SysWow64\MaXMLProto.dll
2011-03-08 21:41 . 2011-03-08 21:41	45056	----a-w-	c:\windows\SysWow64\MACXMLProto.dll
2011-03-08 21:41 . 2011-03-08 21:41	40960	----a-w-	c:\windows\SysWow64\MTTELECHIP.dll
2011-03-08 21:41 . 2011-03-08 21:41	40960	----a-w-	c:\windows\SysWow64\MAMACExtract.dll
2011-03-08 21:41 . 2011-03-08 21:41	352256	----a-w-	c:\windows\SysWow64\MSLUR71.dll
2011-03-08 21:41 . 2011-03-08 21:41	258048	----a-w-	c:\windows\SysWow64\muzoggsp.ax
2011-03-08 21:41 . 2011-03-08 21:41	245760	----a-w-	c:\windows\SysWow64\MSCLib.dll
2011-03-08 21:41 . 2011-03-08 21:41	200704	----a-w-	c:\windows\SysWow64\muzwmts.dll
2011-03-08 21:41 . 2011-03-08 21:41	155648	----a-w-	c:\windows\SysWow64\MSFLib.dll
2011-03-08 21:41 . 2011-03-08 21:41	143360	----a-w-	c:\windows\SysWow64\3DAudio.ax
2011-03-08 21:41 . 2011-03-08 21:41	135168	----a-w-	c:\windows\SysWow64\muzaf1.dll
2011-03-08 21:41 . 2011-03-08 21:41	131072	----a-w-	c:\windows\SysWow64\muzmpgsp.ax
2011-03-08 21:41 . 2011-03-08 21:41	122880	----a-w-	c:\windows\SysWow64\muzeffect.ax
2011-03-08 21:41 . 2011-03-08 21:41	118784	----a-w-	c:\windows\SysWow64\MaDRM.dll
2011-03-08 21:41 . 2011-03-08 21:41	110592	----a-w-	c:\windows\SysWow64\muzmp4sp.ax
2011-03-04 06:17 . 2011-04-27 16:32	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:17 . 2011-04-27 16:32	347648	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-19 06:37 . 2011-03-09 15:47	1135104	----a-w-	c:\windows\system32\FntCache.dll
2011-02-19 06:37 . 2011-03-09 15:47	1540608	----a-w-	c:\windows\system32\DWrite.dll
2011-02-19 06:36 . 2011-03-09 15:47	902656	----a-w-	c:\windows\system32\d2d1.dll
2011-02-19 05:32 . 2011-03-09 15:47	1074176	----a-w-	c:\windows\SysWow64\DWrite.dll
2011-02-19 05:32 . 2011-03-09 15:47	739840	----a-w-	c:\windows\SysWow64\d2d1.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Updater shortcut"="c:\program files (x86)\T-Mobile\web'n'walk Manager\WTGU.exe" [2008-06-19 857544]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"dradio-RecorderTimer"="c:\program files (x86)\dradio-Recorder\phonostarTimer.exe" [2010-11-23 39936]
"Olympus ib"="c:\program files (x86)\Olympus\ib\olycamdetect.exe" [2010-09-30 93360]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-03-17 896912]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-01-30 3372856]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-04-19 13824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-11-19 281768]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-08-17 6859392]
"DataCardMonitor"="c:\program files (x86)\T-Mobile\web'n'walk Manager\DataCardMonitor.exe" [2010-02-13 253952]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-30 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-14 421160]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"MDS_Menu"="c:\program files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2010-07-01 220336]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Olympus ib"="c:\program files (x86)\Olympus\ib\olycamdetect.exe" [2010-09-30 93360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-01 136176]
R3 BthAvrcp;Bluetooth-AVRCP-Profil;c:\windows\system32\DRIVERS\BthAvrcp.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-01 136176]
R3 sscebus;SAMSUNG USB Composite Device V2 driver (WDM);c:\windows\system32\DRIVERS\sscebus.sys [x]
R3 sscemdfl;SAMSUNG Mobile Modem V2 Filter;c:\windows\system32\DRIVERS\sscemdfl.sys [x]
R3 sscemdm;SAMSUNG Mobile Modem V2 Drivers;c:\windows\system32\DRIVERS\sscemdm.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2010-05-25 16392]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-05-01 136360]
S3 AtcL001;NDIS-Miniporttreiber für L1-Gigabit-Ethernet-Controller von Atheros;c:\windows\system32\DRIVERS\l160x64.sys [x]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series - Adaptertreiber für Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-05-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-01 05:00]
.
2011-05-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-01 05:00]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-10-31 212992]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-03-24 7573024]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-03-24 1833504]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube to Mp3 Converter - c:\users\Matthias\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\g5eovb9p.default\
FF - prefs.js: browser.startup.homepage - google.com
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{7e111a5c-3d11-4f56-9463-5310c3c69025} - (no file)
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-{8ADFC4160D694100B5B8A22DE9DCABD9} - c:\program files (x86)\DivX\DivXPlayerUninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-191531457-550184952-816705114-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:3e,10,45,ff,90,4a,ea,c8,53,ed,56,ee,0e,29,a7,b3,26,9a,9c,89,44,a0,22,
   d1,87,43,4d,e0,58,d0,9c,ec,08,58,23,dc,f9,dd,c5,67,fd,b1,cd,be,3f,d2,97,2e,\
"??"=hex:6c,62,1e,85,31,79,ee,15,b9,73,80,1b,b6,93,1f,82
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Hotkey\Atouch64.exe
c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-05-06  00:07:52 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2011-05-06 07:07
.
Vor Suchlauf: 10 Verzeichnis(se), 46.754.865.152 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 46.718.406.656 Bytes frei
.
- - End Of File - - 72585A19A3323E19AA9835A18A41F23C

