Windows gesperrt, Zahlungsaufforderung
Hallo! Habe auch das Problem, dass mein Windows gesperrt wurde und ich nun 50 Euro für ein viren update zahlen.
Habe jetz die Scans mit OTL.exe durchgeführt.
Hier der Inhalt der OTL.Txt Datei:OTL Logfile: Code:
OTL logfile created on: 05.02.2012 13:29:40 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\FickiFuckiFruchteis\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,38 Gb Available Physical Memory | 79,47% Memory free
6,81 Gb Paging File | 6,42 Gb Available in Paging File | 94,31% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 4,77 Gb Free Space | 4,09% Space Free | Partition Type: NTFS
Drive D: | 116,44 Gb Total Space | 42,60 Gb Free Space | 36,58% Space Free | Partition Type: NTFS
Drive E: | 106,68 Gb Total Space | 47,38 Gb Free Space | 44,41% Space Free | Partition Type: NTFS
Drive F: | 116,44 Gb Total Space | 5,06 Gb Free Space | 4,35% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Computer Name: FICKIFUCKI | User Name: FickiFuckiFruchteis | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\FickiFuckiFruchteis\Downloads\OTL (1).exe (OldTimer Tools)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
========== Win32 Services (SafeList) ==========
SRV - (de_serv) -- File not found
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (WTGService) -- C:\Program Files\Verbindungsassistent\wtgservice.exe ()
SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.189\McCHSvc.exe (McAfee, Inc.)
SRV - (ServiceLayer) -- C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (Fabs) -- C:\Program Files\Common Files\MAGIX Services\Database_38f3d1\bin\FABS.exe (MAGIX AG)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files\Common Files\MAGIX Services\Database_38f3d1\bin\fbserver.exe (MAGIX®)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (ASLDRService) -- C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe ()
SRV - (ATKGFNEXSrv) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
SRV - (spmgr) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (StarWindServiceAE) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software)
SRV - (ASBroker) -- C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll (Cognizance Corporation)
SRV - (ASChannel) -- C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll (Cognizance Corporation)
========== Driver Services (SafeList) ==========
DRV - (libusb0) -- C:\Windows\System32\drivers\libusb0.sys (hxxp://libusb-win32.sourceforge.net)
DRV - (ssudmdm) SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.) -- C:\Windows\System32\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV - (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.) -- C:\Windows\System32\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (spd3ssl) -- F:\Spyware Process Detector\spd320.sys ()
DRV - (hwusbdev) -- C:\Windows\System32\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (RMCAST) RMCAST (Pgm) -- C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)
DRV - (winusb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (acedrv11) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH)
DRV - (SLEE_16_DRIVER) -- C:\Windows\System32\drivers\sleen16.sys (Softwareentwicklung Remus - ArchiCrypt )
DRV - (pccsmcfd) -- C:\Windows\System32\drivers\pccsmcfd.sys (Nokia)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (Point32) -- C:\Windows\System32\drivers\point32k.sys (Microsoft Corporation)
DRV - (kbfiltr) -- C:\Windows\System32\drivers\kbfiltr.sys ( )
DRV - (lullaby) -- C:\Windows\system32\DRIVERS\lullaby.sys (Windows (R) Codename Longhorn DDK provider)
DRV - ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) -- E:\Programme\Al Touch Media\PlayMovie\000.fcl (Cyberlink Corp.)
DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)
DRV - (FiltUSBET) -- C:\Windows\System32\drivers\etFilter.sys (eMPIA Technology Inc.)
DRV - (ScanUSBET) -- C:\Windows\System32\drivers\etScan.sys (eMPIA Technology, Inc.)
DRV - (itecir) -- C:\Windows\System32\drivers\itecir.sys (ITE Tech. Inc. )
DRV - (DCamUSBET) -- C:\Windows\System32\drivers\etDevice.sys (eMPIA Technology, Inc.)
DRV - (ghaio) -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()
DRV - (rismxdp) -- C:\Windows\System32\drivers\rixdptsk.sys (REDC)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (ASMMAP) -- C:\Program Files\ATKGFNEX\ASMMAP.sys ()
DRV - (ATSWPDRV) AuthenTec TruePrint USB Driver (SwipeSensor) -- C:\Windows\System32\drivers\atswpdrv.sys (AuthenTec, Inc.)
