| 
 
					Zitat von ayrtonsenna
					(Beitrag 1135847)
				  Code: 
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\DA_DK\_desktop.inii:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\DE_AT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\DE_CH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\DE_DE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_AU\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_BE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_CA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_CH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_DE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_ES\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_FR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_GB\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_HK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_IE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_IN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_IT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_MY\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_NL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_NZ\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_PH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_SE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_SG\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_TH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_TW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\EN_US\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\ES_ES\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\ES_MX\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\FR_BE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\FR_CA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\FR_CH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\FR_FR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\HI_IN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\IT_CH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\IT_IT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\JA_JP\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\NB_NO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\NL_BE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\NL_NL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\PT_BR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\PT_PT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\SV_SE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\ZH_CN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\ZH_HK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\StartMenuLink\ZH_TW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\AR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\AR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\BG\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\BG\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\CS\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\CS\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\DA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\DA\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\DA\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\DE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\DE\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\DE\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\EL_GR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\EL_GR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\EN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\EN\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\EN\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\es\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\es\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_AR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_AR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_BO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_BO\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_CL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_CL\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_CO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_CO\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_CR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_CR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_DO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_DO\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_EC\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_EC\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_ES\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_ES\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_GT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_GT\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_HN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_HN\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_MX\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_MX\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_NI\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_NI\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PA\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PE\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PY\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_PY\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_SV\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_SV\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_UY\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_UY\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_VE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ES_VE\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ET\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ET\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FI\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FI\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FI\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\fr\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\fr\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_BE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_BE\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_CA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_CA\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_CA\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_CH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_CH\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_DZ\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_DZ\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_FR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_FR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_MA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_MA\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_TN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\FR_TN\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HE\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HU\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HU\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\HU\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\IT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\IT\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\IT\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ja\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ja\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\KO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\KO\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\KO\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\LT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\LT\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\LV\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\LV\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NB\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NB\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NL\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NL\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NN\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\NO\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PL\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PL\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT-BR_BR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT-BR_BR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT-PT_PT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT-PT_PT\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\pt\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\pt\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT_BR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT_BR\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT_BR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT_PT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\PT_PT\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\RO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\RO\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\RU\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\RU\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\RU\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SK\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SL\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SV\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\SV\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\TH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\TH\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\TR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\TR\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\TR\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-CN_CN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-CN_CN\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-CN_CN\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-CN_HK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-CN_HK\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-HK_HK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-HK_HK\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-TW_TW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-TW_TW\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH-TW_TW\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\zh\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\zh\HP_Advisor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH_CN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH_CN\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH_HK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH_HK\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH_TW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\wc\ZH_TW\Registration\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\WLToolBarFix\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\WT_OemOrigin\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\WT_OemOrigin\x64\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\HPQWare\WT_OemOrigin\x86\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\HP\support\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Intel\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Intel\ExtremeGraphics\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Intel\ExtremeGraphics\CUI\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Intel\ExtremeGraphics\CUI\Resource\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Intel\Logs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\Die.Legende.der.Waechter.2010.German.720p.BluRay.x264-ENCOUNTERS\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\Die.Legende.der.Waechter.2010.German.720p.BluRay.x264-ENCOUNTERS\Sample\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\Die.Legende.der.Waechter.2010.German.AC3D.DL.1080p.BluRay.x264-HDW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\Malcolm.Douglas.The.Wild.and.Dangerous.Kimberley.Coast.PDTV.XViD-WPi\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\Papillon.1973.German.AC3D.DL.720p.BluRay.x264-KLASSiGERHD\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\Papillon.1973.German.AC3D.DL.720p.BluRay.x264-KLASSiGERHD\Sample\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Jdownload\The.Town.Stadt.ohne.Gnade.2010.German.DL.1080p.BluRay.x264-HDW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\help\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Language\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Myanimations\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Myimages\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Myimages\Hareketliler\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Myimages\msn-avatar2\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Myimages\Semboller\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Skins\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Smile\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Smile\Genel\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Smile\Standart\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\MSPmessenger\Sounds\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Adobe\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\AFlash\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\CyberDVD\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\ATIGraphic\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\Audio\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\CardReader\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\Chipset\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\Intel_MEI\