![]() |
|
Alles rund um Windows: Failed to save...32Windows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
![]() | #1 |
![]() | ![]() Problem: Failed to save...32 hallo ich habe windows 7. Und das gleiche Problem, wie viele andere ich hab einen schwarzen Bildschirm und meine Anwendungen sind versteckt und es kommt immer eine Fehlermeldung irgendwas mit failed to save. 32 und ich kann meinen Taskmanager nicht mehr aufmachen dafür ist ein system check an. Ich habe mich bisschen erkundigt und OTL runtergeladen und habe auch die zwei Fenster auf hier sind meine Daten. Weiss aber nicht was ich weiter machen soll. Bitte hier um hilfe. Danke im voraus OTL logfile created on: 21.01.2012 03:57:43 - Run 3 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\mary 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,90 Gb Total Physical Memory | 2,09 Gb Available Physical Memory | 53,59% Memory free 7,80 Gb Paging File | 5,90 Gb Available in Paging File | 75,57% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 448,47 Gb Total Space | 399,26 Gb Free Space | 89,03% Space Free | Partition Type: NTFS Drive F: | 1,99 Gb Total Space | 1,98 Gb Free Space | 99,77% Space Free | Partition Type: FAT32 Computer Name: MARY-HP | User Name: mary | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.01.21 03:28:22 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\mary\OTL.exe PRC - [2012.01.21 01:11:27 | 000,360,704 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe PRC - [2012.01.21 01:08:38 | 000,457,984 | -H-- | M] () -- C:\ProgramData\FpNsnrTURn.exe PRC - [2011.09.10 15:08:17 | 000,347,008 | -H-- | M] (EasyBits Software AS) -- C:\ProgramData\GameXN\GameXNGO.exe PRC - [2011.04.17 01:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe PRC - [2010.07.13 00:47:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2010.07.06 15:01:16 | 002,634,048 | ---- | M] (Veoh Networks) -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe PRC - [2010.04.10 00:54:38 | 001,441,544 | ---- | M] (Motorola, Inc.) -- C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe PRC - [2010.03.04 05:16:06 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010.03.04 05:16:04 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010.03.01 19:27:22 | 000,264,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe PRC - [2010.01.12 21:27:38 | 000,635,416 | ---- | M] (PDF Complete Inc) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe PRC - [2008.11.09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe ========== Modules (No Company Name) ========== MOD - [2012.01.21 01:11:27 | 000,360,704 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe MOD - [2012.01.21 01:08:38 | 000,457,984 | -H-- | M] () -- C:\ProgramData\FpNsnrTURn.exe MOD - [2012.01.11 10:58:39 | 011,824,128 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b8ee7bf7d7ac34623238f731b05395a2\System.Web.ni.dll MOD - [2012.01.11 10:58:31 | 000,771,584 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\442eed762e21796e8e497fcd14f1295a\System.Runtime.Remoting.ni.dll MOD - [2011.10.15 18:31:18 | 000,452,608 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\cf95add46bfba066f035bd78f6e21d86\IAStorUtil.ni.dll MOD - [2011.10.14 14:05:46 | 012,431,360 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll MOD - [2011.10.14 14:05:36 | 001,586,688 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll MOD - [2011.10.14 14:05:21 | 003,325,952 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\3136e12cfb8809d39813e76c766c782c\WindowsBase.ni.dll MOD - [2011.10.14 14:05:13 | 005,452,800 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll MOD - [2011.10.14 14:05:09 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll MOD - [2011.10.14 14:05:08 | 007,949,312 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll MOD - [2011.10.14 14:04:57 | 011,490,304 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll MOD - [2010.12.10 04:40:53 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2010.12.10 04:40:49 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2010.11.17 12:16:56 | 000,067,872 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2010.06.28 13:21:42 | 009,905,152 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtWebKit4.dll MOD - [2010.06.28 13:21:42 | 007,793,152 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtGui4.dll MOD - [2010.06.28 13:21:42 | 002,530,304 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtXmlPatterns4.dll MOD - [2010.06.28 13:21:42 | 002,094,592 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtCore4.dll MOD - [2010.06.28 13:21:42 | 001,116,160 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtScript4.dll MOD - [2010.06.28 13:21:42 | 000,915,456 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtNetwork4.dll MOD - [2010.06.28 13:21:42 | 000,232,960 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\phonon4.dll MOD - [2010.06.28 13:21:42 | 000,120,320 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\imageformats\qjpeg4.dll MOD - [2010.06.28 13:21:42 | 000,022,016 | ---- | M] () -- C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\imageformats\qgif4.dll MOD - [2010.01.22 19:30:00 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2010.01.22 19:29:58 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2010.01.22 19:29:58 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2011.03.30 10:45:40 | 001,028,096 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2010.06.29 19:52:12 | 004,181,256 | ---- | M] (Motorola, Inc.) [On_Demand | Running] -- C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe -- (Bluetooth Device Manager) SRV:64bit: - [2010.05.20 21:28:14 | 000,677,128 | ---- | M] (Motorola, Inc.) [Auto | Running] -- C:\Program Files\Motorola\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV:64bit: - [2010.05.20 21:28:12 | 001,096,968 | ---- | M] (Motorola, Inc.) [On_Demand | Running] -- C:\Program Files\Motorola\Bluetooth\audiosrv.exe -- (Bluetooth Media Service) SRV:64bit: - [2010.01.29 05:15:24 | 000,244,736 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\stacsv64.exe -- (STacSV) SRV:64bit: - [2009.11.02 21:11:52 | 000,016,896 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio) SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV:64bit: - [2009.03.03 11:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\AESTSr64.exe -- (AESTFilters) SRV - [2011.04.17 01:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe -- (NIS) SRV - [2011.03.30 10:45:40 | 000,647,680 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011.02.05 17:20:54 | 000,119,688 | ---- | M] (SecureW2 B.V.) [Auto | Running] -- C:\Program Files (x86)\SecureW2\sw2_service.exe -- (SW2SVC) SRV - [2010.07.13 00:47:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010.05.03 21:48:04 | 002,782,552 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.03.04 05:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2010.03.01 19:27:22 | 000,264,248 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe -- (hpHotkeyMonitor) SRV - [2010.01.12 21:27:38 | 000,635,416 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008.11.09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.07.08 16:45:12 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symnets.sys -- (SymNetS) DRV:64bit: - [2011.05.11 19:40:39 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:64bit: - [2011.05.10 07:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2011.03.31 04:00:09 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtsp64.sys -- (SRTSP) DRV:64bit: - [2011.03.31 04:00:09 | 000,040,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV:64bit: - [2011.03.15 03:31:23 | 000,912,504 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symefa64.sys -- (SymEFA) DRV:64bit: - [2011.03.11 07:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 07:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.27 07:47:10 | 000,450,680 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symds64.sys -- (SymDS) DRV:64bit: - [2011.01.27 06:07:06 | 000,171,128 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\ironx64.sys -- (SymIRON) DRV:64bit: - [2010.07.08 23:45:22 | 003,232,768 | ---- | M] (Motorola, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmusb.sys -- (BTMUSB) DRV:64bit: - [2010.06.29 17:01:38 | 000,931,168 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x) DRV:64bit: - [2010.05.21 03:06:38 | 000,096,384 | ---- | M] (Realtek Semiconductor Corp.) [2 MP Fixed] [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc) DRV:64bit: - [2010.05.03 23:44:02 | 000,331,880 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2010.04.10 00:53:04 | 000,052,736 | ---- | M] (Motorola, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmcom.sys -- (BTMCOM) DRV:64bit: - [2010.03.19 12:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:64bit: - [2010.03.15 04:45:26 | 000,145,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R) DRV:64bit: - [2010.03.04 04:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010.02.16 21:24:20 | 000,025,912 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:64bit: - [2010.01.29 05:15:24 | 000,505,856 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:64bit: - [2010.01.25 14:51:02 | 007,842,272 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2010.01.22 19:26:50 | 000,305,200 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2009.11.02 21:12:00 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2009.07.14 00:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2010.08.13 10:00:00 | 001,791,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\EX64.SYS -- (NAVEX15) DRV - [2010.08.13 10:00:00 | 000,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2010.08.13 10:00:00 | 000,132,656 | -H-- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2010.08.13 10:00:00 | 000,117,808 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\ENG64.SYS -- (NAVENG) DRV - [2010.08.09 04:11:49 | 000,945,200 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20100810.004\BHDrvx64.sys -- (BHDrvx64) DRV - [2010.06.27 05:05:05 | 000,463,408 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20100706.002\IDSVia64.sys -- (IDSVia64) DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10 IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050 IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTNavAssist.dll (Yahoo! Inc.) IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 67.207.128.249:3128 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "WEB.DE Suche" FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search" FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "WEB.DE Suche" FF - prefs.js..browser.search.order.2: "amazon.de" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://go.web.de/br/ff3_startpage" FF - prefs.js..extensions.enabledItems: allglassv2@ambroos.neowin.net:2.1.4 FF - prefs.js..extensions.enabledItems: {95f24680-9e31-11da-a746-0800200c9a66}:0.1.5.5 FF - prefs.js..extensions.enabledItems: {a82d0125-000a-4a57-abbc-5d4b0dbaab54}:2.0 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:3.2 FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.2.0 FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.9.0.3 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.7 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2011.7.4.3 FF - prefs.js..keyword.URL: "hxxp://wa.ui-portal.de/webde/webde/s?produkte.browser.link.searchlink&s_brand=webde&t_link=searchlink&ns_type=clickin&ns_url=hxxp://suche.web.de/search/web/?origin=br_urlbar_ff&su=" FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\Firefox [2010.12.10 05:07:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010.12.10 05:07:25 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010.12.10 05:07:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011.09.28 10:28:17 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_4_3 [2012.01.21 03:03:57 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.12.19 11:18:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.12.19 11:18:04 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}: C:\Program Files (x86)\PriceGong\2.2.0\FF [2011.04.30 03:28:55 | 000,000,000 | ---D | M] [2011.11.24 18:06:34 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\mary\AppData\Roaming\mozilla\Extensions [2012.01.20 18:34:30 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions [2012.01.21 02:45:14 | 000,000,000 | -H-D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2012.01.21 02:45:14 | 000,000,000 | -H-D | M] (Update Notifier) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{95f24680-9e31-11da-a746-0800200c9a66} [2012.01.21 02:45:13 | 000,000,000 | -H-D | M] (WEB.DE Firefox Addon) -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{a82d0125-000a-4a57-abbc-5d4b0dbaab54} [2012.01.21 02:45:13 | 000,000,000 | -H-D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2012.01.21 02:45:14 | 000,000,000 | -H-D | M] ("All-Glass Firefox mod, based on Glasser") -- C:\Users\mary\AppData\Roaming\mozilla\Firefox\Profiles\4l9ke1jf.default\extensions\allglassv2@ambroos.neowin.net [2011.11.24 18:06:49 | 000,001,371 | -H-- | M] () -- C:\Users\mary\AppData\Roaming\Mozilla\Firefox\Profiles\4l9ke1jf.default\searchplugins\amazonde.xml [2011.11.28 16:12:22 | 000,000,931 | -H-- | M] () -- C:\Users\mary\AppData\Roaming\Mozilla\Firefox\Profiles\4l9ke1jf.default\searchplugins\conduit.xml [2011.11.25 22:08:17 | 000,001,420 | -H-- | M] () -- C:\Users\mary\AppData\Roaming\Mozilla\Firefox\Profiles\4l9ke1jf.default\searchplugins\preisvergleich.xml [2011.11.24 18:06:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011.11.24 18:06:08 | 000,000,000 | ---D | M] (Update Notifier) -- C:\Program Files (x86)\mozilla firefox\extensions\{95f24680-9e31-11da-a746-0800200c9a66} [2011.11.24 18:06:07 | 000,000,000 | ---D | M] (WEB.DE Firefox Addon) -- C:\Program Files (x86)\mozilla firefox\extensions\{a82d0125-000a-4a57-abbc-5d4b0dbaab54} [2011.04.30 03:28:55 | 000,000,000 | ---D | M] (PriceGong) -- C:\PROGRAM FILES (X86)\PRICEGONG\2.2.0\FF [2012.01.21 03:03:57 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\COFFPLGN_2011_7_4_3 [2011.09.28 10:28:17 | 000,000,000 | ---D | M] (Symantec IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPLGN [2011.12.03 17:13:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.12.03 17:13:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2011.12.03 17:13:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2011.12.03 17:13:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2011.12.03 17:13:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = hxxp://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050 CHR - default_search_provider: suggest_url = hxxp://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\mary\AppData\Local\Google\Chrome\Application\15.0.874.106\gcswf32.