stierdragon | 25.04.2012 18:50 | alles klar also hier die über OTL erzeugte Datei
OTL Logfile: Code:
OTL logfile created on: 4/25/2012 10:09:23 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,023.00 Mb Total Physical Memory | 811.00 Mb Available Physical Memory | 79.00% Memory free
907.00 Mb Paging File | 847.00 Mb Available in Paging File | 93.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 74.55 Gb Total Space | 5.14 Gb Free Space | 6.89% Space Free | Partition Type: NTFS
Drive D: | 67.66 Gb Total Space | 65.79 Gb Free Space | 97.22% Space Free | Partition Type: NTFS
Drive E: | 6.82 Gb Total Space | 2.12 Gb Free Space | 31.08% Space Free | Partition Type: FAT32
Drive F: | 149.04 Gb Total Space | 148.94 Gb Free Space | 99.94% Space Free | Partition Type: NTFS
Drive K: | 244.01 Mb Total Space | 1.11 Mb Free Space | 0.46% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
Using ControlSet: ControlSet001
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand] -- -- (AppMgmt)
SRV - File not found [Auto] -- -- (AntiVirUpgradeService)
SRV - [2011/10/24 16:32:00 | 000,055,144 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2011/07/03 12:17:40 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/03/28 10:15:04 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009/02/01 16:52:46 | 000,034,576 | ---- | M] (Cisco Systems, Inc.) [Auto] -- C:\Programme\Cisco Systems\Secure Desktop\Storage.exe -- (TwingoStorageService)
SRV - [2005/04/21 10:57:38 | 000,110,672 | ---- | M] () [Auto] -- C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2005/04/21 10:57:22 | 000,221,266 | ---- | M] () [Auto] -- C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2005/04/19 10:39:34 | 000,061,440 | ---- | M] (Cyberlink) [Auto] -- C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service)
SRV - [2004/12/24 10:51:00 | 000,106,496 | ---- | M] () [Auto] -- C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service)
SRV - [2004/10/21 20:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003/07/28 06:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2003/06/20 03:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
SRV - [2003/03/09 00:31:02 | 000,065,795 | R--- | M] (HP) [On_Demand] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2001/11/12 08:31:48 | 000,020,480 | ---- | M] (X10) [On_Demand] -- C:\Programme\Common Files\X10\Common\X10nets.exe -- (x10nets)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (NETPPPOI)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2012/04/25 14:54:30 | 000,017,408 | ---- | M] (ICSI Technology Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\USBCRFT.SYS -- (CardReaderFilter)
DRV - [2011/07/03 12:17:41 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/03 12:17:41 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/06/17 09:27:02 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/07/07 12:43:22 | 000,104,512 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/02/01 16:52:46 | 000,073,728 | ---- | M] () [Kernel | Auto] -- C:\Programme\Cisco Systems\Secure Desktop\Storage.sys -- (TwingoStorageDriver)
DRV - [2008/04/13 14:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2005/10/27 13:46:08 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2005/05/03 11:34:02 | 000,027,392 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2005/04/12 04:41:20 | 000,004,608 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ElbyDelay.sys -- (ElbyDelay)
DRV - [2005/02/23 06:57:18 | 000,680,576 | ---- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)
DRV - [2005/02/14 15:14:45 | 000,028,352 | ---- | M] (MusicMatch, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\MxlW2k.sys -- (MxlW2k)
DRV - [2005/01/13 10:20:00 | 000,012,500 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2005/01/12 16:30:00 | 000,915,968 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004/12/16 11:32:00 | 000,013,304 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BTNetFilter.sys -- (BTNetFilter)
DRV - [2004/12/03 09:41:00 | 000,140,544 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rt2500usb.sys -- (RT2500USB)
DRV - [2004/12/01 12:55:00 | 000,022,488 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2004/11/05 06:39:00 | 000,082,148 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2004/10/19 08:40:00 | 000,028,207 | ---- | M] (IVT Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2004/10/19 08:37:00 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2004/10/19 06:39:00 | 000,020,096 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2004/10/08 05:51:08 | 001,270,540 | ---- | M] (Agere Systems) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2004/10/01 08:58:10 | 001,272,000 | ---- | M] (C-Media Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\cmudax.sys -- (cmudax)
DRV - [2004/09/21 13:15:00 | 000,010,804 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BtNetDrv.sys -- (BT)
DRV - [2004/03/17 11:10:40 | 000,113,664 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2004/01/16 08:02:58 | 000,017,408 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10ufx2.sys -- (XUIF)