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\IntelTBT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\IRST\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\LAN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\Tpad\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Drivers\WLAN_B\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\ESUW7\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\HPDOCG62\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\HPPM\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\HPPM\powersettings\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\HPQL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\HPSF\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\HPWA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\InetSec\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\LSSS\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\LSSS\LsDriveDetect\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\MSLight\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\PowerDVD\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Shockwave\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\SunJava\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\support\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\support\tools\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Sw_ver\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\WINLIVE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SwSetup\Youcam\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Flags\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\BB\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\EventLog\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\EventLog\BB\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\LPs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\QFEOff\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Logs\WLIVE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Util\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Util\NIS\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Util\postpin\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Util\TDC\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Util\TDC\MCPP\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\SYSTEM.SAV\Util\TDC\Script\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Contacts\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Desktop\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\CyberLink\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\CyberLink\LocalStorage_V2\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\CyberLink\LocalStorage_V2\DefaultMember\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\CyberLink\LocalStorage_V2\DefaultMember\Misc\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\CyberLink\LocalStorage_V2\Misc\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\CyberLink\PowerDVD9\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\DVDFab\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\DVDFab\Log\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\DVDVideoSoft\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\LDW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\LDW\virtual villagers - the secret city\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Meine empfangenen Dateien\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Meine empfangenen Dateien\alibolat2342432011\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Meine empfangenen Dateien\alibolat2342432011\Verlauf\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Meine empfangenen Dateien\sennabjorn3126991819\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Meine empfangenen Dateien\sennabjorn3126991819\Verlauf\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\My Stationery\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\PcSetup\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\samsung\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\samsung\Kies\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\samsung\Kies\Download\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\samsung\Kies\Download\Applications\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\SelfMV\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Virtual Machines\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Virtual Machines\Windows 7\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Virtual Machines\Windows XP Professional (2)\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Virtual Machines\Windows XP Professional Turkce\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Documents\Virtual Machines\Windows XP Professional\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Downloads\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\HP\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Airlines\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Aktuelle_Downloadslinks\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Alisveris\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\banknotlar\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Boardlar\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Favariler\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Filmler\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Gezilecek\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\haberler\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Önemli_Gerekli_Bilgiler_VS\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\IT_VS_Alisveris\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\ps_ler\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Samsun\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Sansoyunlari\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Sat_vs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\satshop\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Software_vs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Soru_ve_cevaplar\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Spor\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\Streams\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Links\ucakbiletleri\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Microsoft-Websites\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Mozilla Firefox\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\MSN-Websites\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Favorites\Windows Live\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\07\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\07\04\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\07\04\10\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\10\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\10\01\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\10\01\02\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\15\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\15\13\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Album Artwork\Cache\C7472F6AD583BB06\15\13\02\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\iTunes Media\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Music\iTunes\Previous iTunes Libraries\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\Users\senna\Tracing\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\Docs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\grub4dos\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\MULTIpartitionUSBstick\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\qemu\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\qemu\keymaps\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\qemu\License\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\syslinux\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\tools\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\files\winsetup\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0WUGRP\C\WinSetupFromUSB\SourceCode\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Aqua.3D.Screensaver1.52_Snorgared\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Aqua.3D.Screensaver1.52_Snorgared\Aqua 3D Screensaver 1.52\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\elma\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\MacOS\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\Resources\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ar\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\bg_BG\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ca\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ca_ES@valencia\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\cs_CZ\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\da_DK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\de\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\el\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\es\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\et_EE\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\eu_ES\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\fi_FI\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\fr\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\fr_CA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\gl_ES\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\he_IL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\hr\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\hu_HU\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\id_ID\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\it\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ja_JP\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ka\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\km_KH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ko_KR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ku\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\lt_LT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\lv_LV\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\mk_MK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\nb_NO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ne\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\nl\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\nn_NO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\oc\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\pl_PL\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\pt_BR\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\pt_PT\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ro_RO\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\ru\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\sk_SK\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\sl_SI\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\sv\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\th_TH\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\tr\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\uk_UA\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\vi_VN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\zh_CN\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\locales\zh_TW\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\16x16\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\32x32\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\48x48\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\blukis\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\blukis\16x16\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\blukis\32x32\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\blukis\48x48\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\cyril\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\cyril\16x16\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\lone\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\lone\16x16\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\lone\32x32\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\lone\48x48\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\opencrystal\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\opencrystal\16x16\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\opencrystal\32x32\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Neuer Ordner\FileZilla.app\Contents\SharedSupport\resources\opencrystal\48x48\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Okey\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Okey\Okey\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Okey\Okey\OKEY                            1\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Okey\Okey\OKEY                            1\Data\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\Okey\Okey\OKEY1~1%\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\SereneScreen.Marine.Aquarium.v3.1.5563.USTA2\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\SereneScreen.Marine.Aquarium.v3.1.5563.USTA2\Crack\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\download\vlc\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\f129cad41ec6b5236af3\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\Bin\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\Bin\logs\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\Bin\res\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\Data\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\HPQWare\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\HPQWare\BingBar\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\HPQWare\BingBar\x64\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\$R0XOMVP\C\HP\HPQWare\BingBar\x86\_desktop.ini
 i:\verbatimden\1 NTFS\$RECYCLE.BIN\S-1-5-21-2423487295-321824416-2524562120-1000\_desktop.ini
 .
