![]() |
| |||||||
Log-Analyse und Auswertung: PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbarWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
| | #1 |
| | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar Hallo, ich besuchte eine Seite im Internet, wo Kasperskey Alarm schlug: GDI Client DLL Proaktiver Schutz In die Quarantäne verschoben: PDM.Trojan.generic C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\0.38087114455728854.EXE Aktion wurde den Einstellungen entsprechend gewählt. Plötzlich öffnete sich ein Fenster, wo irgendwas von defekten Festplattensektoren usw. stand. Sag mir nach einer Microsoft Anwendung aus. Da klickte ich auf Fehlerbehebung. Dann stand dort, das die Fehler nicht behoben werden könnten. Die Dateien konnte ich mit UNHIDE wieder sichtbar machen. Wie entferne ich die infizierten Dateien sinnvoll? Hier ist der LOG von Malewarebytes: Malwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Datenbank Version: 6750 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 02.06.2011 00:22:24 mbam-log-2011-06-02 (00-22-10).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 185517 Laufzeit: 11 Minute(n), 0 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 2 Infizierte Registrierungswerte: 2 Infizierte Dateiobjekte der Registrierung: 1 Infizierte Verzeichnisse: 1 Infizierte Dateien: 6 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CLASSES_ROOT\CLSID\{OF7OS5JU-3X27-3BA3-IQ3F-48FKK0G522HP} (Trojan.Downloader) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{OF7OS5JU-3X27-3BA3-IQ3F-48FKK0G522HP} (Trojan.Downloader) -> No action taken. Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies (Trojan.Downloader) -> Value: Policies -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies (Trojan.Downloader) -> Value: Policies -> No action taken. Infizierte Dateiobjekte der Registrierung: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken. Infizierte Verzeichnisse: c:\programdata\MPK (Refog.Keylogger) -> No action taken. Infizierte Dateien: c:\programdata\40820472.exe (Trojan.FakeMS) -> No action taken. c:\Users\fixxxxxi\AppData\Local\Temp\jar_cache6166870869270142075.tmp (Trojan.FakeMS) -> No action taken. c:\Users\fixxxxxi\downloads\roulette software dan0_21.exe (PUP.Casino) -> No action taken. c:\Windows\System32\install\server.exe (Trojan.Downloader) -> No action taken. c:\Windows\SysWOW64\install\server.exe (Trojan.Downloader) -> No action taken. c:\programdata\MPK\mpk.db (Refog.Keylogger) -> No action taken. |
| | #2 | |||
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar Hallo und Herzlich Willkommen!
__________________![]() Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen! Ich mach dir einen Vorschlag: Wenn du glaubst zu kennen die Zeitpunkt wo dein System noch einwandfrei funktioniert hat, die Systemwiederherstellung ist einen Versuch Wert!: - Gibt es einen "relativ einfachen Weg",wenn eine frische Infektion vorliegt, oder mal bestimmte Probleme bekommt man auch gelöst, was man sogleich ausprobieren sollte. Dies bietet Dir die Möglichkeit, Systemänderungen am Computer ohne Auswirkung auf persönliche Dateien, wie z. B. E-Mails, Dokumente oder Fotos, rückgängig zu machen. Zitat:
(Kannst noch immer bis zum heutigen Zeitpunkt rückgängig machen, falls liefert nicht das gewünschte Ergebnis) ► berichte mir auch, ob die SWH funktioniert hat, bzw ob Du das System auf einen früheren Wiederherstellungspunkt zurückstellen können? 1. Systemscan mit OTL Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop.
2. Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken: System-Dateien und -Ordner unter XP und Vista sichtbar machen Am Ende unserer Arbeit, kannst wieder rückgängig machen! 3. → Lade Dir HJTscanlist.zip herunter → entpacke die Datei auf deinem Desktop → Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren → per Doppelklick starten → Wähle dein Betriebsystem aus - bei Win7 wähle Vista → Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen → Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren → Bitte kopiere den Inhalt hier in Deinen Thread. ** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten 4. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool Ccleaner herunter → Download installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein Zitat:
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw grußkira
__________________ |
| | #3 |
| | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar Eine Systemwiederherstellung konnte NICHT erfolgreich abgeschlossen werden. Ich habe diverse Systemwiederherstellungspunkte ausprobiert - alle ohne Erfolg.
__________________Desweiteren habe ich im Anschluss an meinen gestern geöffneten Thread in dem Programm Malewarebytes auf entfernen geklickt, woraufhin ich den Rechner zum vollständigen entfernen neu starten sollte. Ich hoffe dieses "voreilige" Handeln hat sich zu keinem Nachteil geäußert. hjtscanlist.txt - TEIL 1 Code:
ATTFilter
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
º º
hjtscanlist v2.0
º º
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Microsoft Windows [Version 6.1.7601]
C:
02.06.2011 11:53 C:\Program Files --------- 8192
C:\pagefile.sys ---------
C:\hiberfil.sys ---------
02.06.2011 00:37 C:\ProgramData --------- 20480
02.06.2011 00:09 C:\Program Files (x86) --------- 32768
01.06.2011 12:41 C:\Windows --------- 32768
01.06.2011 12:39 C:\ESE --------- 4096
01.06.2011 12:39 C:\Photoshop CS 4 --------- 4096
01.06.2011 11:40 C:\System Volume Information --------- 28672
31.05.2011 09:51 C:\Tactical Ops --------- 81920
01.05.2011 08:07 C:\Boot --------- 4096
25.03.2011 00:52 C:\Temp --------- 0
05.02.2011 18:13 C:\Users --------- 4096
16.12.2010 18:36 C:\$Recycle.Bin --------- 4096
20.11.2010 14:40 C:\bootmgr --------- 383786
09.09.2010 03:41 C:\rules.qdb --------- 20
15.02.2010 01:04 C:\MAGIX --------- 0
18.01.2010 23:06 C:\MSOCache --------- 0
18.01.2010 22:55 C:\ATI --------- 0
18.01.2010 22:31 C:\Recovery --------- 0
18.01.2010 22:31 C:\Programme --------- 0
18.01.2010 22:31 C:\Dokumente und Einstellungen --------- 0
18.01.2010 22:20 C:\BOOTSECT.BAK --------- 8192
14.07.2009 07:08 C:\Documents and Settings --------- 0
----------------------------------------
C:\Windows
02.06.2011 11:40 C:\Windows\WindowsUpdate.log --------- 1381024
02.06.2011 11:30 C:\Windows\setupact.log --------- 109275
02.06.2011 11:30 C:\Windows\bootstat.dat --------- 67584
02.06.2011 11:30 C:\Windows\PFRO.log --------- 375604
14.05.2011 20:09 C:\Windows\win.ini --------- 1501
29.04.2011 23:56 C:\Windows\IE9_main.log --------- 2673
25.04.2011 00:10 C:\Windows\wiso.ini --------- 661
26.03.2011 14:14 C:\Windows\msxml4-KB973685-enu.LOG --------- 260056
26.03.2011 12:34 C:\Windows\DPINST.LOG --------- 21682
25.02.2011 08:19 C:\Windows\explorer.exe --------- 2871808
14.01.2011 15:01 C:\Windows\DirectX.log --------- 192128
16.12.2010 16:35 C:\Windows\OneProc.dat --------- 36
10.12.2010 13:14 C:\Windows\Persona_Header_TEMPLATE(2).png --------- 244907
29.11.2010 18:40 C:\Windows\ulead32.ini --------- 206
20.11.2010 15:25 C:\Windows\splwow64.exe --------- 67072
20.11.2010 15:24 C:\Windows\bfsvc.exe --------- 71168
20.11.2010 14:21 C:\Windows\twain_32.dll --------- 51200
08.11.2010 14:51 C:\Windows\gdrv.sys --------- 23080
11.10.2010 22:00 C:\Windows\videodeLuxe.INI --------- 52
09.09.2010 03:41 C:\Windows\iun6002.exe --------- 737280
29.07.2010 19:26 C:\Windows\nsreg.dat --------- 0
23.06.2010 19:09 C:\Windows\LDPINST.LOG --------- 9359
23.06.2010 19:09 C:\Windows\LkmdfCoInst.log --------- 277
28.04.2010 18:45 C:\Windows\RtlExUpd.dll --------- 1251872
25.04.2010 15:19 C:\Windows\Bimmel&Bommel.LOG --------- 1847
04.04.2010 14:44 C:\Windows\ODBC.INI --------- 400
02.03.2010 22:57 C:\Windows\atiogl.xml --------- 20692
16.02.2010 01:50 C:\Windows\msxml4-KB973688-enu.LOG --------- 283870
16.02.2010 01:50 C:\Windows\msxml4-KB954430-enu.LOG --------- 288124
15.02.2010 00:54 C:\Windows\magix.ini --------- 88
18.01.2010 22:58 C:\Windows\ativpsrm.bin --------- 0
18.01.2010 22:50 C:\Windows\GSetup.ini --------- 10
18.01.2010 22:44 C:\Windows\DIFxAPI.dll --------- 525792
18.01.2010 22:27 C:\Windows\DtcInstall.log --------- 1774
18.01.2010 22:27 C:\Windows\TSSysprep.log --------- 1313
13.08.2009 16:28 C:\Windows\emMON.exe --------- 80896
14.07.2009 06:54 C:\Windows\WindowsShell.Manifest --------- 749
14.07.2009 06:51 C:\Windows\setuperr.log --------- 0
14.07.2009 03:39 C:\Windows\write.exe --------- 10240
14.07.2009 03:39 C:\Windows\regedit.exe --------- 427008
14.07.2009 03:39 C:\Windows\notepad.exe --------- 193536
14.07.2009 03:39 C:\Windows\HelpPane.exe --------- 733696
14.07.2009 03:39 C:\Windows\hh.exe --------- 16896
14.07.2009 03:39 C:\Windows\fveupdate.exe --------- 15360
14.07.2009 03:14 C:\Windows\winhlp32.exe --------- 9728
14.07.2009 03:14 C:\Windows\twunk_32.exe --------- 31232
14.07.2009 01:06 C:\Windows\mib.bin --------- 43131
10.06.2009 23:41 C:\Windows\twunk_16.exe --------- 49680
10.06.2009 23:41 C:\Windows\twain.dll --------- 94784
10.06.2009 23:08 C:\Windows\system.ini --------- 219
10.06.2009 22:52 C:\Windows\WMSysPr9.prx --------- 316640
10.06.2009 22:36 C:\Windows\msdfmap.ini --------- 1405
10.06.2009 22:31 C:\Windows\Starter.xml --------- 48201
10.06.2009 22:30 C:\Windows\Professional.xml --------- 53551
14.11.2007 09:18 C:\Windows\USetup.iss --------- 553
21.06.2007 08:34 C:\Windows\GSetup.exe --------- 203328
09.12.2005 15:35 C:\Windows\Instexec.exe --------- 245824
13.08.2004 13:33 C:\Windows\mgxoschk.ini --------- 1208
08.12.2000 22:59 C:\Windows\UnGins.exe --------- 122880
29.10.1998 16:45 C:\Windows\IsUninst.exe --------- 306688
21.10.1998 19:43 C:\Windows\IsUn0407.exe --------- 328704
----------------------------------------
C:\Windows\System
06.10.2002 19:37 C:\Windows\System\zlib.dll --------- 53760
14.08.2002 12:25 C:\Windows\System\CORE.DLL --------- 499712
----------------------------------------
C:\Windows\System32
02.06.2011 11:55 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 14640
02.06.2011 11:55 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 14640
02.06.2011 11:49 C:\Windows\system32\config --------- 40960
02.06.2011 00:09 C:\Windows\system32\drivers --------- 81920
01.06.2011 12:41 C:\Windows\system32\wbem --------- 65536
01.06.2011 12:38 C:\Windows\system32\catroot2 --------- 32768
01.06.2011 12:38 C:\Windows\system32\Tasks --------- 12288
01.06.2011 12:38 C:\Windows\system32\DriverStore --------- 4096
25.05.2011 08:49 C:\Windows\system32\catroot --------- 4096
15.05.2011 19:32 C:\Windows\system32\perfh009.dat --------- 618714
15.05.2011 19:32 C:\Windows\system32\perfc009.dat --------- 107034
15.05.2011 19:32 C:\Windows\system32\perfh007.dat --------- 657438
15.05.2011 19:32 C:\Windows\system32\perfc007.dat --------- 130810
15.05.2011 19:32 C:\Windows\system32\PerfStringBackup.INI --------- 1507106
11.05.2011 01:21 C:\Windows\system32\MRT.exe --------- 44548040
03.05.2011 17:45 C:\Windows\system32\FNTCACHE.DAT --------- 421832
30.04.2011 01:07 C:\Windows\system32\da-DK --------- 0
30.04.2011 01:07 C:\Windows\system32\de-DE --------- 327680
30.04.2011 01:07 C:\Windows\system32\oobe --------- 4096
30.04.2011 01:07 C:\Windows\system32\migration --------- 0
30.04.2011 01:07 C:\Windows\system32\AdvancedInstallers --------- 0
30.04.2011 01:07 C:\Windows\system32\Setup --------- 0
30.04.2011 01:07 C:\Windows\system32\cs-CZ --------- 0
30.04.2011 01:07 C:\Windows\system32\manifeststore --------- 0
30.04.2011 01:07 C:\Windows\system32\es-ES --------- 0
30.04.2011 01:07 C:\Windows\system32\sppui --------- 0
30.04.2011 01:07 C:\Windows\system32\migwiz --------- 4096
30.04.2011 01:07 C:\Windows\system32\Dism --------- 0
30.04.2011 01:06 C:\Windows\system32\Boot --------- 0
29.04.2011 23:52 C:\Windows\system32\msclmd.dll --------- 175616
29.04.2011 23:45 C:\Windows\system32\SPReview --------- 0
29.04.2011 23:43 C:\Windows\system32\EventProviders --------- 4096
09.04.2011 09:02 C:\Windows\system32\ntoskrnl.exe --------- 5562240
09.04.2011 08:58 C:\Windows\system32\poqexec.exe --------- 142336
12.03.2011 14:08 C:\Windows\system32\XpsPrint.dll --------- 1465344
11.03.2011 08:34 C:\Windows\system32\mfc42u.dll --------- 1359872
11.03.2011 08:34 C:\Windows\system32\mfc42.dll --------- 1395712
11.03.2011 08:33 C:\Windows\system32\esent.dll --------- 2565632
11.03.2011 08:30 C:\Windows\system32\fsutil.exe --------- 96768
08.03.2011 08:29 C:\Windows\system32\inetcomm.dll --------- 976896
07.03.2011 08:31 C:\Windows\system32\wininet.dll --------- 1188864
07.03.2011 08:31 C:\Windows\system32\urlmon.dll --------- 1491456
07.03.2011 08:29 C:\Windows\system32\mshtml.dll --------- 8995328
07.03.2011 08:29 C:\Windows\system32\jsproxy.dll --------- 64512
07.03.2011 08:28 C:\Windows\system32\ieui.dll --------- 247808
07.03.2011 08:28 C:\Windows\system32\ieframe.dll --------- 12260352
07.03.2011 06:24 C:\Windows\system32\mshtml.tlb --------- 1638912
03.03.2011 08:24 C:\Windows\system32\dnsrslvr.dll --------- 183296
03.03.2011 08:24 C:\Windows\system32\dnsapi.dll --------- 357888
03.03.2011 08:21 C:\Windows\system32\dnscacheugc.exe --------- 30208
03.03.2011 05:52 C:\Windows\system32\win32k.sys --------- 3135488
24.02.2011 08:15 C:\Windows\system32\XpsGdiConverter.dll --------- 476160
19.02.2011 14:05 C:\Windows\system32\FntCache.dll --------- 1139200
19.02.2011 14:04 C:\Windows\system32\DWrite.dll --------- 1544192
19.02.2011 14:04 C:\Windows\system32\d2d1.dll --------- 902656
19.02.2011 14:03 C:\Windows\system32\atmlib.dll --------- 46080
19.02.2011 11:00 C:\Windows\system32\atmfd.dll --------- 367616
18.02.2011 12:56 C:\Windows\system32\vbscript.dll --------- 613376
18.02.2011 12:54 C:\Windows\system32\jscript.dll --------- 919040
18.02.2011 12:51 C:\Windows\system32\prevhost.exe --------- 31232
12.02.2011 13:34 C:\Windows\system32\FXSCOVER.exe --------- 267776
05.02.2011 19:10 C:\Windows\system32\winload.efi --------- 642944
05.02.2011 19:10 C:\Windows\system32\kdusb.dll --------- 20352
05.02.2011 19:10 C:\Windows\system32\kd1394.dll --------- 19328
05.02.2011 19:10 C:\Windows\system32\kdcom.dll --------- 17792
05.02.2011 19:06 C:\Windows\system32\winresume.exe --------- 518672
05.02.2011 19:06 C:\Windows\system32\winload.exe --------- 605552
05.02.2011 19:06 C:\Windows\system32\winresume.efi --------- 566208
05.02.2011 00:49 C:\Windows\system32\wfp --------- 0
02.02.2011 18:11 C:\Windows\system32\MpSigStub.exe --------- 270720
14.01.2011 17:23 C:\Windows\system32\appmgmt --------- 0
14.01.2011 16:40 C:\Windows\system32\DRVSTORE --------- 0
07.01.2011 15:02 C:\Windows\system32\mfc100chs.dll --------- 36176
07.01.2011 15:02 C:\Windows\system32\mfc100cht.dll --------- 36176
07.01.2011 15:02 C:\Windows\system32\mfc100deu.dll --------- 64336
07.01.2011 15:02 C:\Windows\system32\mfc100enu.dll --------- 55120
07.01.2011 15:02 C:\Windows\system32\mfc100esn.dll --------- 63824
07.01.2011 15:02 C:\Windows\system32\mfc100fra.dll --------- 64336
07.01.2011 15:02 C:\Windows\system32\mfc100.dll --------- 5493576
07.01.2011 15:02 C:\Windows\system32\mfc100jpn.dll --------- 43856
07.01.2011 15:02 C:\Windows\system32\mfc100kor.dll --------- 43344
07.01.2011 15:02 C:\Windows\system32\mfc100rus.dll --------- 60752
07.01.2011 15:02 C:\Windows\system32\mfc100u.dll --------- 5523280
07.01.2011 15:02 C:\Windows\system32\mfcm100u.dll --------- 91472
07.01.2011 15:02 C:\Windows\system32\msvcp100.dll --------- 608080
07.01.2011 15:02 C:\Windows\system32\msvcr100.dll --------- 827728
07.01.2011 15:02 C:\Windows\system32\mfc100ita.dll --------- 62288
07.01.2011 15:02 C:\Windows\system32\vcomp100.dll --------- 57168
07.01.2011 15:02 C:\Windows\system32\mfcm100.dll --------- 91472
07.01.2011 15:02 C:\Windows\system32\atl100.dll --------- 158536
05.01.2011 23:23 C:\Windows\system32\FsExService64.exe --------- 25960
25.12.2010 03:32 C:\Windows\system32\NDF --------- 0
23.12.2010 12:42 C:\Windows\system32\sbe.dll --------- 1118720
23.12.2010 12:42 C:\Windows\system32\EncDec.dll --------- 723968
23.12.2010 12:42 C:\Windows\system32\CPFilters.dll --------- 961024
23.12.2010 12:36 C:\Windows\system32\mpg2splt.ax --------- 259072
17.12.2010 13:42 C:\Windows\system32\winsrv.dll --------- 214016
17.12.2010 13:40 C:\Windows\system32\kerberos.dll --------- 715776
20.11.2010 15:44 C:\Windows\system32\Narrator.exe --------- 1077248
20.11.2010 15:44 C:\Windows\system32\NAPHLPR.DLL --------- 133632
----------------------------------------
C:\Windows\Prefetch
02.06.2011 11:56 C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-AA7A1FDD.pf --------- 79944
02.06.2011 11:56 C:\Windows\Prefetch\CONHOST.EXE-3218E401.pf --------- 19208
02.06.2011 11:52 C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf --------- 28444
02.06.2011 11:52 C:\Windows\Prefetch\WINRAR.EXE-6F42D4E7.pf --------- 65406
02.06.2011 11:50 C:\Windows\Prefetch\DLLHOST.EXE-FF915DF9.pf --------- 108282
02.06.2011 11:50 C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf --------- 44546
02.06.2011 11:50 C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf --------- 158942
02.06.2011 11:50 C:\Windows\Prefetch\AUDIODG.EXE-D0D776AC.pf --------- 108612
02.06.2011 11:47 C:\Windows\Prefetch\AVP.EXE-F749A601.pf --------- 312044
02.06.2011 11:45 C:\Windows\Prefetch\TASKENG.EXE-5BAF290C.pf --------- 125710
02.06.2011 11:45 C:\Windows\Prefetch\DLLHOST.EXE-FA51C347.pf --------- 35092
02.06.2011 11:44 C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-E5D641DD.pf --------- 51082
02.06.2011 11:43 C:\Windows\Prefetch\OUTLOOK.EXE-5EF11CAE.pf --------- 316708
02.06.2011 11:43 C:\Windows\Prefetch\FIREFOX.EXE-FBBD985A.pf --------- 213780
02.06.2011 11:42 C:\Windows\Prefetch\BUBBLES.SCR-8E3A7BBC.pf --------- 100410
02.06.2011 11:41 C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf --------- 175200
02.06.2011 11:41 C:\Windows\Prefetch\GOOGLEUPDATE.EXE-648FB068.pf --------- 42020
02.06.2011 11:39 C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-031B6478.pf --------- 304430
02.06.2011 11:38 C:\Windows\Prefetch\ReadyBoot --------- 4096
02.06.2011 11:38 C:\Windows\Prefetch\WUAUCLT.EXE-830BCC14.pf --------- 26544
02.06.2011 11:35 C:\Windows\Prefetch\NASVC.EXE-F15DC70A.pf --------- 27446
02.06.2011 11:35 C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-4DC4C4A1.pf --------- 24756
02.06.2011 11:34 C:\Windows\Prefetch\WMIADAP.EXE-369DF1CD.pf --------- 21108
02.06.2011 11:34 C:\Windows\Prefetch\MSCORSVW.EXE-98F0699A.pf --------- 69932
02.06.2011 11:34 C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf --------- 42184
02.06.2011 11:34 C:\Windows\Prefetch\WMI64.EXE-D9920F1F.pf --------- 22998
02.06.2011 11:33 C:\Windows\Prefetch\DLLHOST.EXE-53B78AD0.pf --------- 109968
02.06.2011 11:33 C:\Windows\Prefetch\WMPSHARE.EXE-37B6A86F.pf --------- 94742
02.06.2011 11:33 C:\Windows\Prefetch\SVCHOST.EXE-DB4C36D7.pf --------- 49158
02.06.2011 11:33 C:\Windows\Prefetch\WMPSHARE.EXE-73C9F24C.pf --------- 37952
02.06.2011 11:33 C:\Windows\Prefetch\WMPNETWK.EXE-BD0344CA.pf --------- 108720
02.06.2011 11:33 C:\Windows\Prefetch\SVCHOST.EXE-4D8DA32A.pf --------- 23612
02.06.2011 11:33 C:\Windows\Prefetch\WUDFHOST.EXE-81420B07.pf --------- 22846
02.06.2011 11:32 C:\Windows\Prefetch\WMPNSCFG.EXE-DF1DD51A.pf --------- 38176
02.06.2011 11:32 C:\Windows\Prefetch\SVCHOST.EXE-18D06B2E.pf --------- 20714
02.06.2011 11:32 C:\Windows\Prefetch\SEARCHINDEXER.EXE-77D27BAC.pf --------- 202028
02.06.2011 11:32 C:\Windows\Prefetch\TASKHOST.EXE-437C05A8.pf --------- 32362
02.06.2011 11:32 C:\Windows\Prefetch\LULNCHR.EXE-55D40ECA.pf --------- 65776
02.06.2011 11:32 C:\Windows\Prefetch\LOGITECHUPDATE.EXE-2CD78E2C.pf --------- 31198
02.06.2011 11:32 C:\Windows\Prefetch\LULNCHR.EXE-36CDD24F.pf --------- 49902
02.06.2011 11:32 C:\Windows\Prefetch\LOGITECHUPDATE.EXE-2D5AFC89.pf --------- 42112
02.06.2011 11:32 C:\Windows\Prefetch\LULNCHR.EXE-D8AA315F.pf --------- 108920
02.06.2011 01:21 C:\Windows\Prefetch\AgGlFaultHistory.db --------- 0
02.06.2011 01:21 C:\Windows\Prefetch\AgGlGlobalHistory.db --------- 4303983
02.06.2011 01:21 C:\Windows\Prefetch\AgRobust.db --------- 332336
02.06.2011 01:21 C:\Windows\Prefetch\PfSvPerfStats.bin --------- 584
02.06.2011 01:21 C:\Windows\Prefetch\LOGONUI.EXE-1BEE4A84.pf --------- 80092
02.06.2011 01:14 C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-78000DE6.pf --------- 169814
02.06.2011 01:13 C:\Windows\Prefetch\ESEREG.EXE-96E5375E.pf --------- 69468
02.06.2011 00:51 C:\Windows\Prefetch\PSPAD.EXE-32FBACDF.pf --------- 141142
02.06.2011 00:40 C:\Windows\Prefetch\CCC.EXE-000FEDE2.pf --------- 151568
02.06.2011 00:40 C:\Windows\Prefetch\KHALMNPR.EXE-B598A5C1.pf --------- 37940
02.06.2011 00:40 C:\Windows\Prefetch\LDCONFIG.EXE-32BA5CED.pf --------- 15272
02.06.2011 00:40 C:\Windows\Prefetch\CLISTART.EXE-15972E63.pf --------- 21062
02.06.2011 00:40 C:\Windows\Prefetch\ICQ.EXE-2418C290.pf --------- 359494
02.06.2011 00:40 C:\Windows\Prefetch\LVCOMSX.EXE-705F021B.pf --------- 21362
02.06.2011 00:40 C:\Windows\Prefetch\G35.EXE-23915AA1.pf --------- 38616
02.06.2011 00:40 C:\Windows\Prefetch\RUNONCE.EXE-21038459.pf --------- 47860
02.06.2011 00:40 C:\Windows\Prefetch\ISUSPM.EXE-805F23E9.pf --------- 44294
