UKASH GEMA Trojaner

beatle1971

Hallo,

ich hoffe Ihr könnte mir helfen!

Mein Pc ist seit gestern mit dem GEMA UKash Virus/Trojaner infiziert.
Ich bin nun schon so weit, dass ich das OTPLE Programm über eine Boot CD auf dem Rechner zum laufen gebracht habe.

Allerdings habe ich nur einen TXT Bericht, den "OTL.TXT" . (Ich hatte in einem anderen Thread gelesen, dass es noch ein weiteren TXT geben müsste, mit "EXTRA" ... Aber den habe ich nicht gefunden.)

Auch habe ich es schon versucht den "Malwarebytes" Virenscanner nachträglich über ein USB Stick drüber laufen zu lassen, bzw zu installieren, was auch nicht funktionierte. Ich habe momentan also nur die vom OTLPE erstellte OTL.TXT Datei. Ich hoffe, das reicht schon um mir helfen zu können. Denn programme lassen sich, wir mir scheint, derzeit nicht installieren. Hoffentlich kann mir jemand hier helfen!


Hier ist das Ergebnis des Scans:

------------

OTL logfile created on: 12/4/2011 6:48:25 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 84.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 95.00% Paging File free
Paging file location(s): C:\pagefile.sys 3070 3070 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 74.52 Gb Total Space | 10.92 Gb Free Space | 14.66% Space Free | Partition Type: NTFS
Drive D: | 33.60 Gb Total Space | 12.17 Gb Free Space | 36.21% Space Free | Partition Type: NTFS
Drive E: | 8.78 Gb Total Space | 5.57 Gb Free Space | 63.50% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled] -- -- (XAMPP)
SRV - File not found [Disabled] -- -- (HidServ)
SRV - File not found [On_Demand] -- -- (getPlusHelper) getPlus(R)
SRV - File not found [Disabled] -- -- (ASKService)
SRV - File not found [On_Demand] -- -- (AppMgmt)
SRV - File not found [Disabled] -- -- (apmSAWCtrl)
SRV - [2011/12/03 07:26:08 | 000,044,544 | ---- | M] () [Auto] -- C:\WINDOWS\TEMP\rvaqim\setup.exe -- (AMService)
SRV - [2011/11/09 14:05:42 | 002,420,616 | ---- | M] (Check Point Software Technologies LTD) [Auto] -- C:\Programme\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)
SRV - [2011/11/03 09:44:28 | 000,497,280 | ---- | M] (Check Point Software Technologies) [Auto] -- C:\Programme\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)
SRV - [2011/10/11 07:59:49 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/10/11 07:59:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/10/09 09:02:32 | 000,055,144 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/10/27 03:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008/11/03 18:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006/10/26 07:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006/01/04 06:50:26 | 000,172,032 | ---- | M] (Acronis) [Disabled] -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2004/11/09 14:18:42 | 000,118,272 | ---- | M] (TuneUp Software GmbH) [Disabled] -- C:\Programme\TuneUp Utilities 2004\WinStylerThemeSvc.exe -- (TUWinStylerThemeSvc)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
SRV - [2001/11/12 07:31:48 | 000,020,480 | ---- | M] (X10) [On_Demand] -- C:\Programme\Common Files\X10\Common\X10nets.exe -- (x10nets)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand] -- -- (USBNS4X4)
DRV - File not found [Kernel | On_Demand] -- -- (USBAS4X4)
DRV - File not found [Kernel | On_Demand] -- -- (upperdev)
DRV - File not found [Kernel | On_Demand] -- -- (TVICHW32)
DRV - File not found [Kernel | Boot] -- -- (srescan)
DRV - File not found [Kernel | On_Demand] -- -- (SPOTSp50)
DRV - File not found [Kernel | On_Demand] -- -- (SANDRA)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (naecd)
DRV - File not found [Kernel | On_Demand] -- -- (MMAUSB)
DRV - File not found [Kernel | On_Demand] -- -- (ma763001)
DRV - File not found [Kernel | On_Demand] -- -- (m763001d)
DRV - File not found [Kernel | On_Demand] -- -- (m763001b)
DRV - File not found [Kernel | On_Demand] -- -- (LMASFltr)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - File not found [Kernel | On_Demand] -- -- (adiusbae)
DRV - File not found [Kernel | Auto] -- -- (ADILOADER) Teledat 300 USB Loader(adildr.sys)
DRV - [2011/11/09 14:01:38 | 000,525,840 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System] -- C:\WINDOWS\system32\vsdatant.sys -- (Vsdatant)