 .
 (((((((((((((((((((((((   Dateien erstellt von 2013-07-19 bis 2013-08-19  ))))))))))))))))))))))))))))))
 .
 .
 2013-08-19 08:52 . 2013-08-19 08:52        --------        d-----w-        c:\users\Default\AppData\Local\temp
 2013-08-19 07:07 . 2013-08-19 07:07        --------        d-----w-        C:\FRST
 2013-08-17 16:40 . 2013-08-17 16:42        --------        d-----w-        c:\users\ayrtonsenna\AppData\Local\CrashDumps
 2013-08-16 19:59 . 2013-08-16 19:59        --------        d-----w-        C:\bfdbdffdfd
 2013-08-14 13:19 . 2013-08-14 13:19        --------        d-----w-        c:\users\ayrtonsenna\AppData\Roaming\Thunderbird
 2013-08-14 13:19 . 2013-08-14 13:19        --------        d-----w-        c:\users\ayrtonsenna\AppData\Local\Thunderbird
 2013-08-14 13:19 . 2013-08-14 13:19        --------        d-----w-        c:\program files (x86)\Mozilla Thunderbird
 2013-08-14 00:04 . 2013-08-14 05:31        67632        ----a-w-        c:\windows\system32\msln.exe
 2013-08-13 19:19 . 2013-08-13 19:19        --------        d-----w-        c:\program files (x86)\Common Files\Symantec Shared
 2013-08-13 19:08 . 2013-08-13 21:06        177312        ----a-w-        c:\windows\system32\drivers\SYMEVENT64x86.SYS
 2013-08-13 19:08 . 2013-08-13 19:08        --------        d-----w-        c:\program files\Symantec
 2013-08-13 19:08 . 2013-08-13 19:08        --------        d-----w-        c:\program files\Common Files\Symantec Shared
 2013-08-13 19:07 . 2013-08-14 05:34        --------        d-----w-        c:\windows\system32\drivers\NISx64
 2013-08-13 19:07 . 2013-08-13 19:17        --------        d-----w-        c:\programdata\Norton
 2013-08-13 19:07 . 2013-08-13 19:07        --------        d-----w-        c:\program files (x86)\Norton Internet Security
 2013-08-13 19:06 . 2013-08-13 19:06        --------        d-----w-        c:\program files (x86)\NortonInstaller
 2013-08-13 18:58 . 2013-08-17 20:54        --------        d--h--w-        c:\users\ayrtonsenna\AppData\Roaming\Fcnyrocpnr
 2013-08-01 07:51 . 2013-08-01 07:51        --------        d-----w-        c:\users\ayrtonsenna\AppData\Local\Avg2013
 2013-08-01 07:44 . 2013-08-01 07:44        --------        d-----w-        c:\program files\iPod
 2013-08-01 07:44 . 2013-08-01 07:44        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
 2013-08-01 07:44 . 2013-08-01 07:44        --------        d-----w-        c:\program files\iTunes
 2013-08-01 07:44 . 2013-08-01 07:44        --------        d-----w-        c:\program files (x86)\iTunes
 2013-08-01 06:45 . 2013-08-01 06:45        --------        d-----w-        c:\users\Default\AppData\Roaming\TuneUp Software
 .
 .
 .
 ((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
 .
 2013-07-29 13:51 . 2012-04-03 10:25        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
 2013-07-29 13:51 . 2011-08-25 10:31        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
 2013-07-16 17:48 . 2011-08-25 15:25        622887        ----a-w-        c:\programdata\bdinstall.bin
 2013-07-02 18:01 . 2013-07-02 18:01        96768        ----a-w-        c:\windows\system32\mshtmled.dll
 2013-07-02 18:01 . 2013-07-02 18:01        91648        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
 2013-07-02 18:01 . 2013-07-02 18:01        89088        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
 2013-07-02 18:01 . 2013-07-02 18:01        89088        ----a-w-        c:\windows\system32\ie4uinit.exe
 2013-07-02 18:01 . 2013-07-02 18:01        86528        ----a-w-        c:\windows\SysWow64\iesysprep.dll
 2013-07-02 18:01 . 2013-07-02 18:01        85504        ----a-w-        c:\windows\system32\jsproxy.dll
 2013-07-02 18:01 . 2013-07-02 18:01        85504        ----a-w-        c:\windows\system32\iesetup.dll
 2013-07-02 18:01 . 2013-07-02 18:01        82432        ----a-w-        c:\windows\system32\icardie.dll
 2013-07-02 18:01 . 2013-07-02 18:01        816640        ----a-w-        c:\windows\system32\jscript.dll