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\mary\AppData\Local\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\mary\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll CHR - plugin: Bing Bar (Enabled) = C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: DVDVideoSoftTB = C:\Users\mary\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\2.3.3.3_0\ O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O2 - BHO: (PriceGong Plugin) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.2.0\PriceGongIE.dll (PriceGong) O2 - BHO: (Fast Search by Surf Canyon) - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files (x86)\Surf Canyon\surfcanyon.dll (Surf Canyon Incorporated) O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (NetAssistant) - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola, Inc.) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [NortonOnlineBackup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation) O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc) O4 - HKLM..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [WEB.DE Update] C:\Program Files (x86)\WEB.DE\LiveUpdate\m2LUTray.exe (mquadr.at software engineering und consulting GmbH) O4 - HKCU..\Run: [FpNsnrTURn.exe] C:\ProgramData\FpNsnrTURn.exe () O4 - HKCU..\Run: [GameXN] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS) O4 - HKCU..\Run: [GameXN (news)] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS) O4 - HKCU..\Run: [GameXN (update)] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS) O4 - HKCU..\Run: [VeohPlugin] C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks) O4 - Startup: C:\Users\mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\mary\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O4 - Startup: C:\Users\mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\mary\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\mary\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O9:64bit: - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9 - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{10B3E137-B082-4A3C-ABFA-FC9E5A59AC25}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B05A5FB4-3A2A-43C0-A73B-434729217352}: DhcpNameServer = 192.168.1.254 O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012.01.21 03:28:16 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\mary\OTL.exe [2012.01.21 01:11:34 | 000,000,000 | -H-D | C] -- C:\Users\mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check [2012.01.12 12:41:29 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\lsasrv.dll [2012.01.12 12:41:28 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\webio.dll [2012.01.12 12:41:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\webio.dll [2012.01.12 12:41:28 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspicli.dll [2012.01.12 12:41:28 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspisrv.dll [2012.01.12 12:41:28 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\secur32.dll [2012.01.11 17:04:14 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\quartz.dll [2012.01.11 17:04:14 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\quartz.dll [2012.01.11 17:04:14 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\qdvd.dll [2012.01.11 17:04:13 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll [2012.01.11 17:04:13 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\qdvd.dll [2012.01.11 17:04:12 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll [2012.01.11 17:04:11 | 001,739,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntdll.dll [2012.01.11 17:04:10 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\packager.dll [2012.01.11 17:04:10 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\packager.dll ========== Files - Modified Within 30 Days ========== [2034.07.30 04:02:38 | 001,144,100 | -H-- | M] () -- C:\Users\mary\Desktop\100_2634.JPG [2012.01.21 03:28:22 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\mary\OTL.exe [2012.01.21 03:23:01 | 000,019,760 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.01.21 03:23:01 | 000,019,760 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.6b [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.6a [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.69 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.68 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.67 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.66 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.65 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.64 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.63 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.62 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.61 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.60 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5v [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5u [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5t [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5s [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5r [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5q [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5p [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5o [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5n [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5m [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5l [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5k [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5j [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5i [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5h [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5g [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5f [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5e [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5d [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5c [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5b [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.5a [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.59 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.58 [2012.01.21 03:04:49 | 000,000,000 | -H-- | M] () -- C:\t2i8.57 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.56 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.55 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.54 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.53 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.52 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.51 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.50 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.4a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.49 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.48 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.47 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.46 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.45 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.44 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.43 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.42 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.41 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.40 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.3a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.39 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.38 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.37 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.36 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.35 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.34 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.33 