| |
| |||||||
Alles rund um Windows: Failed to save...32Windows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
 |
21.01.2012, 04:38
| #1 |
 |  Problem: Failed to save...32 hallo ich habe windows 7. Und das gleiche Problem, wie viele andere ich hab einen schwarzen Bildschirm und meine Anwendungen sind versteckt und es kommt immer eine Fehlermeldung irgendwas mit failed to save. 32 und ich kann meinen Taskmanager nicht mehr aufmachen dafür ist ein system check an. Ich habe mich bisschen erkundigt und OTL runtergeladen und habe auch die zwei Fenster auf hier sind meine Daten. Weiss aber nicht was ich weiter machen soll. Bitte hier um hilfe. Danke im voraus OTL logfile created on: 21.01.2012 03:57:43 - Run 3 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\mary 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,90 Gb Total Physical Memory | 2,09 Gb Available Physical Memory | 53,59% Memory free 7,80 Gb Paging File | 5,90 Gb Available in Paging File | 75,57% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 448,47 Gb Total Space | 399,26 Gb Free Space | 89,03% Space Free | Partition Type: NTFS Drive F: | 1,99 Gb Total Space | 1,98 Gb Free Space | 99,77% Space Free | Partition Type: FAT32 Computer Name: MARY-HP | User Name: mary | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.01.21 03:28:22 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\mary\OTL.exe PRC - [2012.01.21 01:11:27 | 000,360,704 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe PRC - [2012.01.21 01:08:38 | 000,457,984 | -H-- | M] () -- C:\ProgramData\FpNsnrTURn.exe PRC - [2011.09.10 15:08:17 | 000,347,008 | -H-- | M] (EasyBits Software AS) -- C:\ProgramData\GameXN\GameXNGO.exe PRC - [2011.04.17 01:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe PRC - [2010.07.13 00:47:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2010.07.06 15:01:16 | 002,634,048 | ---- | M] (Veoh Networks) -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe PRC - [2010.04.10 00:54:38 | 001,441,544 | ---- | M] (Motorola, Inc.) -- C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe PRC - [2010.03.04 05:16:06 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010.03.04 05:16:04 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010.03.01 19:27:22 | 000,264,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe PRC - [2010.01.12 21:27:38 | 000,635,416 | ---- | M] (PDF Complete Inc) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe PRC - [2008.11.09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe ========== Modules (No Company Name) ========== MOD - [2012.01.21 01:11:27 | 000,360,704 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe MOD - [2012.01.21 01:08:38 | 000,457,984 | -H-- | M] () -- C:\ProgramData\FpNsnrTURn.exe MOD - [2012.01.11 10:58:39 | 011,824,128 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b8ee7bf7d7ac34623238f731b05395a2\System.Web.ni.dll MOD - [2012.01.11 10:58:31 | 000,771,584 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\442eed762e21796e8e497fcd14f1295a\System.Runtime.Remoting.ni.dll MOD - [2011.10.15 18:31:18 | 000,452,608 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\cf95add46bfba066f035bd78f6e21d86\IAStorUtil.ni.dll MOD - [2011.10.14 14:05:46 | 012,431,360 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll MOD - [2011.10.14 14:05:36 | 001,586,688 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll MOD - [2011.10.14 14:05:21 | 003,325,952 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\3136e12cfb8809d39813e76c766c782c\WindowsBase.ni.dll MOD - [2011.10.14 14:05:13 | 005,452,800 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll MOD - [2011.10.14 14:05:09 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll MOD - [2011.10.14 14:05:08 | 007,949,312 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll MOD - [2011.10.14 14:04:57 | 011,490,304 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll MOD - [2010.12.10 04:40:53 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2010.12.10 04:40:49 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2010.11.17 12:16:56 | 000,067,872 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2010.06.28 13:21:42 | 009,905,152 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtWebKit4.dll MOD - [2010.06.28 13:21:42 | 007,793,152 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtGui4.dll MOD - [2010.06.28 13:21:42 | 002,530,304 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtXmlPatterns4.dll MOD - [2010.06.28 13:21:42 | 002,094,592 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtCore4.dll MOD - [2010.06.28 13:21:42 | 001,116,160 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtScript4.dll MOD - [2010.06.28 13:21:42 | 000,915,456 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtNetwork4.dll MOD - [2010.06.28 13:21:42 | 000,232,960 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\phonon4.dll MOD - [2010.06.28 13:21:42 | 000,120,320 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\imageformats\qjpeg4.dll MOD - [2010.06.28 13:21:42 | 000,022,016 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\imageformats\qgif4.dll MOD - [2010.01.22 19:30:00 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2010.01.22 19:29:58 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2010.01.22 19:29:58 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2011.03.30 10:45:40 | 001,028,096 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2010.06.29 19:52:12 | 004,181,256 | ---- | M] (Motorola, Inc.) [On_Demand | Running] -- C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe -- (Bluetooth Device Manager) SRV:64bit: - [2010.05.20 21:28:14 | 000,677,128 | ---- | M] (Motorola, Inc.) [Auto | Running] -- C:\Program Files\Motorola\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV:64bit: - [2010.05.20 21:28:12 | 001,096,968 | ---- | M] (Motorola, Inc.) [On_Demand | Running] -- C:\Program Files\Motorola\Bluetooth\audiosrv.exe -- (Bluetooth Media Service) SRV:64bit: - [2010.01.29 05:15:24 | 000,244,736 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\stacsv64.exe -- (STacSV) SRV:64bit: - [2009.11.02 21:11:52 | 000,016,896 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio) SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV:64bit: - [2009.03.03 11:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\AESTSr64.exe -- (AESTFilters) SRV - [2011.04.17 01:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe -- (NIS) SRV - [2011.03.30 10:45:40 | 000,647,680 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011.02.05 17:20:54 | 000,119,688 | ---- | M] (SecureW2 B.V.) [Auto | Running] -- C:\Program Files (x86)\SecureW2\sw2_service.exe -- (SW2SVC) SRV - [2010.07.13 