 2013-07-02 18:01 . 2013-07-02 18:01        76800        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
 2013-07-02 18:01 . 2013-07-02 18:01        76800        ----a-w-        c:\windows\system32\tdc.ocx
 2013-07-02 18:01 . 2013-07-02 18:01        74752        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
 2013-07-02 18:01 . 2013-07-02 18:01        74752        ----a-w-        c:\windows\SysWow64\iesetup.dll
 2013-07-02 18:01 . 2013-07-02 18:01        729088        ----a-w-        c:\windows\system32\msfeeds.dll
 2013-07-02 18:01 . 2013-07-02 18:01        65024        ----a-w-        c:\windows\system32\pngfilt.dll
 2013-07-02 18:01 . 2013-07-02 18:01        63488        ----a-w-        c:\windows\SysWow64\tdc.ocx
 2013-07-02 18:01 . 2013-07-02 18:01        599040        ----a-w-        c:\windows\system32\vbscript.dll
 2013-07-02 18:01 . 2013-07-02 18:01        55296        ----a-w-        c:\windows\system32\msfeedsbs.dll
 2013-07-02 18:01 . 2013-07-02 18:01        534528        ----a-w-        c:\windows\system32\ieapfltr.dll
 2013-07-02 18:01 . 2013-07-02 18:01        49664        ----a-w-        c:\windows\system32\imgutil.dll
 2013-07-02 18:01 . 2013-07-02 18:01        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
 2013-07-02 18:01 . 2013-07-02 18:01        48640        ----a-w-        c:\windows\system32\mshtmler.dll
 2013-07-02 18:01 . 2013-07-02 18:01        452608        ----a-w-        c:\windows\system32\dxtmsft.dll
 2013-07-02 18:01 . 2013-07-02 18:01        448512        ----a-w-        c:\windows\system32\html.iec
 2013-07-02 18:01 . 2013-07-02 18:01        420864        ----a-w-        c:\windows\SysWow64\vbscript.dll
 2013-07-02 18:01 . 2013-07-02 18:01        403248        ----a-w-        c:\windows\system32\iedkcs32.dll
 2013-07-02 18:01 . 2013-07-02 18:01        39936        ----a-w-        c:\windows\system32\iernonce.dll
 2013-07-02 18:01 . 2013-07-02 18:01        3695416        ----a-w-        c:\windows\system32\ieapfltr.dat
 2013-07-02 18:01 . 2013-07-02 18:01        367104        ----a-w-        c:\windows\SysWow64\html.iec
 2013-07-02 18:01 . 2013-07-02 18:01        35840        ----a-w-        c:\windows\SysWow64\imgutil.dll
 2013-07-02 18:01 . 2013-07-02 18:01        30720        ----a-w-        c:\windows\system32\licmgr10.dll
 2013-07-02 18:01 . 2013-07-02 18:01        282112        ----a-w-        c:\windows\system32\dxtrans.dll
 2013-07-02 18:01 . 2013-07-02 18:01        267776        ----a-w-        c:\windows\system32\ieaksie.dll
 2013-07-02 18:01 . 2013-07-02 18:01        249344        ----a-w-        c:\windows\system32\webcheck.dll
 2013-07-02 18:01 . 2013-07-02 18:01        248320        ----a-w-        c:\windows\system32\ieui.dll
 2013-07-02 18:01 . 2013-07-02 18:01        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb
 2013-07-02 18:01 . 2013-07-02 18:01        2382848        ----a-w-        c:\windows\system32\mshtml.tlb
 2013-07-02 18:01 . 2013-07-02 18:01        237056        ----a-w-        c:\windows\system32\url.dll
 2013-07-02 18:01 . 2013-07-02 18:01        23552        ----a-w-        c:\windows\SysWow64\licmgr10.dll
 2013-07-02 18:01 . 2013-07-02 18:01        2312704        ----a-w-        c:\windows\system32\jscript9.dll
 2013-07-02 18:01 . 2013-07-02 18:01        222208        ----a-w-        c:\windows\system32\msls31.dll
 2013-07-02 18:01 . 2013-07-02 18:01        2147840        ----a-w-        c:\windows\system32\iertutil.dll
 2013-07-02 18:01 . 2013-07-02 18:01        197120        ----a-w-        c:\windows\system32\msrating.dll
 2013-07-02 18:01 . 2013-07-02 18:01        1800704        ----a-w-        c:\windows\SysWow64\jscript9.dll
 2013-07-02 18:01 . 2013-07-02 18:01        17824768        ----a-w-        c:\windows\system32\mshtml.dll
 2013-07-02 18:01 . 2013-07-02 18:01        173056        ----a-w-        c:\windows\system32\ieUnatt.exe
 2013-07-02 18:01 . 2013-07-02 18:01        165888        ----a-w-        c:\windows\system32\iexpress.exe
 2013-07-02 18:01 . 2013-07-02 18:01        163840        ----a-w-        c:\windows\system32\ieakui.dll