DRV - (BDA_Capture_225) -- C:\Windows\System32\drivers\BDA_Capture_225.sys (WideViewer Electronics CO., LTD)
DRV - (BDA_Loader_225) -- C:\Windows\System32\drivers\BDA_Loader_225.sys (WideView Technology Inc.)
DRV - (StMp3Rec) -- C:\Windows\System32\drivers\StMp3Rec.sys (Generic)
DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)
DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)
DRV - (EIO) -- C:\Windows\System32\drivers\EIO.sys (ASUSTeK Computer Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com
IE - HKLM\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.defaultthis.engineName: "Eazel-DE Customized Web Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811"
FF - prefs.js..browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.2.26
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.0
FF - prefs.js..extensions.enabledItems: {C9B68337-E93A-44EA-94DC-CB300EC06444}:3.26.0
FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.1.0.2
FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.6.2
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.5
FF - prefs.js..extensions.enabledItems: youtubedownloader@mybrowserbar.com:4.5
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550
FF - prefs.js..keyword.URL: "hxxp://dts.search-results.com/sr?src=ffb&appid=0&systemid=410&sr=0&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2096149&SearchSource=3&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2096149&q="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@protectdisc.com/NPPDLicenseHelper: C:\Program Files\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF - HKLM\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Users\FickiFuckiFruchteis\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\FickiFuckiFruchteis\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.12 10:25:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.11.16 00:26:31 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}: C:\Users\FickiFuckiFruchteis\Program Files\DNA [2010.06.19 07:39:47 | 000,000,000 | ---D | M]
[2011.12.09 03:30:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\mozilla\Extensions
[2012.02.03 18:23:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\mozilla\Firefox\Profiles\zuyeb2zk.default\extensions
[2010.11.14 23:43:24 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\mozilla\Firefox\Profiles\zuyeb2zk.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.01.19 19:13:37 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\mozilla\Firefox\Profiles\zuyeb2zk.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
[2008.12.16 12:22:12 | 000,000,878 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Mozilla\Firefox\Profiles\zuyeb2zk.default\searchplugins\conduit.xml
[2011.12.09 01:18:49 | 000,002,515 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Mozilla\Firefox\Profiles\zuyeb2zk.default\searchplugins\Search_Results.xml
[2011.01.19 19:31:31 | 000,003,915 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Mozilla\Firefox\Profiles\zuyeb2zk.default\searchplugins\sweetim.xml
[2011.12.30 09:07:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2011.10.15 23:47:27 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
() (No name found) -- C:\USERS\FICKIFUCKIFRUCHTEIS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZUYEB2ZK.DEFAULT\EXTENSIONS\{888D99E7-E8B5-46A3-851E-1EC45DA1E644}.XPI
() (No name found) -- C:\USERS\FICKIFUCKIFRUCHTEIS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZUYEB2ZK.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\FICKIFUCKIFRUCHTEIS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZUYEB2ZK.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI
[2012.01.12 10:25:36 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.05.04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.01.12 10:25:34 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.10.16 05:00:09 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.01.12 10:25:34 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.01.12 10:25:34 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.12 10:25:34 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.12.09 01:18:49 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2012.01.12 10:25:34 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.01.12 10:25:34 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (ASUS Security Protect Manager) - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Program Files\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Softonic Deutsch Toolbar) - {8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - C:\Program Files\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [{6C77E4CD-5F6D-2F71-CA2E-583EDAB8AD76}] C:\Users\FickiFuckiFruchteis\AppData\Roaming\Bop\ehycys.exe ()
O4 - HKCU..\Run: [Firefox helper] C:\Users\FickiFuckiFruchteis\AppData\Local\Mozilla\Firefox\firefox.exe ()
O4 - HKCU..\Run: [KiesPDLR] E:\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 File not found
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKCU\..Trusted Domains: moviez.to ([www] http in Trusted sites)
O15 - HKCU\..Trusted Domains: secured.in ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: stealth.to ([]http in Trusted sites)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)
O16 - DPF: {588031A3-94BF-4CDD-86D0-939F6F93910F} https://fixit.support.microsoft.com/ActiveX/FixItClient.CAB (FixItClient Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{740C28F7-6A8B-4BD3-9308-E14D4D0B86EB}: DhcpNameServer = 83.169.184.33 83.169.184.97