DRV - [2011/11/03 09:44:20 | 000,027,016 | ---- | M] (Check Point Software Technologies) [Kernel | Auto] -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV - [2011/10/11 08:00:01 | 000,134,344 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/10/11 08:00:01 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/10/11 08:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011/05/10 01:06:14 | 000,018,432 | ---- | M] (Apple Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\netaapl.sys -- (Netaapl)
DRV - [2010/10/20 07:43:08 | 000,007,680 | ---- | M] (MSI) [Kernel | On_Demand] -- C:\Programme\MSI\Live Update 5\NTIOLib.sys -- (NTIOLib_1_0_4)
DRV - [2010/06/17 08:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/05/10 03:44:42 | 000,025,912 | ---- | M] (Your Corporation) [Kernel | On_Demand] -- C:\Programme\MSI\Live Update 5\msibios32_100507.sys -- (MSI_MSIBIOS_010507)
DRV - [2008/10/28 19:11:00 | 000,021,720 | ---- | M] (KORG Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\KORGUMDS.SYS -- (KORGUMDS)
DRV - [2008/08/26 03:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008/05/24 01:03:22 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/04/13 14:19:42 | 000,075,264 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\ipsec.sys -- (IPSec)
DRV - [2008/04/13 13:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2006/08/06 12:36:08 | 000,015,781 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\mdc8021x.sys -- (MDC8021X) AEGIS Protocol (IEEE 802.1x)
DRV - [2006/08/02 09:51:35 | 000,249,152 | ---- | M] (Acronis) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\timntr.sys -- (timounter)
DRV - [2006/08/02 09:51:35 | 000,030,688 | ---- | M] (Acronis) [File_System | Auto] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2006/08/02 09:51:27 | 000,096,320 | ---- | M] (Acronis) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\snapman.sys -- (snapman)
DRV - [2005/11/03 13:39:02 | 000,245,504 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Dr71WU.sys -- (RT73)
DRV - [2005/02/11 14:46:22 | 000,371,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2004/10/13 04:56:10 | 000,462,212 | ---- | M] (B2C2, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SkyNet.sys -- (SKYNET)
DRV - [2004/02/04 04:02:32 | 000,057,472 | R--- | M] (ODSoft multimedia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\DVBLLC.sys -- (DVBLLC)
DRV - [2003/03/28 18:01:43 | 000,028,276 | ---- | M] (MusicMatch, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\MxlW2k.sys -- (MxlW2k)
DRV - [2003/01/19 11:58:28 | 000,546,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2002/11/04 09:32:00 | 000,027,520 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PhTVTune.sys -- (PhTVTune)
DRV - [2002/11/04 09:29:42 | 000,422,976 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Cap7134.sys -- (Cap7134) MEDION (7134)
DRV - [2002/10/31 05:58:42 | 000,030,848 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SISAGPX.SYS -- (SISAGP)
DRV - [2002/10/28 01:38:06 | 000,947,884 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2002/09/09 12:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)
DRV - [2002/07/19 01:10:20 | 000,006,656 | ---- | M] (Sonic Solutions) [Kernel | System] -- C:\WINDOWS\System32\drivers\cinemsup.sys -- (Cinemsup)
DRV - [2002/07/10 10:39:34 | 000,032,256 | ---- | M] (SiS Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
DRV - [2002/07/01 09:10:40 | 000,638,366 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ctxs51.sys -- (Intels51)
DRV - [2002/04/19 04:15:46 | 000,013,780 | ---- | M] (Padus, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2002/04/17 14:27:02 | 000,011,264 | R--- | M] (VOB Computersysteme GmbH) [Kernel | System] -- C:\WINDOWS\System32\drivers\asapi.sys -- (Asapi)
DRV - [2002/03/20 11:38:20 | 000,019,140 | ---- | M] (America Online) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\atwpkt.sys -- (ATWPKT)
DRV - [2002/01/29 21:25:20 | 000,395,224 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\P1001Vid.sys -- (P1001VID) Creative WebCam (WDM)
DRV - [2001/11/14 12:07:42 | 000,010,761 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10uif.sys -- (X10UIF)
DRV - [2001/08/17 08:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = hxxp://www.google.com/preferences?hl={SUB_RFC1766}
IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomSearch = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/cs/ymsgr/*hxxp://www.yahoo.com/ext/search/search.html
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =


IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com/
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\LocalService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.medion.com/
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.medion.com/
IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\nick_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\nick_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\nick_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\nick_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
IE - HKU\nick_ON_C\Software\Microsoft\Internet Explorer\SearchURL\dico, = hxxp://dict.leo.org/?lp=frde&search=%s
IE - HKU\nick_ON_C\Software\Microsoft\Internet Explorer\SearchURL\dict, = hxxp://dict.leo.org/?lp=ende&search=%s
IE - HKU\nick_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\nick_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\nick_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:4001


FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\npFFApi.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0:
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2105: C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2163: C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1212: C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Programme\CheckPoint\ZAForceField\TrustChecker [2011/11/12 03:14:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011/10/28 00:32:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/10/28 00:32:22 | 000,000,000 | ---D | M]

[2010/02/28 09:35:18 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2009/12/06 13:36:39 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\search@searchsettings.com
[2005/09/11 17:10:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\defaults\profile\extensions
[2005/09/11 17:10:03 | 000,000,000 | ---D | M] (Firefox (default)) -- C:\Programme\Mozilla Firefox\defaults\profile\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2005/07/17 13:03:00 | 000,094,208 | ---- | M] () -- C:\Programme\mozilla firefox\components\BrandRes.dll
[2011/09/03 01:18:05 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2005/07/17 13:03:00 | 000,150,912 | ---- | M] (Full Circle Software, Inc.) -- C:\Programme\mozilla firefox\components\fullsoft.dll
[2005/07/17 13:03:00 | 000,044,158 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\inspector.dll
[2005/07/17 13:03:00 | 000,041,578 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\jar50.dll
[2005/07/17 13:03:00 | 000,048,228 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\jsd3250.dll
[2005/07/17 13:03:00 | 000,008,818 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\qfaservices.dll
[2005/07/17 13:03:00 | 000,160,876 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\xpinstal.dll
[2005/07/17 13:03:00 | 000,000,680 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\Amazon.de.png
[2005/07/17 13:03:00 | 000,000,760 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\Amazon.de.src
[2011/09/02 19:19:44 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011/09/02 19:13:56 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011/09/02 19:19:44 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2005/07/17 13:03:00 | 000,000,210 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay.gif
[2005/07/17 13:03:00 | 000,001,031 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay.src
[2005/07/17 13:03:00 | 000,001,076 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\google.gif
[2008/07/29 15:32:04 | 000,000,750 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\google.src
[2011/09/02 19:19:44 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2005/07/17 13:03:00 | 000,000,459 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.png
[2005/07/17 13:03:00 | 000,000,858 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.src
[2011/09/02 19:19:44 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011/09/02 19:19:44 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
[2005/07/17 13:03:00 | 000,000,088 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\Yahoo.gif
[2005/07/17 13:03:00 | 000,001,071 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\Yahoo.src