 2013-07-02 18:01 . 2013-07-02 18:01        161792        ----a-w-        c:\windows\SysWow64\msls31.dll
 2013-07-02 18:01 . 2013-07-02 18:01        160256        ----a-w-        c:\windows\system32\wextract.exe
 2013-07-02 18:01 . 2013-07-02 18:01        160256        ----a-w-        c:\windows\system32\ieakeng.dll
 2013-07-02 18:01 . 2013-07-02 18:01        152064        ----a-w-        c:\windows\SysWow64\wextract.exe
 2013-07-02 18:01 . 2013-07-02 18:01        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe
 2013-07-02 18:01 . 2013-07-02 18:01        149504        ----a-w-        c:\windows\system32\occache.dll
 2013-07-02 18:01 . 2013-07-02 18:01        1494528        ----a-w-        c:\windows\system32\inetcpl.cpl
 2013-07-02 18:01 . 2013-07-02 18:01        145920        ----a-w-        c:\windows\system32\iepeers.dll
 2013-07-02 18:01 . 2013-07-02 18:01        142848        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
 2013-07-02 18:01 . 2013-07-02 18:01        1427968        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
 2013-07-02 18:01 . 2013-07-02 18:01        1392128        ----a-w-        c:\windows\system32\wininet.dll
 2013-07-02 18:01 . 2013-07-02 18:01        135168        ----a-w-        c:\windows\system32\IEAdvpack.dll
 2013-07-02 18:01 . 2013-07-02 18:01        1346560        ----a-w-        c:\windows\system32\urlmon.dll
 2013-07-02 18:01 . 2013-07-02 18:01        12288        ----a-w-        c:\windows\system32\mshta.exe
 2013-07-02 18:01 . 2013-07-02 18:01        11776        ----a-w-        c:\windows\SysWow64\mshta.exe
 2013-07-02 18:01 . 2013-07-02 18:01        114176        ----a-w-        c:\windows\system32\admparse.dll
 2013-07-02 18:01 . 2013-07-02 18:01        1129472        ----a-w-        c:\windows\SysWow64\wininet.dll
 2013-07-02 18:01 . 2013-07-02 18:01        111616        ----a-w-        c:\windows\system32\iesysprep.dll
 2013-07-02 18:01 . 2013-07-02 18:01        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
 2013-07-02 18:01 . 2013-07-02 18:01        10926080        ----a-w-        c:\windows\system32\ieframe.dll
 2013-07-02 18:01 . 2013-07-02 18:01        10752        ----a-w-        c:\windows\system32\msfeedssync.exe
 2013-07-02 18:01 . 2013-07-02 18:01        103936        ----a-w-        c:\windows\system32\inseng.dll
 2013-07-02 18:01 . 2013-07-02 18:01        101888        ----a-w-        c:\windows\SysWow64\admparse.dll
 2013-06-02 15:11 . 2013-07-02 17:40        75825640        ----a-w-        c:\windows\system32\MRT.exe
 2013-05-21 13:40 . 2013-05-21 13:40        95648        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
 2013-05-21 13:40 . 2012-06-21 16:30        866720        ----a-w-        c:\windows\SysWow64\npdeployJava1.dll
 2013-05-21 13:40 . 2011-08-25 12:49        788896        ----a-w-        c:\windows\SysWow64\deployJava1.dll
 .
 .
 ((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
 .
 .
 *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
 REGEDIT4
 .
 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
 2013-02-02 20:05        1527944        ----a-w-        c:\program files (x86)\Ask.com\GenericAskToolbar.dll
 .
 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
 "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-02-02 1527944]
 .
 [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
 [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
 [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
 [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
 .
 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "AlcoholAutomount"="c:\program files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-09-18 205976]
 "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
 "ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
 "Facebook Update"="c:\users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2013-07-06 138096]
 "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432]
 "iFunBoxConnector"="c:\program files (x86)\i-Funbox DevTeam\ifb_conn.exe" [2012-11-20 812544]
 .