00:47:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010.05.03 21:48:04 | 002,782,552 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.03.04 05:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2010.03.01 19:27:22 | 000,264,248 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe -- (hpHotkeyMonitor) SRV - [2010.01.12 21:27:38 | 000,635,416 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008.11.09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.07.08 16:45:12 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symnets.sys -- (SymNetS) DRV:64bit: - [2011.05.11 19:40:39 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:64bit: - [2011.05.10 07:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2011.03.31 04:00:09 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtsp64.sys -- (SRTSP) DRV:64bit: - [2011.03.31 04:00:09 | 000,040,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV:64bit: - [2011.03.15 03:31:23 | 000,912,504 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symefa64.sys -- (SymEFA) DRV:64bit: - [2011.03.11 07:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 07:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.27 07:47:10 | 000,450,680 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symds64.sys -- (SymDS) DRV:64bit: - [2011.01.27 06:07:06 | 000,171,128 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\ironx64.sys -- (SymIRON) DRV:64bit: - [2010.07.08 23:45:22 | 003,232,768 | ---- | M] (Motorola, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmusb.sys -- (BTMUSB) DRV:64bit: - [2010.06.29 17:01:38 | 000,931,168 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x) DRV:64bit: - [2010.05.21 03:06:38 | 000,096,384 | ---- | M] (Realtek Semiconductor Corp.) [2 MP Fixed] [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc) DRV:64bit: - [2010.05.03 23:44:02 | 000,331,880 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2010.04.10 00:53:04 | 000,052,736 | ---- | M] (Motorola, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmcom.sys -- (BTMCOM) DRV:64bit: - [2010.03.19 12:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:64bit: - [2010.03.15 04:45:26 | 000,145,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R) DRV:64bit: - [2010.03.04 04:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010.02.16 21:24:20 | 000,025,912 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:64bit: - [2010.01.29 05:15:24 | 000,505,856 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:64bit: - [2010.01.25 14:51:02 | 007,842,272 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2010.01.22 19:26:50 | 000,305,200 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2009.11.02 21:12:00 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2009.07.14 00:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2010.08.13 10:00:00 | 001,791,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\EX64.SYS -- (NAVEX15) DRV - [2010.08.13 10:00:00 | 000,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2010.08.13 10:00:00 | 000,132,656 | -H-- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2010.08.13 10:00:00 | 000,117,808 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\ENG64.SYS -- (NAVENG) DRV - [2010.08.09 04:11:49 | 000,945,200 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20100810.004\BHDrvx64.sys -- (BHDrvx64) DRV - [2010.06.27 05:05:05 | 000,463,408 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20100706.002\IDSVia64.sys -- (IDSVia64) DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10 IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050 IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTNavAssist.dll (Yahoo! Inc.) IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 67.207.128.249:3128 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "WEB.DE Suche" FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search" FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "WEB.DE Suche" FF - prefs.js..browser.search.order.2: "amazon.de" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://go.web.de/br/ff3_startpage" FF - prefs.js..extensions.enabledItems: allglassv2@ambroos.neowin.net:2.1.4 FF - prefs.js..extensions.enabledItems: {95f24680-9e31-11da-a746-0800200c9a66}:0.1.5.5 FF - prefs.js..extensions.enabledItems: {a82d0125-000a-4a57-abbc-5d4b0dbaab54}:2.0 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:3.2 FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.2.0 FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.9.0.3 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.7 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2011.7.4.3 FF - prefs.js..keyword.URL: "hxxp://wa.ui-portal.de/webde/webde/s?produkte.browser.link.searchlink&s_brand=webde&t_link=searchlink&ns_type=clickin&ns_url=hxxp://suche.web.de/search/web/?origin=br_urlbar_ff&su=" FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\Firefox [2010.12.10 05:07:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010.12.10 05:07:25 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010.12.10 05:07:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011.09.28 10:28:17 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_4_3 [2012.01.21 03:03:57 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.12.19 11:18:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.12.19 11:18:04 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}: C:\Program Files (x86)\PriceGong\2.2.0\FF [2011.04.30 03:28:55 | 000,000,000 | ---D | M] [2011.11.24 18:06:34 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\mary\AppData\Roaming\mozilla\Extensions [2012.01.20 18:34:30 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions [2012.01.21 02:45:14 | 000,000,000 | -H-D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2012.01.21 02:45:14 | 000,000,000 | -H-D | M] (Update Notifier) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{95f24680-9e31-11da-a746-0800200c9a66} [2012.01.21 02:45:13 | 000,000,000 | -H-D | M] (WEB.DE Firefox Addon) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{a82d0125-000a-4a57-abbc-5d4b0dbaab54} [2012.01.21 02:45:13 | 000,000,000 | -H-D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2012.01.21 02:45:14 | 000,000,000 | -H-D | M] ("All-Glass Firefox mod, based on Glasser") -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\allglassv2@ambroos.neowin.net [2011.11.24 18:06:49 | 000,001,371 | -H-- | M] () -- C:\Users\mary\AppData\Roaming\Mozilla\Firefox\Profiles\4l9ke1jf.default\searchplugins\amazonde.xml [2011.11.28 16:12:22 | 000,000,931 | -H-- | M] () -- C:\Users\mary\AppData\Roaming\Mozilla\Firefox\Profiles\4l9ke1jf.default\searchplugins\conduit.xml [2011.11.25 22:08:17 | 000,001,420 | -H-- | M] () -- C:\Users\mary\AppData\Roaming\Mozilla\Firefox\Profiles\4l9ke1jf.default\searchplugins\preisvergleich.xml [2011.11.24 18:06:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011.11.24 18:06:08 | 000,000,000 | ---D | M] (Update Notifier) -- C:\Program Files (x86)\mozilla firefox\extensions\{95f24680-9e31-11da-a746-0800200c9a66} [2011.11.24 18:06:07 | 000,000,000 | ---D | M] (WEB.DE Firefox Addon) -- C:\Program Files (x86)\mozilla firefox\extensions\{a82d0125-000a-4a57-abbc-5d4b0dbaab54} [2011.04.30 03:28:55 | 000,000,000 | ---D | M] (PriceGong) -- C:\PROGRAM FILES (X86)\PRICEGONG\2.2.0\FF [2012.01.21 03:03:57 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\COFFPLGN_2011_7_4_3 [2011.09.28 10:28:17 | 000,000,000 | ---D | M] (Symantec IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPLGN [2011.12.03 17:13:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.12.03 17:13:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2011.12.03 17:13:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2011.12.03 17:13:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2011.12.03 17:13:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = hxxp://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050 CHR - default_search_provider: suggest_url = hxxp://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\mary\AppData\Local\Google\Chrome\Application\15.0.874.106\gcswf32.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\mary\AppData\Local\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\mary\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll CHR - plugin: Bing Bar (Enabled) = C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: DVDVideoSoftTB = C:\Users\mary\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\2.3.3.3_0\ O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O2 - BHO: (PriceGong Plugin) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.2.0\PriceGongIE.dll (PriceGong) O2 - BHO: (Fast Search by Surf Canyon) - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files (x86)\Surf Canyon\surfcanyon.dll (Surf Canyon Incorporated) O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (NetAssistant) - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola, Inc.) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [NortonOnlineBackup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation) O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc) O4 - HKLM..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [WEB.DE Update] C:\Program Files (x86)\WEB.DE\LiveUpdate\m2LUTray.exe (mquadr.at software engineering und consulting GmbH) O4 - HKCU..\Run: [FpNsnrTURn.exe] C:\ProgramData\FpNsnrTURn.exe () O4 - HKCU..\Run: [GameXN] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS) O4 - HKCU..\Run: [GameXN (news)] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS) O4 - HKCU..\Run: [GameXN (update)] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS) O4 - HKCU..\Run: [VeohPlugin] C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks) O4 - Startup: C:\Users\mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\mary\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O4 - Startup: C:\Users\mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\mary\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\mary\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O9:64bit: - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9 - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{10B3E137-B082-4A3C-ABFA-FC9E5A59AC25}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B05A5FB4-3A2A-43C0-A73B-434729217352}: DhcpNameServer = 192.168.1.254 O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012.01.21 03:28:16 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\mary\OTL.exe [2012.01.21 01:11:34 | 000,000,000 | -H-D | C] -- C:\Users\mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check [2012.01.12 12:41:29 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\lsasrv.dll [2012.01.12 12:41:28 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\webio.dll [2012.01.12 12:41:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\webio.dll [2012.01.12 12:41:28 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspicli.dll [2012.01.12 12:41:28 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspisrv.dll [2012.01.12 12:41:28 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\secur32.dll [2012.01.11 17:04:14 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\quartz.dll [2012.01.11 17:04:14 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\quartz.dll [2012.01.11 17:04:14 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\qdvd.dll [2012.01.11 17:04:13 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll [2012.01.11 17:04:13 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\qdvd.dll [2012.01.11 17:04:12 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll [2012.01.11 17:04:11 | 001,739,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntdll.dll [2012.01.11 17:04:10 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\packager.dll [2012.01.11 17:04:10 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\packager.dll ========== Files - Modified Within 30 Days ========== [2034.07.30 04:02:38 | 001,144,100 | -H-- | M] () -- C:\Users\mary\Desktop\100_2634.JPG [2012.01.21 03:28:22 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\mary\OTL.exe [2012.01.21 03:23:01 | 000,019,760 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.01.21 03:23:01 | 000,019,760 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.6b [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.6a [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.69 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.68 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.67 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.66 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.65 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.64 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.63 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.62 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.61 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.60 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5v [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5u [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5t [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5s [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5r [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5q [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5p [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5o [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5n [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5m [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5l [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5k [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5j [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5i [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5h [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5g [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5f [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5e [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5d [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5c [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5b [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5a [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.59 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.58 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.57 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.56 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.55 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.54 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.53 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.52 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.51 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.50 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.49 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.48 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.47 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.46 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.45 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.44 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.43 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.42 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.41 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.40 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.39 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.38 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.37 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.36 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.35 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.34 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.33 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.32 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.31 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.30 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.29 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.28 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.27 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.26 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.25 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.24 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.23 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.22 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.21 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.20 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.19 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.18 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.17 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.16 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.15 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.14 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.13 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.12 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.11 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.10 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.b [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.a [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.9 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.8 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.7 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.6 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.5 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.4 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.3 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.2 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.1 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.v [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.u [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.t [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.s [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.r [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.9 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.7 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.6 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.5 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.4 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.39 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.38 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.37 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.36 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.35 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.34 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.33 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.32 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.31 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.30 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2v [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2u [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2t [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2s [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2r [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.29 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.28 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.27 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.26 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.25 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.24 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.23 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.22 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.21 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.20 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1v [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1u [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1t [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1s [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1r [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.19 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.18 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.17 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.16 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.15 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.14 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.13 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.12 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.11 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.10 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4 [2012.01.21 03:03:49 | 000,000,408 | ---- | M] () -- C:\windows\tasks\Final Media Player Update Checker.job [2012.01.21 03:03:39 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012.01.21 03:03:22 | 4190,388,224 | -HS- | M] () -- C:\hiberfil.sys [2012.01.21 02:22:59 | 001,498,506 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI [2012.01.21 02:22:59 | 000,654,166 | ---- | M] () -- C:\windows\SysNative\perfh007.dat [2012.01.21 02:22:59 | 000,616,008 | ---- | M] () -- C:\windows\SysNative\perfh009.dat [2012.01.21 02:22:59 | 000,130,006 | ---- | M] () -- C:\windows\SysNative\perfc007.dat [2012.01.21 02:22:59 | 000,106,388 | ---- | M] () -- C:\windows\SysNative\perfc009.dat [2012.01.21 01:13:52 | 000,000,440 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF [2012.01.21 01:11:35 | 000,000,653 | -H-- | M] () -- C:\Users\mary\Desktop\System Check.lnk [2012.01.21 01:11:35 | 000,000,296 | -H-- | M] () -- C:\ProgramData\~2Mhk1BXXOm5qGF [2012.01.21 01:11:35 | 000,000,176 | -H-- | M] () -- C:\ProgramData\~2Mhk1BXXOm5qGFr [2012.01.21 01:11:27 | 000,360,704 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe [2012.01.21 01:08:38 | 000,457,984 | -H-- | M] () -- C:\ProgramData\FpNsnrTURn.exe [2012.01.19 23:02:18 | 000,024,604 | -H-- | M] () -- C:\Users\mary\Desktop\presentation research methodes.odt [2012.01.19 20:04:07 | 000,021,643 | -H-- | M] () -- C:\Users\mary\Desktop\Unbenannt 1.odt [2012.01.18 17:58:03 | 000,016,249 | -H-- | M] () -- C:\Users\mary\Desktop\Research_proposal Marianna & Johannes.odt [2012.01.18 14:36:23 | 455,606,273 | ---- | M] () -- C:\windows\MEMORY.DMP [2012.01.17 22:02:28 | 000,073,337 | -H-- | M] () -- C:\Users\mary\Desktop\Final potato for vld with pages 15 and 16.ods ========== Files Created - No Company Name ========== [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.6b [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.6a [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.69 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.68 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.67 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.66 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.65 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.64 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.63 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.62 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.61 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.60 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5v [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5u [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5t [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5s [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5r [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5q [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5p [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5o [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5n [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5m [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5l [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5k [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5j [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5i [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5h [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5g [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5f [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5e [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5d [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5c [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5b [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5a [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.59 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.58 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.57 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.56 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.55 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.54 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.53 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.52 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.51 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.50 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.49 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.48 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.47 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.46 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.45 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.44 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.43 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.42 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.41 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.40 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.39 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.38 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.37 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.36 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.35 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.34 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.33 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.32 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.31 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.30 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.29 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.28 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.27 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.26 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.25 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.24 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.23 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.22 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.21 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.20 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.19 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.18 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.17 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.16 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.15 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.14 