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.32 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.31 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.30 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.2a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.29 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.28 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.27 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.26 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.25 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.24 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.23 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.22 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.21 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.20 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1v [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1u [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1t [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1s [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1r [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1q [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1p [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1o [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1n [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1m [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1l [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1k [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1j [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1i [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1h [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1g [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1f [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1e [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1d [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1c [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1b [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.1a [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.19 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.18 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.17 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.16 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.15 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.14 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.13 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.12 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.11 [2012.01.21 03:04:48 | 000,000,000 | -H-- | M] () -- C:\t2i8.10 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.b [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.a [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.9 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.8 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.7 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.6 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.5 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.4 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.3 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.2 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8.1 [2012.01.21 03:04:47 | 000,000,000 | -H-- | M] () -- C:\t2i8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.v [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.u [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.t [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.s [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.r [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.9 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.7 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.6 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.5 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.4 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.39 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.38 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.37 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.36 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.35 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.34 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.33 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.32 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.31 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.30 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.3 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2v [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2u [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2t [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2s [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2r [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.29 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.28 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.27 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.26 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.25 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.24 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.23 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.22 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.21 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.20 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.2 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1v [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1u [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1t [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1s [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1r [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1q [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1p [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1o [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1n [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1m [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1l [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1k [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1j [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1i [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1h [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1g [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1f [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1e [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1d [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1c [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1b [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1a [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.19 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.18 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.17 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.16 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.15 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.14 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.13 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.12 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.11 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.10 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4.1 [2012.01.21 03:04:27 | 000,000,000 | -H-- | M] () -- C:\tv4 [2012.01.21 03:03:49 | 000,000,408 | ---- | M] () -- C:\windows\tasks\Final Media Player Update Checker.job [2012.01.21 03:03:39 