DRV - [2002/07/15 20:00:00 | 000,498,672 | ---- | M] (AVM Berlin) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\fxusbase.sys -- (FXUSBASE) Teledat X120 (WinXP/2000)
DRV - [2002/07/15 20:00:00 | 000,037,568 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\avmwan.sys -- (AVMWAN)
DRV - [2002/04/24 07:07:56 | 000,019,928 | ---- | M] (Winbond Electronics Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\wbscr.sys -- (wbscr)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=drive&s={searchTerms}&f=4
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.web.de/br/ie8_startpage
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.web.de/br/ie8_startpage
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\Anja_Schmid.GIZMO_ON_C\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
IE - HKU\Anja_Schmid.GIZMO_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Anja_Schmid.GIZMO_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
IE - HKU\LocalService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Programme\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027: C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2088: C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040: C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Programme\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/02/25 04:38:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012/02/25 04:38:54 | 000,000,000 | ---D | M]
[2009/07/24 12:09:19 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Extensions
[2009/02/08 14:05:52 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\extensions
[2012/04/24 17:47:04 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2012/04/13 11:13:37 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\Profiles\hjt46z6f.default\extensions
[2012/04/24 17:47:14 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\Profiles\hjt46z6f.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/04/24 17:47:15 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\Profiles\hjt46z6f.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012/04/24 17:47:17 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\Profiles\hjt46z6f.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
[2012/04/24 17:47:19 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\mozilla\Firefox\Profiles\hjt46z6f.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012/04/13 11:23:18 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011/04/17 14:05:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) -- C:\PROGRAMME\HAUFE\IDESK\IDESKBROWSER\EXTENSIONS\{C24AECC7-7C95-507F-D71F-155CB86656DF}
[2008/08/16 12:42:02 | 000,070,456 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\CgpCore.dll
[2008/08/16 12:42:12 | 000,091,448 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\confmgr.dll
[2008/08/16 12:42:08 | 000,020,800 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\ctxlogging.dll
[2008/05/21 03:41:08 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Programme\mozilla firefox\plugins\msvcm80.dll
[2008/05/21 03:41:08 | 000,548,864 | ---- | M] (Microsoft Corporation) -- C:\Programme\mozilla firefox\plugins\msvcp80.dll
[2008/05/21 03:41:08 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Programme\mozilla firefox\plugins\msvcr80.dll
[2011/02/02 15:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2008/08/16 12:44:46 | 000,427,312 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\npicaN.dll
[2008/08/16 12:42:04 | 000,023,864 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\TcpPServ.dll
[2009/06/24 08:37:42 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2009/06/24 08:37:42 | 000,002,344 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011/07/31 10:49:03 | 000,002,048 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\fcmdSrchdrive.xml
[2009/06/24 08:37:42 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2009/06/24 08:37:42 | 000,000,986 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2009/06/24 08:37:42 | 000,000,801 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2004/08/04 08:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (WEB.DE Konfiguration) - {17166733-40EA-4432-A85C-AE672FF0E236} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1und1InternetExplorerAddon\BHOXML.dll (1&1 Mail & Media GmbH)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (WEB.DE Toolbar BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (WEB.DE Toolbar) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\Anja_Schmid.GIZMO_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\Anja_Schmid.GIZMO_ON_C\..\Toolbar\WebBrowser: (WEB.DE Toolbar) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3 - HKU\Anja_Schmid.GIZMO_ON_C\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
O3 - HKU\Anja_Schmid.GIZMO_ON_C\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CloneCDTray] C:\Programme\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [Cmaudio] File not found
O4 - HKLM..\Run: [Dit] C:\WINDOWS\Dit.exe (ICSI Technology Ltd.)