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.13 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.12 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.11 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.10 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.b [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.a [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.9 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.8 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.7 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.6 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.5 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.4 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.3 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.2 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.1 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.v [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.u [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.t [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.s [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.r [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.9 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.7 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.6 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.5 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.4 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.39 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.38 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.37 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.36 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.35 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.34 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.33 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.32 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.31 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.30 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2v [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2u [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2t [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2s [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2r [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.29 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.28 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.27 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.26 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.25 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.24 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.23 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.22 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.21 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.20 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1v [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1u [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1t [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1s [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1r [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.19 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.18 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.17 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.16 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.15 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.14 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.13 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.12 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.11 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.10 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4 [2012.01.21 01:11:35 | 000,000,296 | -H-- | C] () -- C:\ProgramData\~2Mhk1BXXOm5qGF [2012.01.21 01:11:35 | 000,000,176 | -H-- | C] () -- C:\ProgramData\~2Mhk1BXXOm5qGFr [2012.01.21 01:11:34 | 000,000,653 | -H-- | C] () -- C:\Users\mary\Desktop\System Check.lnk [2012.01.21 01:11:32 | 000,000,440 | -H-- | C] () -- C:\ProgramData\2Mhk1BXXOm5qGF [2012.01.21 01:11:27 | 000,360,704 | -H-- | C] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe [2012.01.21 01:08:39 | 000,457,984 | -H-- | C] () -- C:\ProgramData\FpNsnrTURn.exe [2012.01.18 17:58:01 | 000,016,249 | -H-- | C] () -- C:\Users\mary\Desktop\Research_proposal Marianna & Johannes.odt [2012.01.18 17:57:48 | 000,024,604 | -H-- | C] () -- C:\Users\mary\Desktop\presentation research methodes.odt [2012.01.18 14:36:23 | 455,606,273 | ---- | C] () -- C:\windows\MEMORY.DMP [2012.01.17 22:02:23 | 000,073,337 | -H-- | C] () -- C:\Users\mary\Desktop\Final potato for vld with pages 15 and 16.ods [2012.01.16 20:48:58 | 000,021,643 | -H-- | C] () -- C:\Users\mary\Desktop\Unbenannt 1.odt [2011.05.15 12:14:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2011.04.29 12:10:30 | 000,000,088 | RHS- | C] () -- C:\ProgramData\916F6A88B8.sys [2011.04.29 12:09:59 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2011.03.30 10:50:07 | 000,014,051 | ---- | C] () -- C:\windows\SysWow64\RaCoInst.dat [2010.01.25 14:48:56 | 000,982,224 | ---- | C] () -- C:\windows\SysWow64\igkrng500.bin [2010.01.25 14:48:56 | 000,439,336 | ---- | C] () -- C:\windows\SysWow64\igcompkrng500.bin [2010.01.25 14:48:56 | 000,092,292 | ---- | C] () -- C:\windows\SysWow64\igfcg500m.bin [2010.01.25 13:43:18 | 000,208,896 | ---- | C] () -- C:\windows\SysWow64\iglhsip32.dll [2010.01.25 13:43:18 | 000,143,360 | ---- | C] () -- C:\windows\SysWow64\iglhcp32.dll [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\windows\SysWow64\BWContextHandler.dll [2009.07.13 22:59:36 | 000,139,824 | ---- | C] () -- C:\windows\SysWow64\igfcg500.bin [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\windows\SysWow64\mlang.dat < End of report > und |
|
21.01.2012, 04:41
| #2 |
| | Failed to save...32 Anleitung / Hilfe OTL EXTRAS Logfile:
__________________Code:
ATTFilter OTL Extras logfile created on: 21.01.2012 03:29:36 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\mary
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,90 Gb Total Physical Memory | 2,27 Gb Available Physical Memory | 58,29% Memory free
7,80 Gb Paging File | 6,12 Gb Available in Paging File | 78,46% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 448,47 Gb Total Space | 399,26 Gb Free Space | 89,03% Space Free | Partition Type: NTFS
Drive F: | 1,99 Gb Total Space | 1,98 Gb Free Space | 99,77% Space Free | Partition Type: FAT32
Computer Name: MARY-HP | User Name: mary | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{439760BC-7737-4386-9B1D-A90A3E8A22EA}" = Apple Mobile Device Support
