OTL Logfile: Code:
OTL logfile created on: 11/25/2011 9:21:10 AM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 186.19 Gb Total Space | 81.19 Gb Free Space | 43.61% Space Free | Partition Type: NTFS
Drive D: | 7.47 Gb Total Space | 7.35 Gb Free Space | 98.40% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet003
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled] -- -- (HidServ)
SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2011/06/08 06:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011/04/01 09:33:58 | 001,795,832 | ---- | M] (UltraVNC) [Auto] -- C:\Programme\UltraVNC\winvnc.exe -- (winvnc)
SRV - [2009/12/11 18:47:44 | 000,036,352 | ---- | M] () [On_Demand] -- C:\Programme\OpenVPN\bin\openvpnserv.exe -- (OpenVPNService)
SRV - [2008/11/21 10:54:55 | 000,009,728 | ---- | M] () [On_Demand] -- C:\WINDOWS\winexesvc.exe -- (winexesvc)
SRV - [2008/02/22 06:40:20 | 000,475,136 | ---- | M] (Dell Inc.) [Auto] -- C:\Programme\Dell\QuickSet\NicConfigSvc.exe -- (NICCONFIGSVC)
SRV - [2008/01/12 02:19:12 | 000,036,864 | ---- | M] (Dassault Systemes) [Auto] -- C:\cad\catia\r19_bmw\intel_a\code\bin\CATSysDemon.exe -- (BBDemon)
SRV - [2007/12/18 05:48:40 | 000,196,704 | ---- | M] (OptionNV) [Auto] -- C:\Programme\Option\GlobeTrotter Connect\GtDetectSc.exe -- (GtDetectSc)
SRV - [2007/09/28 09:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2007/07/25 10:32:34 | 000,294,912 | ---- | M] (Intel(R) Corporation) [Auto] -- C:\Programme\Intel\Wireless\Bin\WLKEEPER.exe -- (WLANKEEPER) Intel(R)
SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006/10/26 06:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe -- (MDM)
SRV - [2005/03/15 11:53:10 | 000,229,456 | ---- | M] (Trend Micro Inc.) [Auto] -- C:\Programme\Trend Micro\OfficeScan Client\OfcPfwSvc.exe -- (OfcPfwSvc)
SRV - [2005/03/15 11:46:20 | 000,487,424 | ---- | M] (Trend Micro Inc.) [Auto] -- C:\Programme\Trend Micro\OfficeScan Client\NTRtScan.exe -- (ntrtscan)
SRV - [2005/03/15 11:46:10 | 000,589,912 | ---- | M] (Trend Micro Inc.) [Auto] -- C:\Programme\Trend Micro\OfficeScan Client\TmListen.exe -- (tmlisten)
SRV - [2004/07/23 08:11:08 | 000,024,576 | ---- | M] (IBM) [Disabled] -- C:\IFOR\WIN\BIN\i4gdb.exe -- (IBM LUM CR)
SRV - [2004/07/23 08:11:06 | 000,024,576 | ---- | M] (IBM) [Disabled] -- C:\IFOR\WIN\BIN\i4llmd.exe -- (IBM LUM NDL)
SRV - [2004/07/23 08:11:04 | 000,024,576 | ---- | M] (IBM) [Disabled] -- C:\IFOR\WIN\BIN\i4lmd.exe -- (IBM LUM LMD)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (WaveFDE)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (PCASp50)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2010/04/16 09:22:04 | 000,065,584 | ---- | M] (Citrix Systems, Inc.) [Kernel | System] -- C:\WINDOWS\system32\drivers\ctxusbm.sys -- (ctxusbm)
DRV - [2009/12/11 18:48:04 | 000,025,984 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tap0901.sys -- (tap0901)
DRV - [2009/05/05 05:15:57 | 000,016,688 | ---- | M] (IBM) [Kernel | System] -- C:\WINDOWS\system32\drivers\LUMDriver.sys -- (LUMDriver)
DRV - [2008/11/26 11:42:42 | 000,205,328 | ---- | M] (Trend Micro Inc.) [Kernel | Auto] -- C:\Programme\Trend Micro\OfficeScan Client\TmXPFlt.sys -- (TmFilter)
DRV - [2008/11/26 11:42:40 | 000,036,368 | ---- | M] (Trend Micro Inc.) [Kernel | Auto] -- C:\Programme\Trend Micro\OfficeScan Client\tmpreflt.sys -- (TmPreFilter)
DRV - [2008/11/26 11:39:56 | 001,195,384 | ---- | M] (Trend Micro Inc.) [Kernel | Auto] -- C:\Programme\Trend Micro\OfficeScan Client\vsapiNT.sys -- (VSApiNt)
DRV - [2008/08/26 03:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008/06/04 10:53:56 | 000,058,880 | R--- | M] (Option N.V.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gtuhsbus.sys -- (GTUHSBUS)
DRV - [2008/06/04 10:38:58 | 000,008,064 | R--- | M] (Option N.V.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gtuhsser.sys -- (GTUHSSER)
DRV - [2008/06/04 10:32:34 | 000,106,112 | R--- | M] (Option N.V.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gtuhs51.sys -- (GTUHSNDISIPXP)
DRV - [2008/02/15 08:01:06 | 000,131,712 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2008/01/31 08:55:06 | 000,074,240 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2007/12/05 14:07:36 | 001,222,840 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2007/11/29 02:45:44 | 000,036,608 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2007/11/28 10:18:24 | 000,062,208 | ---- | M] (O2Micro) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\oz776.sys -- (guardian2)
DRV - [2007/10/18 07:25:00 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007/10/02 04:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007/09/04 04:50:00 | 000,031,744 | ---- | M] (CSR, plc) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\csrbcxp.sys -- (CSRBC)
DRV - [2007/08/12 12:05:34 | 002,211,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R)
DRV - [2007/07/23 09:05:18 | 000,009,104 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLADResM.SYS -- (DLADResM)
DRV - [2007/07/23 09:04:58 | 000,037,360 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLABMFSM.SYS -- (DLABMFSM)
DRV - [2007/07/23 09:04:56 | 000,098,448 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2007/07/23 09:04:56 | 000,093,552 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2007/07/23 09:04:54 | 000,027,216 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2007/07/23 09:04:52 | 000,032,848 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2007/07/23 09:04:52 | 000,016,304 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2007/07/23 09:04:50 | 000,108,752 | ---- | M] (Roxio) [File_System | Auto] -- C:\WINDOWS\system32\drivers\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2007/07/23 08:49:44 | 000,030,064 | ---- | M] (Roxio) [File_System | System] -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS -- (DLARTL_M)