O4 - HKLM..\Run: [Keyboard Status] C:\Programme\Medion\KeyStat\KeyStat.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [PCMService] C:\Programme\Home Cinema\PowerCinema\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl] C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] File not found
O4 - HKLM..\Run: [SweetIM] C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [TkBellExe] File not found
O4 - HKLM..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] C:\WINDOWS\System32\Hdaudpropshortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKU\Anja_Schmid.GIZMO_ON_C..\Run: [1und1Dispatcher] C:\Programme\1und1Softwareaktualisierung\SchedDispatcher.exe (1&1 Mail & Media GmbH)
O4 - HKU\Anja_Schmid.GIZMO_ON_C..\Run: [AnyDVD] C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe (SlySoft, Inc.)
O4 - HKU\Anja_Schmid.GIZMO_ON_C..\Run: [F0ED29D3] C:\WINDOWS\system32\19A1EA21F0ED29D30169.exe (THHiq)
O4 - HKU\Anja_Schmid.GIZMO_ON_C..\Run: [NBJ] C:\Programme\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG)
O4 - HKU\Anja_Schmid.GIZMO_ON_C..\Run: [Realtecdriver] C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Realtec\Realtecdriver.exe (THHiq)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe (IVT Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\hp psc 1000 series.lnk = C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\hpoddt01.exe.lnk = C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegedit = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Anja_Schmid.GIZMO_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\Anja_Schmid.GIZMO_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\Anja_Schmid.GIZMO_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegedit = 1
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Web-Suche - C:\Programme\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html ()
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_24.dll (Sun Microsystems, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} hxxp://office.microsoft.com/officeupdate/content/opuc.cab (Office Update Installation Engine)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1106843944468 (WUWebControl Class)
O16 - DPF: {705EC6D4-B138-4079-A307-EF13E40C2416} https://webvpn.muellergroup.com/CACHE/sdesktop/install/binaries/instweb.cab (InstallerWeb Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.1.0/GarminAxControl_32.CAB (Reg Error: Key error.)
O16 - DPF: o4mdl hxxp://image.one4.de/o4/cab/o4mdl.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\19A1EA21F0ED29D30169.exe) - C:\WINDOWS\system32\19A1EA21F0ED29D30169.exe (THHiq)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O27 - HKLM IFEO\msconfig.exe: Debugger - P9KDMF.EXE File not found
O27 - HKLM IFEO\regedit.exe: Debugger - P9KDMF.EXE File not found
O27 - HKLM IFEO\taskmgr.exe: Debugger - P9KDMF.EXE File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/02/12 14:54:46 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/04/25 20:51:40 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/04/24 16:50:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Xxxxxxxx
[2012/04/24 16:50:44 | 000,067,072 | -H-- | C] (THHiq) -- C:\WINDOWS\System32\19A1EA21F0ED29D30169.exe
[2012/04/24 16:50:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Realtec
[2012/04/17 16:12:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Sony
[2012/04/17 16:05:01 | 000,000,000 | ---D | C] -- C:\Programme\Sony Media Go Install
[2012/03/28 04:33:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\Downloads
[2012/03/28 04:33:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\GetRightToGo
[2012/03/28 04:25:54 | 000,000,000 | ---D | C] -- C:\Programme\Garmin
[2012/03/28 04:23:39 | 000,000,000 | ---D | C] -- C:\Programme\Garmin GPS Plugin
[2012/03/28 04:23:36 | 000,000,000 | ---D | C] -- C:\Programme\DIFX
[2012/03/28 03:42:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Garmin
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/04/25 22:05:27 | 006,815,744 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\NTUSER.DAT
[2012/04/25 14:54:30 | 000,017,408 | ---- | M] (ICSI Technology Ltd.) -- C:\WINDOWS\System32\drivers\USBCRFT.SYS
[2012/04/25 14:54:13 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/04/25 14:53:53 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2012/04/25 14:53:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/04/25 14:53:36 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
[2012/04/25 12:09:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/04/25 00:26:16 | 000,262,144 | ---- | M] () -- C:\Dokumente und Einstellungen\NetworkService\NTUSER.DAT
[2012/04/25 00:26:16 | 000,237,568 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\NTUSER.DAT
[2012/04/25 00:26:00 | 001,066,640 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2012/04/25 00:26:00 | 000,457,816 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012/04/25 00:26:00 | 000,439,656 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/04/25 00:26:00 | 000,084,366 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012/04/25 00:26:00 | 000,070,916 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/04/25 00:25:52 | 000,000,300 | -HS- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\ntuser.ini