--- --- ---

cosinus · 06.05.2011, 10:14

Bitte nun Logs mit GMER und mbrcheck erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg

Anleitung zu mbrcheck:
Downloade Dir MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

Doppelklick auf die MBRCheck.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Das Tool braucht nur wenige Sekunden.
Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

privatejoker · 06.05.2011, 17:46

Gmer
[code]
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15627 - hxxp://www.gmer.net
Rootkit scan 2011-05-06 09:43:30
Windows 6.1.7600  
Running: jgqk6gs9.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0022154c62e2                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0022154c62e2@0023f11f28f0         0x95 0x54 0xEC 0x5F ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0022154c62e2@e8e5d6f18d99         0x41 0xC2 0xFB 0x2C ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0022154c62e2 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0022154c62e2@0023f11f28f0             0x95 0x54 0xEC 0x5F ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0022154c62e2@e8e5d6f18d99             0x41 0xC2 0xFB 0x2C ...

---- EOF - GMER 1.0.15 ----

--- --- ---

MBR

Code:

ATTFilter

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:			
Windows Version:		Windows 7 Professional
Windows Information:		 (build 7600), 64-bit
Base Board Manufacturer:	ASUSTeK Computer Inc.
BIOS Manufacturer:		American Megatrends Inc.
System Manufacturer:		ASUSTeK Computer Inc.
System Product Name:		G2SV
Logical Drives Mask:		0x0000000c