DRV - [2007/07/23 08:49:44 | 000,014,576 | ---- | M] (Roxio) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2007/07/17 13:46:12 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/07/17 13:46:10 | 000,056,832 | ---- | M] (REDC) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/07/17 13:46:08 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/07/17 08:16:36 | 000,161,792 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2007/05/29 09:29:30 | 000,012,416 | ---- | M] (Intel Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2006/10/10 12:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2005/08/12 10:50:46 | 000,016,128 | ---- | M] (Dell Inc) [Kernel | System] -- C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS -- (APPDRV)
DRV - [2005/01/06 22:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\administrator.IDIADA_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\administrator.IDIADA_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\administrator.IDIADA_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = ftp=172.16.1.29:8080;http=172.16.1.29:8080;https=172.16.1.29:8080
IE - HKU\astueckm_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\astueckm_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\astueckm_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\avaleanu_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\avaleanu_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\avaleanu_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\avaleanu_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\bringelhan_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\bringelhan_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\bringelhan_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\bringelhan_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\fwoelfle_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\fwoelfle_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\fwoelfle_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\hhalbei_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\hhalbei_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\hhalbei_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\hhalbei_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\jcebrian_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\jcebrian_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\jcebrian_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\jcebrian_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\kfrensch_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\kfrensch_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\kfrensch_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mkirschenlohr_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\mkirschenlohr_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://pampol.idiada.com/ [binary data]
IE - HKU\mkirschenlohr_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\mkirschenlohr_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mschroeter_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\mschroeter_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\mschroeter_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\mschroeter_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mseiler_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\mseiler_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\mseiler_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mwittmann_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\mwittmann_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\mwittmann_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\mwittmann_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\root_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\root_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\slang_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\slang_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\slang_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\slang_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\student1_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\student1_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\student1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\student1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\tendres_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = Dell Offizielle Seite | Dell Deutschland
IE - HKU\tendres_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\tendres_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://intranet.ing.idiada.de/
IE - HKU\tendres_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "hxxp://intranet.ing.idiada.de/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}:6.0.27
FF - prefs.js..network.proxy.type: 0
FF - user.js..browser.startup.homepage: "hxxp://intranet.ing.idiada.de/"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.0.0\Extensions\\Components: C:\Programme\Mozilla Firefox\Components [2011/11/21 04:27:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.0.0\Extensions\\Plugins: C:\Programme\Mozilla Firefox\Plugins [2011/11/21 04:26:56 | 000,000,000 | ---D | M]
[2011/07/01 06:15:40 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mozilla\Extensions
[2011/07/01 06:34:03 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mozilla\Firefox\Profiles\tc9omdy7.default\extensions
[2011/07/01 06:34:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mozilla\Firefox\Profiles\tc9omdy7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/11/21 04:27:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011/11/21 04:27:02 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\chrome\de\locale\de\mozapps\extensions