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CCE96F6D-28FB-40C3-B9CE-94653FC4BD19}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\haufereader - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (APSHook.dll) -C:\Windows\System32\APSHook.dll (Cognizance Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\FickiFuckiFruchteis\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\FickiFuckiFruchteis\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{11c4d887-a3ef-11df-8915-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{11c4d887-a3ef-11df-8915-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{11c4d889-a3ef-11df-8915-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{11c4d889-a3ef-11df-8915-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{11c4d88c-a3ef-11df-8915-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{11c4d88c-a3ef-11df-8915-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{11c4d88e-a3ef-11df-8915-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{11c4d88e-a3ef-11df-8915-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{1c916b1a-935f-11df-b7d8-002243be58ca}\Shell - "" = AutoRun
O33 - MountPoints2\{1c916b1a-935f-11df-b7d8-002243be58ca}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{1c916b1b-935f-11df-b7d8-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{1c916b1b-935f-11df-b7d8-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{22cfdd96-0002-11de-a7d5-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{22cfdd96-0002-11de-a7d5-806e6f6e6963}\Shell\AutoRun\command - "" = G:\setup.exe
O33 - MountPoints2\{24d7d8ec-b12a-11df-b3e8-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{24d7d8ec-b12a-11df-b3e8-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{24d7d8ff-b12a-11df-b3e8-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{24d7d8ff-b12a-11df-b3e8-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{56025e23-2711-11de-ae6f-00215d36d3fe}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
O33 - MountPoints2\{584d251a-ffde-11dd-83df-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{584d251a-ffde-11dd-83df-002354931236}\Shell\AutoRun\command - "" = H:\StartVMCLite.exe
O33 - MountPoints2\{584d2523-ffde-11dd-83df-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{584d2523-ffde-11dd-83df-002354931236}\Shell\AutoRun\command - "" = L:\StartVMCLite.exe
O33 - MountPoints2\{67f1efb5-90ef-11df-b195-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{67f1efb5-90ef-11df-b195-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{67f1efc4-90ef-11df-b195-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{67f1efc4-90ef-11df-b195-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{94ec0052-b2d0-11df-9d56-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{94ec0052-b2d0-11df-9d56-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{94ec0054-b2d0-11df-9d56-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{94ec0054-b2d0-11df-9d56-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{a0b009e8-b29e-11df-86c4-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{a0b009e8-b29e-11df-86c4-002354931236}\Shell\AutoRun\command - "" = I:\QsSetup.exe
O33 - MountPoints2\{a82c0149-9efa-11df-8b08-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{a82c0149-9efa-11df-8b08-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{a82c014e-9efa-11df-8b08-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{a82c014e-9efa-11df-8b08-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{a904c1a2-9bdb-11df-9d31-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{a904c1a2-9bdb-11df-9d31-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{a904c1a8-9bdb-11df-9d31-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{a904c1a8-9bdb-11df-9d31-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{ac1b9da9-3064-11e0-ae2b-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{ac1b9da9-3064-11e0-ae2b-002354931236}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O33 - MountPoints2\{df9824bd-a7ef-11df-a20f-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{df9824bd-a7ef-11df-a20f-002354931236}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{ec1ac39a-b2a6-11df-a5ba-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{ec1ac39a-b2a6-11df-a5ba-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{ec1ac39c-b2a6-11df-a5ba-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{ec1ac39c-b2a6-11df-a5ba-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{ec1ac3a8-b2a6-11df-a5ba-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{ec1ac3a8-b2a6-11df-a5ba-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{ec1ac3a9-b2a6-11df-a5ba-002354931236}\Shell - "" = AutoRun
O33 - MountPoints2\{ec1ac3a9-b2a6-11df-a5ba-002354931236}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{eed621a9-0c51-11de-9dd0-00215d36d3fe}\Shell - "" = AutoRun
O33 - MountPoints2\{eed621a9-0c51-11de-9dd0-00215d36d3fe}\Shell\AutoRun\command - "" = I:\StartVMCLite.exe
O33 - MountPoints2\{eed621ab-0c51-11de-9dd0-00215d36d3fe}\Shell - "" = AutoRun
O33 - MountPoints2\{eed621ab-0c51-11de-9dd0-00215d36d3fe}\Shell\AutoRun\command - "" = H:\StartVMCLite.exe
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353)
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Windows Media Player 5.2
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
MsConfig - StartUpReg: CLMLServer - hkey= - key= - E:\Programme\CyberLink DVD\Power2Go\CLMLSvc.exe (CyberLink)
MsConfig - StartUpReg: P2Go_Menu - hkey= - key= - E:\Programme\CyberLink DVD\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
CREATERESTOREPOINT
Error creating restore point.