Hosts file not found
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\nick_ON_C\..\Toolbar\ShellBrowser: (no name) - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - No CLSID value found.
O3 - HKU\nick_ON_C\..\Toolbar\WebBrowser: (no name) - {00000000-5736-4205-0008-F7ED0776FB27} - No CLSID value found.
O3 - HKU\nick_ON_C\..\Toolbar\WebBrowser: (ZoneAlarm Spy Blocker Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - Reg Error: Value error. File not found
O3 - HKU\nick_ON_C\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4 - HKLM..\Run: [fXxBmVFtQRif.exe] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fXxBmVFtQRif.exe ()
O4 - HKLM..\Run: [IjmrHbDDJ3PyrXc] C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe ()
O4 - HKLM..\Run: [ISW] C:\Programme\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4 - HKLM..\Run: [ZoneAlarm] C:\Programme\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O4 - HKU\.DEFAULT..\Run: [IjmrHbDDJ3PyrXc] File not found
O4 - HKU\Administrator_ON_C..\Run: [AOLMIcon] File not found
O4 - HKU\nick_ON_C..\Run: [IjmrHbDDJ3PyrXc] C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Autostart\T-Online DSL-Manager.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MaxRecentDocs = 10
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = [binary data]
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 03 90 FF 03 [binary data]
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 1
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67105155
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: GreyMSIAds = 1
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\nick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Reg Error: Value error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - File not found
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://www.apple.com/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} hxxp://www.creative.com/su/ocx/15026/CTSUEng.cab (Creative Software AutoUpdate)
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} hxxp://www.ipix.com/viewers/ipixx.cab (iPIX ActiveX Control)
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} hxxp://www.musicnotes.com/download/mnviewer.cab (Musicnotes Viewer)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} hxxp://picasaweb.google.de/s/v/54.16/uploader2.cab (UploadListView Class)
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-30.cab (EPUImageControl Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1188718868125 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1188718827109 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab (ScorchPlugin Class)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab (EPUImageControl Class)
O16 - DPF: {CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/autodl/jinstall-1_3_1_16-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} hxxp://www.live365.com/players/play365.cab (Live365Player Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://www.creative.com/su/ocx/15026/CTPID.cab (Creative Software AutoUpdate Support Package)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com/activex/ractrl.cab?lmi=100 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ic32pp {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll ()
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe) - C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe ()
O20 - HKU\.DEFAULT Winlogon: Shell - (\5suxrt589cxuftg.exe) - File not found
O20 - HKU\nick_ON_C Winlogon: Shell - (C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe) - C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe ()
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\MEDION 1.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\MEDION 1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/12/04 02:59:40 | 000,095,744 | ---- | C] (Kassl GmbH) -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\dwlGina3.dll
[2011/12/03 07:45:28 | 000,095,744 | ---- | C] (Kassl GmbH) -- C:\dwlGina3.dll
[2011/12/03 07:24:51 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\nick\Recent
[2011/12/03 07:15:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\Startmenü\Programme\System Fix
[2011/12/03 07:07:09 | 000,832,000 | ---- | C] (XGI Technology, Inc.) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\privacy.exe
[2011/11/26 16:59:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\gtk-2.0
[2011/11/26 16:59:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\.thumbnails
[2011/11/26 16:55:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\.gimp-2.6
[2011/11/26 16:55:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\Eigene Dateien\gegl-0.0
[2011/11/26 16:55:06 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\GIMP
[2011/11/26 16:53:55 | 000,000,000 | ---D | C] -- C:\Programme\GIMP-2.0
[2011/11/25 01:18:44 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Earth
[2011/11/12 03:16:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\Internet Logs
[2011/11/12 03:14:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\Eigene Dateien\ForceField Shared Files
[2011/11/12 03:14:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\CheckPoint
[2011/11/12 03:13:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Check Point
[2011/11/12 03:13:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CheckPoint
[2011/11/12 03:02:11 | 000,000,000 | ---D | C] -- C:\Programme\CheckPoint
[2011/11/09 14:01:38 | 000,525,840 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsdatant.sys
[2010/09/04 01:18:11 | 003,297,070 | ---- | C] (No23) -- C:\Programme\No23Recorder.exe
[2009/05/25 15:06:55 | 014,935,912 | ---- | C] (JonDos GmbH) -- C:\Programme\JonDoFox.paf.exe
[2008/09/17 14:03:57 | 015,790,728 | ---- | C] (JAP-Team) -- C:\Programme\japsetup.exe