02.06.2011 00:40 C:\Windows\Prefetch\SETPOINT.EXE-7EEABF0C.pf --------- 44150
02.06.2011 00:40 C:\Windows\Prefetch\LGDCORE.EXE-4D598107.pf --------- 36448
02.06.2011 00:40 C:\Windows\Prefetch\LCDMON.EXE-9E98354C.pf --------- 32804
02.06.2011 00:40 C:\Windows\Prefetch\LGDEVAGT.EXE-389DD0CF.pf --------- 36504
02.06.2011 00:39 C:\Windows\Prefetch\RAVCPL64.EXE-61B16716.pf --------- 37282
02.06.2011 00:39 C:\Windows\Prefetch\SKYTEL.EXE-8712BF30.pf --------- 27210
02.06.2011 00:37 C:\Windows\Prefetch\REGEDIT.EXE-32FE412B.pf --------- 21088
02.06.2011 00:32 C:\Windows\Prefetch\AgGlFgAppHistory.db --------- 2420700
02.06.2011 00:26 C:\Windows\Prefetch\SVCHOST.EXE-93CEEE07.pf --------- 348024
02.06.2011 00:09 C:\Windows\Prefetch\REGSVR32.EXE-A65A209D.pf --------- 31236
02.06.2011 00:09 C:\Windows\Prefetch\REGSVR32.EXE-55A4EE79.pf --------- 22958
02.06.2011 00:02 C:\Windows\Prefetch\MSFEEDSSYNC.EXE-1F01ED17.pf --------- 104428
01.06.2011 23:58 C:\Windows\Prefetch\CALC.EXE-AC08706A.pf --------- 36118
01.06.2011 13:30 C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-160469114-3446120962-2742097914-1001.db --------- 1241110
01.06.2011 13:30 C:\Windows\Prefetch\AgGlUAD_S-1-5-21-160469114-3446120962-2742097914-1001.db --------- 2360493
01.06.2011 12:43 C:\Windows\Prefetch\MOBSYNC.EXE-D8BC6ED2.pf --------- 49212
01.06.2011 12:43 C:\Windows\Prefetch\MOM.EXE-8CC21E02.pf --------- 61550
01.06.2011 12:42 C:\Windows\Prefetch\ATICUSTOMERCARE.EXE-BD9AD024.pf --------- 20234
01.06.2011 12:42 C:\Windows\Prefetch\SVCHOST.EXE-8FD92526.pf --------- 22444
01.06.2011 12:42 C:\Windows\Prefetch\VSSVC.EXE-04D079CC.pf --------- 44220
01.06.2011 11:28 C:\Windows\Prefetch\TASKMGR.EXE-72398DC0.pf --------- 59316
01.06.2011 11:20 C:\Windows\Prefetch\UAAIHFWFHQ.EXE-074D5864.pf --------- 23542
01.06.2011 11:20 C:\Windows\Prefetch\0.38087114455728854.EXE-75B41B29.pf --------- 38440
01.06.2011 11:20 C:\Windows\Prefetch\JAVA.EXE-E3C0BFD0.pf --------- 164230
01.06.2011 11:20 C:\Windows\Prefetch\JP2LAUNCHER.EXE-713231C9.pf --------- 21476
01.06.2011 10:57 C:\Windows\Prefetch\SETUP_WM.EXE-0E4CB6C8.pf --------- 36734
01.06.2011 10:56 C:\Windows\Prefetch\AGENT.EXE-083208F7.pf --------- 34838
01.06.2011 10:56 C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 4031150
31.05.2011 22:34 C:\Windows\Prefetch\AGENTRANSACK.EXE-6E7B9F66.pf --------- 33734
31.05.2011 21:22 C:\Windows\Prefetch\Layout.ini --------- 1541638
31.05.2011 20:46 C:\Windows\Prefetch\WERFAULT.EXE-0897AE09.pf --------- 34850
31.05.2011 20:34 C:\Windows\Prefetch\OIS.EXE-C2975C46.pf --------- 72932
31.05.2011 20:10 C:\Windows\Prefetch\MSIEXEC.EXE-B5AFA339.pf --------- 69658
31.05.2011 20:10 C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B0E2BA8C.pf --------- 96466
31.05.2011 20:10 C:\Windows\Prefetch\GOOGLEUPDATESETUP.EXE-B2F32537.pf --------- 28784
31.05.2011 20:02 C:\Windows\Prefetch\TS3CLIENT_WIN64.EXE-DE5E204A.pf --------- 162990
31.05.2011 18:58 C:\Windows\Prefetch\RUNDLL32.EXE-125D4518.pf --------- 464458
31.05.2011 17:57 C:\Windows\Prefetch\DLLHOST.EXE-896DB558.pf --------- 23212
31.05.2011 15:50 C:\Windows\Prefetch\PHOTOSHOP.EXE-61D79C33.pf --------- 265452
31.05.2011 14:59 C:\Windows\Prefetch\FILEZILLA.EXE-0A3877B9.pf --------- 135360
31.05.2011 14:56 C:\Windows\Prefetch\WERFAULT.EXE-B7E27BE5.pf --------- 17972
31.05.2011 14:52 C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-31D604ED.pf --------- 25728
31.05.2011 09:48 C:\Windows\Prefetch\MPAS-D_BD1.EXE-B82677C3.pf --------- 60044
31.05.2011 09:48 C:\Windows\Prefetch\MPMINISIGSTUB.EXE-A8871E34.pf --------- 6880
31.05.2011 09:48 C:\Windows\Prefetch\MPSIGSTUB.EXE-7C60A359.pf --------- 32422
31.05.2011 09:43 C:\Windows\Prefetch\TACTICALOPS.EXE-5A760B31.pf --------- 202366
31.05.2011 09:43 C:\Windows\Prefetch\RUNDLL32.EXE-E1160A93.pf --------- 32924
30.05.2011 22:00 C:\Windows\Prefetch\OIS.EXE-9A00A52B.pf --------- 83432
30.05.2011 21:47 C:\Windows\Prefetch\WMPLAYER.EXE-61D40ED1.pf --------- 82164
30.05.2011 20:18 C:\Windows\Prefetch\PHOTOSHOPCS4PORTABLE.EXE-5B57F73F.pf --------- 90336
30.05.2011 20:16 C:\Windows\Prefetch\AgCx_SC1.db --------- 816465
30.05.2011 20:15 C:\Windows\Prefetch\DLLHOST.EXE-72B00420.pf --------- 22574
30.05.2011 20:15 C:\Windows\Prefetch\WMPSIDESHOWGADGET.EXE-F596B537.pf --------- 50154
30.05.2011 20:15 C:\Windows\Prefetch\UTILMAN.EXE-6DAF08F5.pf --------- 50596
30.05.2011 20:15 C:\Windows\Prefetch\AgCx_SC1.db.trx --------- 149308
30.05.2011 20:15 C:\Windows\Prefetch\RUNDLL32.EXE-4362343E.pf --------- 22930
30.05.2011 20:15 C:\Windows\Prefetch\RUNDLL32.EXE-F2AD021A.pf --------- 13066
30.05.2011 17:49 C:\Windows\Prefetch\RUNDLL32.EXE-AFD98684.pf --------- 12890
30.05.2011 17:30 C:\Windows\Prefetch\LPREMOVE.EXE-F992050D.pf --------- 2148
30.05.2011 11:34 C:\Windows\Prefetch\PING.EXE-B29F6629.pf --------- 18278
30.05.2011 11:34 C:\Windows\Prefetch\W32TM.EXE-5D2265F4.pf --------- 19134
30.05.2011 11:34 C:\Windows\Prefetch\CSC.EXE-6F2C7122.pf --------- 52858
30.05.2011 11:34 C:\Windows\Prefetch\CVTRES.EXE-6280F3A8.pf --------- 12454
30.05.2011 11:34 C:\Windows\Prefetch\SDIAGNHOST.EXE-67CD1457.pf --------- 150876
29.05.2011 14:26 C:\Windows\Prefetch\AITAGENT.EXE-AB818914.pf --------- 1190
29.05.2011 13:56 C:\Windows\Prefetch\AUTOSHUTDOWN.EXE-F031F636.pf --------- 28538
29.05.2011 11:02 C:\Windows\Prefetch\SC.EXE-BC6DAF49.pf --------- 562
29.05.2011 00:12 C:\Windows\Prefetch\SVCHOST.EXE-8DA0BAAD.pf --------- 18436
29.05.2011 00:12 C:\Windows\Prefetch\DEFRAG.EXE-738093E8.pf --------- 67154
28.05.2011 13:03 C:\Windows\Prefetch\RUNDLL32.EXE-FE033984.pf --------- 31530
27.05.2011 13:23 C:\Windows\Prefetch\RUNDLL32.EXE-62053597.pf --------- 47348
27.05.2011 13:22 C:\Windows\Prefetch\SPLWOW64.EXE-FBA11EAB.pf --------- 27520
27.05.2011 13:22 C:\Windows\Prefetch\CNMSE8Z.EXE-FED3F5C8.pf --------- 11876
27.05.2011 11:24 C:\Windows\Prefetch\ACRORD32.EXE-1D063164.pf --------- 178804
27.05.2011 11:07 C:\Windows\Prefetch\MPMINISIGSTUB.EXE-59D3F361.pf --------- 6888
26.05.2011 09:11 C:\Windows\Prefetch\RUNDLL32.EXE-1022D35C.pf --------- 36408
26.05.2011 09:07 C:\Windows\Prefetch\MSIEXEC.EXE-F3744DFD.pf --------- 34504
26.05.2011 09:07 C:\Windows\Prefetch\GOOGLEEARTH.EXE-11A6A720.pf --------- 26262
26.05.2011 09:06 C:\Windows\Prefetch\GOOGLEEARTH-WIN-BUNDLE-6.0.3.-52DF15C0.pf --------- 63956
25.05.2011 22:13 C:\Windows\Prefetch\RUNDLL32.EXE-6D3B8202.pf --------- 31852
25.05.2011 15:57 C:\Windows\Prefetch\RUNDLL32.EXE-223BCB75.pf --------- 2160
12.05.2011 09:15 C:\Windows\Prefetch\AgCx_SC4.db --------- 401313
14.03.2011 12:52 C:\Windows\Prefetch\AgCx_S1_S-1-5-21-160469114-3446120962-2742097914-1001.snp.db --------- 3461327
07.07.2010 16:12 C:\Windows\Prefetch\AgCx_SC3_DA1DBA53ECDF8D3F.db --------- 642236
20.06.2010 14:15 C:\Windows\Prefetch\AgCx_SC2.db --------- 801935
18.01.2010 22:23 C:\Windows\Prefetch\AgAppLaunch.db --------- 334168
----------------------------------------
C:\Windows\Tasks
02.06.2011 11:30 C:\Windows\Tasks\SA.DAT --------- 6
01.06.2011 10:55 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1114
01.06.2011 10:55 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1110
25.03.2011 12:58 C:\Windows\Tasks\SCHEDLGU.TXT --------- 32640
----------------------------------------
C:\Windows\Temp
02.06.2011 11:48 C:\Windows\Temp\MpCmdRun.log --------- 302656
02.06.2011 11:30 C:\Windows\Temp\logishrd --------- 8192
31.05.2011 09:48 C:\Windows\Temp\MpSigStub.log --------- 479000
26.05.2011 09:08 C:\Windows\Temp\is9943.tmp --------- 0
26.05.2011 09:07 C:\Windows\Temp\is4327.tmp --------- 0
26.05.2011 09:07 C:\Windows\Temp\._msige60 --------- 24576
17.05.2011 16:49 C:\Windows\Temp\klsF868.tmp --------- 96172
17.05.2011 16:49 C:\Windows\Temp\kls6BD9.tmp --------- 96172
10.05.2011 19:29 C:\Windows\Temp\MPTelemetrySubmit --------- 0
01.05.2011 08:46 C:\Windows\Temp\TMP000000DFFD14C4B076D5B424 --------- 524288
29.04.2011 00:13 C:\Windows\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20110429_001308489.html --------- 99754
29.04.2011 00:13 C:\Windows\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20110429_001308489-Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-MSP0.txt --------- 308002
29.04.2011 00:13 C:\Windows\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20110429_001308489-MSI_vc_red.msi.txt --------- 344230
29.04.2011 00:13 C:\Windows\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_10.0.30319 --------- 0
29.04.2011 00:13 C:\Windows\Temp\dd_vcredistUI2B09.txt --------- 13794
29.04.2011 00:13 C:\Windows\Temp\dd_vcredistMSI2B09.txt --------- 430658
29.04.2011 00:12 C:\Windows\Temp\dd_vcredistUI27AA.txt --------- 13762
29.04.2011 00:12 C:\Windows\Temp\dd_vcredistMSI27AA.txt --------- 417566
22.04.2011 13:52 C:\Windows\Temp\Silverlight0.log --------- 2272
22.04.2011 13:52 C:\Windows\Temp\SilverlightMSI.log --------- 2654466
22.04.2011 12:36 C:\Windows\Temp\klsB11E.tmp --------- 95848
22.04.2011 12:36 C:\Windows\Temp\klsB697.tmp --------- 95848
22.04.2011 12:36 C:\Windows\Temp\kls424B.tmp --------- 95848
15.04.2011 00:54 C:\Windows\Temp\KB2446708_20110415_004930537.html --------- 54968
15.04.2011 00:54 C:\Windows\Temp\KB2446708_20110415_004930537-Microsoft .NET Framework 4 Client Profile-MSP0.txt --------- 9180674
15.04.2011 00:49 C:\Windows\Temp\KB2446708_10.0.30319 --------- 0
15.04.2011 00:49 C:\Windows\Temp\dd_clwireg.txt --------- 5310
26.03.2011 03:36 C:\Windows\Temp\TMP00000094E0848BAEB86D3E4E --------- 524288
11.03.2011 01:23 C:\Windows\Temp\TMP000000EE496C7A4F2B668305 --------- 524288
02.03.2011 01:28 C:\Windows\Temp\TMP00000083461D3A64AC223053 --------- 524288
17.02.2011 12:39 C:\Windows\Temp\kls4E0C.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\kls31E6.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsB7AD.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsCB4C.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\kls663B.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsA1AC.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsCE0A.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\kls32DA.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsD14.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsFB4B.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\kls480E.tmp --------- 92725
17.02.2011 12:39 C:\Windows\Temp\klsF265.tmp --------- 92725
16.02.2011 00:45 C:\Windows\Temp\kls7EDE.tmp --------- 92716
16.02.2011 00:45 C:\Windows\Temp\kls6A50.tmp --------- 92716
04.02.2011 00:56 C:\Windows\Temp\kls2F40.tmp --------- 92635
04.02.2011 00:56 C:\Windows\Temp\kls6B18.tmp --------- 92635
04.02.2011 00:56 C:\Windows\Temp\kls4EED.tmp --------- 92635
28.01.2011 01:52 C:\Windows\Temp\TMP0000009B47F23AF7B5389053 --------- 524288
27.01.2011 17:19 C:\Windows\Temp\klsF49C.tmp --------- 92626
26.01.2011 21:20 C:\Windows\Temp\kls4CE5.tmp --------- 92644
28.12.2010 19:23 C:\Windows\Temp\kls6EAE.tmp --------- 92518
28.12.2010 19:23 C:\Windows\Temp\kls577F.tmp --------- 92518
28.12.2010 19:23 C:\Windows\Temp\klsE054.tmp --------- 92518
28.12.2010 19:23 C:\Windows\Temp\klsC0FB.tmp --------- 92518
21.12.2010 17:04 C:\Windows\Temp\kls2D81.tmp --------- 92536
29.11.2010 17:31 C:\Windows\Temp\TMP00000073F2848D4AB69522C7 --------- 524288
27.11.2010 01:33 C:\Windows\Temp\TMP00000204F82BFF6BD6343353 --------- 524288
25.11.2010 23:30 C:\Windows\Temp\TMP000000EBA66AA8A4D7DB0F97 --------- 524288
24.11.2010 10:33 C:\Windows\Temp\WER8A8.tmp.WERInternalMetadata.xml --------- 3630
23.11.2010 23:58 C:\Windows\Temp\TMP0000011FCABCED51D621A7C5 --------- 524288
23.11.2010 00:06 C:\Windows\Temp\TMP000005A16BB0F277FD2612E0 --------- 524288
21.11.2010 00:09 C:\Windows\Temp\WERE274.tmp.WERInternalMetadata.xml --------- 3630
10.11.2010 01:16 C:\Windows\Temp\TMP000000C1427E30F4ED7EFCAC --------- 524288
08.11.2010 01:40 C:\Windows\Temp\TMP000001317817E306F31FC55F --------- 524288
31.10.2010 14:37 C:\Windows\Temp\TMP000000367A85CF19E1D7AB0D --------- 524288
30.10.2010 03:36 C:\Windows\Temp\TMP0000009669A33DCCF2AD8374 --------- 524288
29.10.2010 01:44 C:\Windows\Temp\TMP0000035CF75CEA7088CA0F7E --------- 524288
29.10.2010 01:44 C:\Windows\Temp\TMP0000035BBDA21C737065CDA0 --------- 524288
23.10.2010 02:20 C:\Windows\Temp\TMP00000052687E8045F945672F --------- 524288
15.10.2010 13:31 C:\Windows\Temp\fwtsqmfile00.sqm --------- 608
14.10.2010 00:57 C:\Windows\Temp\TMP0000008783863C19F98D3F77 --------- 524288
14.10.2010 00:55 C:\Windows\Temp\KB2160841_20101014_005411878.html --------- 55266
14.10.2010 00:55 C:\Windows\Temp\KB2160841_20101014_005411878-Microsoft .NET Framework 4 Client Profile-MSP0.txt --------- 4788192
14.10.2010 00:54 C:\Windows\Temp\KB2160841_10.0.30319 --------- 0
12.10.2010 02:50 C:\Windows\Temp\TMP00000646D46279B2F7979946 --------- 524288
11.10.2010 21:26 C:\Windows\Temp\mgxgroups --------- 0
11.10.2010 21:25 C:\Windows\Temp\_FbMsiLog.txt --------- 293588
11.10.2010 21:24 C:\Windows\Temp\mgxlicense --------- 0
11.10.2010 21:22 C:\Windows\Temp\mgxmbkgstd.bmp --------- 3148854
07.10.2010 01:25 C:\Windows\Temp\WERCADE.tmp.WERInternalMetadata.xml --------- 3630
28.09.2010 04:04 C:\Windows\Temp\TMP0000064FC8C17CAAEB97D9D0 --------- 524288
25.09.2010 08:05 C:\Windows\Temp\is7974.tmp --------- 0
25.09.2010 08:03 C:\Windows\Temp\isF18F.tmp --------- 0
25.09.2010 08:03 C:\Windows\Temp\._msige52 --------- 0
25.09.2010 03:31 C:\Windows\Temp\TMP000001F7347F2BFC01801CBD --------- 524288
21.09.2010 12:39 C:\Windows\Temp\GUR645D.tmp --------- 0
21.09.2010 12:39 C:\Windows\Temp\GUR6104.tmp --------- 0
19.09.2010 23:50 C:\Windows\Temp\TMP000001190B63F475C70B8D61 --------- 524288
16.09.2010 05:32 C:\Windows\Temp\TMP000005A03648EBEC98B41F90 --------- 524288
16.09.2010 00:14 C:\Windows\Temp\kls72AB.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\kls55D5.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\kls726E.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\klsA398.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\klsAB3.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\kls270D.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\kls2A0A.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\kls6EFE.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\klsD194.tmp --------- 91240
16.09.2010 00:14 C:\Windows\Temp\klsD09C.tmp --------- 91240
15.09.2010 23:42 C:\Windows\Temp\AVSETUP_4c913db6 --------- 0
01.09.2010 01:09 C:\Windows\Temp\WER7623.tmp.WERInternalMetadata.xml --------- 3630
30.08.2010 01:41 C:\Windows\Temp\TMP0000018DE0FEEC37E18ACA34 --------- 524288
29.08.2010 03:33 C:\Windows\Temp\TMP000005B88E7A432923C2BE9C --------- 524288
25.08.2010 13:38 C:\Windows\Temp\WERECFE.tmp.WERInternalMetadata.xml --------- 3630
20.08.2010 04:21 C:\Windows\Temp\TMP0000005254C8AD7A13224DE7 --------- 524288
20.08.2010 04:21 C:\Windows\Temp\TMP0000005177AA8C75CA124E53 --------- 524288
19.08.2010 13:37 C:\Windows\Temp\TMP00000026894EDA0D00DDC450 --------- 524288
12.08.2010 18:48 C:\Windows\Temp\GUR6354.tmp --------- 0
12.08.2010 18:48 C:\Windows\Temp\GUR6103.tmp --------- 0
08.08.2010 13:35 C:\Windows\Temp\TMP0000006BEFB6AA061D3A147F --------- 524288
07.08.2010 11:02 C:\Windows\Temp\fwtsqmfile19.sqm --------- 608
03.08.2010 02:11 C:\Windows\Temp\TMP00000102673ECCD18F69C147 --------- 524288
01.08.2010 23:40 C:\Windows\Temp\TMP0000005649951EEC53358755 --------- 524288
31.07.2010 09:38 C:\Windows\Temp\TMP000000EBD37AB77EAB49FC97 --------- 524288
31.07.2010 09:38 C:\Windows\Temp\fwtsqmfile18.sqm --------- 608
26.07.2010 22:53 C:\Windows\Temp\TMP0000005E1A1341BAC782250B --------- 524288
17.07.2010 13:34 C:\Windows\Temp\fwtsqmfile17.sqm --------- 608
14.07.2010 17:10 C:\Windows\Temp\WER7F33.tmp.WERInternalMetadata.xml --------- 3630
11.07.2010 19:16 C:\Windows\Temp\TMP0000009A5ED18C73611AB817 --------- 524288
09.07.2010 13:37 C:\Windows\Temp\fwtsqmfile16.sqm --------- 608
07.07.2010 05:38 C:\Windows\Temp\fwtsqmfile15.sqm --------- 608
01.07.2010 22:16 C:\Windows\Temp\TMP0000006065E5EF0CCBD63DAD --------- 524288
28.06.2010 17:23 C:\Windows\Temp\fwtsqmfile14.sqm --------- 608
27.06.2010 22:06 C:\Windows\Temp\fwtsqmfile13.sqm --------- 608
27.06.2010 00:07 C:\Windows\Temp\dd_dotNetFx40LP_Client_x86_x64de_decompression_log.txt --------- 2121
27.06.2010 00:07 C:\Windows\Temp\TMP000000EDA626F57592047064 --------- 524288
27.06.2010 00:07 C:\Windows\Temp\dd_dotNetFx40_Client_x86_x64_decompression_log.txt --------- 1980
27.06.2010 00:07 C:\Windows\Temp\Microsoft .NET Framework 4 Client Profile Setup_20100627_000528195.html --------- 577530
27.06.2010 00:07 C:\Windows\Temp\TFR11CA.tmp --------- 3048
27.06.2010 00:07 C:\Windows\Temp\dd_SetupUtility.txt --------- 660
27.06.2010 00:07 C:\Windows\Temp\Microsoft .NET Framework 4 Client Profile Setup_20100627_000528195-MSI_netfx_Core_x64.msi.txt --------- 7204720
27.06.2010 00:05 C:\Windows\Temp\Microsoft .NET Framework 4 Client Profile Setup_4.0.30319 --------- 0
26.06.2010 10:18 C:\Windows\Temp\fwtsqmfile12.sqm --------- 608
25.06.2010 02:51 C:\Windows\Temp\fwtsqmfile11.sqm --------- 608
23.06.2010 19:09 C:\Windows\Temp\lnonpnpsamp.log --------- 0
19.06.2010 19:01 C:\Windows\Temp\fwtsqmfile10.sqm --------- 608
18.06.2010 13:18 C:\Windows\Temp\fwtsqmfile09.sqm --------- 608
16.06.2010 23:40 C:\Windows\Temp\fwtsqmfile08.sqm --------- 608
16.06.2010 00:04 C:\Windows\Temp\fwtsqmfile07.sqm --------- 608
11.06.2010 23:35 C:\Windows\Temp\fwtsqmfile06.sqm --------- 608
11.06.2010 23:31 C:\Windows\Temp\WER8050.tmp.WERInternalMetadata.xml --------- 3630
11.06.2010 13:26 C:\Windows\Temp\fwtsqmfile05.sqm --------- 608
11.06.2010 12:14 C:\Windows\Temp\fwtsqmfile04.sqm --------- 608
10.06.2010 13:36 C:\Windows\Temp\fwtsqmfile03.sqm --------- 608
09.06.2010 13:35 C:\Windows\Temp\fwtsqmfile02.sqm --------- 608
08.06.2010 06:14 C:\Windows\Temp\fwtsqmfile01.sqm --------- 608
08.04.2010 01:21 C:\Windows\Temp\dd_ATL90SP1_KB973924UI10A0.txt --------- 13876
08.04.2010 01:21 C:\Windows\Temp\dd_ATL90SP1_KB973924MSI10A0.txt --------- 233258
07.04.2010 11:51 C:\Windows\Temp\chrome_frame_installer.log --------- 289
07.04.2010 11:51 C:\Windows\Temp\chrome_9271 --------- 0
06.04.2010 23:51 C:\Windows\Temp\chrome_32035 --------- 0
06.04.2010 18:51 C:\Windows\Temp\chrome_6026 --------- 0
05.04.2010 20:08 C:\Windows\Temp\SDIAG_8f4f98a4-39e2-4fe9-9b56-62f8a1949cbe --------- 0
05.04.2010 19:51 C:\Windows\Temp\chrome_30545 --------- 0
05.04.2010 14:51 C:\Windows\Temp\chrome_4536 --------- 0
04.04.2010 21:51 C:\Windows\Temp\chrome_1290 --------- 0
04.04.2010 16:51 C:\Windows\Temp\chrome_8042 --------- 0
04.04.2010 11:51 C:\Windows\Temp\chrome_14801 --------- 0
03.04.2010 22:51 C:\Windows\Temp\chrome_25812 --------- 0
03.04.2010 17:51 C:\Windows\Temp\chrome_32568 --------- 0
02.04.2010 00:51 C:\Windows\Temp\chrome_9317 --------- 0
01.04.2010 19:51 C:\Windows\Temp\chrome_16076 --------- 0
01.04.2010 14:51 C:\Windows\Temp\chrome_22890 --------- 0
01.04.2010 01:36 C:\Windows\Temp\dmiwu --------- 0
01.04.2010 01:28 C:\Windows\Temp\CamServr.log --------- 1266
01.04.2010 01:28 C:\Windows\Temp\CamWizrd.log --------- 40755
31.03.2010 17:14 C:\Windows\Temp\LgDSetup.txt --------- 10448
31.03.2010 17:13 C:\Windows\Temp\InstExec.log --------- 7414
21.03.2010 19:59 C:\Windows\Temp\FXSAPIDebugLogFile.txt --------- 0
21.03.2010 19:59 C:\Windows\Temp\FXSTIFFDebugLogFile.txt --------- 0
06.03.2010 14:56 C:\Windows\Temp\MSI1.tmp --------- 142848
06.03.2010 14:16 C:\Windows\Temp\Amd64 --------- 0
06.03.2010 14:16 C:\Windows\Temp\PRNXPX64 --------- 0
06.03.2010 14:16 C:\Windows\Temp\PRN2KXP --------- 0
18.01.2010 23:48 C:\Windows\Temp\History --------- 0
18.01.2010 23:48 C:\Windows\Temp\Cookies --------- 0
18.01.2010 23:48 C:\Windows\Temp\Temporary Internet Files --------- 0
18.08.2009 12:06 C:\Windows\Temp\mgxfonts.exe --------- 1056920
19.01.2009 10:54 C:\Windows\Temp\mgx3rdlogos.ini --------- 715
19.01.2009 10:53 C:\Windows\Temp\mgx3rdlogos.bmp --------- 332934
----------------------------------------
Geändert von fixxxxxi (02.06.2011 um 11:13 Uhr) |
| | #4 |
| | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar hjtscanlist.txt - TEIL 2 Code:
ATTFilter
C:\Users\fixxxxxi\AppData\Local\Temp
02.06.2011 11:52 C:\Users\fixxxxxi\AppData\Local\Temp\hjtscanlist.zip --------- 2097
02.06.2011 11:43 C:\Users\fixxxxxi\AppData\Local\Temp\~DF256F35E4B326675D.TMP --------- 512
02.06.2011 11:43 C:\Users\fixxxxxi\AppData\Local\Temp\806868.od --------- 134
02.06.2011 11:43 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4FD4.tmp.cvr --------- 0
02.06.2011 11:31 C:\Users\fixxxxxi\AppData\Local\Temp\WPDNSE --------- 0
02.06.2011 00:41 C:\Users\fixxxxxi\AppData\Local\Temp\~DF3F8D3E0BF3582097.TMP --------- 147456
02.06.2011 00:10 C:\Users\fixxxxxi\AppData\Local\Temp\~DF9FEFFB18FB92198C.TMP --------- 147456
02.06.2011 00:09 C:\Users\fixxxxxi\AppData\Local\Temp\~DF3EB5DD5F91757332.TMP --------- 147456
01.06.2011 23:58 C:\Users\fixxxxxi\AppData\Local\Temp\142959.od --------- 134
01.06.2011 23:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2700.tmp --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\._msige52 --------- 24576