========== Files/Folders - Created Within 30 Days ==========
[2012.02.04 16:47:32 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\Desktop\Musik
[2012.02.04 10:45:35 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Yqxywol
[2012.02.04 10:45:35 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Bop
[2012.02.04 04:54:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SixaxisPairTool
[2012.02.04 04:34:32 | 000,000,000 | -H-D | C] -- C:\Windows\System32\GroupPolicy
[2012.02.04 04:34:27 | 000,042,592 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\System32\drivers\libusb0.sys
[2012.02.04 04:32:21 | 000,067,680 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\System32\libusb0.dll
[2012.02.04 02:07:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Postal.3
[2012.02.03 17:32:12 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\Desktop\Neuer Ordner
[2012.01.29 15:42:11 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\AppData\Local\PackageAware
[2012.01.29 15:23:42 | 000,000,000 | ---D | C] -- C:\Program Files\Unlockroot
[2012.01.29 00:53:35 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\Desktop\Android
[2012.01.28 11:41:15 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\Documents\ANNO 2070
[2012.01.28 09:42:46 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2012.01.28 09:42:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2012.01.28 09:42:44 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Notepad++
[2012.01.28 09:42:44 | 000,000,000 | ---D | C] -- C:\Program Files\Notepad++
[2012.01.28 05:42:12 | 000,000,000 | ---D | C] -- C:\Users\FickiFuckiFruchteis\Documents\NFSTR
[2012.01.28 05:36:49 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
[2012.01.28 05:36:40 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
[2012.01.28 02:16:03 | 000,028,992 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2012.01.28 02:14:44 | 000,031,552 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2012.01.28 02:14:43 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2012.01.28 02:14:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2012
[2012.01.28 02:14:12 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2012
[2012.01.28 01:58:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.01.27 18:52:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.01.27 18:51:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2009.02.21 12:19:12 | 000,015,928 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[7 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.02.05 13:28:16 | 000,008,268 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\AppData\Local\d3d9caps.dat
[2012.02.05 13:23:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.05 12:55:42 | 000,096,099 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012.02.05 12:54:20 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2012.02.05 12:54:12 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.02.05 12:53:53 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.05 12:53:53 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.05 12:50:14 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.02.05 12:46:04 | 000,000,984 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-910203591-2235916584-2118161158-1000UA.job
[2012.02.04 17:57:45 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012.02.04 04:35:17 | 000,000,306 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2012.02.04 04:34:27 | 000,042,592 | ---- | M] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\System32\drivers\libusb0.sys
[2012.02.04 04:31:44 | 000,096,099 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012.02.04 00:46:01 | 000,000,962 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-910203591-2235916584-2118161158-1000Core.job
[2012.02.03 18:01:54 | 000,683,158 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.02.03 18:01:54 | 000,642,976 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.02.03 18:01:54 | 000,149,876 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.02.03 18:01:54 | 000,123,606 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.01.29 14:24:43 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_winusb_01007.Wdf
[2012.01.28 02:14:39 | 000,001,876 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2012.01.28 02:14:39 | 000,001,872 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities 2012.lnk
[2012.01.27 18:52:43 | 000,001,671 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[7 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.02.04 04:34:34 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012.01.29 14:24:43 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_winusb_01007.Wdf
[2012.01.28 02:14:39 | 000,001,876 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2012.01.28 02:14:39 | 000,001,872 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities 2012.lnk
[2012.01.28 02:14:38 | 000,001,884 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2012.lnk