[2012/04/24 17:56:07 | 015,505,736 | ---- | M] () -- C:\locked-WEB.DE_Firefox_Setup.exe.tttt
[2012/04/24 17:56:07 | 001,629,256 | ---- | M] () -- C:\locked-WEB.DE_IE8xp_Setup.exe.nnji
[2012/04/24 17:56:07 | 001,158,336 | ---- | M] () -- C:\locked-WEB.DE_Toolbar_IE_Setup.exe.njjj
[2012/04/24 17:56:07 | 000,162,304 | ---- | M] () -- C:\locked-UNWISE.EXE.uvgu
[2012/04/24 17:56:07 | 000,073,193 | ---- | M] () -- C:\locked-treeinfo.wc.ccyy
[2012/04/24 17:56:06 | 000,110,592 | ---- | M] () -- C:\locked-setup.exe.xdtx
[2012/04/24 17:56:03 | 015,134,848 | ---- | M] () -- C:\locked-Firefox Setup 9.0.1.exe.hnnn
[2012/04/24 17:56:03 | 000,000,771 | ---- | M] () -- C:\locked-IPH.PH.tttt
[2012/04/24 17:56:03 | 000,000,522 | ---- | M] () -- C:\locked-hpfr3420.xml.lepl
[2012/04/24 17:47:37 | 4091,668,480 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Eigene Dateien\locked-1022_094259.mpg.uvvv
[2012/04/24 17:47:37 | 2393,878,528 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Eigene Dateien\locked-0618_144900.mpg.rgvr
[2012/04/24 17:47:36 | 087,227,952 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\locked-avira_free_antivirus_de.exe.tddf
[2012/04/24 17:47:36 | 052,718,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\locked-avira_antivir_personal_de.exe.ftxd
[2012/04/24 17:47:36 | 003,640,335 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\locked-agsetup183se.exe.qjnq
[2012/04/24 17:47:36 | 002,104,256 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\locked-TeamViewer_Setup_de.exe.sslr
[2012/04/24 17:47:36 | 000,283,822 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\locked-C8F29T-BoardingPass.pdf.ruuv
[2012/04/24 17:47:36 | 000,047,255 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Desktop\locked-pdf3pe7J0.pdf.kmwp
[2012/04/24 17:47:36 | 000,000,194 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\locked-default.pls.nihn
[2012/04/24 17:47:01 | 000,000,079 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\locked-Desktop anzeigen.scf.uvvg
[2012/04/24 17:46:30 | 005,251,072 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\locked-005-rosenstolz_-_ich_bin_ich_(wir_sind_wir)-ministry.mp3.fgry
[2012/04/24 17:46:30 | 004,755,584 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\locked-007-flipsyde_-_happy_birthday-ministry.mp3.zzll
[2012/04/24 17:46:13 | 000,005,080 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\locked-kbkwknay.ayh.kmwk
[2012/04/24 17:45:53 | 000,000,305 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\locked-addr_file.html.yyff
[2012/04/24 17:45:53 | 000,000,043 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\locked-.zreglib.hbbb
[2012/04/24 17:38:45 | 001,008,736 | ---- | M] () -- C:\locked-AmazonMP3DownloaderInstall.exe.paaa
[2012/04/24 16:50:44 | 000,067,072 | -H-- | M] (THHiq) -- C:\WINDOWS\System32\19A1EA21F0ED29D30169.exe
[2012/04/24 16:39:39 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/04/23 16:46:46 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh325
[2012/04/23 16:46:36 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh324
[2012/04/23 16:46:26 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh323
[2012/04/23 16:46:18 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh322
[2012/04/23 16:46:10 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh321
[2012/04/23 16:45:06 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh320
[2012/04/17 16:12:15 | 000,001,606 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Media Go.lnk
[2012/04/17 16:12:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Sony
[2012/04/17 16:07:26 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/04/13 11:15:39 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/04/24 17:38:33 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh325
[2012/04/24 17:38:33 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh324
[2012/04/24 17:38:33 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh323
[2012/04/24 17:38:33 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh322
[2012/04/24 17:38:33 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh321
[2012/04/24 17:38:32 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh320
[2012/02/18 05:04:44 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2010/05/22 16:35:56 | 000,005,080 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\locked-kbkwknay.ayh.kmwk
[2009/07/27 15:28:45 | 000,000,043 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\locked-.zreglib.hbbb
[2009/07/26 11:10:03 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/07/24 16:14:37 | 000,058,644 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/07/24 14:36:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\muveeapp.INI
[2009/07/24 10:00:31 | 000,004,824 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2007/07/30 13:37:35 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\locked-addr_file.html.yyff