[2011/11/21 04:27:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\chrome\en-US\locale\en-US\mozapps\extensions
[2011/11/21 04:27:04 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\chrome\toolkit\content\mozapps\extensions
[2011/11/21 04:27:05 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\chrome\toolkit\skin\classic\aero\mozapps\extensions
[2011/11/21 04:27:09 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\chrome\toolkit\skin\classic\mozapps\extensions
File not found (No name found) --
[2011/10/12 04:53:02 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/11/04 18:53:18 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/04/24 18:58:10 | 000,124,864 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\CCMSDK.dll
[2011/04/24 19:00:08 | 000,071,104 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\CgpCore.dll
[2011/04/24 18:59:06 | 000,092,096 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\confmgr.dll
[2011/04/24 18:58:38 | 000,022,976 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\ctxlogging.dll
[2011/10/12 04:53:02 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2011/04/24 19:49:00 | 000,485,288 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\npicaN.dll
[2011/04/24 19:00:04 | 000,024,512 | ---- | M] (Citrix Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\TcpPServ.dll
[2011/11/04 15:21:04 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011/11/04 15:21:04 | 000,002,040 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\twitter.xml
O1 HOSTS File: ([2011/06/07 02:32:24 | 000,000,280 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 192.168.10.201 samba.ing.idiada.de samba.idiada.intra
O1 - Hosts: 192.168.10.200 sol.ing.idiada.de sol.idiada.intra sol
O1 - Hosts: 192.168.10.203 srvlnx001 srvlnx001.idiada.intra srvlnx001.ing.idiada.de
O1 - Hosts: 143.164.104.126 engineering-portal.audi.web.vwg
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe ARM] File not found
O4 - HKLM..\Run: [ConnectionCenter] File not found
O4 - HKLM..\Run: [Dell QuickSet] File not found
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [IntelWireless] File not found
O4 - HKLM..\Run: [IntelZeroConfig] File not found
O4 - HKLM..\Run: [ITSecMng] C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVHotkey] C:\WINDOWS\System32\nvhotkey.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [OfficeScanNT Monitor] C:\Programme\Trend Micro\OfficeScan Client\pccntmon.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] File not found
O4 - HKU\administrator.IDIADA_ON_C..\Run: [] File not found
O4 - HKU\administrator.IDIADA_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\administrator.IDIADA_ON_C..\Run: [NokiaOviSuite2] File not found
O4 - HKU\Administrator_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\astueckm_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\avaleanu_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\bringelhan_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\fwoelfle_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\hhalbei_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\jcebrian_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\mkirschenlohr_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\mschroeter_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\mseiler_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\mwittmann_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\root_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\slang_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\student1_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\tendres_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Bluetooth Manager.lnk = C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: CompatibleRUPSecurity = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.IDIADA_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\administrator.IDIADA_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\astueckm_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\astueckm_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\avaleanu_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\avaleanu_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\bringelhan_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\bringelhan_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\fwoelfle_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\fwoelfle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\hhalbei_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\hhalbei_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\jcebrian_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\jcebrian_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\kfrensch_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\kfrensch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mkirschenlohr_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\mkirschenlohr_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\mschroeter_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\mschroeter_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\mseiler_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\mseiler_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\mwittmann_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\mwittmann_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\root_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\root_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\slang_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\slang_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\student1_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 1
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\student1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\tendres_ON_C\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SetVisualStyle =