[2012.01.27 18:52:43 | 000,001,671 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.12.09 01:18:43 | 000,484,352 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2011.11.29 16:38:18 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011.11.29 16:38:12 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011.11.29 16:38:12 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011.11.29 16:38:12 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011.11.29 16:38:12 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2011.10.22 17:53:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.09.27 11:23:52 | 000,000,058 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011.02.13 23:01:45 | 000,000,000 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\chrtmp
[2010.11.16 19:43:31 | 000,000,005 | ---- | C] () -- C:\Windows\treeskp.sys
[2010.10.13 18:38:28 | 000,000,107 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Local\fusioncache.dat
[2010.08.28 13:25:00 | 000,000,962 | ---- | C] () -- C:\Windows\Mobile Partner Manager.INI
[2010.05.02 15:54:35 | 000,035,368 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\SQLite3.dll
[2010.04.18 21:29:42 | 000,049,152 | ---- | C] () -- C:\Windows\System32\mgxasio2.dll
[2010.02.28 17:17:21 | 000,139,128 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010.02.28 17:17:21 | 000,138,056 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\PnkBstrK.sys
[2010.02.28 17:17:06 | 000,189,248 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2010.02.28 17:17:05 | 002,434,856 | ---- | C] () -- C:\Windows\System32\pbsvc_bc2.exe
[2010.02.28 17:17:05 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2009.12.06 05:44:14 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.12.06 00:38:17 | 000,000,046 | ---- | C] () -- C:\Windows\Speed.INI
[2009.12.05 19:49:22 | 000,096,099 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.12.05 19:35:44 | 000,096,099 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.12.03 09:27:30 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2009.10.21 05:53:20 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009.10.21 05:53:19 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.09.27 05:39:28 | 000,000,089 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\default.pls
[2009.09.19 02:40:31 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2009.05.18 18:10:59 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI
[2009.05.17 12:05:54 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2009.05.10 14:33:23 | 000,000,005 | ---- | C] () -- C:\Windows\sbacknt.bin
[2009.04.30 03:17:27 | 000,765,952 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009.04.30 03:17:27 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009.04.19 08:05:04 | 000,006,656 | R--- | C] () -- C:\Windows\System32\pdfxcds.dll
[2009.04.04 19:26:06 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2009.04.04 19:25:58 | 000,000,031 | ---- | C] () -- C:\Windows\Ulead32.ini
[2009.03.16 18:05:44 | 002,990,080 | R--- | C] () -- C:\Windows\System32\IPdlg.exe
[2009.03.16 18:05:44 | 000,024,501 | R--- | C] () -- C:\Windows\System32\MWhid.sys
[2009.03.16 18:05:44 | 000,000,266 | R--- | C] () -- C:\Windows\System32\megastore.ini
[2009.03.10 22:00:06 | 000,000,000 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\downloads.m3u
[2009.02.23 16:28:23 | 000,279,712 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2009.02.23 16:28:23 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2009.02.22 11:20:20 | 000,019,968 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll
[2009.02.22 11:18:38 | 000,000,089 | ---- | C] () -- C:\Windows\magix.ini
[2009.02.22 11:18:37 | 000,007,272 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2009.02.22 03:06:25 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009.02.21 13:44:26 | 000,000,000 | ---- | C] () -- C:\Windows\OpPrintServer.INI
[2009.02.21 13:42:53 | 000,008,704 | ---- | C] () -- C:\Windows\System32\CNMVS78.DLL
[2009.02.21 13:37:51 | 000,000,021 | ---- | C] () -- C:\Windows\CS_SETUP.ini
[2009.02.21 12:54:54 | 000,000,225 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\default.rss
[2009.02.21 12:24:51 | 000,193,024 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.02.21 04:52:09 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2009.02.21 04:44:00 | 000,045,056 | ---- | C] () -- C:\Windows\System32\acovcnt.exe
[2009.02.21 04:09:06 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini
[2009.02.21 03:40:16 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2009.02.21 03:27:55 | 000,047,672 | ---- | C] () -- C:\Windows\AsScrProlog.exe
[2009.02.21 03:22:57 | 000,049,152 | ---- | C] () -- C:\Windows\revdevdll.dll
[2009.02.21 02:53:09 | 000,008,268 | ---- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Local\d3d9caps.dat
[2009.02.21 02:50:04 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008.07.01 19:28:38 | 000,061,440 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll
[2008.05.22 09:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg
