| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.03.2012, 10:06
| #1 |
 |  Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? Hallo libes Trojaner-Board, ich habe gestern meinen Laptop(Windows 7 64 Bit) gestartet. Gleich als er fertig hochgefahren war, erschien ein schwarzer Bildschirm mit roter Schrift, darauf stand "Windows wurde aus Sicherheitsgründen gesperrt". Und unten war ein Button wo stand "bezahlen und herunterladen". Aber im abgesicherten Modus, in dem ich jetzt mit netzwerktreibern schreibe, funktioniert alles einwandfrei. Kann mir bitte jemand helfen diesen ,wenn es einer ist, Virus zu entfernen? Wäre wirklich ultra nett von euch!!! |
|
07.03.2012, 11:46
| #2 |
| /// Malware-holic   | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? hi,
__________________gehe in den abgesicherten modus mit netzwerk, melde dich im betroffenen konto an. Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
__________________ |
|
07.03.2012, 12:08
| #3 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? ich schreibe gerade mit der psp, wie lange dauert es bis die dateien da sind? ich hab auf scan gedrueckt aber es scheint sich nix zu tun.
__________________ |
|
07.03.2012, 12:10
| #4 |
| /// Malware-holic | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? dauert schon ne weile...
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.03.2012, 12:12
| #5 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? kann ich da zwischendurch weg? |
|
07.03.2012, 12:48
| #6 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? ich kann die datein nicht hochladen sie sind zu groß, was soll ich jetzt machen? Hochladen ging auch als Archiv nicht. Geändert von Syntas (07.03.2012 um 12:58 Uhr) |
|
07.03.2012, 13:00
| #7 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? erstmal Extras.txt das geht: OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 07.03.2012 11:58:50 - Run 1
OTL by OldTimer - Version 3.2.35.1 Folder = C:\Users\Paul\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7,98 Gb Total Physical Memory | 7,23 Gb Available Physical Memory | 90,63% Memory free
15,96 Gb Paging File | 15,23 Gb Available in Paging File | 95,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 200,28 Gb Total Space | 130,44 Gb Free Space | 65,13% Space Free | Partition Type: NTFS
Drive D: | 240,48 Gb Total Space | 140,84 Gb Free Space | 58,57% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Computer Name: PAUL-PC | User Name: Paul | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0919C44F-F18A-4E3B-A737-03685272CE72}" = Windows Live Remote Service Resources
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{0F696557-180C-4813-A754-5D43969B0691}" = Windows Live Family Safety
"{11D96381-C349-60F6-6E95-013D80B6B68B}" = AMD Fuel
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{169C77B7-69C9-4648-9DD0-72B152AF269F}" = Windows Live Family Safety
"{17A4FD95-A507-43F1-BC92-D8572AF8340A}" = Windows Live Remote Service Resources
"{19F09425-3C20-4730-9E2A-FC2E17C9F362}" = Windows Live Remote Service Resources
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1C4C0E06-5E82-FEF7-7A35-6ED0FBA91307}" = AMD Media Foundation Decoders
"{1C55470A-7C9E-4C63-B466-6AFFC69E94E9}" = Windows Live Family Safety
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64)
"{26A24AE4-039D-4CA4-87B4-2F86417002FF}" = Java(TM) 7 Update 2 (64-bit)
"{289809B1-078A-49F3-83D0-7E51715B3915}" = Windows Live Family Safety
"{3946328A-5B3A-434C-A22B-64CF6652FBAD}" = Windows Live Family Safety
"{401C50F6-B443-43EE-8F27-A80DB19B03FD}" = Windows Live Family Safety
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7734509D-A1F7-4A5E-AF9D-77CD17AE41AF}" = Windows Live Family Safety
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{9210D7A2-DC28-43F6-92F9-E6CD4C729F7B}" = Windows Live Family Safety
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{B0BF8602-EA52-4B0A-A2BD-EDABB0977030}" = Windows Live Remote Client Resources
"{B22C8566-D522-4B40-A7AF-525F5A70D832}" = Windows Live Family Safety
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}" = Windows Live Remote Client Resources
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{CB7935EF-43EE-4C0F-AC02-B0E4DD5DAC17}" = Windows Live Family Safety
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}" = Windows Live Remote Client Resources
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E17025A7-39B6-375E-8F1E-20637D19549C}" = AMD Catalyst Install Manager
"{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources
"{FE4BE0BD-1EDB-4D24-9614-847B3C472887}" = Windows Live Family Safety
"{FF91D913-0F96-E8B4-7F24-138D64AEE63A}" = ccc-utility64
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Elantech" = ETDWare PS/2-X64 8.0.5.1_WHQL
"HyperCam 2" = HyperCam 2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}" = Sonic Focus
"{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
"{0A9256E0-C924-46DE-921B-F6C4548A1C64}" = Windows Live Messenger
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1A10EA04-AF48-AB19-DE2B-0F7ABF174B22}" = CCC Help Finnish
"{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
"{1AC6E8CB-B022-A7E1-66DA-E063B6CEC373}" = CCC Help Polish
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216030FF}" = Java(TM) 6 Update 30
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{29AFBD5C-71A8-DA79-508C-53E040EE3E71}" = CCC Help Italian
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2AD2DD70-27F7-4343-BB4E-DE50A32D854B}" = Windows Live Messenger
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{341697D8-9923-445E-B42A-529E5A99CB7A}" = syncables desktop SE
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{36BFE02C-3247-EC65-5B79-C31CA8A2EA6B}" = CCC Help Chinese Traditional
"{36E15666-43C1-91A7-0281-498F9D383B2C}" = simfy
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{38253529-D97D-4901-AE53-5CC9736D3A2E}" = ASUS AI Recovery
"{3993DD42-0739-7DCB-CB1E-512A1D0287B6}" = CCC Help Portuguese
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3D06DD4B-2D97-CB62-1639-66995969E0F7}" = CCC Help Chinese Standard
"{3D0C22FA-96D7-4789-BC5B-991A5A99BFFA}" = Windows Live Messenger
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{40D1F76D-FD54-6FF9-8A83-E2B6849FF755}" = CCC Help Korean
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A275FD1-2F24-4274-8C01-813F5AD1A92D}" = Windows Live Messenger
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4C699616-D8EA-9E2F-0246-68E0298A9081}" = CCC Help German
"{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
"{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
"{50B8CA72-98FD-21A1-3448-601998D44C1D}" = CCC Help Swedish
"{55C6CD22-E3A4-4937-CFFB-C7E11FA6A5A3}" = CCC Help Dutch
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{56050D82-138B-D911-CE56-DC4783CAA22C}" = CCC Help English
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5F6E678A-7E61-448A-86CB-BC2AD1E04138}" = Windows Live Messenger
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{615AA928-1427-735E-C728-55AF614CD3DA}" = Catalyst Control Center Profiles Mobile
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{62D16CB8-4DD5-0314-2AD7-C3C2BCADC234}" = CCC Help Thai
"{63AE67AA-1AB1-4565-B4EF-ABBC5C841E8D}" = Windows Live Messenger
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69424C7F-B6CA-8786-E0CA-89D5915C9486}" = CCC Help Turkish
"{6986737B-F286-40D1-87AF-938339DCF6AB}" = Windows Live Messenger
"{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
"{6A563426-3474-41C6-B847-42B39F1485B2}" = Windows Live Messenger
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E5E0E1B-FADA-9749-80F6-03A0A7967FEC}" = CCC Help Danish
"{709E38A9-7F80-4598-96CC-44B0D553FECE}" = Windows Live Messenger
"{71296ABE-826A-2D27-9FD0-503F39A4D7ED}" = CCC Help Japanese
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
"{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{8150221C-8F7E-4997-AD4E-AFDEE7F4B410}" = Wireless Console 3
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}" = פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A11EFE0E-A256-C423-223F-4808E88024DB}" = CCC Help Greek
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9868A83-9D72-2F2D-F549-A5BD46891987}" = CCC Help Norwegian
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2A07D8D-71DB-4929-9154-2D8A198F0FDA}" = CCC Help Spanish
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B480904D-F73F-4673-B034-8A5F492C9184}" = Nuance PDF Reader
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
"{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}" = Элемент управления Windows Live Mesh ActiveX для удаленных подключений
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C10C5955-9E14-A895-BF90-29388B133FEA}" = CCC Help Russian
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C32CE55C-12BA-4951-8797-0967FDEF556F}" = Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}" = Windows Live Mesh ActiveX Control for Remote Connections
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{C9440B47-2604-44EC-DA52-46DB4FA946ED}" = CCC Help French
"{CA234488-A4E4-FE20-DEF4-D68C43ACACA2}" = CCC Help Czech
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D0CE053E-0E5E-4C12-9BAE-D0F36021E911}" = POV-Ray for Windows v3.62
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D3694B69-6F8C-42D3-8A0A-EB2AB528C02C}" = Atheros Client Installation Program
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{DA9FD67B-0AAF-C83D-E2AC-C7D296FA0FE4}" = Catalyst Control Center Localization All
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE6698C9-53D4-67FB-2A2B-67CB1DEF89E5}" = AMD VISION Engine Control Center
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E18B30AA-6E2D-480C-B918-AF61009F4010}" = عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}" = Controlo ActiveX do Windows Live Mesh para Ligações Remotas
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1" = Game Park Console
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
"{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}" = Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις
"{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
"{F8857969-C550-C462-1785-DB5523AE133C}" = CCC Help Hungarian
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FDB51A10-A57D-29AB-90D1-3EEE29BD388F}" = Catalyst Control Center InstallProxy
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Akamai" = Akamai NetSession Interface
"Asus Vibe2.0" = AsusVibe2.0
"ASUS WebStorage" = ASUS WebStorage
"ASUS_Screensaver" = ASUS_Screensaver
"Avira AntiVir Desktop" = Avira Free Antivirus
"AviSynth" = AviSynth 2.5
"Bookworm Deluxe" = Bookworm Deluxe
"Cooking Dash" = Cooking Dash
"DealBulldog Toolbar" = DealBulldog Toolbar
"Exact Audio Copy" = Exact Audio Copy 1.0beta3
"FlorensiaEN" = FlorensiaEN 1.0
"Free Audio Converter_is1" = Free Audio Converter version 5.0.4.1228
"Free Video Dub_is1" = Free Video Dub version 2.0.3.1228
"Game Booster_is1" = Game Booster 3
"Governor of Poker" = Governor of Poker
"Hotel Dash Suite Success" = Hotel Dash Suite Success
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"Jewel Quest 3" = Jewel Quest 3
"LogMeIn Hamachi" = LogMeIn Hamachi
"Luxor 3" = Luxor 3
"Mahjongg dimensions" = Mahjongg dimensions
"Mozilla Firefox 10.0.2 (x86 de)" = Mozilla Firefox 10.0.2 (x86 de)
"Mozilla Thunderbird 10.0.2 (x86 de)" = Mozilla Thunderbird 10.0.2 (x86 de)
"PhotoScape" = PhotoScape
"Plants vs Zombies" = Plants vs Zombies
"PSP Video 9" = PSP Video 9 6
"Simfy" = simfy
"VLC media player" = VLC media player 1.1.11
"WinLiveSuite" = Windows Live Essentials
"World of Goo" = World of Goo
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"FileZilla Client" = FileZilla Client 3.5.3
"Google Chrome" = Google Chrome
"TeamSpeak 3 Client" = TeamSpeak 3 Client
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 27.01.2012 18:34:45 | Computer Name = Paul-PC | Source = Application Hang | ID = 1002
Description = Programm chrome.exe, Version 16.0.912.63 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: e80 Startzeit:
01ccdd42f1eb121f Endzeit: 33 Anwendungspfad: C:\Users\Paul\AppData\Local\Google\Chrome\Application\chrome.exe
Berichts-ID:
19a076cd-4937-11e1-b575-742f68fb053d
Error - 28.01.2012 07:05:14 | Computer Name = Paul-PC | Source = Application Hang | ID = 1002
Description = Programm NOTEPAD.EXE, Version 6.1.7600.16385 kann nicht mehr unter
Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
zu suchen. Prozess-ID: 7c4 Startzeit: 01ccddaca1531b13 Endzeit: 5 Anwendungspfad: C:\Windows\system32\NOTEPAD.EXE
Berichts-ID:
f0e14d84-499f-11e1-a5af-742f68fb053d
Error - 28.01.2012 07:20:35 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 28.01.2012 18:55:55 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 29.01.2012 13:49:09 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 30.01.2012 10:31:19 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 30.01.2012 13:15:47 | Computer Name = Paul-PC | Source = Application Hang | ID = 1002
Description = Programm chrome.exe, Version 16.0.912.63 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 5c8 Startzeit:
01ccdf6f381b44be Endzeit: 23 Anwendungspfad: C:\Users\Paul\AppData\Local\Google\Chrome\Application\chrome.exe
Berichts-ID:
09dc2788-4b66-11e1-a035-742f68fb053d
Error - 31.01.2012 11:02:26 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 01.02.2012 13:21:58 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 02.02.2012 12:24:28 | Computer Name = Paul-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
[ System Events ]
Error - 22.02.2012 09:15:37 | Computer Name = Paul-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error - 22.02.2012 10:05:47 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description =
Error - 22.02.2012 10:18:30 | Computer Name = Paul-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \...\DR2 gefunden.