[2007/01/19 17:52:53 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\mcfb.ini
[2006/10/08 13:00:58 | 000,064,536 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2006/06/29 08:58:52 | 000,030,808 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
[2006/06/29 08:53:56 | 000,026,489 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/21 12:43:26 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2006/04/18 09:39:28 | 000,029,779 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/04/18 09:39:28 | 000,026,040 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/04/02 14:04:32 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2006/03/26 16:21:55 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2006/03/11 08:08:17 | 000,002,596 | R--- | C] () -- C:\WINDOWS\System32\cmtl.dat
[2005/12/31 07:49:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2005/12/16 18:00:52 | 000,306,688 | ---- | C] () -- C:\WINDOWS\Uninstall Spielesammlung.exe
[2005/12/16 18:00:45 | 000,000,413 | ---- | C] () -- C:\WINDOWS\Uninstall Spielesammlung.ini
[2005/11/02 15:27:03 | 000,039,436 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\wklnhst.dat
[2005/10/28 16:59:00 | 000,000,194 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\locked-default.pls.nihn
[2005/10/28 16:53:45 | 000,016,896 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/10/27 13:40:53 | 000,561,152 | R--- | C] () -- C:\WINDOWS\System32\hpotscl.dll
[2005/10/27 13:39:30 | 005,887,820 | -H-- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2005/10/27 13:39:30 | 000,079,520 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2005/10/27 13:39:30 | 000,000,150 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2005/10/27 13:39:27 | 006,815,744 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\NTUSER.DAT
[2005/10/27 13:39:27 | 000,000,300 | -HS- | C] () -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\ntuser.ini
[2005/10/27 11:45:12 | 000,020,454 | ---- | C] () -- C:\WINDOWS\hpoins01.dat
[2005/10/27 11:45:12 | 000,016,622 | ---- | C] () -- C:\WINDOWS\hpomdl01.dat
[2005/02/16 17:47:08 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll
[2005/02/14 17:30:26 | 000,000,229 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2005/02/14 15:00:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2005/02/12 14:51:20 | 000,000,095 | ---- | C] () -- C:\WINDOWS\WISO.INI
[2005/02/12 14:31:23 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/02/12 14:22:10 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\GetOSVer.dll
[2005/02/06 16:01:52 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/02/06 12:03:15 | 004,142,932 | ---- | C] () -- C:\WINDOWS\System32\DETour.exe
[2005/02/06 10:24:19 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005/02/06 09:34:48 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2005/02/06 09:08:44 | 000,005,744 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2005/02/06 09:08:44 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\D5D86239B1.sys
[2005/02/06 08:51:03 | 000,006,763 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2005/01/28 03:03:49 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2005/01/28 03:00:54 | 000,127,184 | ---- | C] () -- C:\WINDOWS\Unwise.exe
[2005/01/27 11:40:56 | 000,000,863 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2005/01/27 11:35:00 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\Install2500USB.dll
[2005/01/27 11:35:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\DEDriverDLL.dll
[2005/01/27 11:35:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\WRLSetup.exe
[2005/01/27 04:31:53 | 000,000,269 | ---- | C] () -- C:\WINDOWS\Dit.INI
[2005/01/27 04:19:21 | 000,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys
[2005/01/27 04:19:21 | 000,012,500 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys
[2005/01/27 02:37:14 | 000,001,176 | ---- | C] () -- C:\WINDOWS\ImpTable.bin
[2005/01/27 02:37:13 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2005/01/27 02:37:13 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2005/01/27 02:37:09 | 000,077,267 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2005/01/26 23:59:36 | 000,001,292 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005/01/26 23:59:33 | 000,457,816 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2005/01/26 23:59:33 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2005/01/26 23:59:33 | 000,084,366 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2005/01/26 23:59:33 | 000,071,022 | ---- | C] () -- C:\WINDOWS\System32\edit.com
[2005/01/26 23:59:33 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2005/01/26 23:59:31 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[2005/01/26 23:59:31 | 000,001,049 | ---- | C] () -- C:\WINDOWS\win.ini
[2005/01/26 23:59:30 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2005/01/26 23:59:30 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2005/01/26 23:59:30 | 000,000,231 | ---- | C] () -- C:\WINDOWS\system.ini