[2008.04.16 12:11:34 | 000,683,158 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.04.16 12:11:34 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.04.16 12:11:34 | 000,149,876 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.04.16 12:11:34 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2008.04.16 11:43:39 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2008.01.21 03:24:13 | 001,868,944 | ---- | C] () -- C:\Windows\System32\RSA32_16.DLL
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 002,367,936 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,642,976 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,123,606 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:25:26 | 000,557,568 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006.07.10 11:38:39 | 000,154,246 | -H-- | C] () -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\cglogs.dat
[2006.04.21 09:08:22 | 000,253,952 | ---- | C] () -- C:\Windows\System32\HtmlHelp.dll
[2005.04.03 00:30:00 | 000,110,592 | R--- | C] () -- C:\Windows\System32\scardsyn.dll
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2002.10.21 00:12:49 | 000,011,376 | R--- | C] () -- C:\Windows\System32\drivers\SECDRV.SYS
[1998.05.06 05:10:00 | 000,069,632 | R--- | C] () -- C:\Windows\System32\ODMA32.dll
========== LOP Check ==========
[2011.11.16 04:58:44 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Any DVD Converter Professional
[2009.04.25 22:18:43 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Any Video Converter
[2009.04.19 08:46:13 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Artweaver
[2011.06.24 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Babylon
[2010.02.13 18:49:19 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Bioshock2
[2012.02.04 10:45:35 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Bop
[2011.04.29 20:52:20 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\CasinoOnNet
[2009.04.04 14:52:28 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\CD-LabelPrint
[2010.04.18 07:46:12 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Cities3D
[2009.03.21 14:54:48 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Command & Conquer 3 Kanes Rache
[2009.03.16 13:27:37 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2009.02.27 19:01:56 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\DAEMON Tools
[2012.01.28 08:55:11 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\DAEMON Tools Lite
[2011.09.25 05:00:44 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\DAEMON Tools Pro
[2010.06.19 19:25:58 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\DNA
[2011.09.27 11:23:52 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\DonationCoder
[2011.12.09 01:19:16 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\FreeAudioPack
[2011.12.09 01:20:53 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\FreeCDRipper
[2010.03.11 01:47:54 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\FRITZ!
[2010.12.24 07:27:10 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Ibidxi
[2010.03.10 17:02:29 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Image Zone Express
[2009.05.17 10:17:11 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Lexware
[2010.04.18 21:31:48 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\MAGIX
[2009.03.03 17:53:29 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\MysteryStudio
[2011.04.13 15:12:51 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Nokia
[2011.04.13 15:12:52 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Nokia Ovi Suite
[2012.01.28 09:43:19 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Notepad++
[2011.03.27 04:58:15 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Ocirfa
[2009.11.02 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\PC Suite
[2010.02.28 11:48:15 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Printer Info Cache
[2009.04.20 16:57:37 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\ProtectDisc
[2011.10.30 04:38:24 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\PunkBuster
[2009.08.15 08:57:15 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Red Alert 3
[2011.12.29 04:59:16 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Samsung
[2009.05.16 18:37:40 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\SearchmeToolbar
[2009.02.23 16:47:48 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Sierra Entertainment
[2009.03.30 03:37:33 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\SoundSpectrum
[2011.12.09 01:23:02 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Steganos
[2009.10.25 08:49:08 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Stereoscopic Player
[2009.12.05 06:07:41 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\thriXXX
[2011.12.29 21:16:25 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Trine2
[2009.09.27 07:05:02 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Tropico 3