Error - 22.02.2012 10:19:07 | Computer Name = Paul-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \...\DR3 gefunden.
Error - 22.02.2012 13:14:52 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description =
Error - 23.02.2012 11:03:34 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description =
Error - 23.02.2012 12:45:17 | Computer Name = Paul-PC | Source = bowser | ID = 8003
Description =
Error - 23.02.2012 14:28:58 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description =
Error - 23.02.2012 18:47:56 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description =
Error - 24.02.2012 17:55:57 | Computer Name = Paul-PC | Source = DCOM | ID = 10010
Description =
< End of report >
|
|
07.03.2012, 13:05
| #8 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? Ich glaube ich lad die otl.txt in teilen hoch, es geht einfach nicht anders ich hoffe es stört dich nicht!!! Code:
ATTFilter OTL logfile created on: 07.03.2012 11:58:50 - Run 1 OTL by OldTimer - Version 3.2.35.1 Folder = C:\Users\Paul\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,98 Gb Total Physical Memory | 7,23 Gb Available Physical Memory | 90,63% Memory free 15,96 Gb Paging File | 15,23 Gb Available in Paging File | 95,44% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 200,28 Gb Total Space | 130,44 Gb Free Space | 65,13% Space Free | Partition Type: NTFS Drive D: | 240,48 Gb Total Space | 140,84 Gb Free Space | 58,57% Space Free | Partition Type: NTFS Unable to calculate disk information. Computer Name: PAUL-PC | User Name: Paul | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Paul\Desktop\OTL.exe (OldTimer Tools) ========== Modules (No Company Name) ========== ========== Win32 Services (SafeList) ========== SRV:64bit: - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.) SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) SRV - (Akamai) -- c:\program files (x86)\common files\akamai/netsession_win_7de0ed9.dll () SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (Atheros Bt&Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros) SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Atheros Commnucations) SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.) SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS) SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices) DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros) DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros) DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros) DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros) DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros) DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros) DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.) DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.) DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (amd_xata) -- C:\Windows\SysNative\drivers\amd_xata.sys (Advanced Micro Devices) DRV:64bit: - (amd_sata) -- C:\Windows\SysNative\drivers\amd_sata.sys (Advanced Micro Devices) DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation) DRV:64bit: - (amdiox64) -- C:\Windows\SysNative\drivers\amdiox64.sys (Advanced Micro Devices) DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( ) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.) DRV:64bit: - (netr28ux) -- C:\Windows\SysNative\drivers\netr28ux.sys (Ralink Technology Corp.) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20) -- C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.) DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation) DRV:64bit: - (libusb0) -- C:\Windows\SysNative\drivers\libusb0.sys (hxxp://libusb-win32.sourceforge.net) DRV - (ATKWMIACPIIO) -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys (ASUS) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421 ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..network.proxy.type: 0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.02.26 20:46:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.02.25 15:43:52 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2012.01.07 14:56:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Extensions [2012.02.28 16:58:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\ml7vzjyd.default\extensions [2012.02.21 12:16:48 | 000,000,000 | ---D | M] (DealBulldog Toolbar) -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\ml7vzjyd.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} [2012.02.21 23:51:17 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Paul\AppData\Roaming\mozilla\Firefox\Profiles\ml7vzjyd.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2012.01.07 15:04:21 | 000,001,632 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\Mozilla\Firefox\Profiles\ml7vzjyd.default\searchplugins\firefox-add-ons.xml [2012.01.07 14:56:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions () (No name found) -- C:\USERS\PAUL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ML7VZJYD.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI () (No name found) -- C:\USERS\PAUL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ML7VZJYD.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI [2012.02.26 20:46:33 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012.02.26 20:46:26 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.02.26 20:46:26 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012.02.26 20:46:26 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2012.02.26 20:46:26 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2012.02.26 20:46:26 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2012.02.26 20:46:26 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\Application\16.0.912.63\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Paul\AppData\Local\Google\Chrome\Application\16.0.912.63\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll CHR - plugin: Zeon Plus (Enabled) = C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\ CHR - Extension: YouTube = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: Google-Suche = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\ CHR - Extension: Google Mail = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\DealBulldog Toolbar\tbcore3.dll () O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (DealBulldog Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\DealBulldog Toolbar\tbcore3.dll () O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations) O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications) O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found O4 - HKLM..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.) O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe (ecareme) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [Nuance PDF Reader-reminder] C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (Virage Logic Corporation / Sonic Focus) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUS) O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Paul\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKCU..\Run: [SkypeM] C:\Users\Paul\AppData\Local\Skype\Skype.exe (Rockwell Software, Inc.) O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe (Adobe Systems, Inc.) O4 - Startup: C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Paul\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube Download - C:\Users\Paul\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.0) O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC40A0DF-AD84-4285-964C-6084333998ED}: DhcpNameServer = 100.100.2.16 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CD314412-FC20-428A-A816-6563F0197C8C}: DhcpNameServer = 192.168.2.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {47B3BDBB-F2AE-4B55-95C8-921C25DB3B76} - .NET Framework ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {9793EDE2-499E-4A14-8220-523691D8F91B} - .NET Framework ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET Framework ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: {FE600E50-2C69-46D5-ACAA-2B617006245C} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP MsConfig:64bit - StartUpReg: ASUS Screen Saver Protector - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS) MsConfig:64bit - StartUpReg: CLMLServer - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) MsConfig:64bit - StartUpReg: RtHDVCpl - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) CREATERESTOREPOINT Error creating restore point. ========== Files/Folders - Created Within 30 Days ========== [2012.03.07 11:56:17 | 000,584,704 | ---- | C] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTL.exe [2012.03.06 09:25:29 | 000,000,000 | R--D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices [2012.02.29 19:32:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012.02.29 19:32:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2012.02.28 21:14:16 | 000,054,272 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\SysNative\libusb0.dll [2012.02.28 21:14:16 | 000,043,520 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\SysWow64\libusb0.dll [2012.02.28 21:14:16 | 000,031,744 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\SysNative\drivers\libusb0.sys [2012.02.28 21:14:15 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\RJL [2012.02.25 15:43:58 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Thunderbird [2012.02.25 