 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
 "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
 "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2009-07-27 180224]
 "NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2010-04-02 1234216]
 "vmware-tray"="c:\program files (x86)\VMware\VMware Workstation\vmware-tray.exe" [2010-09-21 129584]
 "RemoteControl11"="c:\program files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe" [2011-08-24 230696]
 "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
 "LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
 "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
 "MPlayerForWindows_UpdateReminder"="c:\program files (x86)\MPlayer für Windows\AutoUpdate.exe" [2011-06-09 235002]
 "ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2013-02-02 1718920]
 "IndexSearch"="c:\program files (x86)\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]
 "PaperPort PTD"="c:\program files (x86)\Nuance\PaperPort\pptd40nt.exe" [2010-03-08 29984]
 "PPort12reminder"="c:\program files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
 "PDFHook"="c:\program files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-05 636192]
 "PDF5 Registry Controller"="c:\program files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
 "ControlCenter4"="c:\program files (x86)\ControlCenter4\BrCcBoot.exe" [2011-04-20 139264]
 "BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2010-12-23 2629632]
 "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
 "WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2012-06-20 74752]
 "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
 .
 c:\users\ayrtonsenna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
 Turkcell 3G VINN.lnk - c:\program files (x86)\Turkcell\Turkcell 3G VINN\Turkcell 3G VINN.exe [2012-9-27 2684928]
 .
 c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
 EZ-RC System Tray.lnk - c:\program files (x86)\EZ-RC\ez-rc-tray.exe [2010-9-1 131440]
 .
 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
 "ConsentPromptBehaviorAdmin"= 0 (0x0)
 "ConsentPromptBehaviorUser"= 3 (0x3)
 "EnableUIADesktopToggle"= 0 (0x0)
 "PromptOnSecureDesktop"= 0 (0x0)
 "EnableLinkedConnections"= 1 (0x1)
 "EnableLUA"= 0 (0x0)
 .
 [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
 "LoadAppInit_DLLs"=1 (0x1)
 .
 R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
 R2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
 R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
 R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
 R2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
 R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
 R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
 R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
 R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x]
 R3 EraserUtilDrv11220;EraserUtilDrv11220;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys [x]
 R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x]
 R3 massfilter;MBB Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
 R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
 R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
 R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
 R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
 S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
 S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x]
 S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x]
 S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [x]
 S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x]
 S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130813.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130813.001\IDSvia64.sys [x]
 S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x]
 S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1404000.028\SYMNETS.SYS [x]
 S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2011/10/23 16:13];c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl;c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [x]
 S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
 S2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [x]
 S2 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [x]
 S2 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [x]
 S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [x]
 S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [x]
 S2 ntk_PowerDVD;ntk_PowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [x]
 S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe [x]
 S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [x]
 S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe;c:\program files\CyberLink\Shared files\RichVideo64.exe [x]
 S2 SearchAnonymizer;SearchAnonymizer;c:\users\ayrtonsenna\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe;c:\users\ayrtonsenna\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [x]
 S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
 S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
 S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys;c:\windows\SYSNATIVE\drivers\vmci.sys [x]
 S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [x]
 S2 WinisoCDBus;WinISO Virtual CD Drive;c:\windows\system32\drivers\WinisoCDBus.sys;c:\windows\SYSNATIVE\drivers\WinisoCDBus.sys [x]
 S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
 S3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
 S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
 S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x]
 S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
 S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x]
 S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
 S3 LVUVC64;Logitech Webcam 250(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
 S3 RTL8167;Realtek 8167 NT-Treiber;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
 .
 .
 [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
 2009-06-17 10:11        451872        ----a-w-        c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
 .
 [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
 2013-08-01 06:56        1173456        ----a-w-        c:\program files (x86)\Google\Chrome\Application\28.0.1500.95\Installer\chrmstp.exe
 .
 Inhalt des "geplante Tasks" Ordners
 .
 2013-08-19 c:\windows\Tasks\Adobe Flash Player Updater.job
 - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 13:51]
 .
 2013-08-19 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001Core.job
 - c:\users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-13 08:10]
 .
 2013-08-19 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3863859204-721055020-1558023407-1001UA.job
 - c:\users\ayrtonsenna\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-13 08:10]
 .
 2013-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
 - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-31 09:08]
 .
 2013-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
 - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-31 09:08]
 .
 .
 --------- X64 Entries -----------
 .
 .
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
 "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-19 161304]
 "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-19 386584]
 "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-19 415256]
 "Ocs_SM"="c:\users\ayrtonsenna\AppData\Roaming\OCS\SM\SearchAnonymizer.exe" [2013-03-28 106496]
 .
 ------- Zusätzlicher Suchlauf -------
 .