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\._msigeplugin52 --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\A2C5.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\44BE.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\5966.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\61B0.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\2F2B.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\43A5.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\CProgram Files (x86)Opera --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\d7a32cc5-a54a-42c1-a636-4c9fca65f582 --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\D39B4B65_3692_4292_833F_2C81D15845EB --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\e8aca7c4-fd83-43f6-a0e4-4344f9a50377 --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\D826.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\e3c74ee6-7482-4280-b9c3-f233b390296e --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\hotcorex64 --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\ICD1.tmp --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\KiesInstall --------- 20480
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\FA27.dir --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\nsh75F5.tmp --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\nsa540.tmp --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\nslEB79.tmp --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\nsbCD4F.tmp --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\nsj1B21.tmp --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\page-speed --------- 98304
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\nssA3C2.tmp --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\smtmp --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\teamspeak_temp_0 --------- 4096
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\swtlib-32 --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\UDK-7bf417c3-8d6b-48dd-aac5-ac08062ccf1c --------- 0
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\UpdateWizard_65468 --------- 49152
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\UpdateWizard_69920 --------- 24576
01.06.2011 12:38 C:\Users\fixxxxxi\AppData\Local\Temp\{FACFCA8D-5A0A-4DD2-AE68-B637F7AE4E51} --------- 4096
01.06.2011 11:32 C:\Users\fixxxxxi\AppData\Local\Temp\hsperfdata_fixxxxxi --------- 0
01.06.2011 11:20 C:\Users\fixxxxxi\AppData\Local\Temp\java_install_reg.log --------- 129265
01.06.2011 11:15 C:\Users\fixxxxxi\AppData\Local\Temp\1272156.od --------- 134
01.06.2011 11:15 C:\Users\fixxxxxi\AppData\Local\Temp\CVR695C.tmp.cvr --------- 0
01.06.2011 10:57 C:\Users\fixxxxxi\AppData\Local\Temp\wmsetup.log --------- 37668
31.05.2011 20:38 C:\Users\fixxxxxi\AppData\Local\Temp\21008202.od --------- 134
31.05.2011 20:38 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8F4A.tmp.cvr --------- 0
31.05.2011 19:09 C:\Users\fixxxxxi\AppData\Local\Temp\amt.log --------- 40914
31.05.2011 19:09 C:\Users\fixxxxxi\AppData\Local\Temp\csxs-PHSP.log --------- 1644
31.05.2011 19:08 C:\Users\fixxxxxi\AppData\Local\Temp\15589866.od --------- 134
31.05.2011 19:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE1DA.tmp.cvr --------- 0
31.05.2011 15:50 C:\Users\fixxxxxi\AppData\Local\Temp\TWAIN.LOG --------- 1308
31.05.2011 15:50 C:\Users\fixxxxxi\AppData\Local\Temp\Twain001.Mtx --------- 5
31.05.2011 15:50 C:\Users\fixxxxxi\AppData\Local\Temp\Twunk001.MTX --------- 156
31.05.2011 09:40 C:\Users\fixxxxxi\AppData\Local\Temp\194283.od --------- 134
31.05.2011 09:40 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF6CC.tmp.cvr --------- 0
31.05.2011 03:05 C:\Users\fixxxxxi\AppData\Local\Temp\36103514.od --------- 134
31.05.2011 03:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE55A.tmp.cvr --------- 0
31.05.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-11 --------- 0
30.05.2011 12:05 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-10 --------- 0
30.05.2011 10:13 C:\Users\fixxxxxi\AppData\Local\Temp\394635.od --------- 134
30.05.2011 10:13 C:\Users\fixxxxxi\AppData\Local\Temp\CVR56C.tmp.cvr --------- 0
29.05.2011 23:32 C:\Users\fixxxxxi\AppData\Local\Temp\175532.od --------- 134
29.05.2011 23:32 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAD6D.tmp.cvr --------- 0
29.05.2011 11:12 C:\Users\fixxxxxi\AppData\Local\Temp\763593.od --------- 134
29.05.2011 11:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA6C9.tmp.cvr --------- 0
29.05.2011 00:27 C:\Users\fixxxxxi\AppData\Local\Temp\1886520.od --------- 134
29.05.2011 00:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC938.tmp.cvr --------- 0
28.05.2011 11:47 C:\Users\fixxxxxi\AppData\Local\Temp\3040007.od --------- 134
28.05.2011 11:47 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6307.tmp.cvr --------- 0
28.05.2011 11:01 C:\Users\fixxxxxi\AppData\Local\Temp\271051.od --------- 134
28.05.2011 11:01 C:\Users\fixxxxxi\AppData\Local\Temp\CVR22CB.tmp --------- 0
27.05.2011 11:04 C:\Users\fixxxxxi\AppData\Local\Temp\478314.od --------- 134
27.05.2011 11:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4C6A.tmp --------- 0
26.05.2011 12:07 C:\Users\fixxxxxi\AppData\Local\Temp\11161060.od --------- 134
26.05.2011 12:07 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4DD4.tmp.cvr --------- 0
26.05.2011 09:53 C:\Users\fixxxxxi\AppData\Local\Temp\3101284.od --------- 134
26.05.2011 09:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVR5264.tmp.cvr --------- 0
26.05.2011 09:05 C:\Users\fixxxxxi\AppData\Local\Temp\219867.od --------- 134
26.05.2011 09:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVR5ADB.tmp.cvr --------- 0
25.05.2011 21:28 C:\Users\fixxxxxi\AppData\Local\Temp\banlist.html --------- 0
25.05.2011 20:42 C:\Users\fixxxxxi\AppData\Local\Temp\25957193.od --------- 134
25.05.2011 20:42 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1349.tmp.cvr --------- 0
25.05.2011 14:31 C:\Users\fixxxxxi\AppData\Local\Temp\3702590.od --------- 134
25.05.2011 14:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7F3E.tmp.cvr --------- 0
25.05.2011 13:43 C:\Users\fixxxxxi\AppData\Local\Temp\782469.od --------- 134
25.05.2011 13:43 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF085.tmp.cvr --------- 0
25.05.2011 09:02 C:\Users\fixxxxxi\AppData\Local\Temp\1365071.od --------- 134
25.05.2011 09:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD44F.tmp --------- 0
24.05.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\968672.od --------- 134
24.05.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC7E0.tmp.cvr --------- 0
24.05.2011 00:53 C:\Users\fixxxxxi\AppData\Local\Temp\3338546.od --------- 134
24.05.2011 00:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF122.tmp.cvr --------- 0
24.05.2011 00:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB318.tmp --------- 0
23.05.2011 10:46 C:\Users\fixxxxxi\AppData\Local\Temp\RESICO.dll --------- 77824
23.05.2011 10:12 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-7 --------- 0
23.05.2011 09:37 C:\Users\fixxxxxi\AppData\Local\Temp\324622.od --------- 134
23.05.2011 09:37 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF40E.tmp --------- 0
23.05.2011 00:03 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-5 --------- 0
22.05.2011 23:24 C:\Users\fixxxxxi\AppData\Local\Temp\Setup Log 2011-05-22 #001.txt --------- 609278
22.05.2011 22:02 C:\Users\fixxxxxi\AppData\Local\Temp\337508.od --------- 134
22.05.2011 22:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2654.tmp.cvr --------- 0
22.05.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-4 --------- 0
22.05.2011 13:17 C:\Users\fixxxxxi\AppData\Local\Temp\8913179.od --------- 134
22.05.2011 13:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVR11B.tmp.cvr --------- 0
22.05.2011 00:56 C:\Users\fixxxxxi\AppData\Local\Temp\694282.od --------- 134
22.05.2011 00:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVR980A.tmp.cvr --------- 0
21.05.2011 11:23 C:\Users\fixxxxxi\AppData\Local\Temp\2690518.od --------- 134
21.05.2011 11:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDD6.tmp.cvr --------- 0
21.05.2011 00:02 C:\Users\fixxxxxi\AppData\Local\Temp\1018265.od --------- 134
21.05.2011 00:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8999.tmp.cvr --------- 0
20.05.2011 12:39 C:\Users\fixxxxxi\AppData\Local\Temp\1837488.od --------- 134
20.05.2011 12:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9B0.tmp.cvr --------- 0
20.05.2011 09:17 C:\Users\fixxxxxi\AppData\Local\Temp\648168.od --------- 134
20.05.2011 09:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE3E8.tmp.cvr --------- 0
19.05.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\1012571.od --------- 134
19.05.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVR734B.tmp.cvr --------- 0
19.05.2011 00:15 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-3 --------- 0
19.05.2011 00:01 C:\Users\fixxxxxi\AppData\Local\Temp\25519875.od --------- 134
19.05.2011 00:01 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6703.tmp.cvr --------- 0
18.05.2011 22:04 C:\Users\fixxxxxi\AppData\Local\Temp\tmp-bi1.xpi --------- 0
18.05.2011 20:44 C:\Users\fixxxxxi\AppData\Local\Temp\13673082.od --------- 134
18.05.2011 20:44 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA27A.tmp.cvr --------- 0
18.05.2011 17:59 C:\Users\fixxxxxi\AppData\Local\Temp\3753134.od --------- 134
18.05.2011 17:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVR44AE.tmp.cvr --------- 0
18.05.2011 17:05 C:\Users\fixxxxxi\AppData\Local\Temp\536815.od --------- 134
18.05.2011 17:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2FE5.tmp.cvr --------- 0
18.05.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-2 --------- 0
18.05.2011 11:26 C:\Users\fixxxxxi\AppData\Local\Temp\1084050.od --------- 134
18.05.2011 11:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8A92.tmp.cvr --------- 0
18.05.2011 11:23 C:\Users\fixxxxxi\AppData\Local\Temp\FA27.tmp --------- 0
17.05.2011 21:58 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-18 --------- 4715064
17.05.2011 21:36 C:\Users\fixxxxxi\AppData\Local\Temp\mediaget_installer.exe --------- 9460536
17.05.2011 21:09 C:\Users\fixxxxxi\AppData\Local\Temp\88234.od --------- 134
17.05.2011 21:09 C:\Users\fixxxxxi\AppData\Local\Temp\CVR588A.tmp.cvr --------- 0
17.05.2011 16:36 C:\Users\fixxxxxi\AppData\Local\Temp\300801.od --------- 134
17.05.2011 16:36 C:\Users\fixxxxxi\AppData\Local\Temp\CVR96D2.tmp.cvr --------- 0
17.05.2011 12:12 C:\Users\fixxxxxi\AppData\Local\Temp\dd_vcredistUI503D.txt --------- 13334
17.05.2011 12:12 C:\Users\fixxxxxi\AppData\Local\Temp\dd_vcredistMSI503D.txt --------- 356680
17.05.2011 12:10 C:\Users\fixxxxxi\AppData\Local\Temp\2679301.od --------- 134
17.05.2011 12:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE205.tmp.cvr --------- 0
17.05.2011 09:08 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp-1 --------- 0
17.05.2011 09:05 C:\Users\fixxxxxi\AppData\Local\Temp\5869444.od --------- 134
17.05.2011 09:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8F84.tmp.cvr --------- 0
17.05.2011 09:02 C:\Users\fixxxxxi\AppData\Local\Temp\dd_vcredistUI3F5B.txt --------- 14390
17.05.2011 09:02 C:\Users\fixxxxxi\AppData\Local\Temp\dd_vcredistMSI3F5B.txt --------- 357064
17.05.2011 09:02 C:\Users\fixxxxxi\AppData\Local\Temp\kgsystray.cab --------- 1948748
17.05.2011 09:01 C:\Users\fixxxxxi\AppData\Local\Temp\kumacomm.cab --------- 162035
17.05.2011 09:01 C:\Users\fixxxxxi\AppData\Local\Temp\skin_kgi.cab --------- 439
17.05.2011 09:01 C:\Users\fixxxxxi\AppData\Local\Temp\MissionHelper.cab --------- 2414212
17.05.2011 09:01 C:\Users\fixxxxxi\AppData\Local\Temp\msdtadmin --------- 0
17.05.2011 08:40 C:\Users\fixxxxxi\AppData\Local\Temp\4418104.od --------- 134
17.05.2011 08:40 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6A38.tmp.cvr --------- 0
17.05.2011 07:53 C:\Users\fixxxxxi\AppData\Local\Temp\1581085.od --------- 134
17.05.2011 07:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVR201D.tmp.cvr --------- 0
17.05.2011 07:37 C:\Users\fixxxxxi\AppData\Local\Temp\590058.od --------- 134
17.05.2011 07:37 C:\Users\fixxxxxi\AppData\Local\Temp\CVREA.tmp.cvr --------- 0
16.05.2011 21:38 C:\Users\fixxxxxi\AppData\Local\Temp\998531.od --------- 134
16.05.2011 21:38 C:\Users\fixxxxxi\AppData\Local\Temp\998499.cvr --------- 2072
16.05.2011 08:48 C:\Users\fixxxxxi\AppData\Local\Temp\674376.od --------- 134
16.05.2011 08:48 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4A48.tmp --------- 0
15.05.2011 16:04 C:\Users\fixxxxxi\AppData\Local\Temp\20867707.od --------- 134
15.05.2011 16:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6A7B.tmp.cvr --------- 0
15.05.2011 14:23 C:\Users\fixxxxxi\AppData\Local\Temp\14804666.od --------- 134
15.05.2011 14:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE6BA.tmp.cvr --------- 0
15.05.2011 10:31 C:\Users\fixxxxxi\AppData\Local\Temp\863465.od --------- 134
15.05.2011 10:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2CE9.tmp.cvr --------- 0
14.05.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\16622109.od --------- 134
14.05.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA21D.tmp.cvr --------- 0
14.05.2011 20:51 C:\Users\fixxxxxi\AppData\Local\Temp\8519339.od --------- 134
14.05.2011 20:51 C:\Users\fixxxxxi\AppData\Local\Temp\CVRFEAB.tmp.cvr --------- 0
14.05.2011 18:37 C:\Users\fixxxxxi\AppData\Local\Temp\477097.od --------- 134
14.05.2011 18:37 C:\Users\fixxxxxi\AppData\Local\Temp\CVR476B.tmp.cvr --------- 0
14.05.2011 09:42 C:\Users\fixxxxxi\AppData\Local\Temp\1284839.od --------- 134
14.05.2011 09:42 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9AE7.tmp --------- 0
14.05.2011 00:08 C:\Users\fixxxxxi\AppData\Local\Temp\2566419.od --------- 134
14.05.2011 00:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2913.tmp.cvr --------- 0
13.05.2011 13:13 C:\Users\fixxxxxi\AppData\Local\Temp\plugtmp --------- 0
13.05.2011 12:58 C:\Users\fixxxxxi\AppData\Local\Temp\8834477.od --------- 134
13.05.2011 12:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVRCD9D.tmp.cvr --------- 0
13.05.2011 10:45 C:\Users\fixxxxxi\AppData\Local\Temp\878223.od --------- 134
13.05.2011 10:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVR668F.tmp.cvr --------- 0
12.05.2011 20:51 C:\Users\fixxxxxi\AppData\Local\Temp\7026706.od --------- 134
12.05.2011 20:51 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3812.tmp.cvr --------- 0
12.05.2011 19:00 C:\Users\fixxxxxi\AppData\Local\Temp\VBE --------- 0
12.05.2011 18:57 C:\Users\fixxxxxi\AppData\Local\Temp\168855.od --------- 134
12.05.2011 18:57 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9359.tmp.cvr --------- 0
12.05.2011 09:20 C:\Users\fixxxxxi\AppData\Local\Temp\672333.od --------- 134
12.05.2011 09:20 C:\Users\fixxxxxi\AppData\Local\Temp\CVR424D.tmp --------- 0
11.05.2011 12:26 C:\Users\fixxxxxi\AppData\Local\Temp\1022492.od --------- 134
11.05.2011 12:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9A1C.tmp.cvr --------- 0
10.05.2011 20:39 C:\Users\fixxxxxi\AppData\Local\Temp\4912159.od --------- 134
10.05.2011 20:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF41F.tmp.cvr --------- 0
10.05.2011 20:07 C:\Users\fixxxxxi\AppData\Local\Temp\2950400.od --------- 134
10.05.2011 20:07 C:\Users\fixxxxxi\AppData\Local\Temp\CVR500.tmp.cvr --------- 0
10.05.2011 08:11 C:\Users\fixxxxxi\AppData\Local\Temp\389596.od --------- 134
10.05.2011 08:11 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF1BD.tmp.cvr --------- 0
09.05.2011 21:19 C:\Users\fixxxxxi\AppData\Local\Temp\8458124.od --------- 134
09.05.2011 21:19 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF8C.tmp.cvr --------- 0
09.05.2011 19:33 C:\Users\fixxxxxi\AppData\Local\Temp\2154607.od --------- 134
09.05.2011 19:33 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE06F.tmp.cvr --------- 0
08.05.2011 20:47 C:\Users\fixxxxxi\AppData\Local\Temp\Messenger Companion --------- 0
08.05.2011 20:44 C:\Users\fixxxxxi\AppData\Local\Temp\5426135.od --------- 134
08.05.2011 20:44 C:\Users\fixxxxxi\AppData\Local\Temp\CVRCBD7.tmp.cvr --------- 0
08.05.2011 20:30 C:\Users\fixxxxxi\AppData\Local\Temp\StructuredQuery.log --------- 20107
08.05.2011 20:10 C:\Users\fixxxxxi\AppData\Local\Temp\3391570.od --------- 134
08.05.2011 20:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC052.tmp.cvr --------- 0
07.05.2011 21:21 C:\Users\fixxxxxi\AppData\Local\Temp\OIS --------- 0
07.05.2011 21:02 C:\Users\fixxxxxi\AppData\Local\Temp\3838669.od --------- 134
07.05.2011 21:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR92CD.tmp.cvr --------- 0
07.05.2011 08:27 C:\Users\fixxxxxi\AppData\Local\Temp\541151.od --------- 134
07.05.2011 08:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4172.tmp.cvr --------- 0
06.05.2011 09:50 C:\Users\fixxxxxi\AppData\Local\Temp\687558.od --------- 134
06.05.2011 09:50 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7DC6.tmp.cvr --------- 0
05.05.2011 22:02 C:\Users\fixxxxxi\AppData\Local\Temp\FRONTPG.log --------- 23049
05.05.2011 09:16 C:\Users\fixxxxxi\AppData\Local\Temp\339832.od --------- 134
05.05.2011 09:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2F78.tmp.cvr --------- 0
05.05.2011 00:22 C:\Users\fixxxxxi\AppData\Local\Temp\7404057.od --------- 134
05.05.2011 00:22 C:\Users\fixxxxxi\AppData\Local\Temp\CVRFA19.tmp.cvr --------- 0
04.05.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\msohtmlclip1 --------- 0
04.05.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\msohtmlclip --------- 0
04.05.2011 22:54 C:\Users\fixxxxxi\AppData\Local\Temp\2147806.od --------- 134
04.05.2011 22:54 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC5DE.tmp.cvr --------- 0
04.05.2011 22:52 C:\Users\fixxxxxi\AppData\Local\Temp\Setup Log 2011-05-04 #001.txt --------- 20029
04.05.2011 22:46 C:\Users\fixxxxxi\AppData\Local\Temp\MessengerCache --------- 0
04.05.2011 22:23 C:\Users\fixxxxxi\AppData\Local\Temp\307041.od --------- 134
04.05.2011 22:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAEB5.tmp.cvr --------- 0
04.05.2011 16:43 C:\Users\fixxxxxi\AppData\Local\Temp\23386172.od --------- 134
04.05.2011 16:43 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD83C.tmp.cvr --------- 0
04.05.2011 16:09 C:\Users\fixxxxxi\AppData\Local\Temp\21362121.od --------- 134
04.05.2011 16:09 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF5C9.tmp.cvr --------- 0
04.05.2011 13:17 C:\Users\fixxxxxi\AppData\Local\Temp\11053731.od --------- 134
04.05.2011 13:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAAA3.tmp.cvr --------- 0
04.05.2011 11:40 C:\Users\fixxxxxi\AppData\Local\Temp\liveticker.html --------- 0
04.05.2011 10:27 C:\Users\fixxxxxi\AppData\Local\Temp\819083.od --------- 134
04.05.2011 10:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7F6C.tmp.cvr --------- 0
03.05.2011 23:21 C:\Users\fixxxxxi\AppData\Local\Temp\20164845.od --------- 134
03.05.2011 23:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB0ED.tmp.cvr --------- 0
03.05.2011 22:28 C:\Users\fixxxxxi\AppData\Local\Temp\sctmp.jpg --------- 112193
03.05.2011 15:46 C:\Users\fixxxxxi\AppData\Local\Temp\18077910.od --------- 134
03.05.2011 15:46 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD8D6.tmp.cvr --------- 0
03.05.2011 13:07 C:\Users\fixxxxxi\AppData\Local\Temp\ESE Banlist _ Bannliste .ÿ ¯ ÿCheaterbook.htm --------- 0
03.05.2011 11:22 C:\Users\fixxxxxi\AppData\Local\Temp\CVR580E.tmp --------- 0
03.05.2011 11:11 C:\Users\fixxxxxi\AppData\Local\Temp\CVRCD3D.tmp --------- 0
03.05.2011 10:56 C:\Users\fixxxxxi\AppData\Local\Temp\718852.od --------- 134
03.05.2011 10:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF804.tmp.cvr --------- 0
02.05.2011 13:02 C:\Users\fixxxxxi\AppData\Local\Temp\7223470.od --------- 134
02.05.2011 13:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR38AE.tmp.cvr --------- 0
02.05.2011 12:29 C:\Users\fixxxxxi\AppData\Local\Temp\5221603.od --------- 134
02.05.2011 12:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVRACE3.tmp --------- 0
02.05.2011 11:55 C:\Users\fixxxxxi\AppData\Local\Temp\3185774.od --------- 134
02.05.2011 11:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9C6E.tmp.cvr --------- 0
01.05.2011 08:30 C:\Users\fixxxxxi\AppData\Local\Temp\1274216.od --------- 134
01.05.2011 08:30 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6113.tmp.cvr --------- 0
30.04.2011 00:01 C:\Users\fixxxxxi\AppData\Local\Temp\MSI30b95.LOG --------- 892
29.04.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\274483.od --------- 134
29.04.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2FF5.tmp.cvr --------- 0
29.04.2011 13:06 C:\Users\fixxxxxi\AppData\Local\Temp\341236.od --------- 134
29.04.2011 13:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVR34F4.tmp.cvr --------- 0
28.04.2011 23:45 C:\Users\fixxxxxi\AppData\Local\Temp\508937.od --------- 134
28.04.2011 23:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC409.tmp.cvr --------- 0
28.04.2011 23:41 C:\Users\fixxxxxi\AppData\Local\Temp\260350.od --------- 134
28.04.2011 23:41 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF8B0.tmp.cvr --------- 0
28.04.2011 09:19 C:\Users\fixxxxxi\AppData\Local\Temp\798803.od --------- 134
28.04.2011 09:19 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3053.tmp.cvr --------- 0