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4BBA5224-C5B1-4B8C-AAA4-68DA6654B9C1}" = HP HotKey Support
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{997C9EC4-B53D-479D-81B7-0AEC8D174BA1}" = iTunes
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{C7AE4EC3-9C13-4213-8457-74D16B353F91}" = HP Web Camera
"{CA0D2F09-F811-48D4-843E-C87696C6A9D9}" = Bonjour
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"LSI Soft Modem" = LSI HDA Modem
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"PK-PCSU_is1" = PC Beschleunigen
"Ralink Motorola BC4 Bluetooth 3.0+HS Adapter_is1" = Ralink Motorola BC4 Bluetooth 3.0+HS Adapter
"SynTPDeinstKey" = Synaptics Pointing Device Driver
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04801E42-B1A6-4C52-9F3D-CADB5A050433}" = HP Software Setup
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{1061DF04-CF33-40B0-8360-D07C9BBEB122}" = HP Wireless Assistant
"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager
"{1D61E881-43CD-447B-9E6B-D2C6138B2862}" = HP Webcam
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{2DA697D7-FED3-4DE2-A174-92A2A12F9688}" = HP SoftPaq Download Manager
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Creator Business
"{54B29835-EF99-41D2-9104-F159DE62F165}" = Bing Bar Platform
"{5BF8E079-D6E2-4323-B794-75152371122A}" = Windows 7 Default Setting
"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}" = Ralink RT3090 802.11b/g/n WiFi Adapter
"{9B8E1C10-3952-48D3-BC66-F223DDC3A556}" = Firefox 3.6 WEB.DE Edition
"{9CD3BB19-993E-469D-9E1F-B57A175C1411}" = HP Software Framework
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{B3575D00-27EF-49C2-B9E0-14B3D954E992}" = Apple Application Support
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C792A75A-2A1F-4991-9B85-291745478A79}" = NetAssistant
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{D9989A13-B173-4048-B8A5-93C204DCB1B3}" = HP ESU for Microsoft Windows 7
"{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}" = HP Webcam Driver
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E7C34ED4-BBB6-4C57-9FBD-B29CA5878051}" = HP Setup
"{EC877639-07AB-495C-BFD1-D63AF9140810}" = Roxio Activation Module
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator Business v10
"{F097D8DF-B207-4EA1-91A4-A21B8425F9B4}" = HP Documentation
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F1FCC8AD-0F88-4D77-8530-0FBB088485F1}" = WEB.DE Update
"{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}" = Realtek Ethernet Controller All-In-One Windows Driver
"{FA8BFB25-BF48-4F8B-8859-B30810745190}" = LightScribe System Software
"{FC17E0A7-EAA9-4902-92F8-C83B9FD02246}" = HP Support Assistant
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"FinalMediaPlayer_is1" = Final Media Player 2011
"Firefox 3.6 WEB.DE Edition" = Firefox 3.6 WEB.DE Edition
"Free PDF to Word Doc Converter_is1" = Free PDF to Word Doc Converter v1.1
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.13.1123
"Lernstudio Französisch_is1" = Lernstudio Französisch
"Mozilla Firefox (3.6.24)" = Mozilla Firefox (3.6.24)
"NIS" = Norton Internet Security
"PDF Complete" = PDF Complete Special Edition
"PokerStars" = PokerStars
"PriceGong" = PriceGong 2.2.0
"SecureW2 Enterprise Client" = SecureW2 Enterprise Client 3.5.2
"Surf Canyon" = Fast Search by Surf Canyon
"Trusted Software Assistant_is1" = File Type Assistant
"VLC media player" = VLC media player 1.1.9
"WEB.DE Update" = WEB.DE Update
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Software Update" = Yahoo! Software Update
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Game Organizer" = GameXN GO
"Google Chrome" = Google Chrome
"NetAssistant" = Freeze.com NetAssistant
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 08.01.2012 20:11:33 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Lock: Locking failure! mDNS_busy (1) !=
mDNS_reentrancy (0)
Error - 08.01.2012 20:11:33 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Unlock: Locking failure! mDNS_busy (1)
!= mDNS_reentrancy (0)
Error - 08.01.2012 20:11:33 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Lock: Locking failure! mDNS_busy (1) !=
mDNS_reentrancy (0)
Error - 08.01.2012 20:11:33 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Unlock: Locking failure! mDNS_busy (1)
!= mDNS_reentrancy (0)
Error - 08.01.2012 20:11:33 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Lock: Locking failure! mDNS_busy (1) !=
mDNS_reentrancy (0)
Error - 08.01.2012 20:11:33 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Unlock: Locking failure! mDNS_busy (1)
!= mDNS_reentrancy (0)
Error - 09.01.2012 03:06:30 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Lock: Locking failure! mDNS_busy (1) !=
mDNS_reentrancy (0)
Error - 09.01.2012 03:06:30 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Unlock: Locking failure! mDNS_busy (1)
!= mDNS_reentrancy (0)
Error - 09.01.2012 03:06:30 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Lock: Locking failure! mDNS_busy (1) !=
mDNS_reentrancy (0)
Error - 09.01.2012 03:06:30 | Computer Name = mary-HP | Source = Bonjour Service | ID = 100
Description = mDNSCoreMachineSleep: mDNS_Unlock: Locking failure! mDNS_busy (1)
!= mDNS_reentrancy (0)
[ Hewlett-Packard Events ]
Error - 29.10.2011 16:01:30 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\101129100114.xml
File not created by asset agent
Error - 29.10.2011 16:18:26 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201110292218.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 05.11.2011 07:22:20 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201111051222.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 20.11.2011 13:41:30 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201111201841.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 26.11.2011 07:39:05 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201111261239.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 03.12.2011 12:12:41 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201112031712.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 10.12.2011 07:34:16 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201112101234.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 17.12.2011 11:51:48 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201112171651.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 04.01.2012 10:19:19 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201201041519.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
Error - 08.01.2012 11:16:46 | Computer Name = mary-HP | Source = Hewlett-Packard | ID = 0
Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support
Framework\Logs\Temp\HPSA\HPSASession_201201081616.xml" konnte nicht gefunden werden.