[2005/01/26 23:59:29 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2005/01/26 23:59:29 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2005/01/26 23:59:29 | 000,017,241 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2005/01/26 23:59:29 | 000,011,903 | ---- | C] () -- C:\WINDOWS\System32\setver.exe
[2005/01/26 23:59:29 | 000,006,287 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2005/01/26 23:59:29 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2005/01/26 23:59:29 | 000,003,358 | ---- | C] () -- C:\WINDOWS\System32\redir.exe
[2005/01/26 23:59:29 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe
[2005/01/26 23:59:28 | 000,439,656 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2005/01/26 23:59:28 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2005/01/26 23:59:28 | 000,070,916 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2005/01/26 23:59:28 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2005/01/26 23:59:28 | 000,014,060 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2005/01/26 23:59:28 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2005/01/26 23:59:28 | 000,004,438 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2005/01/26 23:59:28 | 000,004,233 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2005/01/26 23:59:28 | 000,001,783 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2005/01/26 23:59:28 | 000,000,369 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2005/01/26 23:59:27 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2005/01/26 23:59:27 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2005/01/26 23:59:27 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2005/01/26 23:59:27 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2005/01/26 23:59:27 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2005/01/26 23:59:27 | 000,034,032 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2005/01/26 23:59:27 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2005/01/26 23:59:27 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2005/01/26 23:59:27 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2005/01/26 23:59:27 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2005/01/26 23:59:27 | 000,027,914 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2005/01/26 23:59:27 | 000,007,084 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe
[2005/01/26 23:59:27 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005/01/26 23:59:26 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2005/01/26 23:59:26 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2005/01/26 23:59:26 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2005/01/26 23:59:26 | 000,039,546 | ---- | C] () -- C:\WINDOWS\System32\mem.exe
[2005/01/26 23:59:26 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2005/01/26 23:59:26 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2005/01/26 23:59:26 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe
[2005/01/26 23:59:25 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2005/01/26 23:59:25 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2005/01/26 23:59:25 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2005/01/26 23:59:25 | 000,014,816 | ---- | C] () -- C:\WINDOWS\System32\kb16.com
[2005/01/26 23:59:25 | 000,001,273 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com
[2005/01/26 23:59:24 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2005/01/26 23:59:24 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2005/01/26 23:59:24 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2005/01/26 23:59:24 | 000,019,726 | ---- | C] () -- C:\WINDOWS\System32\graphics.com
[2005/01/26 23:59:24 | 000,013,026 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe
[2005/01/26 23:59:24 | 000,008,584 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe
[2005/01/26 23:59:24 | 000,004,992 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2005/01/26 23:59:24 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe
[2005/01/26 23:59:22 | 000,054,128 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe
[2005/01/26 23:59:22 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2005/01/26 23:59:22 | 000,021,210 | ---- | C] () -- C:\WINDOWS\System32\debug.exe
[2005/01/26 23:59:22 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2005/01/26 23:59:21 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll
[2005/01/26 23:59:21 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll
[2005/01/26 23:59:21 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2005/01/26 23:59:21 | 000,052,777 | ---- | C] () -- C:\WINDOWS\System32\command.com
[2005/01/26 23:59:21 | 000,012,610 | ---- | C] () -- C:\WINDOWS\System32\append.exe
[2005/01/26 23:59:21 | 000,009,032 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2005/01/26 16:13:14 | 000,000,020 | -HS- | C] () -- C:\Dokumente und Einstellungen\LocalService\ntuser.ini
[2005/01/26 16:13:13 | 000,237,568 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\NTUSER.DAT
[2005/01/26 16:13:13 | 000,000,020 | -HS- | C] () -- C:\Dokumente und Einstellungen\NetworkService\ntuser.ini