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\tendres_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} https://avirus/officescan/console/ClientInstall/WinNTChk.cab (ObjWinNTCheck Class)
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} https://avirus/officescan/console/ClientInstall/setupini.cab (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class)
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} https://avirus/officescan/console/ClientInstall/setup.cab (OfficeScan Corp Edition Web-Deployment SetupCtrl Class)
O16 - DPF: {35C3D91E-401A-4E45-88A5-F3B32CD72DF4} https://avirus/officescan/console/html/AtxEnc.cab (Encrypt Class)
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} https://avirus/officescan/console/ClientInstall/RemoveCtrl.cab (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1220358863748 (WUWebControl Class)
O16 - DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} https://www.icloud.com/system/iCloud.cab (iCloud Web App Plugin)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = idiada.intra
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/x-ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=euc-jp {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=ISO-8859-1 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=MS936 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=MS949 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=MS950 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=UTF8 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica; charset=UTF-8 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=euc-jp {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=ISO-8859-1 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=MS936 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=MS949 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=MS950 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=UTF8 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\application/x-ica;charset=UTF-8 {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Programme\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mahmud.exe) - C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mahmud.exe (Agnitum Ltd.)
O20 - HKLM Winlogon: System - (ziswin.exe) - File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/13 06:54:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/11/24 22:20:33 | 000,000,000 | ---D | C] -- C:\NBRT
[2011/11/24 10:36:59 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
[2011/11/24 06:24:22 | 000,200,192 | ---- | C] (Agnitum Ltd.) -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mahmud.exe
[2011/11/23 13:58:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mkirschenlohr\Eigene Dateien\Downloads
[2011/11/23 13:45:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2011/11/23 11:19:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\Malwarebytes
[2011/11/23 11:19:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2011/11/23 10:31:45 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\mkirschenlohr\Recent
[2011/11/23 10:00:05 | 000,000,000 | -HSD | C] -- C:\found.000
[2011/11/23 05:02:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Free PDF to Word Doc Converter
[2011/11/23 05:02:03 | 000,000,000 | ---D | C] -- C:\Programme\Free PDF to Word Doc Converter
[2011/11/21 08:29:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mkirschenlohr\Eigene Dateien\Frontklappe TTII
[2011/11/21 06:42:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\ICAClient
[2011/11/21 06:42:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mkirschenlohr\Lokale Einstellungen\Anwendungsdaten\Citrix
[2011/11/21 04:27:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/11/24 17:45:54 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/11/24 17:43:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/11/24 12:56:41 | 000,465,220 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2011/11/24 12:56:41 | 000,446,466 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/11/24 12:56:41 | 000,087,178 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2011/11/24 12:56:41 | 000,073,480 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/11/24 09:17:47 | 000,363,633 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001
[2011/11/24 06:24:22 | 000,200,192 | ---- | M] (Agnitum Ltd.) -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\mahmud.exe
[2011/11/24 06:17:32 | 000,000,114 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\scr8357391390943505399.bat
[2011/11/24 06:16:03 | 000,000,791 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2011/11/24 04:54:21 | 000,002,321 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2011/11/24 02:38:23 | 000,000,100 | ---- | M] () -- C:\WINDOWS\WPCMAPI.INI
[2011/11/23 13:47:10 | 000,000,329 | -HS- | M] () -- C:\boot.ini
[2011/11/23 10:30:11 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
[2011/11/23 10:30:11 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung
[2011/11/23 10:30:11 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Trend Micro OfficeScan Client
[2011/11/23 10:30:11 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spiele
[2011/11/23 10:30:11 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\X2Go Client for Windows
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Winfonie mobile 2
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Winamp
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Vim 7.3
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\VideoLAN
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TeamViewer 6
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TeamViewer 5
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Novell GroupWise
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\NoteCase