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/12/04 11:36:42 | 000,484,514 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2011/12/04 11:36:42 | 000,095,076 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2011/12/04 11:36:42 | 000,071,682 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/12/04 11:36:42 | 000,000,314 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/12/04 11:33:23 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\28JM26.dat
[2011/12/04 11:32:46 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/12/04 11:32:42 | 000,032,256 | ---- | M] () -- C:\WINDOWS\System32\Dr03mVouQ.com
[2011/12/04 11:32:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/12/04 02:59:40 | 000,095,744 | ---- | M] (Kassl GmbH) -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\dwlGina3.dll
[2011/12/04 02:59:28 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/12/03 07:48:00 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{22F4CAEB-399F-4A27-BC11-F36BFA2876C0}.job
[2011/12/03 07:45:29 | 000,095,744 | ---- | M] (Kassl GmbH) -- C:\dwlGina3.dll
[2011/12/03 07:26:10 | 000,228,864 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe
[2011/12/03 07:26:10 | 000,228,864 | ---- | M] () -- C:\5suxrt589cxuftg.exe
[2011/12/03 07:25:50 | 000,000,863 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\System Fix.lnk
[2011/12/03 07:18:19 | 000,000,440 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xXanJl5gUAEV1A
[2011/12/03 07:15:22 | 000,000,845 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Desktop\System Fix.lnk
[2011/12/03 07:15:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/12/03 07:14:38 | 000,357,512 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xXanJl5gUAEV1A.exe
[2011/12/03 07:11:25 | 000,000,000 | RH-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
[2011/12/03 07:11:25 | 000,000,000 | RH-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung
[2011/12/03 07:11:25 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WISO Bewerbung
[2011/12/03 07:11:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TuneUp Utilities 2004
[2011/12/03 07:11:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TSReaderLite
[2011/12/03 07:11:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TechniSat DVB
[2011/12/03 07:11:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spybot - Search & Destroy
[2011/12/03 07:11:23 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Skype
[2011/12/03 07:11:23 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\QuickTime
[2011/12/03 07:11:23 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Picasa 3
[2011/12/03 07:11:23 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PDFCreator
[2011/12/03 07:11:22 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PDF24
[2011/12/03 07:11:21 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\No23 Recorder
[2011/12/03 07:11:21 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox
[2011/12/03 07:11:21 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Works
[2011/12/03 07:11:20 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office
[2011/12/03 07:11:20 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\M-Audio USB Quattro
[2011/12/03 07:11:20 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Lavasoft Ad-Aware SE Personal
[2011/12/03 07:11:20 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java 2 Runtime Environment
[2011/12/03 07:11:20 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\iTunes
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\HijackThis
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Earth
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\GIMP
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FactorLib
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Eventide Update Utility
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\CyberLink PowerDVD
[2011/12/03 07:11:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\CorelDRAW Graphics Suite 12
[2011/12/03 07:11:17 | 000,000,000 | RH-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
[2011/12/03 07:11:16 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Ahead Nero
[2011/12/03 07:07:09 | 000,832,000 | ---- | M] (XGI Technology, Inc.) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\privacy.exe
[2011/12/03 07:05:40 | 000,453,256 | -HS- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fXxBmVFtQRif.exe
[2011/12/03 06:10:05 | 000,002,607 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Desktop\Microsoft Office Outlook 2007.lnk
[2011/12/02 14:50:13 | 000,000,218 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Desktop\Google.url
[2011/12/02 01:22:00 | 000,000,272 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/11/28 01:36:15 | 003,596,790 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Desktop\Fahrplanneuerungen_2012_Metro_Stadtbus.pdf
[2011/11/27 04:32:09 | 000,779,779 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Desktop\750C4C9E04A3CE650B92B4B16780BB8B-preview3444300738013256366.pdf
[2011/11/26 16:59:58 | 000,000,918 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\.recently-used.xbel
[2011/11/25 11:06:19 | 000,423,868 | ---- | M] () -- C:\Dokumente und Einstellungen\nick\Desktop\Outlook for the Meat Market 2011-2020.pdf
[2011/11/12 03:16:21 | 000,415,915 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2011/11/12 03:13:21 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Check Point
[2011/11/12 01:56:24 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/11/10 03:12:38 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/11/09 14:01:38 | 000,525,840 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsdatant.sys
[2011/11/06 15:51:12 | 000,000,213 | ---- | M] () -- C:\boot.ini
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/12/04 11:33:23 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\28JM26.dat
[2011/12/04 11:32:52 | 000,032,256 | ---- | C] () -- C:\WINDOWS\System32\Dr03mVouQ.com
[2011/12/03 07:45:28 | 000,228,864 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\5suxrt589cxuftg.exe