[2005/01/26 16:13:12 | 000,262,144 | ---- | C] () -- C:\Dokumente und Einstellungen\NetworkService\NTUSER.DAT
[2005/01/26 16:12:34 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/01/26 16:11:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2005/01/26 16:10:14 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2005/01/26 16:10:09 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2005/01/26 16:09:39 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005/01/26 16:09:29 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2005/01/26 16:09:29 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2005/01/26 16:08:49 | 000,027,055 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2005/01/26 16:08:49 | 000,003,999 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2005/01/26 16:05:22 | 001,066,640 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2005/01/26 16:05:21 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/01/26 16:04:38 | 000,281,336 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/09/28 17:54:30 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll
[2003/02/20 11:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001/08/18 00:54:50 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe
[2001/08/18 00:54:08 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll
[1999/01/22 21:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
========== LOP Check ==========
[2012/04/24 17:56:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\X10 Commander
[2012/01/06 17:59:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\1&1 Mail & Media GmbH
[2010/04/24 07:57:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Amazon
[2011/07/31 10:53:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\facemoods.com
[2007/01/19 17:52:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\FileMaker
[2012/04/24 17:46:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\FileZilla
[2012/03/28 03:42:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Garmin
[2012/03/28 04:34:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\GetRightToGo
[2010/05/23 17:07:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Guitar Pro 6
[2007/07/25 15:26:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Haufe
[2012/04/24 17:46:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\ICAClient
[2010/06/08 16:59:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\ImTOO
[2010/05/22 16:36:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\MOVAVI
[2007/01/19 17:53:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\net.dacons.menucontrol
[2012/04/24 17:16:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\PriceGong
[2006/03/13 17:13:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\SlySoft
[2011/10/02 15:03:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Sony
[2011/10/02 17:19:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Sony Network Entertainment International LLC
[2012/04/24 17:47:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\TeamViewer
[2010/06/08 17:03:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Toolbar4
[2010/05/22 16:29:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Uniblue
[2005/11/02 12:46:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\WEBDE
[2011/09/18 09:18:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\XMedia Recode
[2012/04/24 16:50:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Anja Schmid.GIZMO\Anwendungsdaten\Xxxxxxxx
[2012/04/24 17:56:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\X10 Commander
[2012/04/24 17:45:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1und1InternetExplorerAddon
[2005/01/27 04:25:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Bluetooth
[2012/04/24 17:45:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DesktopIcons
[2005/02/12 14:51:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fun communications
[2010/05/23 17:05:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Guitar Pro 6
[2007/07/25 15:21:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Haufe
[2005/02/12 14:54:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\muvee Technologies
[2007/01/21 08:25:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SBT
[2009/07/24 10:04:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
[2011/09/18 09:39:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[2005/10/21 14:51:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Teledat
[2012/04/24 17:46:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\UUdb
[2005/02/06 09:35:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Viewpoint
[2012/02/25 07:26:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/12/10 15:15:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/04/10 10:37:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2006/02/01 15:00:23 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1130435321.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 24 bytes -> C:\WINDOWS:8FEF8162CE6629C8
< End of report > --- --- --- |