[2012.01.28 02:04:00 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\TuneUp Software
[2012.01.28 07:29:53 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Ubisoft
[2010.11.08 16:03:49 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Verbindungsassistent
[2009.05.10 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\vghd
[2010.06.03 16:55:56 | 000,000,000 | RHSD | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Winlog
[2012.02.04 10:45:55 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Yqxywol
[2009.11.30 01:03:04 | 000,000,000 | ---D | M] -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\ZipZag
[2012.02.04 00:46:01 | 000,000,962 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-910203591-2235916584-2118161158-1000Core.job
[2012.02.05 12:46:04 | 000,000,984 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-910203591-2235916584-2118161158-1000UA.job
[2012.02.04 17:57:46 | 000,032,580 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2010.02.21 14:47:06 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2009.02.21 03:38:55 | 000,000,000 | -H-D | M] -- C:\ASUS.SYS
[2011.10.30 12:50:17 | 000,000,000 | -HSD | M] -- C:\Boot
[2011.09.17 07:08:57 | 000,000,000 | ---D | M] -- C:\Casino
[2009.05.10 22:31:55 | 000,000,000 | ---D | M] -- C:\CELab
[2012.02.04 04:54:21 | 000,000,000 | -H-D | M] -- C:\Config.Msi
[2006.11.02 14:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2009.02.21 03:02:36 | 000,000,000 | ---D | M] -- C:\Intel
[2011.10.22 17:58:09 | 000,000,000 | ---D | M] -- C:\Neuer Ordner
[2009.12.05 04:48:47 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2009.02.21 11:32:28 | 000,000,000 | ---D | M] -- C:\Pana_USB
[2009.10.11 16:00:19 | 000,000,000 | ---D | M] -- C:\Philips
[2012.01.29 15:23:42 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.02.04 04:35:17 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012.01.08 10:23:47 | 000,000,000 | ---D | M] -- C:\Schreiben Andy
[2010.01.08 05:34:36 | 000,000,000 | ---D | M] -- C:\SD-Karte
[2012.02.05 12:38:48 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.12.29 05:07:34 | 000,000,000 | ---D | M] -- C:\Temp
[2009.02.21 02:53:08 | 000,000,000 | R--D | M] -- C:\Users
[2011.01.20 17:54:04 | 000,000,000 | ---D | M] -- C:\vghd
[2012.02.04 16:06:06 | 000,000,000 | ---D | M] -- C:\Windows
< %PROGRAMFILES%\*.exe >
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< MD5 for: AGP440.SYS >
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2012.01.28 01:58:13 | 000,126,976 | RHS- | M] () MD5=8D56EBA34F6C4EDC13DFCAD65C1CBA50 -- C:\Users\FickiFuckiFruchteis\AppData\Roaming\Microsoft\Windows\Templates\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
< MD5 for: IASTOR.SYS >
[2008.05.07 10:40:02 | 000,317,976 | ---- | M] (Intel Corporation) MD5=80C633722DA72E97F3F5B3B11325696D -- C:\Windows\System32\drivers\iaStor.sys
[2008.05.07 10:40:02 | 000,317,976 | ---- | M] (Intel Corporation) MD5=80C633722DA72E97F3F5B3B11325696D -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_1ab0331f\iaStor.sys
< MD5 for: IASTORV.SYS >
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
< MD5 for: SCECLI.DLL >
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
< MD5 for: USER32.DLL >
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\System32\user32.dll
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
< MD5 for: USERINIT.EXE >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2009.02.27 18:20:45 | 000,717,296 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2008.01.21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008.01.21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008.01.21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %systemroot%\system32\*.dll /lockedfiles >
[2011.04.19 04:14:43 | 000,353,792 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\dxtmsft.dll
[2011.04.19 04:14:43 | 000,223,232 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\dxtrans.dll
[7 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
< %USERPROFILE%\*.* >
[2011.07.03 20:21:55 | 000,001,024 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\.rnd
[2012.02.05 13:39:24 | 005,242,880 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat
[2012.02.05 13:39:24 | 000,262,144 | -H-- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat.LOG1
[2009.05.11 03:34:53 | 000,262,144 | -H-- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat.LOG2
[2009.09.28 16:23:53 | 003,670,016 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat_previous
[2009.11.21 19:34:07 | 000,000,000 | -H-- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT_tureg_new.LOG1
[2009.11.21 19:34:07 | 000,000,000 | -H-- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT_tureg_new.LOG2
[2011.10.30 12:50:40 | 005,242,880 | ---- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT_tureg_old
[2009.09.28 16:23:52 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{1909f5a4-a4b5-11de-9f95-002354931236}.TM.blf