[2011/12/03 07:26:27 | 000,228,864 | ---- | C] () -- C:\5suxrt589cxuftg.exe
[2011/12/03 07:25:50 | 000,000,863 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\System Fix.lnk
[2011/12/03 07:15:22 | 000,000,845 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Desktop\System Fix.lnk
[2011/12/03 07:15:12 | 000,000,440 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xXanJl5gUAEV1A
[2011/12/03 07:14:38 | 000,357,512 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xXanJl5gUAEV1A.exe
[2011/12/03 07:08:46 | 000,453,256 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fXxBmVFtQRif.exe
[2011/11/28 01:36:15 | 003,596,790 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Desktop\Fahrplanneuerungen_2012_Metro_Stadtbus.pdf
[2011/11/27 04:32:09 | 000,779,779 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Desktop\750C4C9E04A3CE650B92B4B16780BB8B-preview3444300738013256366.pdf
[2011/11/26 16:59:58 | 000,000,918 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\.recently-used.xbel
[2011/11/25 11:06:10 | 000,423,868 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Desktop\Outlook for the Meat Market 2011-2020.pdf
[2011/11/12 03:15:55 | 000,415,915 | ---- | C] () -- C:\WINDOWS\System32\vsconfig.xml
[2011/09/19 03:57:14 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2011/07/09 03:41:54 | 000,000,079 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011/06/17 12:28:29 | 002,106,721 | ---- | C] () -- C:\Programme\SharePod397.zip
[2011/04/01 10:50:05 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\$_hpcst$.hpc
[2011/02/08 00:57:26 | 000,000,121 | ---- | C] () -- C:\Programme\uninst.bat
[2010/12/07 16:11:13 | 000,016,821 | ---- | C] () -- C:\Programme\362854274226.acc
[2010/10/18 09:33:53 | 000,111,932 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2010/10/18 09:33:53 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2010/10/18 09:33:53 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2010/10/18 09:33:52 | 000,031,053 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat
[2010/10/18 09:33:52 | 000,027,417 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat
[2010/10/18 09:33:52 | 000,026,154 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2010/10/18 09:33:52 | 000,024,903 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2010/10/18 09:33:52 | 000,021,390 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2010/10/18 09:33:52 | 000,020,148 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2010/10/18 09:33:52 | 000,011,811 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2010/10/18 09:33:52 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2010/10/18 09:33:52 | 000,001,146 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2010/10/18 09:33:52 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2010/10/18 09:33:52 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2010/10/18 09:33:52 | 000,001,136 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2010/10/18 09:33:52 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2010/10/18 09:33:52 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2010/10/18 09:33:52 | 000,001,107 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2010/10/18 09:33:52 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2010/09/22 10:38:01 | 000,012,994 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Microsoft Excel 97-2003.CAL
[2010/08/13 15:44:45 | 000,676,144 | -H-- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2010/05/12 00:05:22 | 000,073,784 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/04/15 13:10:14 | 000,000,037 | ---- | C] () -- C:\WINDOWS\ipixActivex.ini
[2010/01/23 01:55:44 | 000,000,084 | ---- | C] () -- C:\WINDOWS\netdet.ini
[2010/01/12 01:35:06 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\dblmsg.dll
[2009/02/16 16:08:29 | 000,722,454 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\jap.conf
[2008/11/18 13:37:42 | 000,000,099 | ---- | C] () -- C:\WINDOWS\SAWReg.ini
[2008/05/04 02:40:15 | 000,000,268 | ---- | C] () -- C:\WINDOWS\TOPO.INI
[2008/04/26 10:47:31 | 000,000,032 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ezsid.dat
[2008/02/28 08:30:08 | 000,462,848 | ---- | C] () -- C:\WINDOWS\System32\ractrlkeyhook.dll
[2007/06/14 13:00:03 | 000,000,030 | ---- | C] () -- C:\WINDOWS\WISO.INI
[2007/02/05 08:48:36 | 000,016,828 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2007/02/05 08:48:34 | 000,024,188 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/02/05 08:48:28 | 000,016,562 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/02/05 07:24:28 | 000,018,271 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2007/02/05 07:24:26 | 000,099,999 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2006/12/31 11:54:22 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\libbz2.dll
[2006/09/17 03:48:06 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\thxcfg.ini
[2006/08/06 12:35:41 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\ASWL2K.exe
[2006/08/06 12:35:41 | 000,496,640 | ---- | C] () -- C:\WINDOWS\System32\ASWLSVC.exe
[2006/08/06 12:35:41 | 000,159,827 | ---- | C] () -- C:\WINDOWS\System32\RemSvc.exe
[2006/05/07 03:43:34 | 000,003,406 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2006/05/04 15:28:44 | 000,004,639 | ---- | C] () -- C:\WINDOWS\rdt.ini
[2006/02/09 12:13:05 | 002,023,936 | ---- | C] () -- C:\WINDOWS\LOOP.exe
[2006/02/07 12:07:18 | 000,000,305 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2005/09/19 11:27:55 | 000,036,972 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll
[2005/09/14 13:15:00 | 000,000,397 | ---- | C] () -- C:\WINDOWS\barcode.ini
[2005/09/11 16:31:30 | 000,001,890 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2005/09/11 16:31:30 | 000,000,056 | RHS- | C] () -- C:\WINDOWS\System32\2979F9000D.sys