27.04.2011 21:30 C:\Users\fixxxxxi\AppData\Local\Temp\755232.od --------- 134
27.04.2011 21:30 C:\Users\fixxxxxi\AppData\Local\Temp\CVR85F1.tmp.cvr --------- 0
27.04.2011 13:08 C:\Users\fixxxxxi\AppData\Local\Temp\11346951.od --------- 134
27.04.2011 13:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2407.tmp.cvr --------- 0
27.04.2011 10:10 C:\Users\fixxxxxi\AppData\Local\Temp\667434.od --------- 134
27.04.2011 10:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2F2A.tmp.cvr --------- 0
27.04.2011 10:09 C:\Users\fixxxxxi\AppData\Local\Temp\610619.od --------- 134
27.04.2011 10:09 C:\Users\fixxxxxi\AppData\Local\Temp\CVR513B.tmp.cvr --------- 0
27.04.2011 00:17 C:\Users\fixxxxxi\AppData\Local\Temp\10067696.od --------- 134
27.04.2011 00:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9EF0.tmp.cvr --------- 0
26.04.2011 23:14 C:\Users\fixxxxxi\AppData\Local\Temp\avatar --------- 3211
26.04.2011 15:31 C:\Users\fixxxxxi\AppData\Local\Temp\16859776.od --------- 134
26.04.2011 15:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4280.tmp.cvr --------- 0
26.04.2011 11:19 C:\Users\fixxxxxi\AppData\Local\Temp\1771890.od --------- 134
26.04.2011 11:19 C:\Users\fixxxxxi\AppData\Local\Temp\CVR972.tmp.cvr --------- 0
26.04.2011 01:06 C:\Users\fixxxxxi\AppData\Local\Temp\8218210.od --------- 134
26.04.2011 01:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6662.tmp.cvr --------- 0
25.04.2011 12:22 C:\Users\fixxxxxi\AppData\Local\Temp\1772764.od --------- 134
25.04.2011 12:22 C:\Users\fixxxxxi\AppData\Local\Temp\CVRCDC.tmp.cvr --------- 0
25.04.2011 00:32 C:\Users\fixxxxxi\AppData\Local\Temp\KiesInstall.Log --------- 11112
25.04.2011 00:04 C:\Users\fixxxxxi\AppData\Local\Temp\1103441.od --------- 134
25.04.2011 00:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD24D.tmp.cvr --------- 0
24.04.2011 11:34 C:\Users\fixxxxxi\AppData\Local\Temp\1541102.od --------- 134
24.04.2011 11:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVR83DF.tmp.cvr --------- 0
22.04.2011 12:27 C:\Users\fixxxxxi\AppData\Local\Temp\584098.od --------- 134
22.04.2011 12:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE80D.tmp.cvr --------- 0
20.04.2011 10:20 C:\Users\fixxxxxi\AppData\Local\Temp\734686.od --------- 134
20.04.2011 10:20 C:\Users\fixxxxxi\AppData\Local\Temp\CVR35DE.tmp --------- 0
19.04.2011 21:46 C:\Users\fixxxxxi\AppData\Local\Temp\246809.od --------- 134
19.04.2011 21:46 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC3EA.tmp.cvr --------- 0
19.04.2011 17:44 C:\Users\fixxxxxi\AppData\Local\Temp\7833886.od --------- 134
19.04.2011 17:44 C:\Users\fixxxxxi\AppData\Local\Temp\CVR891E.tmp.cvr --------- 0
19.04.2011 15:39 C:\Users\fixxxxxi\AppData\Local\Temp\313343.od --------- 134
19.04.2011 15:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC7FF.tmp --------- 0
19.04.2011 07:21 C:\Users\fixxxxxi\AppData\Local\Temp\2053051.od --------- 134
19.04.2011 07:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVR53BB.tmp.cvr --------- 0
19.04.2011 06:58 C:\Users\fixxxxxi\AppData\Local\Temp\634081.od --------- 134
19.04.2011 06:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVRACE1.tmp.cvr --------- 0
18.04.2011 08:23 C:\Users\fixxxxxi\AppData\Local\Temp\3141158.od --------- 134
18.04.2011 08:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVREE26.tmp.cvr --------- 0
18.04.2011 07:53 C:\Users\fixxxxxi\AppData\Local\Temp\1360609.od --------- 134
18.04.2011 07:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC2E1.tmp.cvr --------- 0
17.04.2011 07:34 C:\Users\fixxxxxi\AppData\Local\Temp\1028420.od --------- 134
17.04.2011 07:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB144.tmp.cvr --------- 0
16.04.2011 21:11 C:\Users\fixxxxxi\AppData\Local\Temp\11632011.od --------- 134
16.04.2011 21:11 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7D8B.tmp.cvr --------- 0
16.04.2011 18:59 C:\Users\fixxxxxi\AppData\Local\Temp\3684603.od --------- 134
16.04.2011 18:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVR38FB.tmp.cvr --------- 0
16.04.2011 18:00 C:\Users\fixxxxxi\AppData\Local\Temp\173145.od --------- 134
16.04.2011 18:00 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA3CD.tmp.cvr --------- 0
16.04.2011 07:42 C:\Users\fixxxxxi\AppData\Local\Temp\1330189.od --------- 134
16.04.2011 07:42 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4C0D.tmp.cvr --------- 0
16.04.2011 07:35 C:\Users\fixxxxxi\AppData\Local\Temp\905929.od --------- 134
16.04.2011 07:35 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD28A.tmp.cvr --------- 0
15.04.2011 23:22 C:\Users\fixxxxxi\AppData\Local\Temp\9260266.od --------- 134
15.04.2011 23:22 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4CEA.tmp.cvr --------- 0
15.04.2011 08:35 C:\Users\fixxxxxi\AppData\Local\Temp\592398.od --------- 134
15.04.2011 08:35 C:\Users\fixxxxxi\AppData\Local\Temp\CVR83A.tmp.cvr --------- 0
15.04.2011 00:48 C:\Users\fixxxxxi\AppData\Local\Temp\Outlook-Protokoll --------- 28672
15.04.2011 00:41 C:\Users\fixxxxxi\AppData\Local\Temp\2095452.od --------- 134
15.04.2011 00:41 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF95C.tmp.cvr --------- 0
15.04.2011 00:08 C:\Users\fixxxxxi\AppData\Local\Temp\96486.od --------- 134
15.04.2011 00:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7869.tmp.cvr --------- 0
14.04.2011 13:18 C:\Users\fixxxxxi\AppData\Local\Temp\5487225.od --------- 134
14.04.2011 13:18 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBA79.tmp.cvr --------- 0
13.04.2011 13:05 C:\Users\fixxxxxi\AppData\Local\Temp\7140930.cvr --------- 2024
13.04.2011 11:03 C:\Users\fixxxxxi\AppData\Local\Temp\3215289.od --------- 134
13.04.2011 11:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVRFB9.tmp.cvr --------- 0
13.04.2011 10:45 C:\Users\fixxxxxi\AppData\Local\Temp\2157353.od --------- 134
13.04.2011 10:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVREB19.tmp.cvr --------- 0
13.04.2011 00:30 C:\Users\fixxxxxi\AppData\Local\Temp\11039457.od --------- 134
13.04.2011 00:30 C:\Users\fixxxxxi\AppData\Local\Temp\CVR72E1.tmp.cvr --------- 0
12.04.2011 22:03 C:\Users\fixxxxxi\AppData\Local\Temp\2179489.od --------- 134
12.04.2011 22:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVR41A1.tmp --------- 0
12.04.2011 14:47 C:\Users\fixxxxxi\AppData\Local\Temp\9653997.od --------- 134
12.04.2011 14:47 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4EED.tmp.cvr --------- 0
12.04.2011 10:48 C:\Users\fixxxxxi\AppData\Local\Temp\597546.od --------- 134
12.04.2011 10:48 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1E2A.tmp.cvr --------- 0
11.04.2011 23:00 C:\Users\fixxxxxi\AppData\Local\Temp\38814015.od --------- 134
11.04.2011 23:00 C:\Users\fixxxxxi\AppData\Local\Temp\CVR413F.tmp.cvr --------- 0
11.04.2011 20:48 C:\Users\fixxxxxi\AppData\Local\Temp\30909897.od --------- 134
11.04.2011 20:48 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA5C9.tmp.cvr --------- 0
11.04.2011 19:34 C:\Users\fixxxxxi\AppData\Local\Temp\26454150.od --------- 134
11.04.2011 19:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA886.tmp.cvr --------- 0
11.04.2011 19:25 C:\Users\fixxxxxi\AppData\Local\Temp\25894995.manifest --------- 3044
11.04.2011 19:25 C:\Users\fixxxxxi\AppData\Local\Temp\25894902.cvr --------- 2196
11.04.2011 15:58 C:\Users\fixxxxxi\AppData\Local\Temp\13524319.od --------- 134
11.04.2011 15:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVR5D5F.tmp.cvr --------- 0
11.04.2011 13:26 C:\Users\fixxxxxi\AppData\Local\Temp\4392660.od --------- 134
11.04.2011 13:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6D4.tmp.cvr --------- 0
11.04.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\1075829.od --------- 134
11.04.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6A66.tmp.cvr --------- 0
10.04.2011 23:02 C:\Users\fixxxxxi\AppData\Local\Temp\15397298.od --------- 134
10.04.2011 23:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF1B2.tmp.cvr --------- 0
10.04.2011 22:52 C:\Users\fixxxxxi\AppData\Local\Temp\14786476.od --------- 134
10.04.2011 22:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9FAC.tmp.cvr --------- 0
10.04.2011 21:33 C:\Users\fixxxxxi\AppData\Local\Temp\10084762.od --------- 134
10.04.2011 21:33 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE19A.tmp.cvr --------- 0
10.04.2011 18:50 C:\Users\fixxxxxi\AppData\Local\Temp\291207.od --------- 134
10.04.2011 18:50 C:\Users\fixxxxxi\AppData\Local\Temp\CVR705E.tmp --------- 0
10.04.2011 07:31 C:\Users\fixxxxxi\AppData\Local\Temp\900016.od --------- 134
10.04.2011 07:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBAE5.tmp --------- 0
09.04.2011 20:21 C:\Users\fixxxxxi\AppData\Local\Temp\254125.od --------- 134
09.04.2011 20:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE0AD.tmp.cvr --------- 0
09.04.2011 20:21 C:\Users\fixxxxxi\AppData\Local\Temp\245701.od --------- 134
09.04.2011 20:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBE8D.tmp.cvr --------- 0
09.04.2011 07:53 C:\Users\fixxxxxi\AppData\Local\Temp\2239066.od --------- 134
09.04.2011 07:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2A5A.tmp.cvr --------- 0
08.04.2011 20:45 C:\Users\fixxxxxi\AppData\Local\Temp\27807131.od --------- 134
08.04.2011 20:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4D9B.tmp.cvr --------- 0
08.04.2011 15:12 C:\Users\fixxxxxi\AppData\Local\Temp\7819316.od --------- 134
08.04.2011 15:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVR5034.tmp.cvr --------- 0
08.04.2011 13:14 C:\Users\fixxxxxi\AppData\Local\Temp\755419.od --------- 134
08.04.2011 13:14 C:\Users\fixxxxxi\AppData\Local\Temp\CVR86DB.tmp.cvr --------- 0
07.04.2011 19:50 C:\Users\fixxxxxi\AppData\Local\Temp\divC8E9.tmp --------- 4096
07.04.2011 19:50 C:\Users\fixxxxxi\AppData\Local\Temp\div8D60.tmp --------- 0
07.04.2011 19:49 C:\Users\fixxxxxi\AppData\Local\Temp\divB2BC.tmp --------- 0
07.04.2011 19:49 C:\Users\fixxxxxi\AppData\Local\Temp\438971.od --------- 134
07.04.2011 19:49 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9C1F.tmp.cvr --------- 0
07.04.2011 05:39 C:\Users\fixxxxxi\AppData\Local\Temp\1933881.od --------- 134
07.04.2011 05:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8239.tmp.cvr --------- 0
07.04.2011 05:21 C:\Users\fixxxxxi\AppData\Local\Temp\833404.od --------- 134
07.04.2011 05:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB77C.tmp.cvr --------- 0
07.04.2011 05:08 C:\Users\fixxxxxi\AppData\Local\Temp\div57C0.tmp --------- 0
06.04.2011 15:49 C:\Users\fixxxxxi\AppData\Local\Temp\242643.od --------- 134
06.04.2011 15:49 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB3D3.tmp.cvr --------- 0
06.04.2011 15:46 C:\Users\fixxxxxi\AppData\Local\Temp\div9405.tmp --------- 0
06.04.2011 05:23 C:\Users\fixxxxxi\AppData\Local\Temp\1377956.od --------- 134
06.04.2011 05:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6A4.tmp.cvr --------- 0
06.04.2011 05:01 C:\Users\fixxxxxi\AppData\Local\Temp\divACA3.tmp --------- 0
05.04.2011 23:56 C:\Users\fixxxxxi\AppData\Local\Temp\div81FB.tmp --------- 0
05.04.2011 23:31 C:\Users\fixxxxxi\AppData\Local\Temp\312672.od --------- 134
05.04.2011 23:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC560.tmp --------- 0
05.04.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\765418.od --------- 134
05.04.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVRADEA.tmp --------- 0
05.04.2011 09:23 C:\Users\fixxxxxi\AppData\Local\Temp\A2C5.tmp --------- 0
05.04.2011 09:12 C:\Users\fixxxxxi\AppData\Local\Temp\divD603.tmp --------- 0
04.04.2011 23:26 C:\Users\fixxxxxi\AppData\Local\Temp\15221469.od --------- 134
04.04.2011 23:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVR42DD.tmp.cvr --------- 0
04.04.2011 19:55 C:\Users\fixxxxxi\AppData\Local\Temp\2523409.od --------- 134
04.04.2011 19:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8111.tmp.cvr --------- 0
04.04.2011 19:55 C:\Users\fixxxxxi\AppData\Local\Temp\~GE7034.kmz --------- 2435
04.04.2011 19:55 C:\Users\fixxxxxi\AppData\Local\Temp\~GE7035.tmp --------- 0
04.04.2011 19:55 C:\Users\fixxxxxi\AppData\Local\Temp\~GE7034.tmp --------- 0
04.04.2011 19:53 C:\Users\fixxxxxi\AppData\Local\Temp\~GE30E2.kmz --------- 552
04.04.2011 19:53 C:\Users\fixxxxxi\AppData\Local\Temp\~GE30E3.tmp --------- 0
04.04.2011 19:53 C:\Users\fixxxxxi\AppData\Local\Temp\~GE30E2.tmp --------- 0
04.04.2011 19:17 C:\Users\fixxxxxi\AppData\Local\Temp\236903.od --------- 134
04.04.2011 19:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9D57.tmp --------- 0
04.04.2011 19:14 C:\Users\fixxxxxi\AppData\Local\Temp\divC715.tmp --------- 0
04.04.2011 14:52 C:\Users\fixxxxxi\AppData\Local\Temp\div7F0E.tmp --------- 0
04.04.2011 14:15 C:\Users\fixxxxxi\AppData\Local\Temp\12246655.od --------- 134
04.04.2011 14:15 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDE7F.tmp.cvr --------- 0
04.04.2011 11:08 C:\Users\fixxxxxi\AppData\Local\Temp\996471.od --------- 134
04.04.2011 11:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3468.tmp.cvr --------- 0
04.04.2011 00:29 C:\Users\fixxxxxi\AppData\Local\Temp\3320777.od --------- 134
04.04.2011 00:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVRABC9.tmp.cvr --------- 0
03.04.2011 23:40 C:\Users\fixxxxxi\AppData\Local\Temp\404307.od --------- 134
03.04.2011 23:40 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2B53.tmp.cvr --------- 0
03.04.2011 23:35 C:\Users\fixxxxxi\AppData\Local\Temp\div9CBB.tmp --------- 0
03.04.2011 10:32 C:\Users\fixxxxxi\AppData\Local\Temp\divA341.tmp --------- 0
02.04.2011 23:57 C:\Users\fixxxxxi\AppData\Local\Temp\1247337.od --------- 134
02.04.2011 23:57 C:\Users\fixxxxxi\AppData\Local\Temp\CVR869.tmp.cvr --------- 0
02.04.2011 23:37 C:\Users\fixxxxxi\AppData\Local\Temp\divB163.tmp --------- 0
02.04.2011 12:16 C:\Users\fixxxxxi\AppData\Local\Temp\2573236.od --------- 134
02.04.2011 12:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVR43B4.tmp.cvr --------- 0
02.04.2011 12:04 C:\Users\fixxxxxi\AppData\Local\Temp\divB911.tmp --------- 0
02.04.2011 11:54 C:\Users\fixxxxxi\AppData\Local\Temp\1256057.od --------- 134
02.04.2011 11:54 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2A79.tmp.cvr --------- 0
02.04.2011 00:33 C:\Users\fixxxxxi\AppData\Local\Temp\3189768.od --------- 134
02.04.2011 00:33 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAC08.tmp.cvr --------- 0
01.04.2011 23:41 C:\Users\fixxxxxi\AppData\Local\Temp\divAACF.tmp --------- 0
01.04.2011 13:05 C:\Users\fixxxxxi\AppData\Local\Temp\11469443.od --------- 134
01.04.2011 13:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVR273.tmp.cvr --------- 0
01.04.2011 12:12 C:\Users\fixxxxxi\AppData\Local\Temp\adb.log --------- 622
01.04.2011 11:13 C:\Users\fixxxxxi\AppData\Local\Temp\divB865.tmp --------- 0
01.04.2011 10:45 C:\Users\fixxxxxi\AppData\Local\Temp\3057135.od --------- 134
01.04.2011 10:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA5EF.tmp.cvr --------- 0
01.04.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\50162948.od --------- 134
01.04.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6D04.tmp.cvr --------- 0
01.04.2011 00:40 C:\Users\fixxxxxi\AppData\Local\Temp\48843647.od --------- 134
01.04.2011 00:40 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4B7F.tmp.cvr --------- 0
31.03.2011 23:47 C:\Users\fixxxxxi\AppData\Local\Temp\45628186.od --------- 134
31.03.2011 23:47 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3B1A.tmp.cvr --------- 0
31.03.2011 15:58 C:\Users\fixxxxxi\AppData\Local\Temp\17511361.od --------- 134
31.03.2011 15:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVR33C1.tmp.cvr --------- 0
31.03.2011 15:01 C:\Users\fixxxxxi\AppData\Local\Temp\14068544.od --------- 134
31.03.2011 15:01 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAB40.tmp.cvr --------- 0
31.03.2011 11:19 C:\Users\fixxxxxi\AppData\Local\Temp\778663.od --------- 134
31.03.2011 11:19 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE1A7.tmp.cvr --------- 0
31.03.2011 11:08 C:\Users\fixxxxxi\AppData\Local\Temp\divAD00.tmp --------- 0
30.03.2011 13:49 C:\Users\fixxxxxi\AppData\Local\Temp\11359821.od --------- 134
30.03.2011 13:49 C:\Users\fixxxxxi\AppData\Local\Temp\CVR564D.tmp.cvr --------- 0
30.03.2011 13:24 C:\Users\fixxxxxi\AppData\Local\Temp\9840121.od --------- 134
30.03.2011 13:24 C:\Users\fixxxxxi\AppData\Local\Temp\CVR25F9.tmp.cvr --------- 0
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic8.png --------- 4252
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic7.png --------- 4014
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic6.png --------- 18225
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic5.png --------- 4569
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic4.png --------- 4272
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic3.png --------- 18225
30.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\pic2.png --------- 4331
30.03.2011 11:11 C:\Users\fixxxxxi\AppData\Local\Temp\div74C1.tmp --------- 0
30.03.2011 10:52 C:\Users\fixxxxxi\AppData\Local\Temp\738742.od --------- 134
30.03.2011 10:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVR45B6.tmp.cvr --------- 0
29.03.2011 09:34 C:\Users\fixxxxxi\AppData\Local\Temp\1450216.od --------- 134
29.03.2011 09:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVR20E8.tmp.cvr --------- 0
29.03.2011 09:29 C:\Users\fixxxxxi\AppData\Local\Temp\1154719.od --------- 134
29.03.2011 09:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9E8F.tmp.cvr --------- 0
29.03.2011 09:19 C:\Users\fixxxxxi\AppData\Local\Temp\6779.tmp --------- 311456
29.03.2011 09:19 C:\Users\fixxxxxi\AppData\Local\Temp\5966.tmp --------- 0
29.03.2011 09:11 C:\Users\fixxxxxi\AppData\Local\Temp\divA7B3.tmp --------- 0
28.03.2011 23:53 C:\Users\fixxxxxi\AppData\Local\Temp\wecerr.txt --------- 11869
28.03.2011 20:40 C:\Users\fixxxxxi\AppData\Local\Temp\727120.od --------- 134
28.03.2011 20:40 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1850.tmp.cvr --------- 0
28.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\div7FB9.tmp --------- 0
28.03.2011 11:06 C:\Users\fixxxxxi\AppData\Local\Temp\3511660.od --------- 134
28.03.2011 11:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVR956C.tmp.cvr --------- 0
28.03.2011 10:39 C:\Users\fixxxxxi\AppData\Local\Temp\1890264.od --------- 134
28.03.2011 10:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD7D8.tmp.cvr --------- 0
28.03.2011 10:22 C:\Users\fixxxxxi\AppData\Local\Temp\865041.od --------- 134
28.03.2011 10:22 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3311.tmp.cvr --------- 0
28.03.2011 10:19 C:\Users\fixxxxxi\AppData\Local\Temp\641179.od --------- 134
28.03.2011 10:19 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC89B.tmp.cvr --------- 0
28.03.2011 10:09 C:\Users\fixxxxxi\AppData\Local\Temp\divB6B2.tmp --------- 0
27.03.2011 23:38 C:\Users\fixxxxxi\AppData\Local\Temp\16992315.od --------- 134
27.03.2011 23:38 C:\Users\fixxxxxi\AppData\Local\Temp\CVR482B.tmp.cvr --------- 0
27.03.2011 23:38 C:\Users\fixxxxxi\AppData\Local\Temp\CVR482C.tmp.cvr --------- 0
27.03.2011 19:01 C:\Users\fixxxxxi\AppData\Local\Temp\387522.od --------- 134
27.03.2011 19:01 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE9B2.tmp --------- 0
27.03.2011 18:56 C:\Users\fixxxxxi\AppData\Local\Temp\div194A.tmp --------- 0
27.03.2011 10:22 C:\Users\fixxxxxi\AppData\Local\Temp\1643189.od --------- 134
27.03.2011 10:22 C:\Users\fixxxxxi\AppData\Local\Temp\CVR12B5.tmp.cvr --------- 0
27.03.2011 09:56 C:\Users\fixxxxxi\AppData\Local\Temp\div4EF9.tmp --------- 0
27.03.2011 02:04 C:\Users\fixxxxxi\AppData\Local\Temp\4306516.od --------- 134
27.03.2011 02:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB654.tmp.cvr --------- 0
27.03.2011 02:02 C:\Users\fixxxxxi\AppData\Local\Temp\4164321.od --------- 134
27.03.2011 02:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8AE1.tmp.cvr --------- 0
27.03.2011 00:55 C:\Users\fixxxxxi\AppData\Local\Temp\178870.od --------- 134
27.03.2011 00:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBA68.tmp.cvr --------- 0
27.03.2011 00:53 C:\Users\fixxxxxi\AppData\Local\Temp\divE954.tmp --------- 0
26.03.2011 13:54 C:\Users\fixxxxxi\AppData\Local\Temp\divEBC4.tmp --------- 0
26.03.2011 12:42 C:\Users\fixxxxxi\AppData\Local\Temp\1112209.od --------- 134
26.03.2011 12:42 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF891.tmp.cvr --------- 0
26.03.2011 12:34 C:\Users\fixxxxxi\AppData\Local\Temp\_HTC_Installer.log --------- 317708
26.03.2011 12:34 C:\Users\fixxxxxi\AppData\Local\Temp\ddinstaller.log --------- 20410
26.03.2011 12:33 C:\Users\fixxxxxi\AppData\Local\Temp\DMI39B5.tmp --------- 0
26.03.2011 12:32 C:\Users\fixxxxxi\AppData\Local\Temp\alexa --------- 0
26.03.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\2150660.od --------- 134
26.03.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD104.tmp.cvr --------- 0
26.03.2011 00:53 C:\Users\fixxxxxi\AppData\Local\Temp\~C62E.tmp --------- 91648
26.03.2011 00:43 C:\Users\fixxxxxi\AppData\Local\Temp\973493.od --------- 134
26.03.2011 00:43 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDAB5.tmp.cvr --------- 0