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\License Use Runtime
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\K-Lite Codec Pack
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Intel PROSet Wireless
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\GlobeTrotter Connect
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\GIMP
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FreePDF XP
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Free PDF to Word Doc Converter
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FileZilla FTP Client
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Dell QuickSet
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Defraggler
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Dassault Systemes 3DVIA Printscreen
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Cygwin
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\CATIA
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Broadcom
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Bluetooth
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Ansa
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Animator
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ActiveState ActivePython 2.6 (32-bit)
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ActivePerl 5.10.0 Build 1000 Beta
[2011/11/23 10:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\7-Zip
[2011/11/23 05:02:04 | 000,000,739 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Desktop\Free PDF to Word Doc Converter.lnk
[2011/11/23 02:42:14 | 000,000,101 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\catv5_default.prop
[2011/11/23 02:42:14 | 000,000,031 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\.ccs_cadstart.properties
[2011/11/22 01:41:06 | 000,000,652 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Desktop\ISO 9001 QS Dokumente.lnk
[2011/11/22 01:41:05 | 000,001,527 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Desktop\ProMaTo.lnk
[2011/11/22 01:41:02 | 000,001,645 | ---- | M] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Desktop\mantisbt.lnk
[2011/11/22 01:40:00 | 000,001,727 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCSPanel.lnk
[2011/11/22 01:39:42 | 009,216,054 | ---- | M] () -- C:\WINDOWS\bginfo.bmp
[2011/11/21 04:27:35 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/11/15 10:34:52 | 000,002,347 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader X.lnk
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/11/24 06:17:32 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\scr8357391390943505399.bat
[2011/11/23 05:02:04 | 000,000,739 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Desktop\Free PDF to Word Doc Converter.lnk
[2011/11/21 04:27:15 | 000,002,321 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2011/10/12 04:55:57 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\scr7619752384781139840.bat
[2011/09/29 16:10:50 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\scr612359758840496588.bat
[2011/07/06 10:08:15 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\scr859924174106432455.bat
[2011/07/06 06:46:40 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\scr7285303016728017552.bat
[2011/07/01 06:38:39 | 000,000,101 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\catv5_default.prop
[2011/07/01 06:38:35 | 000,000,031 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\.ccs_cadstart.properties
[2011/07/01 04:30:27 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\ntuser.pol
[2011/07/01 04:30:21 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/07/01 04:30:21 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mkirschenlohr\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2011/06/27 02:56:56 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\mschroeter\ntuser.pol
[2011/06/27 02:56:33 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\mschroeter\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/06/27 02:56:33 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mschroeter\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2011/06/24 01:29:02 | 000,006,544 | RHS- | C] () -- C:\Dokumente und Einstellungen\student1\ntuser.pol
[2011/06/24 01:28:56 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\student1\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/06/24 01:28:56 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\student1\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2011/05/02 07:18:38 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\tendres\ntuser.pol
[2011/05/02 07:18:33 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\tendres\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/05/02 07:18:33 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\tendres\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2011/04/01 09:52:02 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\slang\ntuser.pol
[2011/04/01 09:51:57 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\slang\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/04/01 09:51:57 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\slang\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2011/02/28 08:32:56 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\hhalbei\ntuser.pol
[2011/02/28 08:32:51 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\hhalbei\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/02/28 08:32:51 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\hhalbei\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2011/02/15 05:00:57 | 000,004,832 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.IDIADA\.recently-used.xbel
[2011/01/27 08:22:58 | 000,001,723 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\.recently-used.xbel