mscorlib
bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei
System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32
rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String
path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions
options) bei System.IO.StreamWriter.CreateFile(String path, Boolean append)
bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,
Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path, Boolean append,
Encoding encoding) bei System.IO.File.WriteAllText(String path, String contents,
Encoding encoding) bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
[ System Events ]
Error - 15.12.2011 18:03:21 | Computer Name = mary-HP | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?15.?12.?2011 um 23:01:23 unerwartet heruntergefahren.
Error - 16.12.2011 08:40:24 | Computer Name = mary-HP | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für ActiveX Killbits
unter Windows 7 für x64-basierte Systeme (KB2618451)
Error - 16.12.2011 08:40:24 | Computer Name = mary-HP | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x800f0816 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2620712)
Error - 16.12.2011 08:40:24 | Computer Name = mary-HP | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x800f0816 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer
8 für Windows 7 für x64-Systeme (KB2618444)
Error - 16.12.2011 08:40:24 | Computer Name = mary-HP | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x800f0816 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2639417)
Error - 16.12.2011 08:58:51 | Computer Name = mary-HP | Source = Schannel | ID = 36887
Description = Es wurde eine schwerwiegende Warnung empfangen: 10.
Error - 20.12.2011 09:11:19 | Computer Name = mary-HP | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error - 24.12.2011 14:48:41 | Computer Name = mary-HP | Source = Service Control Manager | ID = 7034
Description = Dienst "HP Software Framework Service" wurde unerwartet beendet. Dies
ist bereits 1 Mal passiert.
Error - 13.01.2012 14:32:10 | Computer Name = mary-HP | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?13.?01.?2012 um 19:29:53 unerwartet heruntergefahren.
Error - 14.01.2012 13:04:21 | Computer Name = mary-HP | Source = Tcpip | ID = 4199
Description = Das System hat einen Adressenkonflikt der IP-Adresse 192.168.1.67
mit dem Computer mit der Netzwerkhardwareadresse 00-21-6A-54-BF-36 ermittelt. Netzwerkvorgänge
könnten daher auf diesem System unterbrochen werden.
< End of report >
|
|
21.01.2012, 09:51
| #3 |
| /// Mr. Schatten   | Failed to save...32 Details Hallo mary17 und
__________________ du befindest dich leider im falschen Unterforum. Bitte lies folgende verlinkte Anleitung vollständig durch => Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten? und erstelle anschließend dort => Plagegeister aller Art und deren Bekämpfung ein neues Thema. Bitte antworte dort NICHT auf deinen Beitrag, stelle dort keinen zweiten Beitrag rein, solange kein Helfer sich des Problems angenommen hat, sonst wird es möglicherweise als "schon in Arbeit" angesehen.
__________________ |
|
| Themen zu Failed to save...32 |
| autorun, bho, bildschirm, bonjour, conduit, converter, defender, failed, fehlermeldung, firefox, firefox addon, format, google, helper, home, intrusion prevention, logfile, mp3, origin, plug-in, problem, realtek, registry, scan, security, software, studio, symantec, system, taskmanager, version=1.0, webcheck, windows |
Linear-Darstellung