[2009.09.28 16:23:52 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{1909f5a4-a4b5-11de-9f95-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.09.19 03:53:27 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{1909f5a4-a4b5-11de-9f95-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2009.12.05 05:16:04 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{21a26365-d6cc-11de-b4dd-806e6f6e6963}.TM.blf
[2009.12.05 05:16:04 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{21a26365-d6cc-11de-b4dd-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2009.11.22 18:16:07 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{21a26365-d6cc-11de-b4dd-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2009.12.05 18:59:54 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{259ce9fb-e154-11de-9e2f-002354931236}.TM.blf
[2009.12.05 18:59:54 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{259ce9fb-e154-11de-9e2f-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.12.05 05:19:58 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{259ce9fb-e154-11de-9e2f-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2011.10.30 12:50:39 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{2b230d2d-e1c7-11de-a279-002354931236}.TM.blf
[2011.10.30 12:50:39 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{2b230d2d-e1c7-11de-a279-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.12.05 19:10:59 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{2b230d2d-e1c7-11de-a279-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2009.05.02 20:44:19 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{2d3c3e7e-17d6-11de-a584-002354931236}.TM.blf
[2009.05.02 20:44:19 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{2d3c3e7e-17d6-11de-a584-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.03.23 23:34:34 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{2d3c3e7e-17d6-11de-a584-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2009.03.23 23:27:34 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2009.03.23 23:27:34 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2009.02.21 04:41:29 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
[2009.11.21 19:34:17 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{7a297029-ab36-11de-8ea5-002354931236}.TM.blf
[2009.11.21 19:34:17 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{7a297029-ab36-11de-8ea5-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.09.28 19:39:42 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{7a297029-ab36-11de-8ea5-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2009.09.19 02:31:10 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{87fa2962-a36b-11de-9374-002354931236}.TM.blf
[2009.09.19 02:31:10 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{87fa2962-a36b-11de-9374-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.09.17 12:37:59 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{87fa2962-a36b-11de-9374-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2009.06.20 02:52:21 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{b4738ce7-372e-11de-b240-002243be58ca}.TM.blf
[2009.06.20 02:52:21 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{b4738ce7-372e-11de-b240-002243be58ca}.TMContainer00000000000000000001.regtrans-ms
[2009.05.03 18:36:33 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{b4738ce7-372e-11de-b240-002243be58ca}.TMContainer00000000000000000002.regtrans-ms
[2009.08.02 01:14:08 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{b62028aa-5d1e-11de-abde-002354931236}.TM.blf
[2009.08.02 01:14:08 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{b62028aa-5d1e-11de-abde-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.06.20 09:40:38 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{b62028aa-5d1e-11de-abde-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2012.02.04 17:57:58 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{bcf6d6e7-02ec-11e1-9b71-806e6f6e6963}.TM.blf
[2012.02.04 17:57:58 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{bcf6d6e7-02ec-11e1-9b71-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
[2011.10.30 14:04:16 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.dat{bcf6d6e7-02ec-11e1-9b71-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms
[2009.09.17 10:34:17 | 000,065,536 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{e0ac1e2c-7ef6-11de-ba2e-002354931236}.TM.blf
[2009.09.17 10:34:17 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{e0ac1e2c-7ef6-11de-ba2e-002354931236}.TMContainer00000000000000000001.regtrans-ms
[2009.08.03 03:39:26 | 000,524,288 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\NTUSER.DAT{e0ac1e2c-7ef6-11de-ba2e-002354931236}.TMContainer00000000000000000002.regtrans-ms
[2009.02.21 02:53:09 | 000,000,020 | -HS- | M] () -- C:\Users\FickiFuckiFruchteis\ntuser.ini
< %USERPROFILE%\Local Settings\Temp\*.exe >
< %USERPROFILE%\Local Settings\Temp\*.dll >
< %USERPROFILE%\Application Data\*.exe >
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
< >
< End of report >
--- --- --- |