[2005/06/23 18:09:40 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/06/22 00:40:21 | 000,000,023 | ---- | C] () -- C:\WINDOWS\eps32.INI
[2005/06/17 12:43:15 | 000,000,141 | -H-- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2005/06/16 10:38:39 | 000,002,158 | ---- | C] () -- C:\WINDOWS\System32\ssmute.ini
[2005/06/15 15:33:11 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/06/11 21:37:02 | 000,004,359 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/05/27 01:00:58 | 000,000,172 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2005/05/27 01:00:58 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/04/11 15:24:39 | 000,099,970 | ---- | C] () -- C:\WINDOWS\UninstallFirefox.exe
[2005/01/03 06:11:52 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/12/30 07:13:20 | 000,000,268 | ---- | C] () -- C:\WINDOWS\BUHL.INI
[2004/12/30 07:04:25 | 086,367,280 | ---- | C] () -- C:\Programme\TAX 2005 T-Online.exe
[2004/12/11 02:45:07 | 000,009,237 | ---- | C] () -- C:\WINDOWS\xwtdc.dat
[2004/11/25 17:32:47 | 000,000,052 | ---- | C] () -- C:\WINDOWS\System32\CLR2DLL.SYS
[2004/10/20 15:06:01 | 000,007,680 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2004/10/10 04:20:30 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2004/09/18 07:23:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\GkSui18.EXE
[2004/09/01 15:34:22 | 000,000,253 | ---- | C] () -- C:\WINDOWS\tm.ini
[2004/08/28 12:52:04 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/05/10 09:49:22 | 000,000,147 | -H-- | C] () -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2004/03/12 15:23:01 | 000,000,028 | ---- | C] () -- C:\WINDOWS\bhftw.dll
[2004/03/12 15:18:09 | 000,000,031 | ---- | C] () -- C:\WINDOWS\LxTrans.INI
[2004/02/27 23:16:03 | 000,000,023 | ---- | C] () -- C:\WINDOWS\eps_stab.ini
[2004/01/29 15:31:11 | 000,000,203 | ---- | C] () -- C:\WINDOWS\mandant.ini
[2004/01/17 14:49:36 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\CDNdownload.dll
[2003/12/14 15:34:26 | 000,000,019 | ---- | C] () -- C:\WINDOWS\Lxregi.INI
[2003/12/14 03:33:18 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\TxActiveXCombo.dll
[2003/12/14 03:33:12 | 000,229,431 | ---- | C] () -- C:\WINDOWS\System32\dnt23.dll
[2003/12/14 03:33:12 | 000,061,497 | ---- | C] () -- C:\WINDOWS\System32\dntvm23.dll
[2003/12/08 12:01:33 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003/10/26 03:11:56 | 000,000,055 | R--- | C] () -- C:\WINDOWS\System32\P1001Sti.ini
[2003/06/09 02:53:33 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2003/05/20 11:27:25 | 000,063,488 | ---- | C] () -- C:\WINDOWS\xobglu16.dll
[2003/05/20 11:27:25 | 000,029,210 | ---- | C] () -- C:\WINDOWS\xobglu32.dll
[2003/05/17 11:51:30 | 000,454,656 | ---- | C] () -- C:\WINDOWS\System32\dfxg15.dll
[2003/04/03 00:05:19 | 000,000,056 | ---- | C] () -- C:\WINDOWS\uilib.INI
[2003/03/29 11:06:44 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\Cpuinf32.dll
[2003/03/29 06:11:01 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2003/03/26 15:34:17 | 000,205,312 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2003/03/26 13:46:25 | 000,051,712 | ---- | C] () -- C:\WINDOWS\wc98pp.dll
[2003/03/26 13:17:47 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\nick\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2003/02/14 10:22:33 | 000,000,200 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2003/02/09 16:31:53 | 000,127,184 | ---- | C] () -- C:\WINDOWS\Unwise.exe
[2003/02/09 16:29:19 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2003/02/05 10:23:47 | 000,000,798 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003/02/05 10:23:39 | 000,484,514 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2003/02/05 10:23:39 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2003/02/05 10:23:39 | 000,095,076 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2003/02/05 10:23:39 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2003/02/05 10:23:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003/02/05 10:23:24 | 000,071,682 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003/02/05 10:23:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003/02/05 10:23:24 | 000,000,314 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003/02/05 10:23:23 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003/02/05 10:23:23 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003/02/05 10:23:21 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/02/05 10:23:18 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003/02/05 10:23:18 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003/02/05 10:23:17 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipsec.sys
[2003/02/05 10:23:13 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003/02/05 10:23:06 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/02/05 03:23:14 | 000,065,536 | ---- | C] () -- C:\WINDOWS\Dit.DLL
[2003/02/05 03:23:14 | 000,000,208 | ---- | C] () -- C:\WINDOWS\Dit.INI
[2003/02/05 03:05:46 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2003/02/05 02:56:43 | 000,003,072 | ---- | C] () -- C:\WINDOWS\winio.sys
[2003/02/05 02:34:32 | 000,000,963 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2003/02/05 02:29:53 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2003/02/05 02:26:45 | 000,353,768 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2003/02/03 06:11:13 | 000,200,704 | --S- | C] () -- C:\WINDOWS\System32\archlib.dll
[2003/01/28 05:15:41 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.exe
[2003/01/08 09:55:50 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\VOBRegCheck.exe
[2002/12/05 11:51:00 | 000,059,392 | R--- | C] () -- C:\WINDOWS\System32\streamhlp.dll
[2002/03/16 05:01:09 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\atsdrve.dll
[1999/09/20 03:05:32 | 000,013,387 | ---- | C] () -- C:\WINDOWS\System32\CinemSup.sys
[1996/04/03 14:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