[2011/01/27 07:50:40 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011/01/27 07:50:37 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011/01/27 07:50:37 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011/01/27 07:50:11 | 002,292,678 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010/11/17 08:55:22 | 000,014,767 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\_viminfo
[2010/11/13 07:53:38 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/10 12:07:05 | 000,690,946 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\a4.ses
[2010/11/10 12:07:05 | 000,033,391 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\a4.message
[2010/10/21 05:17:54 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mseiler\scr1979203567098390429.bat
[2010/10/21 01:53:11 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\jcebrian\ntuser.pol
[2010/10/21 01:53:00 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\jcebrian\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/10/21 01:53:00 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\jcebrian\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2010/08/19 10:41:55 | 000,009,728 | ---- | C] () -- C:\Dokumente und Einstellungen\fwoelfle\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/11 05:41:46 | 000,002,839 | ---- | C] () -- C:\Dokumente und Einstellungen\kfrensch\.recently-used.xbel
[2010/08/11 05:41:34 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\kfrensch\ntuser.pol
[2010/07/23 06:57:42 | 000,000,600 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\Lokale Einstellungen\Anwendungsdaten\PUTTY.RND
[2010/07/07 09:16:11 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\astueckm\ntuser.pol
[2010/07/07 09:15:59 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\astueckm\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/07/07 09:15:59 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\astueckm\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2010/07/05 05:08:25 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/07/05 05:08:25 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/07/05 05:08:24 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/07/05 05:08:24 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/07/05 05:08:24 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/07/05 04:52:41 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
[2010/07/05 04:45:21 | 000,009,216 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/25 01:50:46 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\fwoelfle\ntuser.pol
[2010/06/25 01:50:40 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\fwoelfle\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/06/25 01:50:40 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\fwoelfle\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2010/06/20 12:04:24 | 000,024,064 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.IDIADA\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/18 03:12:26 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\bringelhan\ntuser.pol
[2010/06/18 03:12:22 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/06/18 03:12:22 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\bringelhan\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2010/06/17 00:40:54 | 000,000,114 | ---- | C] () -- C:\Dokumente und Einstellungen\mseiler\scr3853684999924040111.bat
[2010/04/30 02:22:01 | 000,000,103 | ---- | C] () -- C:\Dokumente und Einstellungen\mwittmann\catv5_default.prop
[2010/04/30 02:20:16 | 000,000,032 | ---- | C] () -- C:\Dokumente und Einstellungen\mwittmann\.ccs_cadstart.properties
[2010/04/30 02:10:14 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\mwittmann\ntuser.pol
[2010/04/30 02:10:02 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\mwittmann\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/04/30 02:10:02 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mwittmann\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2010/04/14 07:43:00 | 000,000,102 | ---- | C] () -- C:\Dokumente und Einstellungen\mseiler\catv5_default.prop
[2010/04/14 06:22:36 | 000,000,032 | ---- | C] () -- C:\Dokumente und Einstellungen\mseiler\.ccs_cadstart.properties
[2010/04/14 06:17:57 | 000,005,896 | RHS- | C] () -- C:\Dokumente und Einstellungen\mseiler\ntuser.pol
[2010/04/14 06:17:53 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\mseiler\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/04/14 06:17:53 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mseiler\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2010/01/22 10:03:40 | 000,353,792 | ---- | C] () -- C:\WINDOWS\System32\pythoncom26.dll
[2010/01/22 10:03:40 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\pywintypes26.dll
[2009/10/13 02:08:42 | 000,001,298 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\.recently-used.xbel
[2009/08/25 20:04:19 | 000,155,700 | ---- | C] () -- C:\WINDOWS\System32\ODMA32.DLL
[2009/05/11 09:38:20 | 000,000,761 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\.recently-used.xbel
[2009/05/05 05:15:57 | 000,000,396 | ---- | C] () -- C:\WINDOWS\System32\drivers\chfldol.sys
[2009/05/05 05:15:57 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\drivers\shfldol.sys
[2009/04/29 02:42:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpmnwun.ini
[2009/04/28 06:30:38 | 000,000,100 | ---- | C] () -- C:\WINDOWS\WPCMAPI.INI
[2009/04/27 10:11:24 | 000,007,238 | ---- | C] () -- C:\WINDOWS\cfgall.ini
[2009/01/30 04:10:42 | 000,000,096 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr3158.bat
[2009/01/16 05:37:52 | 000,000,096 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr15489.bat
[2009/01/14 04:53:56 | 000,000,091 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr35658.bat