26.03.2011 00:28 C:\Users\fixxxxxi\AppData\Local\Temp\divF44C.tmp --------- 0
25.03.2011 13:44 C:\Users\fixxxxxi\AppData\Local\Temp\doc-10.pdf --------- 12823
25.03.2011 13:15 C:\Users\fixxxxxi\AppData\Local\Temp\1026283.od --------- 134
25.03.2011 13:15 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA8EB.tmp.cvr --------- 0
25.03.2011 12:59 C:\Users\fixxxxxi\AppData\Local\Temp\div9AC8.tmp --------- 0
25.03.2011 02:10 C:\Users\fixxxxxi\AppData\Local\Temp\doc-18.pdf --------- 12961
25.03.2011 01:41 C:\Users\fixxxxxi\AppData\Local\Temp\ge5236 --------- 0
25.03.2011 00:32 C:\Users\fixxxxxi\AppData\Local\Temp\818147.od --------- 134
25.03.2011 00:32 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7BE3.tmp.cvr --------- 0
25.03.2011 00:19 C:\Users\fixxxxxi\AppData\Local\Temp\div849A.tmp --------- 0
24.03.2011 14:25 C:\Users\fixxxxxi\AppData\Local\Temp\doc-35.pdf --------- 6390
24.03.2011 12:59 C:\Users\fixxxxxi\AppData\Local\Temp\doc-20.pdf --------- 6306
24.03.2011 12:39 C:\Users\fixxxxxi\AppData\Local\Temp\doc-11.pdf --------- 6085
24.03.2011 11:56 C:\Users\fixxxxxi\AppData\Local\Temp\198324.od --------- 134
24.03.2011 11:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVR694.tmp.cvr --------- 0
24.03.2011 11:53 C:\Users\fixxxxxi\AppData\Local\Temp\div7AF9.tmp --------- 0
24.03.2011 01:45 C:\Users\fixxxxxi\AppData\Local\Temp\3782509.od --------- 134
24.03.2011 01:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB75D.tmp.cvr --------- 0
24.03.2011 01:10 C:\Users\fixxxxxi\AppData\Local\Temp\1686495.od --------- 134
24.03.2011 01:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBBDF.tmp.cvr --------- 0
24.03.2011 01:05 C:\Users\fixxxxxi\AppData\Local\Temp\1421449.od --------- 134
24.03.2011 01:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB089.tmp.cvr --------- 0
24.03.2011 00:48 C:\Users\fixxxxxi\AppData\Local\Temp\363076.od --------- 134
24.03.2011 00:48 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8A44.tmp.cvr --------- 0
24.03.2011 00:42 C:\Users\fixxxxxi\AppData\Local\Temp\div81AD.tmp --------- 0
23.03.2011 14:10 C:\Users\fixxxxxi\AppData\Local\Temp\7594768.od --------- 134
23.03.2011 14:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE310.tmp.cvr --------- 0
23.03.2011 14:06 C:\Users\fixxxxxi\AppData\Local\Temp\7377240.od --------- 134
23.03.2011 14:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9158.tmp.cvr --------- 0
23.03.2011 13:34 C:\Users\fixxxxxi\AppData\Local\Temp\div8499.tmp --------- 0
23.03.2011 13:26 C:\Users\fixxxxxi\AppData\Local\Temp\4979286.od --------- 134
23.03.2011 13:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVRFA56.tmp.cvr --------- 0
23.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\4788996.od --------- 134
23.03.2011 13:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1304.tmp.cvr --------- 0
23.03.2011 13:15 C:\Users\fixxxxxi\AppData\Local\Temp\4345314.od --------- 134
23.03.2011 13:15 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4DE2.tmp.cvr --------- 0
23.03.2011 13:12 C:\Users\fixxxxxi\AppData\Local\Temp\4129798.od --------- 134
23.03.2011 13:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVR406.tmp.cvr --------- 0
23.03.2011 13:05 C:\Users\fixxxxxi\AppData\Local\Temp\3739811.od --------- 134
23.03.2011 13:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVR10A3.tmp.cvr --------- 0
23.03.2011 13:04 C:\Users\fixxxxxi\AppData\Local\Temp\3684774.od --------- 134
23.03.2011 13:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVR39A6.tmp.cvr --------- 0
23.03.2011 12:57 C:\Users\fixxxxxi\AppData\Local\Temp\3252901.od --------- 134
23.03.2011 12:57 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA2A5.tmp.cvr --------- 0
23.03.2011 12:55 C:\Users\fixxxxxi\AppData\Local\Temp\3119926.od --------- 134
23.03.2011 12:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9B36.tmp.cvr --------- 0
23.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\3006622.od --------- 134
23.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE08F.tmp.cvr --------- 0
23.03.2011 12:47 C:\Users\fixxxxxi\AppData\Local\Temp\2671392.od --------- 134
23.03.2011 12:47 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC320.tmp.cvr --------- 0
23.03.2011 12:47 C:\Users\fixxxxxi\AppData\Local\Temp\2618507.od --------- 134
23.03.2011 12:47 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF48B.tmp --------- 0
23.03.2011 12:25 C:\Users\fixxxxxi\AppData\Local\Temp\1294137.od --------- 134
23.03.2011 12:25 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBF39.tmp.cvr --------- 0
23.03.2011 01:52 C:\Users\fixxxxxi\AppData\Local\Temp\28114203.od --------- 134
23.03.2011 01:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVRFD1B.tmp.cvr --------- 0
23.03.2011 00:38 C:\Users\fixxxxxi\AppData\Local\Temp\23705381.od --------- 134
23.03.2011 00:38 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB725.tmp.cvr --------- 0
22.03.2011 22:26 C:\Users\fixxxxxi\AppData\Local\Temp\15787441.od --------- 134
22.03.2011 22:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE5B1.tmp.cvr --------- 0
22.03.2011 22:03 C:\Users\fixxxxxi\AppData\Local\Temp\14412121.od --------- 134
22.03.2011 22:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE959.tmp.cvr --------- 0
22.03.2011 21:32 C:\Users\fixxxxxi\AppData\Local\Temp\12509813.od --------- 134
22.03.2011 21:32 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE275.tmp.cvr --------- 0
22.03.2011 21:17 C:\Users\fixxxxxi\AppData\Local\Temp\11646613.od --------- 134
22.03.2011 21:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB695.tmp.cvr --------- 0
22.03.2011 19:58 C:\Users\fixxxxxi\AppData\Local\Temp\create.html --------- 0
22.03.2011 18:56 C:\Users\fixxxxxi\AppData\Local\Temp\3185540.od --------- 134
22.03.2011 18:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9B84.tmp.cvr --------- 0
22.03.2011 18:36 C:\Users\fixxxxxi\AppData\Local\Temp\1951744.od --------- 134
22.03.2011 18:36 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC800.tmp --------- 0
22.03.2011 18:04 C:\Users\fixxxxxi\AppData\Local\Temp\div99ED.tmp --------- 0
22.03.2011 15:30 C:\Users\fixxxxxi\AppData\Local\Temp\17510581.od --------- 134
22.03.2011 15:30 C:\Users\fixxxxxi\AppData\Local\Temp\CVR30A6.tmp.cvr --------- 0
22.03.2011 10:51 C:\Users\fixxxxxi\AppData\Local\Temp\799723.od --------- 134
22.03.2011 10:51 C:\Users\fixxxxxi\AppData\Local\Temp\CVR33DB.tmp.cvr --------- 0
22.03.2011 10:39 C:\Users\fixxxxxi\AppData\Local\Temp\divDD5.tmp --------- 0
22.03.2011 01:42 C:\Users\fixxxxxi\AppData\Local\Temp\47228382.od --------- 134
22.03.2011 01:42 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA5DE.tmp.cvr --------- 0
21.03.2011 23:44 C:\Users\fixxxxxi\AppData\Local\Temp\ge1928 --------- 0
21.03.2011 19:17 C:\Users\fixxxxxi\AppData\Local\Temp\24175802.od --------- 134
21.03.2011 19:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE4BA.tmp.cvr --------- 0
21.03.2011 19:17 C:\Users\fixxxxxi\AppData\Local\Temp\24158595.od --------- 134
21.03.2011 19:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA183.tmp.cvr --------- 0
21.03.2011 17:10 C:\Users\fixxxxxi\AppData\Local\Temp\16527650.od --------- 134
21.03.2011 17:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3122.tmp.cvr --------- 0
21.03.2011 16:35 C:\Users\fixxxxxi\AppData\Local\Temp\14425272.od --------- 134
21.03.2011 16:35 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1CB8.tmp.cvr --------- 0
21.03.2011 16:18 C:\Users\fixxxxxi\AppData\Local\Temp\nppLocalization --------- 16384
21.03.2011 15:20 C:\Users\fixxxxxi\AppData\Local\Temp\9902740.od --------- 134
21.03.2011 15:20 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1A94.tmp.cvr --------- 0
21.03.2011 15:12 C:\Users\fixxxxxi\AppData\Local\Temp\t8o4mmng.bmp --------- 4150
21.03.2011 15:10 C:\Users\fixxxxxi\AppData\Local\Temp\u6qjm5z4.bmp --------- 4150
21.03.2011 13:16 C:\Users\fixxxxxi\AppData\Local\Temp\2462070.od --------- 134
21.03.2011 13:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9166.tmp.cvr --------- 0
21.03.2011 12:36 C:\Users\fixxxxxi\AppData\Local\Temp\div96D2.tmp --------- 0
21.03.2011 01:25 C:\Users\fixxxxxi\AppData\Local\Temp\8184015.od --------- 134
21.03.2011 01:25 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE0BF.tmp.cvr --------- 0
21.03.2011 01:20 C:\Users\fixxxxxi\AppData\Local\Temp\7882917.od --------- 134
21.03.2011 01:20 C:\Users\fixxxxxi\AppData\Local\Temp\CVR48A5.tmp --------- 0
21.03.2011 00:51 C:\Users\fixxxxxi\AppData\Local\Temp\6123522.od --------- 134
21.03.2011 00:51 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7002.tmp.cvr --------- 0
21.03.2011 00:41 C:\Users\fixxxxxi\AppData\Local\Temp\5503294.od --------- 134
21.03.2011 00:41 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF93E.tmp.cvr --------- 0
21.03.2011 00:16 C:\Users\fixxxxxi\AppData\Local\Temp\4051657.od --------- 134
21.03.2011 00:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD2C9.tmp.cvr --------- 0
21.03.2011 00:12 C:\Users\fixxxxxi\AppData\Local\Temp\3799154.od --------- 134
21.03.2011 00:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF872.tmp.cvr --------- 0
20.03.2011 23:29 C:\Users\fixxxxxi\AppData\Local\Temp\1184952.od --------- 134
20.03.2011 23:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVR14B8.tmp.cvr --------- 0
20.03.2011 23:10 C:\Users\fixxxxxi\AppData\Local\Temp\divA19B.tmp --------- 0
20.03.2011 14:17 C:\Users\fixxxxxi\AppData\Local\Temp\4721276.od --------- 134
20.03.2011 14:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA7C.tmp.cvr --------- 0
20.03.2011 13:29 C:\Users\fixxxxxi\AppData\Local\Temp\divA044.tmp --------- 0
20.03.2011 13:10 C:\Users\fixxxxxi\AppData\Local\Temp\676295.od --------- 134
20.03.2011 13:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVR51C7.tmp --------- 0
20.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\6524632.od --------- 134
20.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8ED8.tmp.cvr --------- 0
20.03.2011 00:55 C:\Users\fixxxxxi\AppData\Local\Temp\1073474.od --------- 134
20.03.2011 00:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6142.tmp.cvr --------- 0
20.03.2011 00:38 C:\Users\fixxxxxi\AppData\Local\Temp\divB837.tmp --------- 0
19.03.2011 13:04 C:\Users\fixxxxxi\AppData\Local\Temp\4387964.od --------- 134
19.03.2011 13:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF47C.tmp.cvr --------- 0
19.03.2011 12:37 C:\Users\fixxxxxi\AppData\Local\Temp\2785319.od --------- 134
19.03.2011 12:37 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8027.tmp.cvr --------- 0
19.03.2011 11:52 C:\Users\fixxxxxi\AppData\Local\Temp\divD0E5.tmp --------- 0
19.03.2011 01:39 C:\Users\fixxxxxi\AppData\Local\Temp\4292211.od --------- 134
19.03.2011 01:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7E73.tmp.cvr --------- 0
19.03.2011 01:04 C:\Users\fixxxxxi\AppData\Local\Temp\2220908.od --------- 134
19.03.2011 01:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE36C.tmp.cvr --------- 0
19.03.2011 00:39 C:\Users\fixxxxxi\AppData\Local\Temp\732346.od --------- 134
19.03.2011 00:39 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2CBA.tmp.cvr --------- 0
19.03.2011 00:29 C:\Users\fixxxxxi\AppData\Local\Temp\divE2CF.tmp --------- 0
18.03.2011 14:17 C:\Users\fixxxxxi\AppData\Local\Temp\2046.html --------- 0
18.03.2011 14:02 C:\Users\fixxxxxi\AppData\Local\Temp\90bbvq60.bmp --------- 262198
18.03.2011 14:02 C:\Users\fixxxxxi\AppData\Local\Temp\q2mn7hfo.bmp --------- 262198
18.03.2011 12:44 C:\Users\fixxxxxi\AppData\Local\Temp\878800.od --------- 134
18.03.2011 12:44 C:\Users\fixxxxxi\AppData\Local\Temp\CVR68D0.tmp.cvr --------- 0
18.03.2011 12:30 C:\Users\fixxxxxi\AppData\Local\Temp\div9848.tmp --------- 0
18.03.2011 02:05 C:\Users\fixxxxxi\AppData\Local\Temp\4867745.od --------- 134
18.03.2011 02:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVR46A1.tmp.cvr --------- 0
18.03.2011 00:56 C:\Users\fixxxxxi\AppData\Local\Temp\701208.od --------- 134
18.03.2011 00:45 C:\Users\fixxxxxi\AppData\Local\Temp\div8DBD.tmp --------- 0
17.03.2011 12:41 C:\Users\fixxxxxi\AppData\Local\Temp\div92DC.tmp --------- 0
17.03.2011 11:50 C:\Users\fixxxxxi\AppData\Local\Temp\537111.od --------- 134
17.03.2011 11:50 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3217.tmp.cvr --------- 0
17.03.2011 00:48 C:\Users\fixxxxxi\AppData\Local\Temp\divAE77.tmp --------- 0
16.03.2011 14:17 C:\Users\fixxxxxi\AppData\Local\Temp\div9E51.tmp --------- 0
16.03.2011 11:44 C:\Users\fixxxxxi\AppData\Local\Temp\1507874.od --------- 134
16.03.2011 11:44 C:\Users\fixxxxxi\AppData\Local\Temp\CVR222.tmp.cvr --------- 0
16.03.2011 11:20 C:\Users\fixxxxxi\AppData\Local\Temp\divFFD1.tmp --------- 0
16.03.2011 00:59 C:\Users\fixxxxxi\AppData\Local\Temp\8750938.od --------- 134
16.03.2011 00:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVR875A.tmp.cvr --------- 0
16.03.2011 00:58 C:\Users\fixxxxxi\AppData\Local\Temp\8710362.od --------- 134
16.03.2011 00:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE8DA.tmp.cvr --------- 0
16.03.2011 00:26 C:\Users\fixxxxxi\AppData\Local\Temp\amtconfig.log --------- 1065
15.03.2011 22:34 C:\Users\fixxxxxi\AppData\Local\Temp\divD43F.tmp --------- 0
15.03.2011 20:16 C:\Users\fixxxxxi\AppData\Local\Temp\35764102.od --------- 134
15.03.2011 20:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB786.tmp.cvr --------- 0
15.03.2011 18:00 C:\Users\fixxxxxi\AppData\Local\Temp\sjkicpg1.bmp --------- 5214
15.03.2011 16:09 C:\Users\fixxxxxi\AppData\Local\Temp\8d1hopqv.bmp --------- 2354
15.03.2011 14:59 C:\Users\fixxxxxi\AppData\Local\Temp\cg34rorq.bmp --------- 2758
15.03.2011 13:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE1E9.tmp --------- 0
15.03.2011 10:28 C:\Users\fixxxxxi\AppData\Local\Temp\470374.od --------- 134
15.03.2011 10:28 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2D66.tmp.cvr --------- 0
15.03.2011 10:21 C:\Users\fixxxxxi\AppData\Local\Temp\div82E5.tmp --------- 0
14.03.2011 22:59 C:\Users\fixxxxxi\AppData\Local\Temp\40711378.od --------- 134
14.03.2011 22:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVR34D2.tmp.cvr --------- 0
14.03.2011 22:32 C:\Users\fixxxxxi\AppData\Local\Temp\39121618.od --------- 134
14.03.2011 22:32 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF2D2.tmp.cvr --------- 0
14.03.2011 18:10 C:\Users\fixxxxxi\AppData\Local\Temp\23418199.od --------- 134
14.03.2011 18:10 C:\Users\fixxxxxi\AppData\Local\Temp\CVR5557.tmp.cvr --------- 0
14.03.2011 17:50 C:\Users\fixxxxxi\AppData\Local\Temp\2027.html --------- 0
14.03.2011 14:01 C:\Users\fixxxxxi\AppData\Local\Temp\8480510.od --------- 134
14.03.2011 14:01 C:\Users\fixxxxxi\AppData\Local\Temp\CVR66FE.tmp.cvr --------- 0
14.03.2011 13:21 C:\Users\fixxxxxi\AppData\Local\Temp\s6acg1jh.bmp --------- 30854
14.03.2011 13:15 C:\Users\fixxxxxi\AppData\Local\Temp\5677297.od --------- 134
14.03.2011 13:15 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA0F1.tmp.cvr --------- 0
14.03.2011 13:09 C:\Users\fixxxxxi\AppData\Local\Temp\5308292.od --------- 134
14.03.2011 13:09 C:\Users\fixxxxxi\AppData\Local\Temp\CVRFF84.tmp.cvr --------- 0
14.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\divE8D9.tmp --------- 0
14.03.2011 12:41 C:\Users\fixxxxxi\AppData\Local\Temp\divD1BF.tmp --------- 0
14.03.2011 12:16 C:\Users\fixxxxxi\AppData\Local\Temp\2163265.od --------- 134
14.03.2011 12:16 C:\Users\fixxxxxi\AppData\Local\Temp\2163234.cvr --------- 2200
14.03.2011 12:14 C:\Users\fixxxxxi\AppData\Local\Temp\2065125.od --------- 134
14.03.2011 12:14 C:\Users\fixxxxxi\AppData\Local\Temp\2065094.cvr --------- 2140
14.03.2011 12:09 C:\Users\fixxxxxi\AppData\Local\Temp\75e4939031a7f716a87d3ad43cd5be77-3.dlc --------- 6340
14.03.2011 12:07 C:\Users\fixxxxxi\AppData\Local\Temp\ACSMC.part01.rar --------- 504365056
14.03.2011 12:04 C:\Users\fixxxxxi\AppData\Local\Temp\75e4939031a7f716a87d3ad43cd5be77-2.dlc --------- 6340
14.03.2011 12:03 C:\Users\fixxxxxi\AppData\Local\Temp\75e4939031a7f716a87d3ad43cd5be77-1.dlc --------- 6340
14.03.2011 11:57 C:\Users\fixxxxxi\AppData\Local\Temp\75e4939031a7f716a87d3ad43cd5be77.dlc --------- 6340
14.03.2011 11:46 C:\Users\fixxxxxi\AppData\Local\Temp\375868.od --------- 134
14.03.2011 11:46 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBC3C.tmp.cvr --------- 0
14.03.2011 00:21 C:\Users\fixxxxxi\AppData\Local\Temp\42903301.od --------- 134
14.03.2011 00:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA705.tmp.cvr --------- 0
13.03.2011 23:45 C:\Users\fixxxxxi\AppData\Local\Temp\40733733.od --------- 134
13.03.2011 23:45 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8C25.tmp.cvr --------- 0
13.03.2011 23:13 C:\Users\fixxxxxi\AppData\Local\Temp\38870987.od --------- 134
13.03.2011 23:13 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1FCB.tmp.cvr --------- 0
13.03.2011 21:27 C:\Users\fixxxxxi\AppData\Local\Temp\32457568.od --------- 134
13.03.2011 21:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4360.tmp.cvr --------- 0
13.03.2011 21:14 C:\Users\fixxxxxi\AppData\Local\Temp\31676627.od --------- 134
13.03.2011 21:14 C:\Users\fixxxxxi\AppData\Local\Temp\CVR58D3.tmp.cvr --------- 0
13.03.2011 20:52 C:\Users\fixxxxxi\AppData\Local\Temp\30392785.od --------- 134
13.03.2011 20:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC1D1.tmp.cvr --------- 0
13.03.2011 19:11 C:\Users\fixxxxxi\AppData\Local\Temp\24340929.od --------- 134
13.03.2011 19:11 C:\Users\fixxxxxi\AppData\Local\Temp\CVR69C1.tmp.cvr --------- 0
13.03.2011 14:10 C:\Users\fixxxxxi\AppData\Local\Temp\6235781.od --------- 0
13.03.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\341174.od --------- 134
13.03.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR34B6.tmp.cvr --------- 0
13.03.2011 12:26 C:\Users\fixxxxxi\AppData\Local\Temp\div908B.tmp --------- 0
13.03.2011 12:04 C:\Users\fixxxxxi\AppData\Local\Temp\div9B93.tmp --------- 0
13.03.2011 01:00 C:\Users\fixxxxxi\AppData\Local\Temp\16687801.od --------- 134
13.03.2011 01:00 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA2B9.tmp.cvr --------- 0
12.03.2011 22:14 C:\Users\fixxxxxi\AppData\Local\Temp\CVR873A.tmp --------- 0
12.03.2011 20:22 C:\Users\fixxxxxi\AppData\Local\Temp\div9443.tmp --------- 0
12.03.2011 17:05 C:\Users\fixxxxxi\AppData\Local\Temp\13625236.od --------- 134
12.03.2011 17:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE794.tmp.cvr --------- 0
12.03.2011 14:24 C:\Users\fixxxxxi\AppData\Local\Temp\jfs3ynan.bmp --------- 370722
12.03.2011 14:04 C:\Users\fixxxxxi\AppData\Local\Temp\vo6tms62.bmp --------- 129386
12.03.2011 14:03 C:\Users\fixxxxxi\AppData\Local\Temp\f4o3vtuj.bmp --------- 370722
12.03.2011 13:51 C:\Users\fixxxxxi\AppData\Local\Temp\w144p5vd.bmp --------- 40054
12.03.2011 13:51 C:\Users\fixxxxxi\AppData\Local\Temp\6l0506nv.bmp --------- 24390
12.03.2011 13:44 C:\Users\fixxxxxi\AppData\Local\Temp\1601038.od --------- 134
12.03.2011 13:44 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6E0E.tmp.cvr --------- 0
12.03.2011 13:19 C:\Users\fixxxxxi\AppData\Local\Temp\divAD4E.tmp --------- 0
12.03.2011 01:34 C:\Users\fixxxxxi\AppData\Local\Temp\19071574.od --------- 134
12.03.2011 01:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVR247.tmp.cvr --------- 0
12.03.2011 01:34 C:\Users\fixxxxxi\AppData\Local\Temp\19044024.od --------- 134
12.03.2011 01:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVR96B8.tmp.cvr --------- 0
11.03.2011 21:34 C:\Users\fixxxxxi\AppData\Local\Temp\4662620.od --------- 134
11.03.2011 21:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVR255C.tmp.cvr --------- 0
11.03.2011 20:28 C:\Users\fixxxxxi\AppData\Local\Temp\709757.od --------- 134
11.03.2011 20:28 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD47D.tmp.cvr --------- 0
11.03.2011 20:17 C:\Users\fixxxxxi\AppData\Local\Temp\divA1CA.tmp --------- 0
11.03.2011 15:13 C:\Users\fixxxxxi\AppData\Local\Temp\2537387.od --------- 134
11.03.2011 15:13 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB79B.tmp.cvr --------- 0
11.03.2011 14:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9EED.tmp --------- 0
11.03.2011 14:31 C:\Users\fixxxxxi\AppData\Local\Temp\divB3C4.tmp --------- 0
11.03.2011 12:59 C:\Users\fixxxxxi\AppData\Local\Temp\3934392.od --------- 134
11.03.2011 12:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8B8.tmp.cvr --------- 0
11.03.2011 12:40 C:\Users\fixxxxxi\AppData\Local\Temp\Web-Crawl_errors_Nicht_gefunden_www_cheatervz_com_20110311T104052Z.csv --------- 463
11.03.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\2254542.od --------- 134
11.03.2011 12:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR66CE.tmp.cvr --------- 0
11.03.2011 12:24 C:\Users\fixxxxxi\AppData\Local\Temp\divBFB5.tmp --------- 0
11.03.2011 01:09 C:\Users\fixxxxxi\AppData\Local\Temp\jar_cache3246076219259964724.tmp --------- 7756
11.03.2011 01:09 C:\Users\fixxxxxi\AppData\Local\Temp\jar_cache6507239037146717762.tmp --------- 7756
11.03.2011 01:09 C:\Users\fixxxxxi\AppData\Local\Temp\jar_cache8359190864039314451.tmp --------- 7756
11.03.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\45736248.od --------- 134
11.03.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE138.tmp.cvr --------- 0