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012.01.21 03:03:22 | 4190,388,224 | -HS- | M] () -- C:\hiberfil.sys [2012.01.21 02:22:59 | 001,498,506 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI [2012.01.21 02:22:59 | 000,654,166 | ---- | M] () -- C:\windows\SysNative\perfh007.dat [2012.01.21 02:22:59 | 000,616,008 | ---- | M] () -- C:\windows\SysNative\perfh009.dat [2012.01.21 02:22:59 | 000,130,006 | ---- | M] () -- C:\windows\SysNative\perfc007.dat [2012.01.21 02:22:59 | 000,106,388 | ---- | M] () -- C:\windows\SysNative\perfc009.dat [2012.01.21 01:13:52 | 000,000,440 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF [2012.01.21 01:11:35 | 000,000,653 | -H-- | M] () -- C:\Users\mary\Desktop\System Check.lnk [2012.01.21 01:11:35 | 000,000,296 | -H-- | M] () -- C:\ProgramData\~2Mhk1BXXOm5qGF [2012.01.21 01:11:35 | 000,000,176 | -H-- | M] () -- C:\ProgramData\~2Mhk1BXXOm5qGFr [2012.01.21 01:11:27 | 000,360,704 | -H-- | M] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe [2012.01.21 01:08:38 | 000,457,984 | -H-- | M] () -- C:\ProgramData\FpNsnrTURn.exe [2012.01.19 23:02:18 | 000,024,604 | -H-- | M] () -- C:\Users\mary\Desktop\presentation research methodes.odt [2012.01.19 20:04:07 | 000,021,643 | -H-- | M] () -- C:\Users\mary\Desktop\Unbenannt 1.odt [2012.01.18 17:58:03 | 000,016,249 | -H-- | M] () -- C:\Users\mary\Desktop\Research_proposal Marianna & Johannes.odt [2012.01.18 14:36:23 | 455,606,273 | ---- | M] () -- C:\windows\MEMORY.DMP [2012.01.17 22:02:28 | 000,073,337 | -H-- | M] () -- C:\Users\mary\Desktop\Final potato for vld with pages 15 and 16.ods ========== Files Created - No Company Name ========== [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.6b [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.6a [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.69 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.68 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.67 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.66 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.65 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.64 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.63 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.62 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.61 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.60 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5v [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5u [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5t [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5s [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5r [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5q [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5p [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5o [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5n [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5m [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5l [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5k [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5j [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5i [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5h [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5g [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5f [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5e [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5d [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5c [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5b [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.5a [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.59 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.58 [2012.01.21 03:04:49 | 000,000,000 | -H-- | C] () -- C:\t2i8.57 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.56 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.55 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.54 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.53 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.52 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.51 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.50 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.4a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.49 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.48 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.47 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.46 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.45 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.44 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.43 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.42 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.41 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.40 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.3a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.39 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.38 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.37 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.36 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.35 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.34 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.33 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.32 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.31 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.30 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.2a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.29 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.28 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.27 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.26 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.25 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.24 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.23 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.22 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.21 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.20 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1v [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1u [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1t [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1s [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1r [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1q [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1p [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1o [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1n [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1m [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1l [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1k [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1j [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1i [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1h [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1g [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1f [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1e [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1d [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1c [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1b [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.1a [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.19 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.18 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.17 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.16 