[2008/12/18 02:28:44 | 000,000,091 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr29351.bat
[2008/12/18 02:28:11 | 000,000,091 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr11253.bat
[2008/12/18 02:28:06 | 000,000,091 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr11252.bat
[2008/12/18 02:24:53 | 000,000,718 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\CreateTAR_20081218082453.cmd
[2008/12/18 02:21:39 | 000,000,091 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr880.bat
[2008/12/18 02:21:35 | 000,000,091 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr879.bat
[2008/11/21 10:54:55 | 000,009,728 | ---- | C] () -- C:\WINDOWS\winexesvc.exe
[2008/11/11 05:30:12 | 000,000,028 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr59115.bat
[2008/09/18 09:43:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008/09/18 08:16:16 | 000,000,090 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr28283.bat
[2008/09/17 10:37:24 | 000,000,028 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr46865.bat
[2008/09/09 08:50:09 | 000,000,028 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr40673.bat
[2008/09/09 08:43:54 | 000,000,103 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\catv5_default.prop
[2008/09/09 08:35:36 | 000,000,097 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr36982.bat
[2008/09/09 08:35:19 | 000,000,028 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\scr36981.bat
[2008/09/07 08:28:52 | 000,000,032 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\.ccs_cadstart.properties
[2008/09/02 10:32:27 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2008/09/02 10:32:27 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe
[2008/09/02 08:49:03 | 000,008,780 | RHS- | C] () -- C:\Dokumente und Einstellungen\avaleanu\ntuser.pol
[2008/09/02 08:49:00 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/02 08:49:00 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\avaleanu\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2008/09/02 04:43:02 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.IDIADA\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/02 04:43:02 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.IDIADA\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2008/09/02 03:56:38 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\root\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/02 03:56:38 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\root\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2008/09/02 03:56:21 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/02 03:56:21 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2008/08/24 05:37:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2008/08/24 05:37:45 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2008/08/24 05:37:09 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\WavXMapDrive.bat
[2008/08/24 05:35:04 | 000,000,234 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/08/24 04:47:22 | 000,363,633 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2008/08/24 04:42:15 | 000,077,824 | ---- | C] () -- C:\WINDOWS\setpwr32.exe
[2008/08/24 04:42:15 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2008/08/24 04:40:53 | 000,001,505 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007/12/24 03:51:10 | 000,212,480 | R--- | C] () -- C:\WINDOWS\System32\DBPORT6.DLL
[2007/12/24 03:51:06 | 000,061,440 | R--- | C] () -- C:\WINDOWS\System32\XMLPARSE.DLL
[2007/12/21 09:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2007/02/12 10:43:54 | 000,065,619 | ---- | C] () -- C:\WINDOWS\System32\setupw2k.dll
[2006/03/27 05:08:34 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\nwslog32.dll
[2005/07/22 14:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2005/01/28 06:44:28 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\WMVADVE.DLL
[2005/01/28 06:44:28 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\WMVADVD.dll
[2004/08/13 07:04:30 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/13 07:02:49 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2004/08/13 06:59:38 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004/08/13 06:52:23 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/08/13 06:51:43 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/08/13 06:47:33 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/13 06:46:51 | 000,210,488 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/13 06:40:53 | 000,465,220 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/13 06:40:53 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/13 06:40:53 | 000,087,178 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/13 06:40:53 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/13 06:40:41 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/13 06:40:39 | 000,446,466 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/13 06:40:39 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/13 06:40:39 | 000,073,480 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/13 06:40:39 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/13 06:40:37 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/13 06:40:36 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/13 06:40:35 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/08/13 06:40:30 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/13 06:40:30 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/13 06:40:22 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/13 06:40:14 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/03/16 20:39:12 | 000,454,761 | ---- | C] () -- C:\WINDOWS\System32\boost_regex-vc6-mt-1_31.dll
[2004/03/16 20:38:26 | 000,467,052 | ---- | C] () -- C:\WINDOWS\System32\boost_regex-vc6-mt-gd-1_31.dll
========== LOP Check ==========