10.03.2011 22:59 C:\Users\fixxxxxi\AppData\Local\Temp\39909345.od --------- 134
10.03.2011 22:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF7E1.tmp.cvr --------- 0
10.03.2011 22:08 C:\Users\fixxxxxi\AppData\Local\Temp\36840400.od --------- 134
10.03.2011 22:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVR23C0.tmp.cvr --------- 0
10.03.2011 20:25 C:\Users\fixxxxxi\AppData\Local\Temp\30654258.od --------- 134
10.03.2011 20:25 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBF32.tmp.cvr --------- 0
10.03.2011 19:23 C:\Users\fixxxxxi\AppData\Local\Temp\26927192.od --------- 134
10.03.2011 19:23 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE058.tmp.cvr --------- 0
10.03.2011 18:50 C:\Users\fixxxxxi\AppData\Local\Temp\24974168.od --------- 134
10.03.2011 18:50 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1358.tmp.cvr --------- 0
10.03.2011 18:50 C:\Users\fixxxxxi\AppData\Local\Temp\24971813.od --------- 134
10.03.2011 18:50 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA25.tmp.cvr --------- 0
10.03.2011 16:24 C:\Users\fixxxxxi\AppData\Local\Temp\16187708.od --------- 134
10.03.2011 16:24 C:\Users\fixxxxxi\AppData\Local\Temp\CVR13C.tmp.cvr --------- 0
10.03.2011 12:08 C:\Users\fixxxxxi\AppData\Local\Temp\818974.od --------- 134
10.03.2011 12:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVR7F1E.tmp.cvr --------- 0
10.03.2011 11:56 C:\Users\fixxxxxi\AppData\Local\Temp\div3D1E.tmp --------- 0
09.03.2011 11:53 C:\Users\fixxxxxi\AppData\Local\Temp\1879500.od --------- 134
09.03.2011 11:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRADBC.tmp.cvr --------- 0
09.03.2011 11:51 C:\Users\fixxxxxi\AppData\Local\Temp\1774760.od --------- 134
09.03.2011 11:51 C:\Users\fixxxxxi\AppData\Local\Temp\CVR14A8.tmp.cvr --------- 0
09.03.2011 11:22 C:\Users\fixxxxxi\AppData\Local\Temp\div9F98.tmp --------- 0
08.03.2011 23:24 C:\Users\fixxxxxi\AppData\Local\Temp\12077769.od --------- 134
08.03.2011 23:24 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4AC9.tmp.cvr --------- 0
08.03.2011 22:44 C:\Users\fixxxxxi\AppData\Local\Temp\pv3d7740.bmp --------- 1960054
08.03.2011 20:56 C:\Users\fixxxxxi\AppData\Local\Temp\3183169.od --------- 134
08.03.2011 20:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9241.tmp.cvr --------- 0
08.03.2011 20:04 C:\Users\fixxxxxi\AppData\Local\Temp\divF5B.tmp --------- 0
08.03.2011 14:46 C:\Users\fixxxxxi\AppData\Local\Temp\eoubjp3k.bmp --------- 1057090
08.03.2011 14:31 C:\Users\fixxxxxi\AppData\Local\Temp\oqgys6gz.bmp --------- 39938
08.03.2011 14:17 C:\Users\fixxxxxi\AppData\Local\Temp\kwe1jdtb.bmp --------- 83878
08.03.2011 13:40 C:\Users\fixxxxxi\AppData\Local\Temp\4t1452d4.bmp --------- 30246
08.03.2011 13:36 C:\Users\fixxxxxi\AppData\Local\Temp\sjtz5p36.bmp --------- 36634
08.03.2011 13:04 C:\Users\fixxxxxi\AppData\Local\Temp\saslPrep_4760 --------- 0
08.03.2011 12:47 C:\Users\fixxxxxi\AppData\Local\Temp\qiwb6o67.bmp --------- 101238
08.03.2011 12:21 C:\Users\fixxxxxi\AppData\Local\Temp\4764988.od --------- 134
08.03.2011 12:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB53C.tmp.cvr --------- 0
08.03.2011 12:02 C:\Users\fixxxxxi\AppData\Local\Temp\divB99D.tmp --------- 0
08.03.2011 11:04 C:\Users\fixxxxxi\AppData\Local\Temp\157093.od --------- 134
08.03.2011 11:04 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6595.tmp.cvr --------- 0
07.03.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\10853473.od --------- 134
07.03.2011 23:06 C:\Users\fixxxxxi\AppData\Local\Temp\CVR9C61.tmp.cvr --------- 0
07.03.2011 21:13 C:\Users\fixxxxxi\AppData\Local\Temp\4098941.od --------- 134
07.03.2011 21:13 C:\Users\fixxxxxi\AppData\Local\Temp\CVR8B7D.tmp.cvr --------- 0
07.03.2011 20:48 C:\Users\fixxxxxi\AppData\Local\Temp\4.html --------- 0
07.03.2011 20:21 C:\Users\fixxxxxi\AppData\Local\Temp\983243.od --------- 134
07.03.2011 20:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVRCB.tmp.cvr --------- 0
07.03.2011 20:06 C:\Users\fixxxxxi\AppData\Local\Temp\divB460.tmp --------- 0
07.03.2011 16:01 C:\Users\fixxxxxi\AppData\Local\Temp\14198805.od --------- 134
07.03.2011 16:01 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA805.tmp.cvr --------- 0
07.03.2011 15:17 C:\Users\fixxxxxi\AppData\Local\Temp\11589454.od --------- 134
07.03.2011 15:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD74E.tmp.cvr --------- 0
07.03.2011 14:46 C:\Users\fixxxxxi\AppData\Local\Temp\9710204.od --------- 134
07.03.2011 14:46 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2A7C.tmp.cvr --------- 0
07.03.2011 13:47 C:\Users\fixxxxxi\AppData\Local\Temp\2040.html --------- 0
07.03.2011 13:47 C:\Users\fixxxxxi\AppData\Local\Temp\ESE Banlist _ Bannliste .ÿ ¯ ÿNews.htm --------- 0
07.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\statistik.html --------- 0
07.03.2011 12:19 C:\Users\fixxxxxi\AppData\Local\Temp\881390.od --------- 134
07.03.2011 12:19 C:\Users\fixxxxxi\AppData\Local\Temp\CVR72EE.tmp.cvr --------- 0
07.03.2011 12:17 C:\Users\fixxxxxi\AppData\Local\Temp\43A5.tmp --------- 0
07.03.2011 12:06 C:\Users\fixxxxxi\AppData\Local\Temp\divB559.tmp --------- 0
06.03.2011 21:20 C:\Users\fixxxxxi\AppData\Local\Temp\212878.od --------- 134
06.03.2011 21:20 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3F8E.tmp.cvr --------- 0
06.03.2011 21:17 C:\Users\fixxxxxi\AppData\Local\Temp\div8FC0.tmp --------- 0
06.03.2011 09:55 C:\Users\fixxxxxi\AppData\Local\Temp\709196.od --------- 134
06.03.2011 09:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD24C.tmp --------- 0
06.03.2011 09:44 C:\Users\fixxxxxi\AppData\Local\Temp\divD430.tmp --------- 0
06.03.2011 00:15 C:\Users\fixxxxxi\AppData\Local\Temp\8657993.od --------- 134
06.03.2011 00:15 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1C49.tmp.cvr --------- 0
05.03.2011 22:29 C:\Users\fixxxxxi\AppData\Local\Temp\2254432.od --------- 134
05.03.2011 22:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6660.tmp --------- 0
05.03.2011 21:52 C:\Users\fixxxxxi\AppData\Local\Temp\div9943.tmp --------- 0
05.03.2011 11:46 C:\Users\fixxxxxi\AppData\Local\Temp\divBBDF.tmp --------- 0
05.03.2011 11:05 C:\Users\fixxxxxi\AppData\Local\Temp\1239864.od --------- 134
05.03.2011 11:05 C:\Users\fixxxxxi\AppData\Local\Temp\CVREB38.tmp.cvr --------- 0
05.03.2011 02:37 C:\Users\fixxxxxi\AppData\Local\Temp\7009436.od --------- 134
05.03.2011 02:37 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF48D.tmp.cvr --------- 0
05.03.2011 02:37 C:\Users\fixxxxxi\AppData\Local\Temp\7009171.od --------- 134
05.03.2011 02:37 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF393.tmp.cvr --------- 0
05.03.2011 02:29 C:\Users\fixxxxxi\AppData\Local\Temp\6545084.od --------- 134
05.03.2011 02:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDEBC.tmp.cvr --------- 0
05.03.2011 02:29 C:\Users\fixxxxxi\AppData\Local\Temp\6544912.od --------- 134
05.03.2011 02:29 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDE10.tmp.cvr --------- 0
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\6477582.od --------- 134
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD6FF.tmp.cvr --------- 0
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\6477379.od --------- 134
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD643.tmp.cvr --------- 0
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\6440204.od --------- 134
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\CVR450C.tmp.cvr --------- 0
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\6440033.od --------- 134
05.03.2011 02:28 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4461.tmp.cvr --------- 0
05.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\6350270.od --------- 134
05.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE5BE.tmp.cvr --------- 0
05.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\6349786.od --------- 134
05.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE3DA.tmp.cvr --------- 0
05.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\6338351.od --------- 134
05.03.2011 02:26 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB72F.tmp.cvr --------- 0
05.03.2011 00:51 C:\Users\fixxxxxi\AppData\Local\Temp\615517.od --------- 134
05.03.2011 00:51 C:\Users\fixxxxxi\AppData\Local\Temp\CVR645D.tmp --------- 0
05.03.2011 00:41 C:\Users\fixxxxxi\AppData\Local\Temp\div8362.tmp --------- 0
04.03.2011 11:31 C:\Users\fixxxxxi\AppData\Local\Temp\524958.od --------- 134
04.03.2011 11:31 C:\Users\fixxxxxi\AppData\Local\Temp\CVR29E.tmp.cvr --------- 0
04.03.2011 11:23 C:\Users\fixxxxxi\AppData\Local\Temp\div88CE.tmp --------- 0
03.03.2011 22:00 C:\Users\fixxxxxi\AppData\Local\Temp\4075947.od --------- 134
03.03.2011 22:00 C:\Users\fixxxxxi\AppData\Local\Temp\CVR31AB.tmp.cvr --------- 0
03.03.2011 20:55 C:\Users\fixxxxxi\AppData\Local\Temp\203019.od --------- 134
03.03.2011 20:55 C:\Users\fixxxxxi\AppData\Local\Temp\CVR18FC.tmp.cvr --------- 0
03.03.2011 20:52 C:\Users\fixxxxxi\AppData\Local\Temp\div8D42.tmp --------- 0
03.03.2011 07:01 C:\Users\fixxxxxi\AppData\Local\Temp\niy5wm5p.lqv --------- 5546
03.03.2011 06:57 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-17 --------- 5705268
03.03.2011 06:53 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-16 --------- 5705268
03.03.2011 06:52 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-15 --------- 5830996
03.03.2011 06:50 C:\Users\fixxxxxi\AppData\Local\Temp\5bxoe2kt.nml --------- 5546
03.03.2011 06:34 C:\Users\fixxxxxi\AppData\Local\Temp\830237.od --------- 134
03.03.2011 06:34 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAB1D.tmp.cvr --------- 0
03.03.2011 06:21 C:\Users\fixxxxxi\AppData\Local\Temp\divDF75.tmp --------- 0
02.03.2011 20:32 C:\Users\fixxxxxi\AppData\Local\Temp\kji32wzo.bep --------- 5546
02.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\mbmkxymd.jzq --------- 6802
02.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\eww52dll.u1v --------- 6357
02.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\2oy1a223.kof --------- 5328
02.03.2011 18:16 C:\Users\fixxxxxi\AppData\Local\Temp\531635.od --------- 134
02.03.2011 18:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1CB3.tmp.cvr --------- 0
02.03.2011 18:14 C:\Users\fixxxxxi\AppData\Local\Temp\407459.od --------- 134
02.03.2011 18:14 C:\Users\fixxxxxi\AppData\Local\Temp\CVR37A3.tmp.cvr --------- 0
02.03.2011 18:07 C:\Users\fixxxxxi\AppData\Local\Temp\div8361.tmp --------- 0
02.03.2011 17:27 C:\Users\fixxxxxi\AppData\Local\Temp\22444019.od --------- 134
02.03.2011 17:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVR77F3.tmp.cvr --------- 0
02.03.2011 17:27 C:\Users\fixxxxxi\AppData\Local\Temp\22441352.od --------- 134
02.03.2011 17:27 C:\Users\fixxxxxi\AppData\Local\Temp\CVR6D88.tmp.cvr --------- 0
02.03.2011 15:35 C:\Users\fixxxxxi\AppData\Local\Temp\15732264.od --------- 134
02.03.2011 15:35 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE28.tmp.cvr --------- 0
02.03.2011 14:43 C:\Users\fixxxxxi\AppData\Local\Temp\24huyfdn.bmp --------- 765654
02.03.2011 14:41 C:\Users\fixxxxxi\AppData\Local\Temp\xumfy2mi.bmp --------- 946454
02.03.2011 13:02 C:\Users\fixxxxxi\AppData\Local\Temp\6506380.od --------- 134
02.03.2011 13:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR478C.tmp.cvr --------- 0
02.03.2011 13:02 C:\Users\fixxxxxi\AppData\Local\Temp\6506068.od --------- 134
02.03.2011 13:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVR4654.tmp.cvr --------- 0
02.03.2011 12:57 C:\Users\fixxxxxi\AppData\Local\Temp\6202209.od --------- 134
02.03.2011 12:57 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA361.tmp.cvr --------- 0
02.03.2011 12:57 C:\Users\fixxxxxi\AppData\Local\Temp\6202038.od --------- 134
02.03.2011 12:57 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA2B6.tmp.cvr --------- 0
02.03.2011 12:56 C:\Users\fixxxxxi\AppData\Local\Temp\6176344.od --------- 134
02.03.2011 12:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3E58.tmp.cvr --------- 0
02.03.2011 12:56 C:\Users\fixxxxxi\AppData\Local\Temp\6176173.od --------- 134
02.03.2011 12:56 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3DAD.tmp.cvr --------- 0
02.03.2011 12:54 C:\Users\fixxxxxi\AppData\Local\Temp\6021482.od --------- 134
02.03.2011 12:54 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE16A.tmp.cvr --------- 0
02.03.2011 12:54 C:\Users\fixxxxxi\AppData\Local\Temp\6021326.od --------- 134
02.03.2011 12:54 C:\Users\fixxxxxi\AppData\Local\Temp\CVRE0CE.tmp.cvr --------- 0
02.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\6012621.od --------- 134
02.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBECD.tmp.cvr --------- 0
02.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\6012450.od --------- 134
02.03.2011 12:53 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBE22.tmp.cvr --------- 0
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\5942124.od --------- 134
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAB6C.tmp.cvr --------- 0
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\5941953.od --------- 134
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVRAAC1.tmp.cvr --------- 0
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\5910534.od --------- 134
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVR3006.tmp.cvr --------- 0
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\5909068.od --------- 134
02.03.2011 12:52 C:\Users\fixxxxxi\AppData\Local\Temp\CVR2A4C.tmp.cvr --------- 0
02.03.2011 11:44 C:\Users\fixxxxxi\AppData\Local\Temp\divB28D.tmp --------- 0
02.03.2011 11:25 C:\Users\fixxxxxi\AppData\Local\Temp\712253.od --------- 134
02.03.2011 11:25 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDE3D.tmp.cvr --------- 0
02.03.2011 01:21 C:\Users\fixxxxxi\AppData\Local\Temp\20220334.od --------- 134
02.03.2011 01:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVR89AE.tmp.cvr --------- 0
02.03.2011 01:21 C:\Users\fixxxxxi\AppData\Local\Temp\20220147.od --------- 134
02.03.2011 01:21 C:\Users\fixxxxxi\AppData\Local\Temp\CVR88F3.tmp.cvr --------- 0
02.03.2011 01:17 C:\Users\fixxxxxi\AppData\Local\Temp\19970795.od --------- 134
02.03.2011 01:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBAEB.tmp.cvr --------- 0
02.03.2011 01:17 C:\Users\fixxxxxi\AppData\Local\Temp\19970483.od --------- 134
02.03.2011 01:17 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB9B3.tmp.cvr --------- 0
02.03.2011 01:16 C:\Users\fixxxxxi\AppData\Local\Temp\19900751.od --------- 134
02.03.2011 01:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA94F.tmp.cvr --------- 0
02.03.2011 01:16 C:\Users\fixxxxxi\AppData\Local\Temp\19900517.od --------- 134
02.03.2011 01:16 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA865.tmp.cvr --------- 0
02.03.2011 01:13 C:\Users\fixxxxxi\AppData\Local\Temp\19715843.od --------- 134
02.03.2011 01:13 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD703.tmp.cvr --------- 0
02.03.2011 01:13 C:\Users\fixxxxxi\AppData\Local\Temp\19715624.od --------- 134
02.03.2011 01:13 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD628.tmp.cvr --------- 0
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\19655423.od --------- 134
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVREAFF.tmp.cvr --------- 0
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\19655221.od --------- 134
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVREA35.tmp.cvr --------- 0
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\19638466.od --------- 134
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA8A3.tmp.cvr --------- 0
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\19638263.od --------- 134
02.03.2011 01:12 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA7F7.tmp.cvr --------- 0
02.03.2011 01:11 C:\Users\fixxxxxi\AppData\Local\Temp\19575223.od --------- 134
02.03.2011 01:11 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB1B7.tmp.cvr --------- 0
02.03.2011 01:11 C:\Users\fixxxxxi\AppData\Local\Temp\19574958.od --------- 134
02.03.2011 01:11 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB0AE.tmp.cvr --------- 0
02.03.2011 01:08 C:\Users\fixxxxxi\AppData\Local\Temp\19396852.od --------- 134
02.03.2011 01:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF8F4.tmp.cvr --------- 0
02.03.2011 01:08 C:\Users\fixxxxxi\AppData\Local\Temp\19396618.od --------- 134
02.03.2011 01:08 C:\Users\fixxxxxi\AppData\Local\Temp\CVRF80A.tmp.cvr --------- 0
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\19120324.od --------- 134
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC0B5.tmp.cvr --------- 0
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\19120137.od --------- 134
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVRC009.tmp.cvr --------- 0
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\19112493.od --------- 134
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA22D.tmp.cvr --------- 0
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\19112275.od --------- 134
02.03.2011 01:03 C:\Users\fixxxxxi\AppData\Local\Temp\CVRA153.tmp.cvr --------- 0
02.03.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\19061060.od --------- 134
02.03.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD944.tmp.cvr --------- 0
02.03.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\19060841.od --------- 134
02.03.2011 01:02 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD869.tmp.cvr --------- 0
02.03.2011 00:59 C:\Users\fixxxxxi\AppData\Local\Temp\18864686.od --------- 134
02.03.2011 00:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVRDA1E.tmp.cvr --------- 0
02.03.2011 00:59 C:\Users\fixxxxxi\AppData\Local\Temp\18864498.od --------- 134
02.03.2011 00:59 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD972.tmp.cvr --------- 0
02.03.2011 00:58 C:\Users\fixxxxxi\AppData\Local\Temp\18791942.od --------- 134
02.03.2011 00:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBDF7.tmp.cvr --------- 0
02.03.2011 00:58 C:\Users\fixxxxxi\AppData\Local\Temp\18791443.od --------- 134
02.03.2011 00:58 C:\Users\fixxxxxi\AppData\Local\Temp\CVRBC13.tmp.cvr --------- 0
02.03.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\17521782.od --------- 134
02.03.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\CVR5C67.tmp.cvr --------- 0
02.03.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\17520097.od --------- 134
02.03.2011 00:36 C:\Users\fixxxxxi\AppData\Local\Temp\CVR55D2.tmp.cvr --------- 0
01.03.2011 23:00 C:\Users\fixxxxxi\AppData\Local\Temp\11734301.od --------- 134
01.03.2011 23:00 C:\Users\fixxxxxi\AppData\Local\Temp\CVRD1D.tmp.cvr --------- 0
01.03.2011 22:14 C:\Users\fixxxxxi\AppData\Local\Temp\8983816.od --------- 134
01.03.2011 22:14 C:\Users\fixxxxxi\AppData\Local\Temp\CVR1508.tmp.cvr --------- 0
01.03.2011 21:36 C:\Users\fixxxxxi\AppData\Local\Temp\6687544.od --------- 134
01.03.2011 21:36 C:\Users\fixxxxxi\AppData\Local\Temp\CVRB38.tmp.cvr --------- 0
01.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-14 --------- 2696640
01.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-13 --------- 2700492
01.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-12 --------- 2700492
01.03.2011 20:29 C:\Users\fixxxxxi\AppData\Local\Temp\clipboardcache-11 --------- 2700492
----------------------------------------
C:\Program Files
02.06.2011 11:53 C:\Program Files\CCleaner --------- 0
01.06.2011 12:38 C:\Program Files\Common Files --------- 4096
01.06.2011 12:38 C:\Program Files\Defraggler --------- 4096
01.06.2011 12:38 C:\Program Files\DivX --------- 0
01.06.2011 12:38 C:\Program Files\DIFX --------- 0
01.06.2011 12:38 C:\Program Files\EslWire --------- 0
01.06.2011 12:38 C:\Program Files\Logitech --------- 4096
01.06.2011 12:38 C:\Program Files\Internet Explorer --------- 4096
01.06.2011 12:38 C:\Program Files\Microsoft Games --------- 4096
01.06.2011 12:38 C:\Program Files\Realtek --------- 0
01.06.2011 12:38 C:\Program Files\TeamSpeak 3 Client --------- 8192
01.06.2011 12:38 C:\Program Files\Windows Sidebar --------- 4096
01.06.2011 12:38 C:\Program Files\WinRAR --------- 4096
30.04.2011 01:08 C:\Program Files\Windows Mail --------- 4096
30.04.2011 01:08 C:\Program Files\DVD Maker --------- 4096
30.04.2011 01:08 C:\Program Files\Windows Portable Devices --------- 0
30.04.2011 01:08 C:\Program Files\Windows Media Player --------- 4096
30.04.2011 01:08 C:\Program Files\Windows Photo Viewer --------- 4096
30.04.2011 01:08 C:\Program Files\Windows Defender --------- 4096
25.12.2010 00:52 C:\Program Files\ATI Technologies --------- 0
19.06.2010 19:00 C:\Program Files\VMLite --------- 0
20.01.2010 01:40 C:\Program Files\Canon --------- 0
20.01.2010 01:39 C:\Program Files\CanonBJ --------- 0
18.01.2010 23:08 C:\Program Files\Microsoft Office --------- 0
18.01.2010 22:55 C:\Program Files\ATI --------- 0
18.01.2010 22:31 C:\Program Files\Windows NT --------- 4096
18.01.2010 22:31 C:\Program Files\Gemeinsame Dateien --------- 0
14.07.2009 07:32 C:\Program Files\Reference Assemblies --------- 0
14.07.2009 07:32 C:\Program Files\MSBuild --------- 0
14.07.2009 07:09 C:\Program Files\Uninstall Information --------- 0
14.07.2009 06:54 C:\Program Files\desktop.ini --------- 174
----------------------------------------
C:\ProgramData\..