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.15 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.14 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.13 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.12 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.11 [2012.01.21 03:04:48 | 000,000,000 | -H-- | C] () -- C:\t2i8.10 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.b [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.a [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.9 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.8 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.7 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.6 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.5 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.4 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.3 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.2 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8.1 [2012.01.21 03:04:47 | 000,000,000 | -H-- | C] () -- C:\t2i8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.v [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.u [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.t [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.s [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.r [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.9 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.8 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.7 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.6 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.5 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.4 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.39 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.38 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.37 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.36 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.35 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.34 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.33 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.32 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.31 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.30 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.3 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2v [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2u [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2t [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2s [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2r [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.29 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.28 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.27 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.26 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.25 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.24 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.23 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.22 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.21 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.20 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.2 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1v [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1u [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1t [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1s [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1r [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1q [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1p [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1o [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1n [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1m [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1l [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1k [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1j [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1i [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1h [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1g [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1f [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1e [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1d [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1c [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1b [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1a [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.19 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.18 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.17 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.16 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.15 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.14 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.13 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.12 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.11 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.10 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4.1 [2012.01.21 03:04:27 | 000,000,000 | -H-- | C] () -- C:\tv4 [2012.01.21 01:11:35 | 000,000,296 | -H-- | C] () -- C:\ProgramData\~2Mhk1BXXOm5qGF [2012.01.21 01:11:35 | 000,000,176 | -H-- | C] () -- C:\ProgramData\~2Mhk1BXXOm5qGFr [2012.01.21 01:11:34 | 000,000,653 | -H-- | C] () -- C:\Users\mary\Desktop\System Check.lnk [2012.01.21 01:11:32 | 000,000,440 | -H-- | C] () -- C:\ProgramData\2Mhk1BXXOm5qGF [2012.01.21 01:11:27 | 000,360,704 | -H-- | C] () -- C:\ProgramData\2Mhk1BXXOm5qGF.exe [2012.01.21 01:08:39 | 000,457,984 | -H-- | C] () -- C:\ProgramData\FpNsnrTURn.exe [2012.01.18 17:58:01 | 000,016,249 | -H-- | C] () -- C:\Users\mary\Desktop\Research_proposal Marianna & Johannes.odt [2012.01.18 17:57:48 | 000,024,604 | -H-- | C] () -- C:\Users\mary\Desktop\presentation research methodes.odt [2012.01.18 14:36:23 | 455,606,273 | ---- | C] () -- C:\windows\MEMORY.DMP [2012.01.17 22:02:23 | 000,073,337 | -H-- | C] () -- C:\Users\mary\Desktop\Final potato for vld with pages 15 and 16.ods [2012.01.16 20:48:58 | 000,021,643 | -H-- | C] () -- C:\Users\mary\Desktop\Unbenannt 1.odt [2011.05.15 12:14:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2011.04.29 12:10:30 | 000,000,088 | RHS- | C] () -- C:\ProgramData\916F6A88B8.sys [2011.04.29 12:09:59 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2011.03.30 10:50:07 | 000,014,051 | ---- | C] () -- C:\windows\SysWow64\RaCoInst.dat [2010.01.25 14:48:56 | 000,982,224 | ---- | C] () -- C:\windows\SysWow64\igkrng500.bin [2010.01.25 14:48:56 | 000,439,336 | ---- | C] () -- C:\windows\SysWow64\igcompkrng500.bin [2010.01.25 14:48:56 | 000,092,292 | ---- | C] () -- C:\windows\SysWow64\igfcg500m.bin [2010.01.25 13:43:18 | 000,208,896 | ---- | C] () -- C:\windows\SysWow64\iglhsip32.dll [2010.01.25 13:43:18 | 000,143,360 | ---- | C] () -- C:\windows\SysWow64\iglhcp32.dll [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\windows\SysWow64\BWContextHandler.dll [2009.07.13 22:59:36 | 000,139,824 | ---- | C] () -- C:\windows\SysWow64\igfcg500.bin [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\windows\SysWow64\mlang.dat < End of report > und |
Themen zu Failed to save...32 |
autorun, bho, bildschirm, bonjour, conduit, converter, defender, failed, fehlermeldung, firefox, firefox addon, format, google, helper, home, intrusion prevention, logfile, mp3, origin, plug-in, problem, realtek, registry, scan, security, software, studio, symantec, system, taskmanager, version=1.0, webcheck, windows |