15:43:58 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Thunderbird [2012.02.25 15:43:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird [2012.02.24 15:20:51 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\EAC [2012.02.24 15:20:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy [2012.02.24 15:20:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Exact Audio Copy [2012.02.24 15:07:22 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\guetta [2012.02.23 15:44:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioCon v1.0 [2012.02.23 15:44:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Basement Softworks [2012.02.21 23:46:19 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Geckofx [2012.02.21 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 [2012.02.21 23:45:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 [2012.02.21 23:45:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AviSynth 2.5 [2012.02.21 23:45:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Kawa [2012.02.21 23:45:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Red Kawa [2012.02.21 22:06:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\win7 [2012.02.21 17:17:54 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\für Michi [2012.02.21 12:25:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft [2012.02.21 12:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft [2012.02.21 12:25:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft [2012.02.21 12:16:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DealBulldog Toolbar [2012.02.21 12:16:33 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperCam 2 [2012.02.21 12:16:32 | 000,000,000 | ---D | C] -- C:\Program Files\HyperCam 2 [2012.02.21 12:11:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\TempDIR [2012.02.18 15:44:42 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\minecraft [2012.02.17 13:33:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps [2012.02.17 13:33:29 | 000,000,000 | ---D | C] -- C:\Fraps [2012.02.16 22:32:27 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\.Nitrous [2012.02.14 22:10:06 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\FileZilla [2012.02.14 22:10:04 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2012.02.14 22:10:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client [2012.02.12 23:07:26 | 000,000,000 | ---D | C] -- C:\Users\Paul\Documents\Planeten [2012.02.12 22:54:59 | 000,000,000 | ---D | C] -- C:\Users\Paul\Documents\hmmm [2012.02.12 22:47:50 | 000,000,000 | ---D | C] -- C:\Users\Paul\Documents\gerenderte Bilder [2012.02.10 23:11:19 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\wichtige Seiten [2012.02.10 22:58:41 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Roaming\.minecraft [2012.02.10 15:45:27 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\Windows Live [2012.02.10 15:44:44 | 000,000,000 | ---D | C] -- C:\Users\Paul\AppData\Local\{58FCCF20-9080-4DE2-8415-3AE280E315B7} [2012.02.09 19:33:31 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\skinedit [2012.02.08 20:11:03 | 000,000,000 | ---D | C] -- C:\Users\Paul\Desktop\Texturen Pakete ========== Files - Modified Within 30 Days ========== [2012.03.07 11:56:17 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTL.exe [2012.03.07 11:53:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.03.07 11:53:29 | 2131,529,727 | -HS- | M] () -- C:\hiberfil.sys [2012.03.07 09:51:15 | 008,650,660 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.03.07 09:51:15 | 000,705,644 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat [2012.03.07 09:51:15 | 000,704,668 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat [2012.03.07 09:51:15 | 000,702,406 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat [2012.03.07 09:51:15 | 000,700,322 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat [2012.03.07 09:51:15 | 000,690,556 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat [2012.03.07 09:51:15 | 000,687,172 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat [2012.03.07 09:51:15 | 000,665,340 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.03.07 09:51:15 | 000,627,222 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.03.07 09:51:15 | 000,562,984 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat [2012.03.07 09:51:15 | 000,445,700 | ---- | M] () -- C:\Windows\SysNative\perfh001.dat [2012.03.07 09:51:15 | 000,396,534 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat [2012.03.07 09:51:15 | 000,364,736 | ---- | M] () -- C:\Windows\SysNative\perfh00D.dat [2012.03.07 09:51:15 | 000,140,616 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat [2012.03.07 09:51:15 | 000,137,306 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat [2012.03.07 09:51:15 | 000,136,494 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat [2012.03.07 09:51:15 | 000,136,070 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat [2012.03.07 09:51:15 | 000,133,694 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat [2012.03.07 09:51:15 | 000,133,552 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.03.07 09:51:15 | 000,130,698 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat [2012.03.07 09:51:15 | 000,109,942 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat [2012.03.07 09:51:15 | 000,109,942 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.03.07 09:51:15 | 000,092,990 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat [2012.03.07 09:51:15 | 000,082,538 | ---- | M] () -- C:\Windows\SysNative\perfc001.dat [2012.03.07 09:51:15 | 000,072,648 | ---- | M] () -- C:\Windows\SysNative\perfc00D.dat [2012.03.06 09:38:35 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.03.06 09:38:34 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.03.06 09:25:16 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe [2012.03.06 09:25:12 | 000,002,066 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini [2012.03.04 18:20:31 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi06.bmp [2012.03.04 18:20:30 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi05.bmp [2012.03.04 18:20:27 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi04.bmp [2012.03.04 18:20:24 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi03.bmp [2012.03.04 18:20:21 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi02.bmp [2012.03.04 18:20:18 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi01.bmp [2012.03.04 18:20:14 | 000,003,602 | ---- | M] () -- C:\Users\Paul\Documents\testi.pov [2012.03.04 18:12:21 | 000,921,654 | ---- | M] () -- C:\Users\Paul\Documents\testi.bmp [2012.03.03 22:58:50 | 011,850,700 | ---- | M] () -- C:\Users\Paul\Documents\clip0010.avi [2012.03.03 15:50:35 | 000,000,845 | ---- | M] () -- C:\Users\Paul\Desktop\FlorensiaEN.lnk [2012.03.02 22:24:50 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi12.bmp [2012.03.02 22:24:49 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi11.bmp [2012.03.02 22:24:48 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi10.bmp [2012.03.02 22:24:47 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi09.bmp [2012.03.02 22:24:46 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi08.bmp [2012.03.02 22:24:45 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi07.bmp [2012.03.02 22:24:27 | 000,003,736 | ---- | M] () -- C:\Users\Paul\Documents\testi.pov.bak [2012.03.02 22:21:51 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi15.bmp [2012.03.02 22:21:50 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi14.bmp [2012.03.02 22:21:49 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi13.bmp [2012.03.02 22:20:50 | 000,000,199 | ---- | M] () -- C:\Users\Paul\Documents\clock.ini [2012.03.02 22:20:46 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi008.bmp [2012.03.02 22:20:46 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi007.bmp [2012.03.02 22:20:45 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi006.bmp [2012.03.02 22:20:43 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi005.bmp [2012.03.02 22:20:42 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi004.bmp [2012.03.02 22:20:41 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi003.bmp [2012.03.02 22:20:39 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi002.bmp [2012.03.02 22:20:38 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi001.bmp [2012.03.02 22:11:20 | 000,230,454 | ---- | M] () -- C:\Users\Paul\Documents\testi009.bmp [2012.03.02 21:18:19 | 000,000,200 | ---- | M] () -- C:\Users\Paul\Documents\clock.ini.bak [2012.02.29 19:32:16 | 000,000,928 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk [2012.02.28 21:50:48 | 111,400,428 | ---- | M] () -- C:\Users\Paul\Documents\clip0009.avi [2012.02.25 15:43:54 | 000,002,088 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk [2012.02.24 15:20:45 | 000,001,072 | ---- | M] () -- C:\Users\Public\Desktop\Exact Audio Copy.lnk [2012.02.23 15:55:08 | 000,002,230 | ---- | M] () -- C:\Users\Paul\Desktop\Free Audio Converter.lnk [2012.02.21 23:45:44 | 000,002,192 | ---- | M] () -- C:\Users\Public\Desktop\PSP Video 9.lnk [2012.02.21 17:25:57 | 192,586,532 | ---- | M] () -- C:\Users\Paul\Documents\clip0008.avi [2012.02.21 12:39:36 | 037,831,336 | ---- | M] () -- C:\Users\Paul\Documents\clip0007.avi [2012.02.21 12:36:12 | 074,021,638 | ---- | M] () -- C:\Users\Paul\Documents\clip0006.avi [2012.02.21 12:33:28 | 000,720,912 | ---- | M] () -- C:\Users\Paul\Documents\clip0005.avi [2012.02.21 12:32:57 | 005,183,772 | ---- | M] () -- C:\Users\Paul\Documents\clip0004.avi [2012.02.21 12:27:48 | 011,794,332 | ---- | M] () -- C:\Users\Paul\Documents\clip0003.avi [2012.02.21 12:16:33 | 000,000,933 | ---- | M] () -- C:\Users\Paul\Desktop\HyperCam 2.lnk [2012.02.15 17:12:42 | 000,132,320 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2012.02.15 13:35:00 | 000,293,616 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.02.14 22:10:04 | 000,002,002 | ---- | M] () -- C:\Users\Paul\Desktop\FileZilla Client.lnk [2012.02.13 16:03:57 | 000,048,903 | ---- | M] () -- C:\Users\Paul\Documents\Planeten360.png [2012.02.13 16:03:55 | 000,048,931 | ---- | M] () -- C:\Users\Paul\Documents\Planeten359.png [2012.02.13 16:03:52 | 000,048,951 | ---- | M] () -- C:\Users\Paul\Documents\Planeten358.png [2012.02.13 16:03:49 | 000,048,954 | ---- | M] () -- C:\Users\Paul\Documents\Planeten357.png [2012.02.13 16:03:47 | 000,048,933 | ---- | M] () -- C:\Users\Paul\Documents\Planeten356.png [2012.02.13 16:03:44 | 000,048,854 | ---- | M] () -- C:\Users\Paul\Documents\Planeten355.png [2012.02.13 16:03:41 | 000,048,900 | ---- | M] () -- C:\Users\Paul\Documents\Planeten354.png [2012.02.13 16:03:38 | 000,048,851 | ---- | M] () -- C:\Users\Paul\Documents\Planeten353.png [2012.02.13 16:03:36 | 000,048,802 | ---- | M] () -- C:\Users\Paul\Documents\Planeten352.png [2012.02.13 16:03:33 | 000,048,810 | ---- | M] () -- C:\Users\Paul\Documents\Planeten351.png [2012.02.13 16:03:30 | 000,048,896 | ---- | M] () -- C:\Users\Paul\Documents\Planeten350.png [2012.02.13 16:03:28 | 000,048,957 | ---- | M] () -- C:\Users\Paul\Documents\Planeten349.png [2012.02.13 16:03:24 | 000,049,120 | ---- | M] () -- C:\Users\Paul\Documents\Planeten348.png [2012.02.13 16:03:22 | 000,048,999 | ---- | M] () -- C:\Users\Paul\Documents\Planeten347.png [2012.02.13 16:03:19 | 000,048,968 | ---- | M] () -- C:\Users\Paul\Documents\Planeten346.png [2012.02.13 16:03:16 | 000,048,999 | ---- | M] () -- C:\Users\Paul\Documents\Planeten345.png [2012.02.13 16:03:14 | 000,048,949 | ---- | M] () -- C:\Users\Paul\Documents\Planeten344.png [2012.02.13 16:03:11 | 000,048,908 | ---- | M] () -- C:\Users\Paul\Documents\Planeten343.png [2012.02.13 16:03:08 | 000,048,884 | ---- | M] () -- C:\Users\Paul\Documents\Planeten342.png [2012.02.13 16:03:04 | 000,048,828 | ---- | M] () -- C:\Users\Paul\Documents\Planeten341.png [2012.02.13 16:03:02 | 000,048,990 | ---- | M] () -- C:\Users\Paul\Documents\Planeten340.png [2012.02.13 16:02:59 | 000,048,903 | ---- | M] () -- C:\Users\Paul\Documents\Planeten339.png [2012.02.13 16:02:57 | 000,048,825 | ---- | M] () -- C:\Users\Paul\Documents\Planeten338.png [2012.02.13 16:02:54 | 000,048,752 | ---- | M] () -- C:\Users\Paul\Documents\Planeten337.png [2012.02.13 16:02:51 | 000,048,786 | ---- | M] () -- C:\Users\Paul\Documents\Planeten336.png [2012.02.13 16:02:49 | 000,048,828 | ---- | M] () -- C:\Users\Paul\Documents\Planeten335.png [2012.02.13 16:02:45 | 000,048,804 | ---- | M] () -- C:\Users\Paul\Documents\Planeten334.png [2012.02.13 16:02:42 | 000,048,931 | ---- | M] () -- C:\Users\Paul\Documents\Planeten333.png [2012.02.13 16:02:40 | 000,049,012 | ---- | M] () -- C:\Users\Paul\Documents\Planeten332.png [2012.02.13 16:02:36 | 000,048,990 | ---- | M] () -- C:\Users\Paul\Documents\Planeten331.png [2012.02.13 16:02:32 | 000,048,963 | ---- | M] () -- C:\Users\Paul\Documents\Planeten330.png [2012.02.13 16:02:26 | 000,048,934 | ---- | M] () -- C:\Users\Paul\Documents\Planeten329.png [2012.02.13 16:02:21 | 000,048,890 | ---- | M] () -- C:\Users\Paul\Documents\Planeten328.png [2012.02.13 16:02:17 | 000,048,741 | ---- | M] () -- C:\Users\Paul\Documents\Planeten327.png [2012.02.13 16:02:13 | 000,048,735 | ---- | M] () -- C:\Users\Paul\Documents\Planeten326.png [2012.02.13 16:02:10 | 000,048,795 | ---- | M] () -- C:\Users\Paul\Documents\Planeten325.png [2012.02.13 16:02:07 | 000,048,746 | ---- | M] () -- C:\Users\Paul\Documents\Planeten324.png [2012.02.13 16:02:04 | 000,048,704 | ---- | M] () -- C:\Users\Paul\Documents\Planeten323.png [2012.02.13 16:02:01 | 000,048,734 | ---- | M] () -- C:\Users\Paul\Documents\Planeten322.png [2012.02.13 16:01:58 | 000,048,677 | ---- | M] () -- C:\Users\Paul\Documents\Planeten321.png [2012.02.13 16:01:56 | 000,048,808 | ---- | M] () -- C:\Users\Paul\Documents\Planeten320.png [2012.02.13 16:01:48 | 000,048,938 | ---- | M] () -- C:\Users\Paul\Documents\Planeten319.png [2012.02.13 16:01:45 | 000,048,859 | ---- | M] () -- C:\Users\Paul\Documents\Planeten318.png [2012.02.13 16:01:43 | 000,048,819 | ---- | M] () -- C:\Users\Paul\Documents\Planeten317.png [2012.02.13 16:01:40 | 000,048,900 | ---- | M] () -- C:\Users\Paul\Documents\Planeten316.png [2012.02.13 16:01:38 | 000,048,799 | ---- | M] () -- C:\Users\Paul\Documents\Planeten315.png [2012.02.13 16:01:35 | 000,048,712 | ---- | M] () -- C:\Users\Paul\Documents\Planeten314.png [2012.02.13 16:01:33 | 000,048,763 | ---- | M] () -- C:\Users\Paul\Documents\Planeten313.png [2012.02.13 16:01:30 | 000,048,700 | ---- | M] () -- C:\Users\Paul\Documents\Planeten312.png [2012.02.13 16:01:28 | 000,048,638 | ---- | M] () -- C:\Users\Paul\Documents\Planeten311.png [2012.02.13 16:01:26 | 000,048,645 | ---- | M] () -- C:\Users\Paul\Documents\Planeten310.png [2012.02.13 16:01:23 | 000,048,622 | ---- | M] () -- C:\Users\Paul\Documents\Planeten309.png [2012.02.13 16:01:21 | 000,048,651 | ---- | M] () -- C:\Users\Paul\Documents\Planeten308.png [2012.02.13 16:01:19 | 000,048,586 | ---- | M] () -- C:\Users\Paul\Documents\Planeten307.png [2012.02.13 16:01:16 | 000,048,561 | ---- | M] () -- C:\Users\Paul\Documents\Planeten306.png [2012.02.13 16:01:14 | 000,048,499 | ---- | M] () -- C:\Users\Paul\Documents\Planeten305.png [2012.02.13 16:01:12 | 000,048,488 | ---- | M] () -- C:\Users\Paul\Documents\Planeten304.png [2012.02.13 16:01:10 | 000,048,432 | ---- | M] () -- C:\Users\Paul\Documents\Planeten303.png [2012.02.13 16:01:07 | 000,048,390 | ---- | M] () -- C:\Users\Paul\Documents\Planeten302.png [2012.02.13 16:01:05 | 000,048,514 | ---- | M] () -- C:\Users\Paul\Documents\Planeten301.png [2012.02.13 16:01:03 | 000,048,428 | ---- | M] () -- C:\Users\Paul\Documents\Planeten300.png [2012.02.13 16:01:00 | 000,048,286 | ---- | M] () -- C:\Users\Paul\Documents\Planeten299.png [2012.02.13 16:00:58 | 000,048,302 | ---- | M] () -- C:\Users\Paul\Documents\Planeten298.png [2012.02.13 16:00:56 | 000,048,310 | ---- | M] () -- C:\Users\Paul\Documents\Planeten297.png [2012.02.13 16:00:54 | 000,048,390 | ---- | M] () -- C:\Users\Paul\Documents\Planeten296.png [2012.02.13 16:00:51 | 000,048,295 | ---- | M] () -- C:\Users\Paul\Documents\Planeten295.png [2012.02.13 16:00:49 | 000,048,290 | ---- | M] () -- C:\Users\Paul\Documents\Planeten294.png [2012.02.13 16:00:47 | 000,048,284 | ---- | M] () -- C:\Users\Paul\Documents\Planeten293.png [2012.02.13 16:00:45 | 000,048,268 | ---- | M] () -- C:\Users\Paul\Documents\Planeten292.png [2012.02.13 16:00:42 | 000,048,231 | ---- | M] () -- C:\Users\Paul\Documents\Planeten291.png [2012.02.13 16:00:40 | 000,048,206 | ---- | M] () -- C:\Users\Paul\Documents\Planeten290.png [2012.02.13 16:00:38 | 000,048,339 | ---- | M] () -- C:\Users\Paul\Documents\Planeten289.png [2012.02.13 16:00:36 | 000,048,436 | ---- | M] () -- C:\Users\Paul\Documents\Planeten288.png [2012.02.13 16:00:33 | 000,048,462 | ---- | M] () -- C:\Users\Paul\Documents\Planeten287.png [2012.02.13 16:00:31 | 000,048,312 | ---- | M] () -- C:\Users\Paul\Documents\Planeten286.png [2012.02.13 16:00:29 | 000,048,456 | ---- | M] () -- C:\Users\Paul\Documents\Planeten285.png [2012.02.13 16:00:27 | 000,048,567 | ---- | M] () -- C:\Users\Paul\Documents\Planeten284.png [2012.02.13 16:00:24 | 000,048,618 | ---- | M] () -- C:\Users\Paul\Documents\Planeten283.png [2012.02.13 16:00:22 | 000,048,596 | ---- | M] () -- C:\Users\Paul\Documents\Planeten282.png [2012.02.13 16:00:20 | 000,048,612 | ---- | M] () -- C:\Users\Paul\Documents\Planeten281.png [2012.02.13 16:00:18 | 000,048,712 | ---- | M] () -- C:\Users\Paul\Documents\Planeten280.png [2012.02.13 16:00:15 | 000,048,635 | ---- | M] () -- C:\Users\Paul\Documents\Planeten279.png [2012.02.13 16:00:13 | 000,048,515 | ---- | M] () -- C:\Users\Paul\Documents\Planeten278.png [2012.02.13 16:00:11 | 000,048,555 | ---- | M] () -- C:\Users\Paul\Documents\Planeten277.png [2012.02.13 16:00:08 | 000,048,565 | ---- | M] () -- C:\Users\Paul\Documents\Planeten276.png [2012.02.13 16:00:06 | 000,048,588 | ---- | M] () -- C:\Users\Paul\Documents\Planeten275.png [2012.02.13 16:00:04 | 000,048,634 | ---- | M] () -- C:\Users\Paul\Documents\Planeten274.png [2012.02.13 16:00:02 | 000,048,833 | ---- | M] () -- C:\Users\Paul\Documents\Planeten273.png [2012.02.13 15:59:59 | 000,048,842 | ---- | M] () -- C:\Users\Paul\Documents\Planeten272.png [2012.02.13 15:59:57 | 000,048,890 | ---- | M] () -- C:\Users\Paul\Documents\Planeten271.png [2012.02.13 15:59:55 | 000,048,879 | ---- | M] () -- C:\Users\Paul\Documents\Planeten270.png [2012.02.13 15:59:53 | 000,048,877 | ---- | M] () -- C:\Users\Paul\Documents\Planeten269.png [2012.02.13 15:59:50 | 000,048,797 | ---- | M] () -- C:\Users\Paul\Documents\Planeten268.png [2012.02.13 15:59:48 | 000,048,890 | ---- | M] () -- C:\Users\Paul\Documents\Planeten267.png [2012.02.13 15:59:46 | 000,048,896 | ---- | M] () -- C:\Users\Paul\Documents\Planeten266.png [2012.02.13 15:59:44 | 000,048,922 | ---- | M] () -- C:\Users\Paul\Documents\Planeten265.png [2012.02.13 15:59:41 | 000,048,965 | ---- | M] () -- C:\Users\Paul\Documents\Planeten264.png [2012.02.13 15:59:39 | 000,048,962 | ---- | M] () -- C:\Users\Paul\Documents\Planeten263.png [2012.02.13 15:59:37 | 000,048,785 | ---- | M] () -- C:\Users\Paul\Documents\Planeten262.png [2012.02.13 15:59:35 | 000,048,853 | ---- | M] () -- C:\Users\Paul\Documents\Planeten261.png [2012.02.13 15:59:32 | 000,048,740 | ---- | M] () -- C:\Users\Paul\Documents\Planeten260.png [2012.02.13 15:59:30 | 000,048,832 | ---- | M] () -- C:\Users\Paul\Documents\Planeten259.png [2012.02.13 15:59:28 | 000,048,719 | ---- | M] () -- C:\Users\Paul\Documents\Planeten258.png [2012.02.13 15:59:26 | 000,048,798 | ---- | M] () -- C:\Users\Paul\Documents\Planeten257.png [2012.02.13 15:59:24 | 000,048,756 | ---- | M] () -- C:\Users\Paul\Documents\Planeten256.png [2012.02.13 15:59:21 | 000,048,765 | ---- | M] () -- C:\Users\Paul\Documents\Planeten255.png [2012.02.13 15:59:19 | 000,048,810 | ---- | M] () -- C:\Users\Paul\Documents\Planeten254.png [2012.02.13 15:59:17 | 000,048,936 | ---- | M] () -- C:\Users\Paul\Documents\Planeten253.png [2012.02.13 15:59:14 | 000,048,858 | ---- | M] () -- C:\Users\Paul\Documents\Planeten252.png [2012.02.13 15:59:12 | 000,048,841 | ---- | M] () -- C:\Users\Paul\Documents\Planeten251.png [2012.02.13 15:59:10 | 000,048,879 | ---- | M] () -- C:\Users\Paul\Documents\Planeten250.png [2012.02.13 15:59:08 | 000,048,850 | ---- | M] () -- C:\Users\Paul\Documents\Planeten249.png [2012.02.13 15:59:05 | 000,048,807 | ---- | M] () -- C:\Users\Paul\Documents\Planeten248.png [2012.02.13 15:59:03 | 000,048,826 | ---- | M] () -- C:\Users\Paul\Documents\Planeten247.png [2012.02.13 15:59:01 | 000,048,971 | ---- | M] () -- C:\Users\Paul\Documents\Planeten246.png [2012.02.13 15:58:59 | 000,048,897 | ---- | M] () -- C:\Users\Paul\Documents\Planeten245.png [2012.02.13 15:58:56 | 000,048,962 | ---- | M] () -- C:\Users\Paul\Documents\Planeten244.png [2012.02.13 15:58:54 | 000,048,930 | ---- | M] () -- C:\Users\Paul\Documents\Planeten243.png [2012.02.13 15:58:52 | 000,049,044 | ---- | M] () -- C:\Users\Paul\Documents\Planeten242.png [2012.02.13 15:58:50 | 000,049,062 | ---- | M] () -- C:\Users\Paul\Documents\Planeten241.png [2012.02.13 15:58:47 | 000,049,037 | ---- | M] () -- C:\Users\Paul\Documents\Planeten240.png [2012.02.13 15:58:45 | 000,049,048 | ---- | M] () -- C:\Users\Paul\Documents\Planeten239.png [2012.02.13 15:58:43 | 000,049,045 | ---- | M] () -- C:\Users\Paul\Documents\Planeten238.png [2012.02.13 15:58:40 | 000,049,048 | ---- | M] () -- C:\Users\Paul\Documents\Planeten237.png [2012.02.13 15:58:38 | 000,049,073 | ---- | M] () -- C:\Users\Paul\Documents\Planeten236.png [2012.02.13 15:58:36 | 000,049,019 | ---- | M] () -- C:\Users\Paul\Documents\Planeten235.png [2012.02.13 15:58:34 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten234.png [2012.02.13 15:58:31 | 000,048,938 | ---- | M] () -- C:\Users\Paul\Documents\Planeten233.png [2012.02.13 15:58:29 | 000,048,945 | ---- | M] () -- C:\Users\Paul\Documents\Planeten232.png [2012.02.13 15:58:27 | 000,049,039 | ---- | M] () -- C:\Users\Paul\Documents\Planeten231.png [2012.02.13 15:58:25 | 000,048,943 | ---- | M] () -- C:\Users\Paul\Documents\Planeten230.png [2012.02.13 15:58:22 | 000,049,017 | ---- | M] () -- C:\Users\Paul\Documents\Planeten229.png [2012.02.13 15:58:20 | 000,048,965 | ---- | M] () -- C:\Users\Paul\Documents\Planeten228.png [2012.02.13 15:58:18 | 000,049,015 | ---- | M] () -- C:\Users\Paul\Documents\Planeten227.png [2012.02.13 15:58:16 | 000,048,988 | ---- | M] () -- C:\Users\Paul\Documents\Planeten226.png [2012.02.13 15:58:13 | 000,048,950 | ---- | M] () -- C:\Users\Paul\Documents\Planeten225.png [2012.02.13 15:58:11 | 000,048,948 | ---- | M] () -- C:\Users\Paul\Documents\Planeten224.png [2012.02.13 15:58:09 | 000,049,120 | ---- | M] () -- C:\Users\Paul\Documents\Planeten223.png [2012.02.13 15:58:07 | 000,049,149 | ---- | M] () -- C:\Users\Paul\Documents\Planeten222.png [2012.02.13 15:58:04 | 000,049,128 | ---- | M] () -- C:\Users\Paul\Documents\Planeten221.png [2012.02.13 15:58:02 | 000,049,021 | ---- | M] () -- C:\Users\Paul\Documents\Planeten220.png [2012.02.13 15:58:00 | 000,048,908 | ---- | M] () -- C:\Users\Paul\Documents\Planeten219.png [2012.02.13 15:57:58 | 000,048,766 | ---- | M] () -- C:\Users\Paul\Documents\Planeten218.png [2012.02.13 15:57:55 | 000,048,819 | ---- | M] () -- C:\Users\Paul\Documents\Planeten217.png [2012.02.13 15:57:53 | 000,048,910 | ---- | M] () -- C:\Users\Paul\Documents\Planeten216.png [2012.02.13 15:57:51 | 000,048,880 | ---- | M] () -- C:\Users\Paul\Documents\Planeten215.png [2012.02.13 15:57:49 | 000,048,857 | ---- | M] () -- C:\Users\Paul\Documents\Planeten214.png [2012.02.13 15:57:47 | 000,048,906 | ---- | M] () -- C:\Users\Paul\Documents\Planeten213.png [2012.02.13 15:57:44 | 000,048,901 | ---- | M] () -- C:\Users\Paul\Documents\Planeten212.png [2012.02.13 15:57:42 | 000,048,956 | ---- | M] () -- C:\Users\Paul\Documents\Planeten211.png [2012.02.13 15:57:40 | 000,048,977 | ---- | M] () -- C:\Users\Paul\Documents\Planeten210.png [2012.02.13 15:57:38 | 000,049,089 | ---- | M] () -- C:\Users\Paul\Documents\Planeten209.png [2012.02.13 15:57:35 | 000,048,966 | ---- | M] () -- C:\Users\Paul\Documents\Planeten208.png [2012.02.13 15:57:33 | 000,049,113 | ---- | M] () -- C:\Users\Paul\Documents\Planeten207.png [2012.02.13 15:57:31 | 000,049,019 | ---- | M] () -- C:\Users\Paul\Documents\Planeten206.png [2012.02.13 15:57:28 | 000,049,103 | ---- | M] () -- C:\Users\Paul\Documents\Planeten205.png [2012.02.13 15:57:26 | 000,049,018 | ---- | M] () -- C:\Users\Paul\Documents\Planeten204.png [2012.02.13 15:57:24 | 000,049,037 | ---- | M] () -- C:\Users\Paul\Documents\Planeten203.png [2012.02.13 15:57:22 | 000,048,964 | ---- | M] () -- C:\Users\Paul\Documents\Planeten202.png [2012.02.13 15:57:19 | 000,048,928 | ---- | M] () -- C:\Users\Paul\Documents\Planeten201.png [2012.02.13 15:57:17 | 000,048,985 | ---- | M] () -- C:\Users\Paul\Documents\Planeten200.png [2012.02.13 15:57:15 | 000,049,031 | ---- | M] () -- C:\Users\Paul\Documents\Planeten199.png [2012.02.13 15:57:13 | 000,049,198 | ---- | M] () -- C:\Users\Paul\Documents\Planeten198.png [2012.02.13 15:57:10 | 000,049,200 | ---- | M] () -- C:\Users\Paul\Documents\Planeten197.png [2012.02.13 15:57:08 | 000,049,090 | ---- | M] () -- C:\Users\Paul\Documents\Planeten196.png [2012.02.13 15:57:06 | 000,049,123 | ---- | M] () -- C:\Users\Paul\Documents\Planeten195.png [2012.02.13 15:57:04 | 000,049,170 | ---- | M] () -- C:\Users\Paul\Documents\Planeten194.png [2012.02.13 15:57:01 | 000,049,232 | ---- | M] () -- C:\Users\Paul\Documents\Planeten193.png [2012.02.13 15:56:59 | 000,049,170 | ---- | M] () -- C:\Users\Paul\Documents\Planeten192.png [2012.02.13 15:56:57 | 000,049,150 | ---- | M] () -- C:\Users\Paul\Documents\Planeten191.png [2012.02.13 15:56:54 | 000,049,043 | ---- | M] () -- C:\Users\Paul\Documents\Planeten190.png [2012.02.13 15:56:52 | 000,048,925 | ---- | M] () -- C:\Users\Paul\Documents\Planeten189.png [2012.02.13 15:56:50 | 000,048,927 | ---- | M] () -- C:\Users\Paul\Documents\Planeten188.png [2012.02.13 15:56:48 | 000,048,775 | ---- | M] () -- C:\Users\Paul\Documents\Planeten187.png [2012.02.13 15:56:45 | 000,048,934 | ---- | M] () -- C:\Users\Paul\Documents\Planeten186.png [2012.02.13 15:56:43 | 000,048,853 | ---- | M] () -- C:\Users\Paul\Documents\Planeten185.png [2012.02.13 15:56:41 | 000,048,889 | ---- | M] () -- C:\Users\Paul\Documents\Planeten184.png [2012.02.13 15:56:39 | 000,048,947 | ---- | M] () -- C:\Users\Paul\Documents\Planeten183.png [2012.02.13 15:56:36 | 000,049,090 | ---- | M] () -- C:\Users\Paul\Documents\Planeten182.png [2012.02.13 15:56:34 | 000,049,199 | ---- | M] () -- C:\Users\Paul\Documents\Planeten181.png [2012.02.13 15:56:32 | 000,049,187 | ---- | M] () -- C:\Users\Paul\Documents\Planeten180.png [2012.02.13 15:56:30 | 000,049,162 | ---- | M] () -- C:\Users\Paul\Documents\Planeten179.png [2012.02.13 15:56:27 | 000,049,086 | ---- | M] () -- C:\Users\Paul\Documents\Planeten178.png [2012.02.13 15:56:25 | 000,049,053 | ---- | M] () -- C:\Users\Paul\Documents\Planeten177.png [2012.02.13 15:56:23 | 000,049,080 | ---- | M] () -- C:\Users\Paul\Documents\Planeten176.png [2012.02.13 15:56:21 | 000,049,008 | ---- | M] () -- C:\Users\Paul\Documents\Planeten175.png [2012.02.13 15:56:18 | 000,049,020 | ---- | M] () -- C:\Users\Paul\Documents\Planeten174.png [2012.02.13 15:56:16 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten173.png [2012.02.13 15:56:14 | 000,048,880 | ---- | M] () -- C:\Users\Paul\Documents\Planeten172.png [2012.02.13 15:56:12 | 000,048,957 | ---- | M] () -- C:\Users\Paul\Documents\Planeten171.png [2012.02.13 15:56:09 | 000,048,911 | ---- | M] () -- C:\Users\Paul\Documents\Planeten170.png [2012.02.13 15:56:07 | 000,049,058 | ---- | M] () -- C:\Users\Paul\Documents\Planeten169.png [2012.02.13 15:56:05 | 000,049,155 | ---- | M] () -- C:\Users\Paul\Documents\Planeten168.png [2012.02.13 15:56:03 | 000,049,125 | ---- | M] () -- C:\Users\Paul\Documents\Planeten167.png [2012.02.13 15:56:00 | 000,049,131 | ---- | M] () -- C:\Users\Paul\Documents\Planeten166.png [2012.02.13 15:55:58 | 000,049,144 | ---- | M] () -- C:\Users\Paul\Documents\Planeten165.png [2012.02.13 15:55:56 | 000,049,157 | ---- | M] () -- C:\Users\Paul\Documents\Planeten164.png [2012.02.13 15:55:54 | 000,049,068 | ---- | M] () -- C:\Users\Paul\Documents\Planeten163.png [2012.02.13 15:55:51 | 000,048,952 | ---- | M] () -- C:\Users\Paul\Documents\Planeten162.png [2012.02.13 15:55:49 | 000,048,969 | ---- | M] () -- C:\Users\Paul\Documents\Planeten161.png [2012.02.13 15:55:47 | 000,049,005 | ---- | M] () -- C:\Users\Paul\Documents\Planeten160.png [2012.02.13 15:55:45 | 000,048,839 | ---- | M] () -- C:\Users\Paul\Documents\Planeten159.png [2012.02.13 15:55:42 | 000,048,842 | ---- | M] () -- C:\Users\Paul\Documents\Planeten158.png [2012.02.13 15:55:40 | 000,048,843 | ---- | M] () -- C:\Users\Paul\Documents\Planeten157.png [2012.02.13 15:55:38 | 000,048,833 | ---- | M] () -- C:\Users\Paul\Documents\Planeten156.png [2012.02.13 15:55:36 | 000,048,743 | ---- | M] () -- C:\Users\Paul\Documents\Planeten155.png [2012.02.13 15:55:33 | 000,048,715 | ---- | M] () -- C:\Users\Paul\Documents\Planeten154.png [2012.02.13 15:55:31 | 000,048,811 | ---- | M] () -- C:\Users\Paul\Documents\Planeten153.png [2012.02.13 15:55:29 | 000,048,965 | ---- | M] () -- C:\Users\Paul\Documents\Planeten152.png [2012.02.13 15:55:27 | 000,048,911 | ---- | M] () -- C:\Users\Paul\Documents\Planeten151.png [2012.02.13 15:55:24 | 000,048,752 | ---- | M] () -- C:\Users\Paul\Documents\Planeten150.png [2012.02.13 15:55:22 | 000,048,810 | ---- | M] () -- C:\Users\Paul\Documents\Planeten149.png [2012.02.13 15:55:20 | 000,048,840 | ---- | M] () -- C:\Users\Paul\Documents\Planeten148.png [2012.02.13 15:55:18 | 000,048,797 | ---- | M] () -- C:\Users\Paul\Documents\Planeten147.png [2012.02.13 15:55:15 | 000,048,802 | ---- | M] () -- C:\Users\Paul\Documents\Planeten146.png [2012.02.13 15:55:13 | 000,048,781 | ---- | M] () -- C:\Users\Paul\Documents\Planeten145.png [2012.02.13 15:55:11 | 000,048,764 | ---- | M] () -- C:\Users\Paul\Documents\Planeten144.png [2012.02.13 15:55:09 | 000,048,780 | ---- | M] () -- C:\Users\Paul\Documents\Planeten143.png [2012.02.13 15:55:06 | 000,048,827 | ---- | M] () -- C:\Users\Paul\Documents\Planeten142.png [2012.02.13 15:55:04 | 000,048,783 | ---- | M] () -- C:\Users\Paul\Documents\Planeten141.png [2012.02.13 15:55:02 | 000,048,836 | ---- | M] () -- C:\Users\Paul\Documents\Planeten140.png [2012.02.13 15:55:00 | 000,048,804 | ---- | M] () -- C:\Users\Paul\Documents\Planeten139.png [2012.02.13 15:54:57 | 000,048,799 | ---- | M] () -- C:\Users\Paul\Documents\Planeten138.png [2012.02.13 15:54:55 | 000,048,753 | ---- | M] () -- C:\Users\Paul\Documents\Planeten137.png [2012.02.13 15:54:53 | 000,048,869 | ---- | M] () -- C:\Users\Paul\Documents\Planeten136.png [2012.02.13 15:54:50 | 000,048,818 | ---- | M] () -- C:\Users\Paul\Documents\Planeten135.png [2012.02.13 15:54:48 | 000,048,859 | ---- | M] () -- C:\Users\Paul\Documents\Planeten134.png [2012.02.13 15:54:46 | 000,048,712 | ---- | M] () -- C:\Users\Paul\Documents\Planeten133.png [2012.02.13 15:54:44 | 000,048,636 | ---- | M] () -- C:\Users\Paul\Documents\Planeten132.png [2012.02.13 15:54:41 | 000,048,606 | ---- | M] () -- C:\Users\Paul\Documents\Planeten131.png [2012.02.13 15:54:39 | 000,048,599 | ---- | M] () -- C:\Users\Paul\Documents\Planeten130.png [2012.02.13 15:54:37 | 000,048,629 | ---- | M] () -- C:\Users\Paul\Documents\Planeten129.png [2012.02.13 15:54:35 | 000,048,557 | ---- | M] () -- C:\Users\Paul\Documents\Planeten128.png [2012.02.13 15:54:32 | 000,048,591 | ---- | M] () -- C:\Users\Paul\Documents\Planeten127.png [2012.02.13 15:54:30 | 000,048,556 | ---- | M] () -- C:\Users\Paul\Documents\Planeten126.png [2012.02.13 15:54:28 | 000,048,561 | ---- | M] () -- C:\Users\Paul\Documents\Planeten125.png [2012.02.13 15:54:26 | 000,048,512 | ---- | M] () -- C:\Users\Paul\Documents\Planeten124.png [2012.02.13 15:54:23 | 000,048,547 | ---- | M] () -- C:\Users\Paul\Documents\Planeten123.png [2012.02.13 15:54:21 | 000,048,543 | ---- | M] () -- C:\Users\Paul\Documents\Planeten122.png [2012.02.13 15:54:19 | 000,048,612 | ---- | M] () -- C:\Users\Paul\Documents\Planeten121.png [2012.02.13 15:54:17 | 000,048,549 | ---- | M] () -- C:\Users\Paul\Documents\Planeten120.png [2012.02.13 15:54:14 | 000,048,596 | ---- | M] () -- C:\Users\Paul\Documents\Planeten119.png [2012.02.13 15:54:12 | 000,048,523 | ---- | M] () -- C:\Users\Paul\Documents\Planeten118.png [2012.02.13 15:54:10 | 000,048,582 | ---- | M] () -- C:\Users\Paul\Documents\Planeten117.png [2012.02.13 15:54:08 | 000,048,497 | ---- | M] () -- C:\Users\Paul\Documents\Planeten116.png [2012.02.13 15:54:05 | 000,048,651 | ---- | M] () -- C:\Users\Paul\Documents\Planeten115.png [2012.02.13 15:54:03 | 000,048,460 | ---- | M] () -- C:\Users\Paul\Documents\Planeten114.png [2012.02.13 15:54:01 | 000,048,570 | ---- | M] () -- C:\Users\Paul\Documents\Planeten113.png [2012.02.13 15:53:59 | 000,048,563 | ---- | M] () -- C:\Users\Paul\Documents\Planeten112.png [2012.02.13 15:53:56 | 000,048,540 | ---- | M] () -- C:\Users\Paul\Documents\Planeten111.png [2012.02.13 15:53:54 | 000,048,586 | ---- | M] () -- C:\Users\Paul\Documents\Planeten110.png [2012.02.13 15:53:52 | 000,048,628 | ---- | M] () -- C:\Users\Paul\Documents\Planeten109.png [2012.02.13 15:53:50 | 000,048,486 | ---- | M] () -- C:\Users\Paul\Documents\Planeten108.png [2012.02.13 15:53:47 | 000,048,506 | ---- | M] () -- C:\Users\Paul\Documents\Planeten107.png [2012.02.13 15:53:45 | 000,048,482 | ---- | M] () -- C:\Users\Paul\Documents\Planeten106.png [2012.02.13 15:53:43 | 000,048,432 | ---- | M] () -- C:\Users\Paul\Documents\Planeten105.png [2012.02.13 15:53:41 | 000,048,344 | ---- | M] () -- C:\Users\Paul\Documents\Planeten104.png [2012.02.13 15:53:38 | 000,048,396 | ---- | M] () -- C:\Users\Paul\Documents\Planeten103.png [2012.02.13 15:53:36 | 000,048,366 | ---- | M] () -- C:\Users\Paul\Documents\Planeten102.png [2012.02.13 15:53:34 | 000,048,280 | ---- | M] () -- C:\Users\Paul\Documents\Planeten101.png [2012.02.13 15:53:32 | 000,048,209 | ---- | M] () -- C:\Users\Paul\Documents\Planeten100.png [2012.02.13 15:53:29 | 000,048,139 | ---- | M] () -- C:\Users\Paul\Documents\Planeten099.png [2012.02.13 15:53:27 | 000,048,223 | ---- | M] () -- C:\Users\Paul\Documents\Planeten098.png [2012.02.13 15:53:25 | 000,048,253 | ---- | M] () -- C:\Users\Paul\Documents\Planeten097.png [2012.02.13 15:53:22 | 000,048,173 | ---- | M] () -- C:\Users\Paul\Documents\Planeten096.png [2012.02.13 15:53:20 | 000,048,060 | ---- | M] () -- C:\Users\Paul\Documents\Planeten095.png [2012.02.13 15:53:18 | 000,048,122 | ---- | M] () -- C:\Users\Paul\Documents\Planeten094.png [2012.02.13 15:53:16 | 000,048,014 | ---- | M] () -- C:\Users\Paul\Documents\Planeten093.png [2012.02.13 15:53:14 | 000,048,114 | ---- | M] () -- C:\Users\Paul\Documents\Planeten092.png [2012.02.13 15:53:11 | 000,048,141 | ---- | M] () -- C:\Users\Paul\Documents\Planeten091.png [2012.02.13 15:53:09 | 000,048,222 | ---- | M] () -- C:\Users\Paul\Documents\Planeten090.png [2012.02.13 15:53:07 | 000,048,231 | ---- | M] () -- C:\Users\Paul\Documents\Planeten089.png [2012.02.13 15:53:04 | 000,048,236 | ---- | M] () -- C:\Users\Paul\Documents\Planeten088.png [2012.02.13 15:53:02 | 000,048,269 | ---- | M] () -- C:\Users\Paul\Documents\Planeten087.png [2012.02.13 15:53:00 | 000,048,362 | ---- | M] () -- C:\Users\Paul\Documents\Planeten086.png [2012.02.13 15:52:58 | 000,048,271 | ---- | M] () -- C:\Users\Paul\Documents\Planeten085.png [2012.02.13 15:52:55 | 000,048,316 | ---- | M] () -- C:\Users\Paul\Documents\Planeten084.png [2012.02.13 15:52:53 | 000,048,342 | ---- | M] () -- C:\Users\Paul\Documents\Planeten083.png [2012.02.13 15:52:51 | 000,048,314 | ---- | M] () -- C:\Users\Paul\Documents\Planeten082.png [2012.02.13 15:52:49 | 000,048,333 | ---- | M] () -- C:\Users\Paul\Documents\Planeten081.png [2012.02.13 15:52:47 | 000,048,302 | ---- | M] () -- C:\Users\Paul\Documents\Planeten080.png [2012.02.13 15:52:44 | 000,048,360 | ---- | M] () -- C:\Users\Paul\Documents\Planeten079.png [2012.02.13 15:52:42 | 000,048,481 | ---- | M] () -- C:\Users\Paul\Documents\Planeten078.png [2012.02.13 15:52:40 | 000,048,514 | ---- | M] () -- C:\Users\Paul\Documents\Planeten077.png [2012.02.13 15:52:38 | 000,048,434 | ---- | M] () -- C:\Users\Paul\Documents\Planeten076.png [2012.02.13 15:52:35 | 000,048,520 | ---- | M] () -- C:\Users\Paul\Documents\Planeten075.png [2012.02.13 15:52:33 | 000,048,494 | ---- | M] () -- C:\Users\Paul\Documents\Planeten074.png [2012.02.13 15:52:31 | 000,048,549 | ---- | M] () -- C:\Users\Paul\Documents\Planeten073.png [2012.02.13 15:52:29 | 000,048,480 | ---- | M] () -- C:\Users\Paul\Documents\Planeten072.png [2012.02.13 15:52:26 | 000,048,620 | ---- | M] () -- C:\Users\Paul\Documents\Planeten071.png [2012.02.13 15:52:24 | 000,048,636 | ---- | M] () -- C:\Users\Paul\Documents\Planeten070.png [2012.02.13 15:52:22 | 000,048,590 | ---- | M] () -- C:\Users\Paul\Documents\Planeten069.png [2012.02.13 15:52:20 | 000,048,676 | ---- | M] () -- C:\Users\Paul\Documents\Planeten068.png [2012.02.13 15:52:17 | 000,048,654 | ---- | M] () -- C:\Users\Paul\Documents\Planeten067.png [2012.02.13 15:52:15 | 000,048,646 | ---- | M] () -- C:\Users\Paul\Documents\Planeten066.png [2012.02.13 15:52:13 | 000,048,714 | ---- | M] () -- C:\Users\Paul\Documents\Planeten065.png [2012.02.13 15:52:11 | 000,048,699 | ---- | M] () -- C:\Users\Paul\Documents\Planeten064.png [2012.02.13 15:52:08 | 000,048,732 | ---- | M] () -- C:\Users\Paul\Documents\Planeten063.png [2012.02.13 15:52:06 | 000,048,813 | ---- | M] () -- C:\Users\Paul\Documents\Planeten062.png [2012.02.13 15:52:04 | 000,048,970 | ---- | M] () -- C:\Users\Paul\Documents\Planeten061.png [2012.02.13 15:52:01 | 000,048,912 | ---- | M] () -- C:\Users\Paul\Documents\Planeten060.png [2012.02.13 15:51:59 | 000,048,988 | ---- | M] () -- C:\Users\Paul\Documents\Planeten059.png [2012.02.13 15:51:57 | 000,048,960 | ---- | M] () -- C:\Users\Paul\Documents\Planeten058.png [2012.02.13 15:51:55 | 000,049,059 | ---- | M] () -- C:\Users\Paul\Documents\Planeten057.png [2012.02.13 15:51:52 | 000,048,994 | ---- | M] () -- C:\Users\Paul\Documents\Planeten056.png [2012.02.13 15:51:50 | 000,048,954 | ---- | M] () -- C:\Users\Paul\Documents\Planeten055.png [2012.02.13 15:51:48 | 000,048,939 | ---- | M] () -- C:\Users\Paul\Documents\Planeten054.png [2012.02.13 15:51:46 | 000,048,864 | ---- | M] () -- C:\Users\Paul\Documents\Planeten053.png [2012.02.13 15:51:43 | 000,048,800 | ---- | M] () -- C:\Users\Paul\Documents\Planeten052.png [2012.02.13 15:51:41 | 000,048,745 | ---- | M] () -- C:\Users\Paul\Documents\Planeten051.png [2012.02.13 15:51:39 | 000,048,829 | ---- | M] () -- C:\Users\Paul\Documents\Planeten050.png [2012.02.13 15:51:37 | 000,048,894 | ---- | M] () -- C:\Users\Paul\Documents\Planeten049.png [2012.02.13 15:51:34 | 000,048,857 | ---- | M] () -- C:\Users\Paul\Documents\Planeten048.png [2012.02.13 15:51:32 | 000,048,870 | ---- | M] () -- C:\Users\Paul\Documents\Planeten047.png [2012.02.13 15:51:30 | 000,048,813 | ---- | M] () -- C:\Users\Paul\Documents\Planeten046.png [2012.02.13 15:51:27 | 000,048,854 | ---- | M] () -- C:\Users\Paul\Documents\Planeten045.png [2012.02.13 15:51:25 | 000,048,869 | ---- | M] () -- C:\Users\Paul\Documents\Planeten044.png [2012.02.13 15:51:23 | 000,048,885 | ---- | M] () -- C:\Users\Paul\Documents\Planeten043.png [2012.02.13 15:51:21 | 000,048,956 | ---- | M] () -- C:\Users\Paul\Documents\Planeten042.png [2012.02.13 15:51:18 | 000,048,930 | ---- | M] () -- C:\Users\Paul\Documents\Planeten041.png [2012.02.13 15:51:16 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten040.png [2012.02.13 15:51:14 | 000,048,885 | ---- | M] () -- C:\Users\Paul\Documents\Planeten039.png [2012.02.13 15:51:11 | 000,048,813 | ---- | M] () -- C:\Users\Paul\Documents\Planeten038.png [2012.02.13 15:51:09 | 000,048,803 | ---- | M] () -- C:\Users\Paul\Documents\Planeten037.png [2012.02.13 15:51:07 | 000,048,748 | ---- | M] () -- C:\Users\Paul\Documents\Planeten036.png [2012.02.13 15:51:05 | 000,048,882 | ---- | M] () -- C:\Users\Paul\Documents\Planeten035.png [2012.02.13 15:51:02 | 000,048,938 | ---- | M] () -- C:\Users\Paul\Documents\Planeten034.png [2012.02.13 15:51:00 | 000,048,905 | ---- | M] () -- C:\Users\Paul\Documents\Planeten033.png [2012.02.13 15:50:58 | 000,048,908 | ---- | M] () -- C:\Users\Paul\Documents\Planeten032.png [2012.02.13 15:50:56 | 000,049,015 | ---- | M] () -- C:\Users\Paul\Documents\Planeten031.png [2012.02.13 15:50:53 | 000,048,969 | ---- | M] () -- C:\Users\Paul\Documents\Planeten030.png [2012.02.13 15:50:51 | 000,048,941 | ---- | M] () -- C:\Users\Paul\Documents\Planeten029.png [2012.02.13 15:50:49 | 000,048,968 | ---- | M] () -- C:\Users\Paul\Documents\Planeten028.png [2012.02.13 15:50:47 | 000,049,004 | ---- | M] () -- C:\Users\Paul\Documents\Planeten027.png [2012.02.13 15:50:44 | 000,049,068 | ---- | M] () -- C:\Users\Paul\Documents\Planeten026.png [2012.02.13 15:50:42 | 000,048,918 | ---- | M] () -- C:\Users\Paul\Documents\Planeten025.png [2012.02.13 15:50:40 | 000,049,027 | ---- | M] () -- C:\Users\Paul\Documents\Planeten024.png [2012.02.13 15:50:38 | 000,048,972 | ---- | M] () -- C:\Users\Paul\Documents\Planeten023.png [2012.02.13 15:50:35 | 000,048,819 | ---- | M] () -- C:\Users\Paul\Documents\Planeten022.png [2012.02.13 15:50:33 | 000,048,900 | ---- | M] () -- C:\Users\Paul\Documents\Planeten021.png [2012.02.13 15:50:31 | 000,048,879 | ---- | M] () -- C:\Users\Paul\Documents\Planeten020.png [2012.02.13 15:50:28 | 000,048,892 | ---- | M] () -- C:\Users\Paul\Documents\Planeten019.png [2012.02.13 15:50:26 | 000,048,935 | ---- | M] () -- C:\Users\Paul\Documents\Planeten018.png [2012.02.13 15:50:24 | 000,049,007 | ---- | M] () -- C:\Users\Paul\Documents\Planeten017.png [2012.02.13 15:50:22 | 000,048,950 | ---- | M] () -- C:\Users\Paul\Documents\Planeten016.png [2012.02.13 15:50:19 | 000,049,059 | ---- | M] () -- C:\Users\Paul\Documents\Planeten015.png [2012.02.13 15:50:17 | 000,049,071 | ---- | M] () -- C:\Users\Paul\Documents\Planeten014.png [2012.02.13 15:50:15 | 000,049,012 | ---- | M] () -- C:\Users\Paul\Documents\Planeten013.png [2012.02.13 15:50:13 | 000,048,996 | ---- | M] () -- C:\Users\Paul\Documents\Planeten012.png [2012.02.13 15:50:10 | 000,048,972 | ---- | M] () -- C:\Users\Paul\Documents\Planeten011.png [2012.02.13 15:50:08 | 000,049,019 | ---- | M] () -- C:\Users\Paul\Documents\Planeten010.png [2012.02.13 15:50:06 | 000,048,941 | ---- | M] () -- C:\Users\Paul\Documents\Planeten009.png [2012.02.13 15:50:04 | 000,048,876 | ---- | M] () -- C:\Users\Paul\Documents\Planeten008.png [2012.02.13 15:50:01 | 000,048,848 | ---- | M] () -- C:\Users\Paul\Documents\Planeten007.png [2012.02.13 15:49:59 | 000,048,858 | ---- | M] () -- C:\Users\Paul\Documents\Planeten006.png [2012.02.13 15:49:57 | 000,048,849 | ---- | M] () -- C:\Users\Paul\Documents\Planeten005.png [2012.02.13 15:49:55 | 000,048,876 | ---- | M] () -- C:\Users\Paul\Documents\Planeten004.png [2012.02.13 15:49:52 | 000,048,918 | ---- | M] () -- C:\Users\Paul\Documents\Planeten003.png [2012.02.13 15:49:50 | 000,048,937 | ---- | M] () -- C:\Users\Paul\Documents\Planeten002.png [2012.02.13 15:49:48 | 000,048,966 | ---- | M] () -- C:\Users\Paul\Documents\Planeten001.png [2012.02.13 15:45:53 | 000,003,554 | ---- | M] () -- C:\Users\Paul\Documents\Planeten.pov [2012.02.13 12:43:56 | 000,004,161 | ---- | M] () -- C:\Users\Paul\Documents\Schneemann.pov [2012.02.12 23:46:43 | 000,004,233 | ---- | M] () -- C:\Users\Paul\Documents\Schneemann.pov.bak [2012.02.12 23:18:50 | 000,002,997 | ---- | M] () -- C:\Users\Paul\Documents\Planeten.pov.bak [2012.02.12 22:37:14 | 000,000,233 | ---- | M] () -- C:\Users\Paul\Documents\sphere1.ini [2012.02.12 22:31:51 | 000,000,230 | ---- | M] () -- C:\Users\Paul\Documents\sphere1.ini.bak [2012.02.12 22:31:17 | 000,000,837 | ---- | M] () -- C:\Users\Paul\Documents\sphere1.pov [2012.02.09 19:43:57 | 000,000,200 | ---- | M] () -- C:\Users\Paul\Documents\Minecraft-Skin.png ========== Files Created - No Company Name ========== [2012.03.03 22:58:09 | 011,850,700 | ---- | C] () -- C:\Users\Paul\Documents\clip0010.avi [2012.03.03 15:50:35 | 000,000,845 | ---- | C] () -- C:\Users\Paul\Desktop\FlorensiaEN.lnk [2012.03.02 22:21:50 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi15.bmp [2012.03.02 22:21:49 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi14.bmp [2012.03.02 22:21:48 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi13.bmp [2012.03.02 22:21:05 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi12.bmp [2012.03.02 22:21:04 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi11.bmp [2012.03.02 22:21:02 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi10.bmp [2012.03.02 22:21:01 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi09.bmp [2012.03.02 22:21:00 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi08.bmp [2012.03.02 22:20:58 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi07.bmp [2012.03.02 22:20:57 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi06.bmp [2012.03.02 22:20:56 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi05.bmp [2012.03.02 22:20:54 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi04.bmp [2012.03.02 22:20:53 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi03.bmp [2012.03.02 22:20:52 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi02.bmp [2012.03.02 22:20:51 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi01.bmp [2012.03.02 22:11:19 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi009.bmp [2012.03.02 22:11:18 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi008.bmp [2012.03.02 22:11:17 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi007.bmp [2012.03.02 22:11:16 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi006.bmp [2012.03.02 21:18:24 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi005.bmp [2012.03.02 21:18:23 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi004.bmp [2012.03.02 21:18:21 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi003.bmp [2012.03.02 21:18:20 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi002.bmp [2012.03.02 21:18:19 | 000,230,454 | ---- | C] () -- C:\Users\Paul\Documents\testi001.bmp [2012.03.02 21:17:06 | 000,921,654 | ---- | C] () -- C:\Users\Paul\Documents\testi.bmp [2012.03.02 21:17:06 | 000,003,736 | ---- | C] () -- |
|
07.03.2012, 13:06
| #9 |
| /// Malware-holic | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? edit: sehe es mir an, moment
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.03.2012, 13:07
| #10 |
| /// Malware-holic | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? edit .........