fixxxxxi
Public
Mcx1-FIXXXXXI-PC
Default
All Users
Default User
desktop.ini
----------------------------------------
C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate.adobe.com:443
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 adobeereg.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate.adobe.com
----------------------------------------
Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 24 K
System 4 Services 0 1.660 K
smss.exe 356 Services 0 1.176 K
csrss.exe 508 Services 0 4.824 K
wininit.exe 572 Services 0 4.948 K
csrss.exe 600 Console 1 8.024 K
winlogon.exe 652 Console 1 7.708 K
services.exe 700 Services 0 9.740 K
lsass.exe 708 Services 0 13.740 K
lsm.exe 720 Services 0 6.304 K
svchost.exe 828 Services 0 10.628 K
svchost.exe 916 Services 0 8.844 K
atiesrxx.exe 992 Services 0 4.596 K
svchost.exe 384 Services 0 24.952 K
svchost.exe 512 Services 0 142.424 K
svchost.exe 1092 Services 0 42.772 K
svchost.exe 1220 Services 0 17.872 K
WUDFHost.exe 1316 Services 0 9.488 K
atieclxx.exe 1412 Console 1 6.216 K
WUDFHost.exe 1508 Services 0 8.152 K
svchost.exe 1572 Services 0 19.048 K
spoolsv.exe 1720 Services 0 14.264 K
svchost.exe 1756 Services 0 23.740 K
aavus.exe 1900 Services 0 5.172 K
taskhost.exe 1940 Console 1 15.268 K
dwm.exe 1452 Console 1 29.000 K
explorer.exe 1800 Console 1 64.508 K
svchost.exe 1620 Services 0 14.208 K
avp.exe 2076 Services 0 157.880 K
svchost.exe 2244 Services 0 20.644 K
ijplmsvc.exe 2308 Services 0 3.736 K
svchost.exe 2352 Services 0 5.028 K
LVPrcSrv.exe 2428 Services 0 6.244 K
LVPrS64H.exe 2464 Services 0 4.400 K
MDM.EXE 2504 Services 0 5.548 K
PassThruSvr.exe 2552 Services 0 3.296 K
svchost.exe 2664 Services 0 16.936 K
TeamViewer_Service.exe 2756 Services 0 3.760 K
VMLiteService.exe 2804 Services 0 6.304 K
WLIDSVC.EXE 3008 Services 0 15.132 K
RAVCpl64.exe 3044 Console 1 10.816 K
LGDevAgt.exe 2348 Console 1 7.656 K
LCDMon.exe 2592 Console 1 14.628 K
LGDCore.exe 2956 Console 1 43.556 K
ICQ.exe 1428 Console 1 22.880 K
G35.exe 1516 Console 1 20.088 K
LVCOMSX.EXE 848 Console 1 5.712 K
avp.exe 1376 Console 1 5.876 K
mbamgui.exe 1076 Console 1 7.480 K
KHALMNPR.exe 1984 Console 1 12.172 K
MOM.exe 3268 Console 1 6.196 K
SetPointII.exe 3664 Console 1 13.800 K
WLIDSVCM.EXE 3860 Services 0 3.736 K
wmplayer.exe 3952 Console 1 46.996 K
CCC.exe 3444 Console 1 10.136 K
taskhost.exe 3656 Services 0 13.084 K
SearchIndexer.exe 4708 Services 0 77.404 K
svchost.exe 3236 Services 0 29.612 K
WUDFHost.exe 5036 Services 0 6.428 K
svchost.exe 4960 Services 0 5.648 K
wmpnetwk.exe 2532 Services 0 8.636 K
SearchProtocolHost.exe 1392 Services 0 10.792 K
svchost.exe 5216 Services 0 16.212 K
dllhost.exe 5936 Services 0 7.348 K
GoogleUpdate.exe 4776 Services 0 2.608 K
mbamservice.exe 4844 Services 0 45.072 K
NASvc.exe 5592 Services 0 5.860 K
firefox.exe 4652 Console 1 178.608 K
OUTLOOK.EXE 2900 Console 1 102.328 K
OTL.exe 2788 Console 1 23.316 K
audiodg.exe 4108 Services 0 15.580 K
cmd.exe 2912 Console 1 4.004 K
conhost.exe 592 Console 1 5.660 K
SearchFilterHost.exe 5724 Services 0 16.792 K
dllhost.exe 5484 Console 1 6.100 K
tasklist.exe 5452 Console 1 6.188 K
WmiPrvSE.exe 6056 Services 0 6.832 K
***** Ende des Scans 02.06.2011 um 11:56:35,66 ***
|
| | #5 |
| | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar ccleaner - install.txt Code:
ATTFilter AAVUpdateManager Akademische Arbeitsgemeinschaft 07.04.2011 14,5MB 12.00.0000
AC3Filter (remove only) 11.12.2010
Adobe AIR Adobe Systems Inc. 25.03.2011 2.5.1.17730
Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 13.05.2010 10.0.45.2
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 17.05.2011 6,00MB 10.3.181.14
Adobe Reader 9.3.3 - Deutsch Adobe Systems Incorporated 09.07.2010 285MB 9.3.3
Agent Ransack Version 1.7.3 06.06.2010
Akamai NetSession Interface 16.05.2011
ANNO 1404 Ubisoft 21.03.2010 1.02.0000
ATI Catalyst Install Manager ATI Technologies, Inc. 23.12.2010 22,4MB 3.0.804.0
Auto Shutdown Entru 29.10.2010 1,11MB 1.0.0
AVIConverter 5.1.6 12.01.2011 5.1.6
BILD-Steuer 2010 Akademische Arbeitsgemeinschaft Verlag 07.04.2011 231MB 15.13
Call of Duty: Black Ops Treyarch 21.11.2010
Call of Duty: Black Ops - Multiplayer Treyarch 21.11.2010
Canon MX310 series 19.01.2010
Canon MX310 series Benutzerregistrierung 19.01.2010
Canon My Printer 19.01.2010
CCleaner Piriform 01.06.2011 3.07
CheckDrive Abelssoft 03.05.2011 28,2MB 3.0
Counter-Strike Valve 06.03.2010
Counter-Strike: Source Valve 18.01.2010
Day of Defeat: Source Valve 09.04.2010
Defraggler Piriform 31.03.2011 2.03
DiRT 2 Codemasters 18.01.2010
DivX-Setup DivX, LLC 06.04.2011 2.4.1.4
Easy Macro Recorder 3.83 GoldSolution Software, Inc. 26.07.2010
ESE Account Manager (remove only) 17.01.2010
ESE Account Manager 2.0.0.4 ESE-Protect 15.05.2011 2.0.0.4
ESL Wire 1.9.2 Turtle Entertainment GmbH 10.01.2011 61,8MB
EVEREST Ultimate Edition v4.60 Lavalys, Inc. 18.01.2010 4.60
FileZilla Client 3.4.0 08.05.2011 3.4.0
Free YouTube to MP3 Converter version 3.8 DVDVideoSoft Limited. 05.08.2010 32,1MB
Google Earth Google 25.05.2011 84,6MB 6.0.3.2197
Half-Life 2: Deathmatch Valve 11.12.2010
HijackThis 2.0.2 TrendMicro 18.01.2010 2.0.2
HTC BMP USB Driver HTC 25.03.2011 0,28MB 1.0.5375
HTC Driver Installer HTC Corporation 25.03.2011 1,87MB 3.0.0.005
HTC Sync HTC 25.03.2011 36,4MB 3.0.5511
ICQ7.5 ICQ 29.04.2011 7.5
J2SE Runtime Environment 5.0 Update 17 Sun Microsystems, Inc. 18.04.2010 146,8MB 1.5.0.170
Java(TM) 6 Update 15 Sun Microsystems, Inc. 31.01.2010 95,0MB 6.0.150
JDownloader AppWork UG (haftungsbeschränkt) 10.12.2010
Kaspersky Internet Security 2011 Kaspersky Lab 14.09.2010 11.0.1.400
LiveZilla LiveZilla GmbH 01.03.2011
Logitech G35 Logitech 15.03.2010 5,05MB 1.0.152
Logitech GamePanel Software 3.03.133 Logitech Inc. 24.04.2010 17,9MB 3.03.133
Logitech SetPoint 6.0 Logitech 22.06.2010 39,1MB 6.00.68
Logitech Webcam Software Logitech Inc. 31.03.2010 44,4MB 12.10.1113
Logitech Webcam Software-Treiberpaket Logitech Inc. 31.03.2010 12.10.1110
MAGIX Video deLuxe 2005 PLUS MAGIX AG 14.02.2010 4.5.0.76
Malwarebytes' Anti-Malware Version 1.51.0.1200 Malwarebytes Corporation 01.06.2011 13,8MB 1.51.0.1200
Media Player Codec Pack 3.9.6 Media Player Codec Pack 11.12.2010
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 26.06.2010 38,8MB 4.0.30319
Microsoft Chart Controls for Microsoft .NET Framework 3.5 Microsoft Corporation 06.04.2010 6,92MB 3.5.0.0
Microsoft Games for Windows - LIVE Redistributable Microsoft Corporation 05.05.2011 31,3MB 3.5.88.0
Microsoft Games for Windows Marketplace Microsoft Corporation 05.05.2011 6,04MB 3.5.50.0
Microsoft Office 2007 Primary Interop Assemblies Microsoft Corporation 10.05.2011 15,1MB 12.0.4518.1014
Microsoft Office Enterprise 2007 Microsoft Corporation 18.01.2010 12.0.6425.1000
Microsoft Office FrontPage 2003 Microsoft Corporation 14.04.2011 367MB 11.0.8173.0
Microsoft Office Live Add-in 1.5 Microsoft Corporation 25.05.2010 0,50MB 2.0.4024.1
Microsoft Silverlight Microsoft Corporation 21.04.2011 154,1MB 4.0.60310.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 18.01.2010 0,25MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 25.05.2010 2,69MB 8.0.59193
Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 13.01.2011 0,61MB 8.0.59192
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 Microsoft Corporation 28.04.2011 0,57MB 8.0.51011
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 07.04.2010 0,20MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 Microsoft Corporation 28.04.2011 0,77MB 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Corporation 28.04.2011 0,58MB 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 17.01.2010 0,77MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 17.01.2010 0,77MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 26.09.2010 1,42MB 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 06.04.2010 0,58MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 13.01.2011 0,57MB 9.0.30729.4148
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 Microsoft Corporation 28.04.2011 13,7MB 10.0.30319
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Microsoft Corporation 26.10.2010 10.0.30319
Mozilla Firefox 4.0.1 (x86 de) Mozilla 01.05.2011 30,7MB 4.0.1
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 15.02.2010 1,28MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 15.02.2010 1,33MB 4.20.9876.0
MSXML 4.0 SP3 Parser Microsoft Corporation 25.03.2011 1,48MB 4.30.2100.0
MSXML 4.0 SP3 Parser (KB973685) Microsoft Corporation 25.03.2011 1,53MB 4.30.2107.0
MyFreeCodec 04.08.2010
Nero BackItUp 10 Nero AG 13.01.2011 109,4MB 5.6.11000.11.100
Nero Burning ROM 10 Nero AG 13.01.2011 167,7MB 10.2.11000.12.100
Nero BurnRights 10 Nero AG 13.01.2011 6,14MB 4.2.10300.0.102
Nero DiscSpeed 10 Nero AG 13.01.2011 7,22MB 6.2.10300.1.100
Nero Express 10 Nero AG 13.01.2011 164,8MB 10.2.11100.12.100
Nero InfoTool 10 Nero AG 13.01.2011 8,07MB 7.2.10300.5.100
Nero Multimedia Suite 10 Nero AG 13.01.2011 1.590MB 10.5.10500
Nero Recode 10 Nero AG 13.01.2011 92,3MB 4.8.10400.3.100
Nero RescueAgent 10 Nero AG 13.01.2011 6,53MB 3.2.10600.7.100
Nero SoundTrax 10 Nero AG 13.01.2011 95,0MB 4.8.10200.1.100
Nero StartSmart 10 Nero AG 13.01.2011 142,6MB 10.2.11100.10.100
Nero Update Nero AG 13.01.2011 1,44MB 1.0.0018
Nero Vision 10 Nero AG 13.01.2011 223MB 7.2.14700.9.100
Nero WaveEditor 10 Nero AG 13.01.2011 76,4MB 5.8.10400.2.100
NNScript ESNation 19.06.2010 4.22
Opera 11.10 Opera Software ASA 06.05.2011 11.10.2092
Paragon Partition Manager™ 11 Professional Paragon Software 13.01.2011 144,8MB 90.00.0003
PDF24 Creator 2.8.5 PDF24.org 21.09.2010
PIXMA Extended Survey Program 19.01.2010
PSPad editor Jan Fiala 25.01.2010
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 17.01.2010 6.0.1.5780
SAMSUNG USB Driver for Mobile Phones SAMSUNG Electronics Co., Ltd. 24.03.2011 21,3MB 1.3.2250.0
ScanRn/ScanRnServer 02.05.2011
Source SDK Base 2006 Valve 11.12.2010
Steam Valve Corporation 17.01.2010 1,49MB 1.0.0.0
Tactical Ops Infogrames 06.04.2010
TeamSpeak 2 RC2 Dominating Bytes Design 18.01.2010 2.0.32.60
TeamSpeak 3 Client TeamSpeak Systems GmbH 17.01.2010
TeamViewer 5 TeamViewer GmbH 18.01.2010 5.0.7687
TerraTec Grabby V5.09.0813.00 10.10.2010 5.09.0813.00
Ulead GIF Animator 5 Ulead System 18.01.2010
Uninstall 1.0.0.1 05.08.2010 10,6MB
Update Manager B08.1027.1 GIGABYTE 17.01.2010 4,17MB 1.00.0000
Vertus Fluid Mask 3 3.0.2 08.08.2010 3.0.2
VLC media player 1.0.5 VideoLAN Team 06.05.2010 1.0.5
VMLite Workstation VMLite 18.06.2010 60,7MB 3.1.2
Windows Live Essentials Microsoft Corporation 16.12.2010 15.4.3508.1109
Windows Media Center Add-in for Silverlight Microsoft Corporation 21.05.2010 0,24MB 4.7.2.0
WinRAR 18.01.2010
|
| | #6 |
| | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar OTL.txt OTL Logfile: OTL EXTRAS Logfile: Code:
ATTFilter OTL logfile created on: 02.06.2011 11:48:58 - Run 1 OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\fixxxxxi\Desktop 64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 50,27% Memory free 8,00 Gb Paging File | 5,72 Gb Available in Paging File | 71,58% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 146,48 Gb Total Space | 48,64 Gb Free Space | 33,21% Space Free | Partition Type: NTFS Drive D: | 97,65 Gb Total Space | 95,87 Gb Free Space | 98,18% Space Free | Partition Type: NTFS Drive E: | 53,94 Gb Total Space | 20,65 Gb Free Space | 38,28% Space Free | Partition Type: NTFS Computer Name: FIXXXXXI-PC | User Name: fixxxxxi | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.06.02 11:47:39 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\fixxxxxi\Desktop\OTL.exe PRC - [2011.05.29 09:11:28 | 000,449,584 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2011.05.29 09:11:28 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011.05.02 11:55:26 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2011.05.01 16:16:18 | 000,124,216 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.5\ICQ.exe PRC - [2010.11.20 14:17:56 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe PRC - [2010.09.16 15:06:22 | 000,080,896 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe PRC - [2010.09.16 00:12:16 | 000,352,976 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe PRC - [2010.05.04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe PRC - [2010.01.12 16:57:44 | 000,185,640 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe PRC - [2009.10.07 01:47:22 | 000,125,464 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe PRC - [2009.06.30 10:50:42 | 001,811,728 | ---- | M] (Logitech(c)) -- C:\Program Files (x86)\Logitech\G35\G35.exe PRC - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () -- C:\Program Files (x86)\AAVUpdateManager\aavus.exe PRC - [2007.04.13 09:20:22 | 000,097,432 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE PRC - [2005.12.09 15:32:18 | 000,225,280 | ---- | M] (Logitech Inc.) -- C:\Windows\SysWOW64\LVCOMSX.EXE ========== Modules (SafeList) ========== MOD - [2011.06.02 11:47:39 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\fixxxxxi\Desktop\OTL.exe MOD - [2010.11.20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010.03.03 06:12:12 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2010.01.29 23:18:20 | 000,357,456 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV:64bit: - [2009.12.07 12:34:22 | 000,426,584 | ---- | M] (VMLite, Inc.) [Auto | Running] -- C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe -- (VMLiteService) SRV:64bit: - [2009.10.07 01:47:10 | 000,191,000 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64) SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009.07.14 03:41:19 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lpdsvc.dll -- (LPDSVC) SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2011.05.29 09:11:28 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011.05.17 12:09:15 | 003,275,864 | ---- | M] () [Auto | Running] -- C:/Program Files (x86)/Common Files/Akamai/netsession_win_8832f4b.dll -- (Akamai) SRV - [2010.11.21 19:00:48 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010.09.16 15:06:22 | 000,080,896 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service) SRV - [2010.09.16 00:12:16 | 000,352,976 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe -- (AVP) SRV - [2010.05.04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.01.12 16:57:44 | 000,185,640 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5) SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\AAVUpdateManager\aavus.exe -- (AAV UpdateService) SRV - [2007.04.13 09:20:22 | 000,097,432 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC) SRV - [2005.12.09 15:37:42 | 000,081,920 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- c:\program files (x86)\common files\logitech\lvmvfm\LVPrcSrv.exe -- (LVPrcSrv) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.05.29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2011.05.22 23:23:55 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pssdk42.sys -- (PSSDK42) DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.04 17:11:16 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk) DRV:64bit: - [2011.01.03 10:38:36 | 000,177,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm) DRV:64bit: - [2011.01.03 10:38:36 | 000,157,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) DRV:64bit: - [2011.01.03 10:38:36 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter) DRV:64bit: - [2010.12.21 07:55:02 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm) DRV:64bit: - [2010.12.21 07:55:02 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM) DRV:64bit: - [2010.12.21 07:55:02 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl) DRV:64bit: - [2010.12.08 12:53:38 | 000,169,656 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC) DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.09.16 00:12:16 | 000,556,120 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:64bit: - [2010.09.15 10:42:12 | 000,020,552 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv) DRV:64bit: - [2010.06.25 17:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot) DRV:64bit: - [2010.06.09 17:44:00 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2) DRV:64bit: - [2010.06.09 17:43:56 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1) DRV:64bit: - [2010.06.07 17:16:24 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1) DRV:64bit: - [2010.05.20 16:26:48 | 000,037,392 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3) DRV:64bit: - [2010.04.22 19:07:36 | 000,027,736 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:64bit: - [2010.03.22 17:41:37 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:64bit: - [2010.03.22 17:41:36 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:64bit: - [2010.03.03 06:23:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:64bit: - [2010.03.03 06:23:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag) DRV:64bit: - [2010.03.03 05:07:32 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2010.01.19 01:17:02 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2010.01.11 11:52:28 | 000,147,560 | ---- | M] (VMLite, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmlitediskmp.sys -- (vmlitediskmp) DRV:64bit: - [2009.12.06 13:14:36 | 000,014,936 | ---- | M] (VMLite, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vmlitedrv.sys -- (vmlitedrv) DRV:64bit: - [2009.12.06 13:05:58 | 000,147,928 | ---- | M] (VMLite, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:64bit: - [2009.11.10 13:53:16 | 000,058,384 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:64bit: - [2009.11.10 13:53:00 | 000,056,336 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:64bit: - [2009.11.10 11:44:34 | 000,655,424 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emBDA64.sys -- (USB28xxBGA) DRV:64bit: - [2009.11.10 11:44:34 | 000,624,448 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emOEM64.sys -- (USB28xxOEM) DRV:64bit: - [2009.11.02 20:27:10 | 000,022,544 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:64bit: - [2009.11.01 20:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64) DRV:64bit: - [2009.10.27 12:10:18 | 000,030,208 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motmodem.sys -- (motmodem) DRV:64bit: - [2009.10.07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon) DRV:64bit: - [2009.10.07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64) DRV:64bit: - [2009.07.14 15:36:28 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.19 17:07:44 | 000,020,992 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgp.sys -- (motccgp) DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009.06.10 22:35:53 | 000,051,712 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rtnic64.sys -- (RTL8023x64) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.28 12:07:14 | 000,376,848 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfSBVMamd64.sys -- (LADF_SBVM) DRV:64bit: - [2009.05.28 12:07:14 | 000,061,712 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfDHP2amd64.sys -- (LADF_DHP2) DRV:64bit: - [2009.05.08 11:56:26 | 000,053,632 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motodrv.sys -- (MotDev) DRV:64bit: - [2009.03.02 00:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009.01.29 17:18:12 | 000,009,216 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgpfl.sys -- (motccgpfl) DRV:64bit: - [2008.12.25 11:30:52 | 000,190,496 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:64bit: - [2008.09.17 15:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64) DRV:64bit: - [2007.05.11 18:30:50 | 000,050,208 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64) DRV:64bit: - [2007.05.11 17:31:02 | 003,612,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech QuickCam Pro 5000(UVC) DRV:64bit: - [2007.05.11 17:29:08 | 001,361,952 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvpopf64.sys -- (lvpopf64) DRV - [2010.11.08 14:51:47 | 000,023,080 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2010.03.04 00:56:04 | 000,002,996 | ---- | M] (Buzz) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\hwinterface.sys -- (hwinterface) DRV - [2005.12.09 15:37:42 | 002,400,256 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\LVMVdrv.sys -- (lvmvdrv) DRV - [2005.12.09 15:37:42 | 000,016,768 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\LVPrcMon.sys -- (LVPrcMon) DRV - [2005.12.09 15:35:54 | 002,174,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Lvckap.sys -- (Lvckap) DRV - [2004.06.22 16:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 82 FE 8B D8 EA 45 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://www.fixxxxxi.de/?key=g43t%A71!RT4562Rfsdafj!!sj1We" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3 FF - prefs.js..extensions.enabledItems: toolbar@alexa.com:1.54 FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1 FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5 FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1 FF - prefs.js..extensions.enabledItems: {AE37D527-6604-461c-8102-975CF8053A2F}:0.5.3.1 FF - prefs.js..extensions.enabledItems: guiconfig@slosd.net:1.1.4 FF - prefs.js..extensions.enabledItems: inspector@mozilla.org:2.0.9 FF - prefs.js..extensions.enabledItems: {c4d362ec-1cff-4ca0-9031-99a8fad7995a}:1.14.2011022201 FF - prefs.js..extensions.enabledItems: {446c03e0-2c35-11db-a98b-0800200c9a66}:0.6.1.14 FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.20.0.66 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}:5.0.17 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.6.2 FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:11.0.1.400 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.1.400 FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.10.2 FF - prefs.js..extensions.enabledItems: {c07d1a49-9894-49ff-a594-38960ede8fb9}:3.1.3 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.2 FF - prefs.js..extensions.enabledItems: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}:1.0 FF - prefs.js..extensions.enabledItems: {ea2b95c2-9be8-48ed-bdd1-5fcd2ad0ff99}:0.3.8.1 FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.3 FF - prefs.js..network.proxy.backup.ftp: "194.29.178.14" FF - prefs.js..network.proxy.backup.ftp_port: 3127 FF - prefs.js..network.proxy.backup.gopher: "194.29.178.14" FF - prefs.js..network.proxy.backup.gopher_port: 3127 FF - prefs.js..network.proxy.backup.socks: "194.29.178.14" FF - prefs.js..network.proxy.backup.socks_port: 3127 FF - prefs.js..network.proxy.backup.ssl: "194.29.178.14" FF - prefs.js..network.proxy.backup.ssl_port: 3127 FF - prefs.js..network.proxy.ftp: "87.120.139.82" FF - prefs.js..network.proxy.ftp_port: 8085 FF - prefs.js..network.proxy.gopher: "87.120.139.82" FF - prefs.js..network.proxy.gopher_port: 8085 FF - prefs.js..network.proxy.http: "87.120.139.82" FF - prefs.js..network.proxy.http_port: 8085 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "87.120.139.82" FF - prefs.js..network.proxy.socks_port: 8085 FF - prefs.js..network.proxy.ssl: "87.120.139.82" FF - prefs.js..network.proxy.ssl_port: 8085 FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties" FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.06.01 12:39:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.06.01 12:39:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2010.09.15 23:46:12 | 000,000,000 | ---D | M] [2010.01.18 22:40:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Extensions [2011.05.26 09:53:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Favicon Picker 2) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{446c03e0-2c35-11db-a98b-0800200c9a66} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (BBCode) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{AE37D527-6604-461c-8102-975CF8053A2F} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Page Speed) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (User Agent Switcher) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Edit Cookies) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{ea2b95c2-9be8-48ed-bdd1-5fcd2ad0ff99} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] ("Google PageRank Status") -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\DeviceDetection@logitech.com [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (gui:config) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\guiconfig@slosd.net [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (DOM Inspector) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\inspector@mozilla.org [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Last tab close button) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\last-tab-close-button@victor.sacharin [2011.06.01 12:38:38 | 000,000,000 | ---D | M] (Personas) -- C:\Users\fixxxxxi\AppData\Roaming\mozilla\Firefox\Profiles\7o29uhqj.default\extensions\personas@christopher.beard [2010.05.26 14:07:45 | 000,002,059 | ---- | M] () -- C:\Users\fixxxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\7o29uhqj.default\searchplugins\daemon-search.xml [2011.05.31 09:45:05 | 000,001,056 | ---- | M] () -- C:\Users\fixxxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\7o29uhqj.default\searchplugins\icqplugin.xml [2010.06.13 23:54:02 | 000,003,915 | ---- | M] () -- C:\Users\fixxxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\7o29uhqj.default\searchplugins\sweetim.xml [2011.03.26 13:25:44 | 000,001,490 | ---- | M] () -- C:\Users\fixxxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\7o29uhqj.default\searchplugins\web-search-powered-by-google.xml [2011.03.23 13:50:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011.06.01 12:39:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} [2011.06.01 12:39:04 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@Kaspersky.ru [2011.06.01 12:39:04 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru File not found (No name found) -- () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\{C07D1A49-9894-49FF-A594-38960EDE8FB9}.XPI () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\{C4D362EC-1CFF-4CA0-9031-99A8FAD7995A}.XPI () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\{DC572301-7619-498C-A57D-39143191B318}.XPI () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\TABSCOPE@XULDEV.ORG.XPI () (No name found) -- C:\USERS\FIXXXXXI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7O29UHQJ.DEFAULT\EXTENSIONS\TOOLBAR@ALEXA.COM.XPI [2011.05.02 11:55:26 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011.03.23 13:50:47 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.03.23 13:50:47 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2011.03.23 13:50:47 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2011.03.23 13:50:47 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2011.03.23 13:50:47 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2011.03.23 13:50:47 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.04.11 16:30:26 | 000,001,543 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com:443 O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 192.150.18.108 O1 - Hosts: 127.0.0.1 adobeereg.