Kernel Drivers (total 196):
  0x03261000 \SystemRoot\system32\ntoskrnl.exe
  0x03218000 \SystemRoot\system32\hal.dll
  0x00B9F000 \SystemRoot\system32\kdcom.dll
  0x00C53000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
  0x00C97000 \SystemRoot\system32\PSHED.dll
  0x00CAB000 \SystemRoot\system32\CLFS.SYS
  0x00D09000 \SystemRoot\system32\CI.dll
  0x00E4E000 \SystemRoot\system32\drivers\Wdf01000.sys
  0x00EF2000 \SystemRoot\system32\drivers\WDFLDR.SYS
  0x00F01000 \SystemRoot\system32\DRIVERS\ACPI.sys
  0x00F58000 \SystemRoot\system32\DRIVERS\WMILIB.SYS
  0x00F61000 \SystemRoot\system32\DRIVERS\msisadrv.sys
  0x00F6B000 \SystemRoot\system32\DRIVERS\pci.sys
  0x00F9E000 \SystemRoot\system32\DRIVERS\vdrvroot.sys
  0x00FAB000 \SystemRoot\System32\drivers\partmgr.sys
  0x00FC0000 \SystemRoot\system32\DRIVERS\compbatt.sys
  0x00FC9000 \SystemRoot\system32\DRIVERS\BATTC.SYS
  0x00FD5000 \SystemRoot\system32\DRIVERS\volmgr.sys
  0x010EA000 \SystemRoot\System32\drivers\volmgrx.sys
  0x01146000 \SystemRoot\system32\DRIVERS\intelide.sys
  0x0114E000 \SystemRoot\system32\DRIVERS\PCIIDEX.SYS
  0x0115E000 \SystemRoot\System32\drivers\mountmgr.sys
  0x01178000 \SystemRoot\system32\DRIVERS\atapi.sys
  0x01181000 \SystemRoot\system32\DRIVERS\ataport.SYS
  0x011AB000 \SystemRoot\system32\DRIVERS\msahci.sys
  0x011B6000 \SystemRoot\system32\drivers\amdxata.sys
  0x01000000 \SystemRoot\system32\drivers\fltmgr.sys
  0x0104C000 \SystemRoot\system32\drivers\fileinfo.sys
  0x01208000 \SystemRoot\System32\Drivers\Ntfs.sys
  0x01060000 \SystemRoot\System32\Drivers\msrpc.sys
  0x013AA000 \SystemRoot\System32\Drivers\ksecdd.sys
  0x01466000 \SystemRoot\System32\Drivers\cng.sys
  0x014D9000 \SystemRoot\System32\drivers\pcw.sys
  0x014EA000 \SystemRoot\System32\Drivers\Fs_Rec.sys
  0x014F4000 \SystemRoot\system32\drivers\ndis.sys
  0x01400000 \SystemRoot\system32\drivers\NETIO.SYS
  0x013C4000 \SystemRoot\System32\Drivers\ksecpkg.sys
  0x01603000 \SystemRoot\System32\drivers\tcpip.sys
  0x00E00000 \SystemRoot\System32\drivers\fwpkclnt.sys
  0x015E6000 \SystemRoot\system32\DRIVERS\vmstorfl.sys
  0x00C00000 \SystemRoot\system32\DRIVERS\volsnap.sys
  0x015F6000 \SystemRoot\System32\Drivers\spldr.sys
  0x011C1000 \SystemRoot\System32\drivers\rdyboost.sys
  0x010BE000 \SystemRoot\System32\Drivers\mup.sys
  0x013EF000 \SystemRoot\System32\drivers\hwpolicy.sys
  0x018AE000 \SystemRoot\System32\DRIVERS\fvevol.sys
  0x018E8000 \SystemRoot\system32\DRIVERS\disk.sys
  0x018FE000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
  0x01966000 \SystemRoot\system32\DRIVERS\cdrom.sys
  0x01990000 \SystemRoot\System32\Drivers\Null.SYS
  0x01999000 \SystemRoot\System32\Drivers\Beep.SYS
  0x019A0000 \SystemRoot\System32\drivers\vga.sys
  0x019AE000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
  0x019D3000 \SystemRoot\System32\drivers\watchdog.sys
  0x019E3000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
  0x019EC000 \SystemRoot\system32\drivers\rdpencdd.sys
  0x019F5000 \SystemRoot\system32\drivers\rdprefmp.sys
  0x01800000 \SystemRoot\System32\Drivers\Msfs.SYS
  0x0180B000 \SystemRoot\System32\Drivers\Npfs.SYS
  0x0181C000 \SystemRoot\system32\DRIVERS\tdx.sys
  0x0183A000 \SystemRoot\system32\DRIVERS\TDI.SYS
  0x02C95000 \SystemRoot\system32\drivers\afd.sys
  0x02D1F000 \SystemRoot\System32\DRIVERS\netbt.sys
  0x02D64000 \SystemRoot\system32\drivers\ws2ifsl.sys
  0x02D6F000 \SystemRoot\system32\DRIVERS\wfplwf.sys
  0x02D78000 \SystemRoot\system32\DRIVERS\pacer.sys
  0x02D9E000 \SystemRoot\system32\DRIVERS\netbios.sys
  0x02DAD000 \SystemRoot\system32\DRIVERS\wanarp.sys
  0x02DC8000 \SystemRoot\system32\DRIVERS\termdd.sys
  0x02C00000 \SystemRoot\system32\DRIVERS\rdbss.sys
  0x02C51000 \SystemRoot\system32\drivers\nsiproxy.sys
  0x02C5D000 \SystemRoot\system32\DRIVERS\mssmbios.sys
  0x02C68000 \SystemRoot\System32\drivers\discache.sys
  0x03A8A000 \SystemRoot\system32\drivers\csc.sys
  0x03B0D000 \SystemRoot\System32\Drivers\dfsc.sys
  0x03B2B000 \SystemRoot\system32\DRIVERS\blbdrive.sys
  0x03B3C000 \SystemRoot\system32\DRIVERS\avipbb.sys
  0x03B5E000 \SystemRoot\system32\DRIVERS\tunnel.sys
  0x03B84000 \SystemRoot\system32\DRIVERS\intelppm.sys
  0x0FEE0000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
  0x10BEE000 \SystemRoot\system32\DRIVERS\nvBridge.kmd
  0x03C71000 \SystemRoot\System32\drivers\dxgkrnl.sys
  0x03D65000 \SystemRoot\System32\drivers\dxgmms1.sys
  0x03DAB000 \SystemRoot\system32\DRIVERS\usbuhci.sys
  0x03C00000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
  0x03C56000 \SystemRoot\system32\DRIVERS\usbehci.sys
  0x03DB8000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
  0x03DDC000 \SystemRoot\system32\DRIVERS\l160x64.sys
  0x03E38000 \SystemRoot\system32\DRIVERS\netw5v64.sys
  0x04373000 \SystemRoot\system32\DRIVERS\1394ohci.sys
  0x043B1000 \SystemRoot\system32\DRIVERS\sdbus.sys
  0x043D1000 \SystemRoot\system32\DRIVERS\rimmpx64.sys
  0x043E7000 \SystemRoot\system32\DRIVERS\rimspx64.sys
  0x0FE00000 \SystemRoot\system32\DRIVERS\rixdpx64.sys
  0x03E00000 \SystemRoot\system32\DRIVERS\i8042prt.sys