 uLocal Page = c:\windows\system32\blank.htm
 uStart Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=NIS&pvid=20.3.0.36
 mStart Page = about:blank
 mLocal Page = c:\windows\SysWOW64\blank.htm
 uInternet Settings,ProxyOverride = *.local
 IE: An OneNote s&enden - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
 IE: Mit PDF Viewer Plus öffnen - c:\program files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
 IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
 LSP: c:\program files (x86)\VMware\VMware Workstation\vsocklib.dll
 TCP: Interfaces\{D7BCC13E-14D1-4A28-9863-451F9C086F1B}: NameServer = 192.168.0.1
 FF - ProfilePath - c:\users\ayrtonsenna\AppData\Roaming\Mozilla\Firefox\Profiles\lb7m3u3d.default\
 FF - prefs.js: browser.search.selectedEngine - Search the web
 FF - prefs.js: browser.startup.homepage - hxxp://beceriksizler.beep.to/forum.php|hxxp://www.ulusalkanal.com.tr/|hxxp://www.sat-ulc.eu/index.php|hxxp://www.odatv.com/
 FF - prefs.js: keyword.URL - hxxp://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q=
 FF - ExtSQL: 2013-06-20 10:46; fmconverter@gmail.com; c:\program files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
 FF - ExtSQL: 2013-08-13 21:08; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\IPSFFPlgn
 FF - ExtSQL: 2013-08-13 21:17; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\coFFPlgn
 FF - user.js: browser.search.selectedEngine - Search the web
 FF - user.js: browser.search.order.1 - Search the web
 FF - user.js: browser.search.defaultenginename - Search the web
 FF - user.js: keyword.URL - hxxp://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q=
 FF - user.js: privacy.item.cookies - false
 FF - user.js: privacy.sanitize.promptOnSanitize - false
 FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=726f0f70000000000000002682ce4faf&q=
 FF - user.js: extensions.BabylonToolbar.id - 726f0f70000000000000002682ce4faf
 FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
 FF - user.js: extensions.BabylonToolbar.instlDay - 15658
 FF - user.js: extensions.BabylonToolbar.vrsn - 1.8.3.8
 FF - user.js: extensions.BabylonToolbar.vrsni - 1.8.3.8
 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.8.3.822:23
 FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
 FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
 FF - user.js: extensions.BabylonToolbar.aflt - babsst
 FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
 FF - user.js: extensions.BabylonToolbar.tlbrId - base
 FF - user.js: extensions.BabylonToolbar.instlRef - sst
 FF - user.js: extensions.BabylonToolbar.dfltLng - en
 FF - user.js: extensions.BabylonToolbar.excTlbr - false
 FF - user.js: extensions.BabylonToolbar.admin - false
 FF - user.js: extensions.delta.tlbrSrchUrl -
 FF - user.js: extensions.delta.id - 726f0f70000000000000002682ce4faf
 FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
 FF - user.js: extensions.delta.instlDay - 15792
 FF - user.js: extensions.delta.vrsn - 1.8.10.0
 FF - user.js: extensions.delta.vrsni - 1.8.10.0
 FF - user.js: extensions.delta.vrsnTs - 1.8.10.011:41
 FF - user.js: extensions.delta.prtnrId - delta
 FF - user.js: extensions.delta.prdct - delta
 FF - user.js: extensions.delta.aflt - babsst
 FF - user.js: extensions.delta.smplGrp - none
 FF - user.js: extensions.delta.tlbrId - base
 FF - user.js: extensions.delta.instlRef - sst
 FF - user.js: extensions.delta.dfltLng - en
 FF - user.js: extensions.delta.excTlbr - false
 FF - user.js: extensions.delta.admin - false
 FF - user.js: extensions.delta.autoRvrt - false
 FF - user.js: extensions.delta.rvrt - false
 FF - user.js: extensions.delta.newTab - false
 .
 - - - - Entfernte verwaiste Registrierungseinträge - - - -
 .
 BHO-{64182481-4F71-486b-A045-B233BD0DA8FC} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll
 Toolbar-{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll
 Toolbar-{DFEFCDEE-CF1A-4FC8-89AF-189327213627} - c:\users\ayrtonsenna\AppData\Roaming\toolplugin\toolbar.dll
 Wow6432Node-HKCU-Run-ieuzqziq - c:\users\ayrtonsenna\AppData\Roaming\Fcnyrocpnr\mvtwodqziq.exe
 Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe
 Wow6432Node-HKLM-Run-TaskTray - (no file)
 Wow6432Node-HKLM-Run-<NO NAME> - (no file)
 Wow6432Node-HKLM-Run-MCM - c:\program files (x86)\Mp3 Convert Master\Mp3ConvertMaster.exe
 Wow6432Node-HKLM-Run-QuickTime Task - c:\program files (x86)\QuickTime\QTTask.exe
 AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\uninstall.exe
 AddRemove-Incomedia WebSite X5 v8 - Evolution - c:\windows\system32\iwpsetup.exe
 AddRemove-WinISO - c:\program files (x86)\WinISO Computing\WinISO\uninst.exe
 .
 .
 .
 [HKEY_LOCAL_MACHINE\system\ControlSet001\services\NIS]
 "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
 "ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z
 [\]^_œ\00\00œ\00\00\00\00\0f\00JKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~œ\00\00œ\00\00\00\00~\00\00\00\00\00\00\00\00\01\00>"
 .
 .
 [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]
 "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"
 .