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\ievkbd.dll (Kaspersky Lab ZAO) O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4:64bit: - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.) O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.) O4:64bit: - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ATICustomerCare] c:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [Logitech G35] C:\Program Files (x86)\Logitech\G35\G35.exe (Logitech(c)) O4 - HKLM..\Run: [LVCOMSX] C:\Windows\SysWOW64\LVCOMSX.EXE (Logitech Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.) O4 - HKCU..\Run: [ISUSPM Startup] File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\fixxxxxi\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\fixxxxxi\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm () O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab (Java Plug-in 1.5.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~2\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~2\x64\sbhook64.dll (Kaspersky Lab ZAO) O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~2\x64\kloehk.dll) - C:\PROGRA~2\KASPER~1\KASPER~2\x64\kloehk.dll (Kaspersky Lab ZAO) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~2\mzvkbd3.dll) - C:\PROGRA~2\KASPER~1\KASPER~2\mzvkbd3.dll (Kaspersky Lab ZAO) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~2\sbhook.dll) - C:\PROGRA~2\KASPER~1\KASPER~2\sbhook.dll (Kaspersky Lab ZAO) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO) O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 0 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found ========== Files/Folders - Created Within 30 Days ========== [2011.06.02 11:53:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2011.06.02 11:53:26 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2011.06.02 11:52:54 | 003,096,424 | ---- | C] (Piriform Ltd) -- C:\Users\fixxxxxi\Desktop\ccsetup307.exe [2011.06.02 11:47:41 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\fixxxxxi\Desktop\OTL.exe [2011.06.02 00:09:51 | 000,000,000 | ---D | C] -- C:\Users\fixxxxxi\AppData\Roaming\Malwarebytes [2011.06.02 00:09:39 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2011.06.02 00:09:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011.06.02 00:09:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011.06.02 00:09:35 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2011.06.02 00:09:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2011.06.01 11:28:06 | 000,000,000 | ---D | C] -- C:\Users\fixxxxxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 Recovery [2011.05.25 08:49:27 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2011.05.25 08:49:16 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe [2011.05.25 08:49:16 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe [2011.05.22 23:23:55 | 000,053,312 | ---- | C] (microOLAP Technologies LTD) -- C:\Windows\SysNative\drivers\pssdk42.sys [2011.05.22 23:23:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Paessler [2011.05.22 23:19:42 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2011.05.22 23:19:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PRTG Network Monitor [2011.05.18 11:23:59 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2011.05.17 12:09:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Akamai [2011.05.17 11:58:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kuma Games [2011.05.16 23:18:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESE [2011.05.16 08:37:35 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2011.05.10 19:31:15 | 005,562,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011.05.10 19:31:13 | 003,967,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011.05.10 19:31:13 | 003,912,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011.05.10 19:30:36 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2011.05.10 19:30:36 | 000,007,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2011.05.09 19:42:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2011.05.06 10:47:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2011.05.04 22:52:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckDrive [2011.05.04 22:52:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CheckDrive [2011.05.03 21:34:33 | 000,000,000 | ---D | C] -- C:\Users\fixxxxxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ScanRn [2011.05.03 21:34:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Laryon [9 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.06.02 11:55:26 | 000,014,640 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.06.02 11:55:26 | 000,014,640 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.06.02 11:53:28 | 000,000,792 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011.06.02 11:52:52 | 003,096,424 | ---- | M] (Piriform Ltd) -- C:\Users\fixxxxxi\Desktop\ccsetup307.exe [2011.06.02 11:47:39 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\fixxxxxi\Desktop\OTL.exe [2011.06.02 11:30:38 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2011.06.02 11:30:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.06.02 11:30:32 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys [2011.06.02 00:12:37 | 000,606,105 | ---- | M] () -- C:\Users\fixxxxxi\Desktop\unhide.exe [2011.06.02 00:09:39 | 000,001,119 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.06.01 10:55:11 | 000,001,114 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.06.01 10:55:11 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.05.31 19:09:03 | 000,986,605 | ---- | M] () -- C:\Users\fixxxxxi\Desktop\dyn_server_image_small.psd [2011.05.31 19:08:38 | 001,115,144 | ---- | M] () -- C:\Users\fixxxxxi\Desktop\dyn_server_image.psd [2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2011.05.29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2011.05.24 00:15:29 | 000,152,233 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat [2011.05.22 23:23:55 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) -- C:\Windows\SysNative\drivers\pssdk42.sys [2011.05.18 11:23:59 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2011.05.17 21:47:50 | 000,000,600 | ---- | M] () -- C:\Users\fixxxxxi\AppData\Local\PUTTY.RND [2011.05.16 23:18:32 | 000,000,563 | ---- | M] () -- C:\Users\Public\Desktop\ESE Account Manager.lnk [2011.05.15 20:02:23 | 000,001,096 | ---- | M] () -- C:\Users\fixxxxxi\Desktop\Öffentlich.lnk [2011.05.15 19:32:05 | 001,507,106 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.05.15 19:32:05 | 000,657,438 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.05.15 19:32:05 | 000,618,714 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.05.15 19:32:05 | 000,130,810 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.05.15 19:32:05 | 000,107,034 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.05.05 21:54:11 | 000,001,285 | ---- | M] () -- C:\Users\fixxxxxi\Desktop\Agent Ransack.lnk [2011.05.04 22:52:36 | 000,001,859 | ---- | M] () -- C:\Users\fixxxxxi\Desktop\CheckDrive.lnk [2011.05.03 17:45:50 | 000,421,832 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [9 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.06.02 11:53:28 | 000,000,792 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011.06.02 11:52:18 | 000,030,259 | ---- | C] () -- C:\Users\fixxxxxi\Desktop\hjtscanlist.bat [2011.06.02 00:23:42 | 000,002,937 | ---- | C] () -- C:\Users\Public\Desktop\Nero Burning ROM 10.lnk [2011.06.02 00:23:42 | 000,002,451 | ---- | C] () -- C:\Users\Public\Desktop\Paragon Partition Manager™ 11 Professional.lnk [2011.06.02 00:23:42 | 000,001,996 | ---- | C] () -- C:\Users\Public\Desktop\Ulead GIF.lnk [2011.06.02 00:23:42 | 000,001,972 | ---- | C] () -- C:\Users\Public\Desktop\Logitech-Webkamera-Software.lnk [2011.06.02 00:23:42 | 000,001,949 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2011.06.02 00:23:42 | 000,001,878 | ---- | C] () -- C:\Users\Public\Desktop\PDF24 Editor.lnk [2011.06.02 00:23:42 | 000,001,839 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk [2011.06.02 00:23:42 | 000,001,735 | ---- | C] () -- C:\Users\Public\Desktop\MAGIX TV Videorecorder.lnk [2011.06.02 00:23:42 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer.lnk [2011.06.02 00:23:42 | 000,001,021 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3.lnk [2011.06.02 00:23:42 | 000,001,018 | ---- | C] () -- C:\Users\Public\Desktop\LiveZilla Server Admin.lnk [2011.06.02 00:23:42 | 000,000,835 | ---- | C] () -- C:\Users\Public\Desktop\MAGIX Video deLuxe 2005 PLUS.lnk [2011.06.02 00:23:41 | 000,001,975 | ---- | C] () -- C:\Users\Public\Desktop\BILD-Steuer 2010.lnk [2011.06.02 00:23:41 | 000,001,694 | ---- | C] () -- C:\Users\Public\Desktop\Defraggler.lnk [2011.06.02 00:23:41 | 000,001,092 | ---- | C] () -- C:\Users\Public\Desktop\HTC Sync.lnk [2011.06.02 00:23:41 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\JDownloader.lnk [2011.06.02 00:23:41 | 000,001,021 | ---- | C] () -- C:\Users\Public\Desktop\LiveZilla Client.lnk [2011.06.02 00:23:41 | 000,000,563 | ---- | C] () -- C:\Users\Public\Desktop\ESE Account Manager.lnk [2011.06.02 00:12:39 | 000,606,105 | ---- | C] () -- C:\Users\fixxxxxi\Desktop\unhide.exe [2011.06.02 00:09:39 | 000,001,119 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.05.31 17:40:10 | 000,986,605 | ---- | C] () -- C:\Users\fixxxxxi\Desktop\dyn_server_image_small.psd [2011.05.30 12:17:03 | 001,115,144 | ---- | C] () -- C:\Users\fixxxxxi\Desktop\dyn_server_image.psd [2011.05.15 20:02:23 | 000,001,096 | ---- | C] () -- C:\Users\fixxxxxi\Desktop\Öffentlich.lnk [2011.05.04 22:52:36 | 000,001,859 | ---- | C] () -- C:\Users\fixxxxxi\Desktop\CheckDrive.lnk [2011.04.09 20:43:05 | 000,007,613 | ---- | C] () -- C:\Users\fixxxxxi\AppData\Local\Resmon.ResmonCfg [2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011.01.26 18:23:07 | 000,554,496 | ---- | C] () -- C:\Windows\SysWow64\dvmsg.dll [2011.01.04 17:10:56 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2011.01.04 17:10:56 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2011.01.04 17:10:56 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2011.01.04 17:10:56 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll [2010.12.16 16:34:06 | 000,000,036 | ---- | C] () -- C:\Windows\OneProc.dat [2010.10.11 21:22:46 | 000,120,200 | ---- | C] () -- C:\Windows\SysWow64\DLLDEV32i.dll [2010.09.15 11:24:12 | 000,006,656 | ---- | C] () -- C:\Users\fixxxxxi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.07.29 19:26:22 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010.07.23 20:14:46 | 000,000,056 | ---- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.07.08 11:37:49 | 000,000,600 | ---- | C] () -- C:\Users\fixxxxxi\AppData\Local\PUTTY.RND [2010.05.25 22:48:59 | 000,001,456 | ---- | C] () -- C:\Users\fixxxxxi\AppData\Local\Adobe Für Web speichern 11.0 Prefs [2010.05.24 21:33:00 | 004,670,829 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll [2010.05.24 21:33:00 | 001,529,856 | ---- | C] () -- C:\Windows\SysWow64\ff_samplerate.dll [2010.05.24 21:33:00 | 001,447,921 | ---- | C] () -- C:\Windows\SysWow64\ffmpegmt.dll [2010.05.24 21:33:00 | 000,877,385 | ---- | C] () -- C:\Windows\SysWow64\ff_x264.dll [2010.05.24 21:33:00 | 000,810,113 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010.05.24 21:33:00 | 000,336,384 | ---- | C] () -- C:\Windows\SysWow64\ff_libfaad2.dll [2010.05.24 21:33:00 | 000,324,096 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll [2010.05.24 21:33:00 | 000,248,320 | ---- | C] () -- C:\Windows\SysWow64\ff_kernelDeint.dll [2010.05.24 21:33:00 | 000,216,576 | ---- | C] () -- C:\Windows\SysWow64\ff_libdts.dll [2010.05.24 21:33:00 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ff_libmad.dll [2010.05.24 21:33:00 | 000,145,408 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll [2010.05.24 21:33:00 | 000,139,944 | ---- | C] () -- C:\Windows\SysWow64\libmplayer.dll [2010.05.24 21:33:00 | 000,121,856 | ---- | C] () -- C:\Windows\SysWow64\ff_liba52.dll [2010.05.24 21:33:00 | 000,116,736 | ---- | C] () -- C:\Windows\SysWow64\ff_tremor.dll [2010.05.24 21:33:00 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010.05.24 21:33:00 | 000,100,864 | ---- | C] () -- C:\Windows\SysWow64\ff_wmv9.dll [2010.05.24 21:33:00 | 000,097,792 | ---- | C] () -- C:\Windows\SysWow64\ff_unrar.dll [2010.05.19 22:59:20 | 000,150,528 | ---- | C] () -- C:\Windows\SysWow64\mkx.dll [2010.05.19 22:59:10 | 000,109,568 | ---- | C] () -- C:\Windows\SysWow64\avi.dll [2010.05.19 22:59:02 | 000,141,824 | ---- | C] () -- C:\Windows\SysWow64\mp4.dll [2010.05.19 22:58:52 | 000,123,392 | ---- | C] () -- C:\Windows\SysWow64\ogm.dll [2010.05.19 22:58:24 | 000,113,152 | ---- | C] () -- C:\Windows\SysWow64\dsmux.exe [2010.05.19 22:58:18 | 000,154,112 | ---- | C] () -- C:\Windows\SysWow64\ts.dll [2010.05.19 22:58:08 | 000,249,856 | ---- | C] () -- C:\Windows\SysWow64\dxr.dll [2010.05.19 22:57:42 | 000,097,792 | ---- | C] () -- C:\Windows\SysWow64\avs.dll [2010.05.19 22:57:38 | 000,137,728 | ---- | C] () -- C:\Windows\SysWow64\mkv2vfr.exe [2010.05.19 22:57:26 | 000,093,184 | ---- | C] () -- C:\Windows\SysWow64\avss.dll [2010.05.19 22:57:20 | 000,358,400 | ---- | C] () -- C:\Windows\SysWow64\gdsmux.exe [2010.05.19 22:55:40 | 000,080,384 | ---- | C] () -- C:\Windows\SysWow64\mkzlib.dll [2010.05.19 22:55:36 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\mkunicode.dll [2010.04.16 18:26:00 | 000,000,410 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010.04.04 14:44:45 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI [2010.03.31 17:13:26 | 000,000,719 | R--- | C] () -- C:\Windows\SysWow64\InstExec.ini [2010.03.25 03:46:27 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys [2010.03.04 19:13:30 | 000,122,880 | ---- | C] () -- C:\Windows\UnGins.exe [2010.02.23 18:15:02 | 000,001,105 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2010.02.20 12:32:00 | 000,000,760 | ---- | C] () -- C:\Users\fixxxxxi\AppData\Roaming\setup_ldm.iss [2010.02.15 02:07:28 | 000,000,052 | ---- | C] () -- C:\Windows\videodeLuxe.INI [2010.02.15 01:01:45 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\cpuinf32.dll [2010.02.15 00:54:38 | 000,000,088 | ---- | C] () -- C:\Windows\magix.ini [2010.02.15 00:54:37 | 000,001,208 | ---- | C] () -- C:\Windows\mgxoschk.ini [2010.02.01 14:03:42 | 000,000,661 | ---- | C] () -- C:\Windows\wiso.ini [2010.01.22 00:53:10 | 001,499,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010.01.19 01:10:19 | 000,116,736 | ---- | C] () -- C:\Windows\SysWow64\redmonnt.dll [2010.01.19 01:04:19 | 000,000,206 | ---- | C] () -- C:\Windows\ulead32.ini [2010.01.18 22:58:41 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010.01.18 22:42:59 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2009.08.11 23:21:26 | 000,087,552 | ---- | C] () -- C:\Windows\SysWow64\ac3config.exe [2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.14 01:16:42 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\vr86fmd.dll [2009.07.14 01:16:42 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\grcauth2.dll [2009.07.14 01:16:42 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\grcauth1.dll [2009.07.14 01:16:42 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\clauth2.dll [2009.07.14 01:16:42 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\clauth1.dll [2009.07.14 01:16:42 | 000,000,204 | ---- | C] () -- C:\Windows\SysWow64\qzqeiwt.dll [2009.07.14 01:16:42 | 000,000,100 | ---- | C] () -- C:\Windows\SysWow64\prsgrc.dll [2009.07.14 01:16:42 | 000,000,072 | ---- | C] () -- C:\Windows\SysWow64\ssprs.dll [2009.07.14 01:16:42 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\ubl9clt.dll [2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2009.06.07 18:24:04 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2009.05.20 14:04:42 | 000,045,568 | ---- | C] () -- C:\Windows\SysWow64\spdifer_config.exe [2009.01.11 00:15:44 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\mmfinfo.dll [2008.11.06 17:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2007.10.13 11:30:20 | 000,000,137 | ---- | C] () -- C:\Windows\SysWow64\Registration.ini [2007.06.21 08:34:08 | 000,203,328 | R--- | C] () -- C:\Windows\GSetup.exe [2005.12.09 15:37:42 | 002,400,256 | ---- | C] () -- C:\Windows\SysWow64\drivers\LVMVdrv.sys [2005.12.09 15:37:42 | 000,016,768 | ---- | C] () -- C:\Windows\SysWow64\drivers\LVPrcMon.sys [2005.12.09 15:35:54 | 002,174,464 | ---- | C] () -- C:\Windows\SysWow64\drivers\Lvckap.sys [2003.05.10 00:36:30 | 000,151,744 | ---- | C] () -- C:\Windows\SysWow64\ir32.dll ========== LOP Check ========== [2010.09.28 19:09:57 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\.minecraft [2011.01.14 15:21:59 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Autodesk [2011.06.01 12:38:41 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Buhl Data Service [2010.02.26 01:44:30 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Canon [2010.10.23 21:38:04 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\ClipMagic [2010.01.19 01:37:18 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\DAEMON Tools Lite [2010.06.23 18:51:10 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Dexpot [2010.03.06 13:31:07 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\DMT Software [2011.01.14 17:09:35 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Dropbox [2010.05.20 19:28:08 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\DVDVideoSoftIEHelpers [2011.06.01 12:38:41 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Easy Macro Recorder [2011.06.01 00:39:55 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\FileZilla [2010.02.18 20:19:07 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Gadu-Gadu 10 [2010.03.21 19:59:44 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\GARMIN [2011.06.01 12:38:40 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\gtk-2.0 [2011.03.30 13:22:59 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\HTC [2011.03.26 12:37:58 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 [2011.06.02 11:43:51 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\ICQ [2010.03.16 18:41:27 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Leadertech [2010.10.11 21:26:01 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\MAGIX [2011.06.01 12:38:35 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\NoNameScript [2011.06.01 12:38:31 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Notepad++ [2010.02.27 12:55:36 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Octoshape [2010.01.19 00:15:37 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Opera [2011.03.30 13:22:59 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Outlook [2010.02.24 13:30:39 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\PE Explorer [2011.04.25 00:32:18 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Samsung [2010.03.06 13:17:24 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\SQLite Administrator [2010.03.02 23:46:57 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\TeamViewer [2010.03.29 17:08:13 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Thinstall [2011.03.21 16:33:34 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Tobit [2011.06.01 12:38:30 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\TS3Client [2010.01.18 23:29:36 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\TuneUp Software [2010.03.22 17:43:51 | 000,000,000 | ---D | M] -- C:\Users\fixxxxxi\AppData\Roaming\Ubisoft [2011.03.25 12:58:29 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 357 bytes -> C:\ProgramData\TEMP:9A870F8B < End of report > --- --- --- Extras.txt OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 02.06.2011 11:48:58 - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\fixxxxxi\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 50,27% Memory free
8,00 Gb Paging File | 5,72 Gb Available in Paging File | 71,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 146,48 Gb Total Space | 48,64 Gb Free Space | 33,21% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 95,87 Gb Free Space | 98,18% Space Free | Partition Type: NTFS
Drive E: | 53,94 Gb Total Space | 20,65 Gb Free Space | 38,28% Space Free | Partition Type: NTFS
Computer Name: FIXXXXXI-PC | User Name: fixxxxxi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.js [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.exe [@ = exefile] -- Reg Error: Key error. File not found
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"UACDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX310_series" = Canon MX310 series
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{29FEDD0D-5E72-4D31-A266-EB8EFA608AF8}" = VMLite Workstation
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{659996B5-9284-EB7D-8F0E-9FA910ADE2B4}" = AMD Drag and Drop Transcoding
"{6CC95B76-D380-46B2-9022-9353938E48BA}" = Logitech GamePanel Software 3.03.133
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{BD430C50-784F-32CD-87E7-A8C47EE6107F}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{D01D10FC-9454-4C51-9A31-34F9FC1EFFCF}" = Logitech G35
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{EEBAEA5A-07C3-22AD-1E2F-7482BE5C1582}" = ATI Catalyst Install Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F61833FE-70D2-06F8-6A53-58BC8DCD0D6C}" = WMV9/VC-1 Video Playback
"{FA16AE79-DEFE-CEC4-9213-0CE361C8D627}" = ccc-utility64
"CanonMyPrinter" = Canon My Printer
"CCleaner" = CCleaner
"Defraggler" = Defraggler
"ESL Wire_is1" = ESL Wire 1.9.2
"lvdrivers_12.10" = Logitech Webcam Software-Treiberpaket
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"SP6" = Logitech SetPoint 6.0
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}" = Windows Media Center Add-in for Silverlight
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{220688FD-4E64-4810-B31A-32C3895DFDFA}_is1" = Auto Shutdown
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 15
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{3248F0A8-6813-11D6-A77B-00B0D0150170}" = J2SE Runtime Environment 5.0 Update 17
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{38E45772-7CD6-8400-693C-1D268E6D1850}" = ccc-core-static
"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{41785C66-90F2-40CE-8CB5-1C94BFC97280}" = Microsoft Chart Controls for Microsoft .NET Framework 3.5
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4E25C468-7745-4051-8B37-4A2C6635BA8B}" = Update Manager B08.1027.1
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5645FB61-898F-4F59-AF80-52FEF3D63A64}" = HTC Sync
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{6AB57823-3580-4CE0-9CF0-072E2A39460C}" = Catalyst Control Center - Branding
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 2.8.5
"{8320F92E-6E12-FB6F-B7A7-2C37D86507C1}" = Catalyst Control Center InstallProxy
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87788F6B-90DC-3702-E4E2-BAAC54F6DC06}" = Catalyst Control Center Graphics Previews Common
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AF3E926-ED59-11D4-A44B-0000E86D2305}" = Ulead GIF Animator 5
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90170407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office FrontPage 2003
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{A35001F0-F1E4-11DD-A38B-005056C00008}" = Paragon Partition Manager™ 11 Professional
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.3 - Deutsch
"{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth
"{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1" = CheckDrive
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{C4C91E02-D4E2-481E-BCBA-7D90CC8D43E1}" = LiveZilla
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{DF6FE172-006A-4324-AF7F-ACFE4BA290FE}" = AAVUpdateManager
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E7D293C9-732D-4E22-905D-2615FED321A4}" = BILD-Steuer 2010
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"AC3Filter" = AC3Filter (remove only)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Agent Ransack_is1" = Agent Ransack Version 1.7.3
"Akamai" = Akamai NetSession Interface
"AVIConverter" = AVIConverter 5.1.6
"Canon MX310 series Benutzerregistrierung" = Canon MX310 series Benutzerregistrierung
"CANONIJPLM100" = PIXMA Extended Survey Program
"DivX Setup.divx.com" = DivX-Setup
"Easy Macro Recorder_is1" = Easy Macro Recorder 3.83
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ESE Account Manager" = ESE Account Manager 2.0.0.4
"ESE_Registration" = ESE Account Manager (remove only)
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v4.60
"FileZilla Client" = FileZilla Client 3.4.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"HijackThis" = HijackThis 2.0.2
"InstallShield_{4E25C468-7745-4051-8B37-4A2C6635BA8B}" = Update Manager B08.1027.1
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"JDownloader" = JDownloader
"LiveZilla" = LiveZilla
"MAGIX Video deLuxe 2005 PLUS" = MAGIX Video deLuxe 2005 PLUS
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.0.1200
"Media Player - Codec Pack" = Media Player Codec Pack 3.9.6
"Mozilla Firefox 4.0.1 (x86 de)" = Mozilla Firefox 4.0.1 (x86 de)
"MyFreeCodec" = MyFreeCodec
"Opera 11.10.2092" = Opera 11.10
"PSPad editor_is1" = PSPad editor
"Steam App 10" = Counter-Strike
"Steam App 12840" = DiRT 2
"Steam App 215" = Source SDK Base 2006
"Steam App 240" = Counter-Strike: Source
"Steam App 300" = Day of Defeat: Source
"Steam App 320" = Half-Life 2: Deathmatch
"Steam App 42700" = Call of Duty: Black Ops
"Steam App 42710" = Call of Duty: Black Ops - Multiplayer
"Tactical Ops" = Tactical Ops
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamViewer 5" = TeamViewer 5
"TerraTec Grabby" = TerraTec Grabby V5.09.0813.00
"Uninstall_is1" = Uninstall 1.0.0.1
"VertusFluidMask3" = Vertus Fluid Mask 3 3.0.2
"VLC media player" = VLC media player 1.0.5
"WinLiveSuite" = Windows Live Essentials
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"MyFreeCodec" = MyFreeCodec
"NoNameScript" = NNScript
"ScanRn/ScanRnServer" = ScanRn/ScanRnServer
========== Last 10 Event Log Errors ==========
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
< End of report >
[/CODE] |
| | #7 |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar erklärungsbedürftige Ausnahmen in die hosts eingetragen, aber ein pro Argument wäre vielleicht von dir hilfreich...Ob es sich um eine nicht ganz legale Aktion handelt?: Code:
ATTFilter O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com:443
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
__________________ Warnung!: Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein! Anhang nicht öffnen, in unserem Forum erst nachfragen! Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten! Bitte diese Warnung weitergeben, wo Du nur kannst! |
![]() |
| Themen zu PDM.Trojan.generic - Einige Ordner und Dateien sowie nicht sichtbar |
| anti-malware, anwendung, appdata, cache, dateien, dll, einstellungen, explorer, festplatte, firefox, infizierte, internet, jar_cache, klick, log, microsoft, mozilla, nicht sichtbar, ordner, seite, server.exe, setup, software, system, system32, syswow64, temp, trojan.fakems, voll |