  0x03E1E000 \SystemRoot\system32\DRIVERS\kbdclass.sys
  0x0FE57000 \SystemRoot\system32\DRIVERS\Apfiltr.sys
  0x03DEE000 \SystemRoot\system32\DRIVERS\mouclass.sys
  0x0FE90000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
  0x03E2D000 \SystemRoot\system32\DRIVERS\CmBatt.sys
  0x03C67000 \SystemRoot\system32\DRIVERS\ATK64AMD.sys
  0x0FE9D000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
  0x0FEAD000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
  0x03B9A000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
  0x0FEC3000 \SystemRoot\system32\DRIVERS\ndistapi.sys
  0x03BBE000 \SystemRoot\system32\DRIVERS\ndiswan.sys
  0x03A00000 \SystemRoot\system32\DRIVERS\raspppoe.sys
  0x03A1B000 \SystemRoot\system32\DRIVERS\raspptp.sys
  0x03A3C000 \SystemRoot\system32\DRIVERS\rassstp.sys
  0x0FECF000 \SystemRoot\system32\DRIVERS\rdpbus.sys
  0x03E32000 \SystemRoot\system32\DRIVERS\swenum.sys
  0x01847000 \SystemRoot\system32\DRIVERS\ks.sys
  0x03A56000 \SystemRoot\system32\DRIVERS\umbus.sys
  0x04AE5000 \SystemRoot\system32\DRIVERS\usbhub.sys
  0x04B3F000 \SystemRoot\System32\Drivers\NDProxy.SYS
  0x07A50000 \SystemRoot\system32\drivers\RTKVHD64.sys
  0x07A00000 \SystemRoot\system32\drivers\portcls.sys
  0x04B54000 \SystemRoot\system32\drivers\drmk.sys
  0x07A3D000 \SystemRoot\system32\drivers\ksthunk.sys
  0x07C75000 \SystemRoot\system32\DRIVERS\SmSerl64.sys
  0x07DAF000 \SystemRoot\system32\drivers\modem.sys
  0x07DBE000 \SystemRoot\system32\DRIVERS\usbccgp.sys
  0x07DDB000 \SystemRoot\system32\DRIVERS\USBD.SYS
  0x07C00000 \SystemRoot\System32\Drivers\usbvideo.sys
  0x00030000 \SystemRoot\System32\win32k.sys
  0x07C2E000 \SystemRoot\System32\drivers\Dxapi.sys
  0x07C3A000 \SystemRoot\System32\Drivers\crashdmp.sys
  0x07C48000 \SystemRoot\System32\Drivers\dump_dumpata.sys
  0x07C54000 \SystemRoot\System32\Drivers\dump_msahci.sys
  0x07C5F000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
  0x07DDD000 \SystemRoot\system32\DRIVERS\hidusb.sys
  0x04B76000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
  0x07DEB000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
  0x04B8F000 \SystemRoot\system32\DRIVERS\monitor.sys
  0x00520000 \SystemRoot\System32\TSDDD.dll
  0x006D0000 \SystemRoot\System32\cdd.dll
  0x04B9D000 \SystemRoot\system32\drivers\luafv.sys
  0x04BC0000 \SystemRoot\system32\DRIVERS\avgntflt.sys
  0x04BDD000 \SystemRoot\system32\drivers\WudfPf.sys
  0x04A00000 \SystemRoot\system32\DRIVERS\lltdio.sys
  0x04A15000 \SystemRoot\system32\DRIVERS\nwifi.sys
  0x04A68000 \SystemRoot\system32\DRIVERS\ndisuio.sys
  0x04A7B000 \SystemRoot\system32\DRIVERS\rspndr.sys
  0x034D1000 \SystemRoot\system32\drivers\HTTP.sys
  0x03599000 \SystemRoot\system32\DRIVERS\bowser.sys
  0x035B7000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
  0x03400000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
  0x0344E000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
  0x038DC000 \SystemRoot\system32\drivers\peauth.sys
  0x03982000 \SystemRoot\System32\Drivers\secdrv.SYS
  0x0398D000 \SystemRoot\System32\DRIVERS\srvnet.sys
  0x039BA000 \SystemRoot\System32\drivers\tcpipreg.sys
  0x03800000 \SystemRoot\System32\DRIVERS\srv2.sys
  0x0464E000 \SystemRoot\System32\DRIVERS\srv.sys
  0x046E3000 \SystemRoot\System32\Drivers\fastfat.SYS
  0x0478A000 \SystemRoot\system32\DRIVERS\asyncmac.sys
  0x773E0000 \Windows\System32\ntdll.dll
  0x47830000 \Windows\System32\smss.exe
  0xFF700000 \Windows\System32\apisetschema.dll
  0xFF210000 \Windows\System32\autochk.exe
  0xFF5C0000 \Windows\System32\wininet.dll
  0xFF520000 \Windows\System32\clbcatq.dll
  0xFF4A0000 \Windows\System32\shlwapi.dll
  0xFF450000 \Windows\System32\Wldap32.dll
  0x775B0000 \Windows\System32\psapi.dll
  0xFF3B0000 \Windows\System32\comdlg32.dll
  0xFF2D0000 \Windows\System32\advapi32.dll
  0xFF1C0000 \Windows\System32\msctf.dll
  0xFF1B0000 \Windows\System32\lpk.dll
  0x772E0000 \Windows\System32\user32.dll
  0x771C0000 \Windows\System32\kernel32.dll
  0xFF190000 \Windows\System32\imagehlp.dll
  0xFF110000 \Windows\System32\difxapi.dll
  0xFEF30000 \Windows\System32\setupapi.dll
  0xFED20000 \Windows\System32\ole32.dll
  0xFECD0000 \Windows\System32\ws2_32.dll
  0xFECA0000 \Windows\System32\imm32.dll
  0xFEBC0000 \Windows\System32\oleaut32.dll
  0xFEBB0000 \Windows\System32\nsi.dll
  0xFEA30000 \Windows\System32\urlmon.dll
  0xFE990000 \Windows\System32\msvcrt.dll
  0xFE920000 \Windows\System32\gdi32.dll
  0xFE900000 \Windows\System32\sechost.dll
  0xFE6A0000 \Windows\System32\iertutil.dll
  0xFE570000 \Windows\System32\rpcrt4.dll
  0xFD7E0000 \Windows\System32\shell32.dll
  0xFD710000 \Windows\System32\usp10.dll
  0x775A0000 \Windows\System32\normaliz.dll
  0xFD670000 \Windows\System32\comctl32.dll
  0xFD600000 \Windows\System32\KernelBase.dll
  0xFD5C0000 \Windows\System32\cfgmgr32.dll
  0xFD450000 \Windows\System32\crypt32.dll
  0xFD430000 \Windows\System32\devobj.dll
  0xFD3F0000 \Windows\System32\wintrust.dll
  0xFD3E0000 \Windows\System32\msasn1.dll
  0x758F0000 \Windows\SysWOW64\normaliz.dll