========== LOP Check ==========

[2007/12/09 01:29:25 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\T-Online
[2003/02/09 16:58:54 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\X10 Commander
[2003/02/05 03:15:44 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\InterTrust
[2010/10/22 13:45:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Ableton
[2004/11/04 18:06:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\ACStealth3
[2011/01/08 13:45:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Amazon
[2008/11/18 13:37:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\apm
[2009/01/23 05:00:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Bullzip
[2011/11/12 03:14:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\CheckPoint
[2011/03/23 16:09:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Cocoon Software
[2011/11/10 00:29:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Dropbox
[2011/11/26 16:59:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\gtk-2.0
[2011/06/21 13:08:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\ICAClient
[2003/02/05 03:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\InterTrust
[2011/10/08 05:09:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\JonDo
[2004/08/28 11:10:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Leadertech
[2007/12/19 13:15:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Nvu
[2008/05/02 11:49:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\PC Suite
[2011/09/19 03:57:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\pdfforge
[2011/04/05 07:48:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\phonostar GmbH
[2007/03/30 00:25:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\SPAMfighter
[2004/05/13 17:38:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Steinberg
[2003/12/08 12:17:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\T-DSL SpeedManager
[2003/03/29 07:18:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\T-Online
[2006/07/30 15:37:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\TrojanHunter
[2004/09/07 11:18:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\TuneUp Software
[2010/12/16 17:06:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\TwonkyMedia
[2010/04/25 04:23:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Uniblue
[2008/04/17 15:39:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\Windows Desktop Search
[2004/01/28 14:22:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\nick\Anwendungsdaten\winvc
[2010/10/22 13:45:36 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ableton
[2006/08/02 13:54:27 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2011/11/12 03:13:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CheckPoint
[2006/12/31 11:38:58 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CMUV
[2008/05/21 13:41:56 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eBay
[2011/03/29 10:18:26 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LogMeIn
[2008/07/16 12:58:22 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier
[2007/12/31 05:33:33 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011/06/21 13:05:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2005/07/12 13:35:22 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Viewpoint
[2010/04/23 00:04:21 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip
[2011/10/18 00:11:07 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/06/30 00:31:45 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2011/12/03 07:48:00 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{22F4CAEB-399F-4A27-BC11-F36BFA2876C0}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\WINDOWS\Lxregi.INI:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\eps32.INI:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\Default.src:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\bhftw.dll:SummaryInformation
@Alternate Data Stream - 104 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:425D0709
< End of report >