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\Wave Systems Corp
[2008/09/02 11:13:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.IDIADA\Anwendungsdaten\DassaultSystemes
[2009/02/04 02:01:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.IDIADA\Anwendungsdaten\Geany
[2010/08/19 09:41:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.IDIADA\Anwendungsdaten\ICAClient
[2011/07/04 08:54:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.IDIADA\Anwendungsdaten\PC Suite
[2010/11/23 05:37:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.IDIADA\Anwendungsdaten\Vodafone
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.IDIADA\Anwendungsdaten\Wave Systems Corp
[2009/05/11 09:31:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\DassaultSystemes
[2009/05/11 09:38:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Geany
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Wave Systems Corp
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\astueckm\Anwendungsdaten\Wave Systems Corp
[2008/09/02 11:51:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\avaleanu\Anwendungsdaten\DassaultSystemes
[2009/10/13 02:07:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\avaleanu\Anwendungsdaten\Geany
[2010/09/14 09:10:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\avaleanu\Anwendungsdaten\ICAClient
[2008/11/11 05:34:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\avaleanu\Anwendungsdaten\TeamViewer
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\avaleanu\Anwendungsdaten\Wave Systems Corp
[2011/02/20 04:34:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\bringelhan\Anwendungsdaten\.oit
[2010/11/13 07:53:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\bringelhan\Anwendungsdaten\DassaultSystemes
[2010/07/23 06:25:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\bringelhan\Anwendungsdaten\Geany
[2010/08/31 12:40:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\bringelhan\Anwendungsdaten\ICAClient
[2010/12/06 09:21:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\bringelhan\Anwendungsdaten\TeamViewer
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\bringelhan\Anwendungsdaten\Wave Systems Corp
[2011/02/23 11:21:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\fwoelfle\Anwendungsdaten\.oit
[2010/08/08 09:38:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\fwoelfle\Anwendungsdaten\DassaultSystemes
[2010/08/20 01:05:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\fwoelfle\Anwendungsdaten\ICAClient
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\fwoelfle\Anwendungsdaten\Wave Systems Corp
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\hhalbei\Anwendungsdaten\Wave Systems Corp
[2010/10/21 01:54:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\jcebrian\Anwendungsdaten\ICAClient
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\jcebrian\Anwendungsdaten\Wave Systems Corp
[2009/03/24 02:49:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kfrensch\Anwendungsdaten\gtk-2.0
[2010/11/23 05:37:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Vodafone
[2011/11/23 07:50:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\.oit
[2011/07/01 06:34:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\DassaultSystemes
[2011/11/21 06:42:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\ICAClient
[2011/07/05 02:00:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\Nokia Ovi Suite
[2011/07/04 03:46:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\Novell
[2011/07/04 09:01:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\PC Suite
[2011/07/05 06:27:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\TeamViewer
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mkirschenlohr\Anwendungsdaten\Wave Systems Corp
[2011/06/27 04:12:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mschroeter\Anwendungsdaten\DassaultSystemes
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mschroeter\Anwendungsdaten\Wave Systems Corp
[2010/04/14 06:22:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mseiler\Anwendungsdaten\DassaultSystemes
[2010/06/10 01:35:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mseiler\Anwendungsdaten\FileZilla
[2010/10/21 05:03:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mseiler\Anwendungsdaten\ICAClient
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mseiler\Anwendungsdaten\Wave Systems Corp
[2010/04/30 02:19:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mwittmann\Anwendungsdaten\DassaultSystemes
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mwittmann\Anwendungsdaten\Wave Systems Corp
[2011/01/25 06:32:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\root\Anwendungsdaten\ICAClient
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\root\Anwendungsdaten\Wave Systems Corp
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\slang\Anwendungsdaten\Wave Systems Corp
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\student1\Anwendungsdaten\Wave Systems Corp
[2011/06/06 11:29:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\tendres\Anwendungsdaten\.oit
[2008/08/24 05:30:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\tendres\Anwendungsdaten\Wave Systems Corp
[2010/08/19 09:41:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Citrix
[2011/07/01 06:34:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DassaultSystemes
[2008/09/02 10:48:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IBM
[2011/07/04 08:49:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache
[2011/07/04 09:00:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2010/11/23 10:18:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vodafone
[2008/09/02 04:26:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Wave Systems Corp
========== Purity Check ==========
< End of report >
--- --- --- |