Processes (total 74):
       0 System Idle Process
       4 System
     264 C:\Windows\System32\smss.exe
     428 csrss.exe
     488 C:\Windows\System32\wininit.exe
     500 csrss.exe
     544 C:\Windows\System32\services.exe
     560 C:\Windows\System32\lsass.exe
     568 C:\Windows\System32\lsm.exe
     668 C:\Windows\System32\svchost.exe
     752 C:\Windows\System32\nvvsvc.exe
     792 C:\Windows\System32\svchost.exe
     856 C:\Windows\System32\svchost.exe
     888 C:\Windows\System32\svchost.exe
     928 C:\Windows\System32\svchost.exe
     300 C:\Windows\System32\svchost.exe
     936 C:\Windows\System32\svchost.exe
    1092 C:\Windows\System32\winlogon.exe
    1124 C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
    1252 C:\Windows\System32\spoolsv.exe
    1300 C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
    1396 C:\Windows\System32\svchost.exe
    1452 C:\Windows\System32\nvvsvc.exe
    1528 C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe
    1584 C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
    1612 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    1624 C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
    1632 C:\Windows\System32\conhost.exe
    1668 C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    1712 C:\Windows\System32\svchost.exe
    1800 C:\Windows\System32\svchost.exe
    2156 C:\Windows\System32\taskhost.exe
    2276 C:\Windows\System32\dwm.exe
    2300 C:\Windows\explorer.exe
    2456 C:\Windows\System32\taskeng.exe
    2504 C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
    2612 C:\Program Files\Apoint2K\Apoint.exe
    2620 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    2640 C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
    2680 C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
    2756 C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
    2780 C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
    2796 C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
    2804 C:\Program Files\Windows Sidebar\sidebar.exe
    2816 C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
    2836 C:\Program Files (x86)\Olympus\ib\olycamdetect.exe
    3044 C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
    3056 C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
    1764 C:\Windows\System32\svchost.exe
    3296 C:\Windows\System32\SearchIndexer.exe
    3344 C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
    3396 C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
    3444 C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
    3464 C:\Program Files (x86)\T-Mobile\web'n'walk Manager\DataCardMonitor.exe
    3480 C:\Program Files\Apoint2K\ApMsgFwd.exe
    3544 C:\Program Files (x86)\iTunes\iTunesHelper.exe
    3620 C:\Program Files\Apoint2K\ApntEx.exe
    3652 C:\Windows\System32\conhost.exe
    3664 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    3672 C:\Program Files\Apoint2K\hidfind.exe
    3680 C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    3712 C:\Program Files\Apoint2K\Apvfb.exe
    4004 C:\Program Files\iPod\bin\iPodService.exe
    3272 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    4024 C:\Windows\System32\svchost.exe
    3288 C:\Program Files\Windows Media Player\wmpnetwk.exe
    2192 C:\Program Files (x86)\T-Mobile\web'n'walk Manager\WTGU.exe
     628 C:\Windows\System32\svchost.exe
    1852 C:\Windows\System32\SearchProtocolHost.exe
     960 C:\Windows\System32\SearchFilterHost.exe
    4588 C:\Windows\System32\audiodg.exe
    4940 C:\Users\Matthias\Downloads\MBRCheck.exe
    2944 C:\Windows\System32\conhost.exe
    4692 C:\Windows\System32\dllhost.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000002`77500000  (NTFS)