 --------------------- Gesperrte Registrierungsschluessel ---------------------
 .
 [HKEY_USERS\.Default\Software\SetId\Internal]
 @Denied: (A 2) (LocalSystem)
 "DATA2"="<settings accountStatus=\"3\" oldDevice=\"\" timeDiff=\"149\" expireTime=\"1316878230\" productStatus=\"1\" obSize=\"0\" InstallIS=\"1289332796\" isSubsc=\"0\" authStat_is=\"0\" version=\"14.1\" keyType=\"195\" prodId=\"2\" moduleId1=\"8\" moduleId2=\"0\" relType=\"0\" />\0a"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
 @Denied: (2) (S-1-5-21-3863859204-721055020-1558023407-1001)
 @Denied: (2) (LocalSystem)
 "Progid"="ThunderbirdEML"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
 @Denied: (2) (S-1-5-21-3863859204-721055020-1558023407-1001)
 @Denied: (2) (LocalSystem)
 "Progid"="Applications\\notepad.exe"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*”^d]
 @Class="Shell"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*”^d\OpenWithList]
 @Class="Shell"
 "a"="vlc.exe"
 "MRUList"="a"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.**8dññ*€¤*]
 @Class="Shell"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.**8dññ*€¤*\OpenWithList]
 @Class="Shell"
 "a"="vlc.exe"
 "MRUList"="a"
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*”^d]
 "0"=hex:72,74,73,70,3a,2f,2f,36,32,2e,31,34,31,2e,33,37,2e,32,32,39,3a,31,39,
 33,35,2f,6c,69,76,65,2f,74,76,2e,73,64,70,00,63,00,31,00,32,00,38,00,2e,00,\
 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
 .
 [HKEY_USERS\S-1-5-21-3863859204-721055020-1558023407-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.**8dññ*€¤*]
 "0"=hex:72,74,73,70,3a,2f,2f,36,32,2e,31,34,31,2e,33,37,2e,32,32,39,3a,31,39,
 33,35,2f,6c,69,76,65,2f,74,76,2e,73,64,70,00,63,00,31,00,32,00,38,00,2e,00,\
 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
 .
 [HKEY_LOCAL_MACHINE\software\BlueStacks]
 "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
 00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
 .
 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
 @Denied: (A 2) (Everyone)
 @="FlashBroker"
 "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
 "Enabled"=dword:00000001
 .
 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
 @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
 @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
 @Denied: (A 2) (Everyone)
 @="IFlashBroker5"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
 @="{00020424-0000-0000-C000-000000000046}"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
 @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
 "Version"="1.0"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
 @Denied: (A 2) (Everyone)
 @="FlashBroker"
 "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
 "Enabled"=dword:00000001
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
 @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
 @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
 @Denied: (A 2) (Everyone)
 @="Shockwave Flash Object"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
 @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
 "ThreadingModel"="Apartment"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
 @="0"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
 @="ShockwaveFlash.ShockwaveFlash.11"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
 @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
 @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
 @="1.0"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
 @="ShockwaveFlash.ShockwaveFlash"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
 @Denied: (A 2) (Everyone)
 @="Macromedia Flash Factory Object"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
 @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
 "ThreadingModel"="Apartment"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
 @="FlashFactory.FlashFactory.1"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
 @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
 @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
 @="1.0"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
 @="FlashFactory.FlashFactory"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
 @Denied: (A 2) (Everyone)
 @="IFlashBroker5"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
 @="{00020424-0000-0000-C000-000000000046}"
 .
 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
 @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
 "Version"="1.0"
 .
 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
 @Denied: (A) (Users)
 @Denied: (A) (Everyone)
 @Allowed: (B 1 2 3 4 5) (S-1-5-20)
 "BlindDial"=dword:00000000
 .
 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
 @Denied: (A) (Users)
 @Denied: (A) (Everyone)
 @Allowed: (B 1 2 3 4 5) (S-1-5-20)
 "BlindDial"=dword:00000000
 .
 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
 @Denied: (A) (Users)
 @Denied: (A) (Everyone)
 @Allowed: (B 1 2 3 4 5) (S-1-5-20)
 "BlindDial"=dword:00000000
 .
 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
 @Denied: (Full) (Everyone)
 .
 Zeit der Fertigstellung: 2013-08-19  10:55:11
 ComboFix-quarantined-files.txt  2013-08-19 08:55
 .
 Vor Suchlauf: 22 Verzeichnis(se), 127.441.596.416 Bytes frei
 Nach Suchlauf: 28 Verzeichnis(se), 133.167.734.784 Bytes frei
 .
 - - End Of File - - F82989CC3FD7FADE58040CB4A7E810BA
 A36C5E4F47E84449FF07ED3517B43A31
 |