PhysicalDrive0 Model Number: WDCWD3200BEVT-22ZCT0, Rev: 11.01A11

      Size  Device Name          MBR Status
  --------------------------------------------
    298 GB  \\.\PhysicalDrive0   Windows 7 MBR code detected
            SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79


Done!

cosinus · 06.05.2011, 18:41

Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

privatejoker · 06.05.2011, 20:31

Hier der erste, zweite kommt gleich

Code:

ATTFilter

SUPERAntiSpyware Scann-Protokoll
hxxp://www.superantispyware.com

Generiert 05/06/2011 bei 11:56 AM

Version der Applikation : 4.52.1000

Version der Kern-Datenbank : 7004
Version der Spur-Datenbank : 4816

Scan Art       : kompletter Scann
Totale Scann-Zeit : 01:05:47

Gescannte Speicherelemente  : 631
Erfasste Speicher-Bedrohungen  : 0
Gescannte Register-Elemente  : 14882
Erfasste Register-Bedrohungen  : 0
Gescannte Datei-Elemente     : 33122
Erfasste Datei-Elemente   : 0

04.05.2011, 14:06	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	MSN Hotmail verschickt Spam an Kontakte Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind. __________________ Logfiles bitte immer in CODE-Tags posten

06.05.2011, 18:41	#14
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	MSN Hotmail verschickt Spam an Kontakte Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!! __________________ Logfiles bitte immer in CODE-Tags posten

MSN Hotmail verschickt Spam an Kontakte

Plagegeister aller Art und deren Bekämpfung: MSN Hotmail verschickt Spam an Kontakte