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.03.2012, 13:08
| #11 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? Teil 2! Code:
ATTFilter C:\Users\Paul\Documents\testi.pov.bak
[2012.03.02 21:17:06 | 000,003,602 | ---- | C] () -- C:\Users\Paul\Documents\testi.pov
[2012.02.28 21:48:37 | 111,400,428 | ---- | C] () -- C:\Users\Paul\Documents\clip0009.avi
[2012.02.25 15:43:54 | 000,002,100 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2012.02.25 15:43:54 | 000,002,088 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012.02.24 15:20:45 | 000,001,072 | ---- | C] () -- C:\Users\Public\Desktop\Exact Audio Copy.lnk
[2012.02.23 15:55:08 | 000,002,230 | ---- | C] () -- C:\Users\Paul\Desktop\Free Audio Converter.lnk
[2012.02.21 23:45:44 | 000,002,192 | ---- | C] () -- C:\Users\Public\Desktop\PSP Video 9.lnk
[2012.02.21 17:24:12 | 192,586,532 | ---- | C] () -- C:\Users\Paul\Documents\clip0008.avi
[2012.02.21 12:38:23 | 037,831,336 | ---- | C] () -- C:\Users\Paul\Documents\clip0007.avi
[2012.02.21 12:35:00 | 074,021,638 | ---- | C] () -- C:\Users\Paul\Documents\clip0006.avi
[2012.02.21 12:33:27 | 000,720,912 | ---- | C] () -- C:\Users\Paul\Documents\clip0005.avi
[2012.02.21 12:32:51 | 005,183,772 | ---- | C] () -- C:\Users\Paul\Documents\clip0004.avi
[2012.02.21 12:27:36 | 011,794,332 | ---- | C] () -- C:\Users\Paul\Documents\clip0003.avi
[2012.02.21 12:16:33 | 000,000,933 | ---- | C] () -- C:\Users\Paul\Desktop\HyperCam 2.lnk
[2012.02.14 22:10:04 | 000,002,002 | ---- | C] () -- C:\Users\Paul\Desktop\FileZilla Client.lnk
[2012.02.13 16:03:55 | 000,048,903 | ---- | C] () -- C:\Users\Paul\Documents\Planeten360.png
[2012.02.13 16:03:52 | 000,048,931 | ---- | C] () -- C:\Users\Paul\Documents\Planeten359.png
[2012.02.13 16:03:50 | 000,048,951 | ---- | C] () -- C:\Users\Paul\Documents\Planeten358.png
[2012.02.13 16:03:47 | 000,048,954 | ---- | C] () -- C:\Users\Paul\Documents\Planeten357.png
[2012.02.13 16:03:44 | 000,048,933 | ---- | C] () -- C:\Users\Paul\Documents\Planeten356.png
[2012.02.13 16:03:42 | 000,048,854 | ---- | C] () -- C:\Users\Paul\Documents\Planeten355.png
[2012.02.13 16:03:38 | 000,048,900 | ---- | C] () -- C:\Users\Paul\Documents\Planeten354.png
[2012.02.13 16:03:36 | 000,048,851 | ---- | C] () -- C:\Users\Paul\Documents\Planeten353.png
[2012.02.13 16:03:33 | 000,048,802 | ---- | C] () -- C:\Users\Paul\Documents\Planeten352.png
[2012.02.13 16:03:30 | 000,048,810 | ---- | C] () -- C:\Users\Paul\Documents\Planeten351.png
[2012.02.13 16:03:28 | 000,048,896 | ---- | C] () -- C:\Users\Paul\Documents\Planeten350.png
[2012.02.13 16:03:25 | 000,048,957 | ---- | C] () -- C:\Users\Paul\Documents\Planeten349.png
[2012.02.13 16:03:22 | 000,049,120 | ---- | C] () -- C:\Users\Paul\Documents\Planeten348.png
[2012.02.13 16:03:19 | 000,048,999 | ---- | C] () -- C:\Users\Paul\Documents\Planeten347.png
[2012.02.13 16:03:17 | 000,048,968 | ---- | C] () -- C:\Users\Paul\Documents\Planeten346.png
[2012.02.13 16:03:14 | 000,048,999 | ---- | C] () -- C:\Users\Paul\Documents\Planeten345.png
[2012.02.13 16:03:11 | 000,048,949 | ---- | C] () -- C:\Users\Paul\Documents\Planeten344.png
[2012.02.13 16:03:08 | 000,048,908 | ---- | C] () -- C:\Users\Paul\Documents\Planeten343.png
[2012.02.13 16:03:05 | 000,048,884 | ---- | C] () -- C:\Users\Paul\Documents\Planeten342.png
[2012.02.13 16:03:02 | 000,048,828 | ---- | C] () -- C:\Users\Paul\Documents\Planeten341.png
[2012.02.13 16:02:59 | 000,048,990 | ---- | C] () -- C:\Users\Paul\Documents\Planeten340.png
[2012.02.13 16:02:57 | 000,048,903 | ---- | C] () -- C:\Users\Paul\Documents\Planeten339.png
[2012.02.13 16:02:54 | 000,048,825 | ---- | C] () -- C:\Users\Paul\Documents\Planeten338.png
[2012.02.13 16:02:52 | 000,048,752 | ---- | C] () -- C:\Users\Paul\Documents\Planeten337.png
[2012.02.13 16:02:49 | 000,048,786 | ---- | C] () -- C:\Users\Paul\Documents\Planeten336.png
[2012.02.13 16:02:46 | 000,048,828 | ---- | C] () -- C:\Users\Paul\Documents\Planeten335.png
[2012.02.13 16:02:42 | 000,048,804 | ---- | C] () -- C:\Users\Paul\Documents\Planeten334.png
[2012.02.13 16:02:40 | 000,048,931 | ---- | C] () -- C:\Users\Paul\Documents\Planeten333.png
[2012.02.13 16:02:36 | 000,049,012 | ---- | C] () -- C:\Users\Paul\Documents\Planeten332.png
[2012.02.13 16:02:32 | 000,048,990 | ---- | C] () -- C:\Users\Paul\Documents\Planeten331.png
[2012.02.13 16:02:27 | 000,048,963 | ---- | C] () -- C:\Users\Paul\Documents\Planeten330.png
[2012.02.13 16:02:21 | 000,048,934 | ---- | C] () -- C:\Users\Paul\Documents\Planeten329.png
[2012.02.13 16:02:17 | 000,048,890 | ---- | C] () -- C:\Users\Paul\Documents\Planeten328.png
[2012.02.13 16:02:14 | 000,048,741 | ---- | C] () -- C:\Users\Paul\Documents\Planeten327.png
[2012.02.13 16:02:11 | 000,048,735 | ---- | C] () -- C:\Users\Paul\Documents\Planeten326.png
[2012.02.13 16:02:07 | 000,048,795 | ---- | C] () -- C:\Users\Paul\Documents\Planeten325.png
[2012.02.13 16:02:04 | 000,048,746 | ---- | C] () -- C:\Users\Paul\Documents\Planeten324.png
[2012.02.13 16:02:02 | 000,048,704 | ---- | C] () -- C:\Users\Paul\Documents\Planeten323.png
[2012.02.13 16:01:59 | 000,048,734 | ---- | C] () -- C:\Users\Paul\Documents\Planeten322.png
[2012.02.13 16:01:56 | 000,048,677 | ---- | C] () -- C:\Users\Paul\Documents\Planeten321.png
[2012.02.13 16:01:49 | 000,048,808 | ---- | C] () -- C:\Users\Paul\Documents\Planeten320.png
[2012.02.13 16:01:46 | 000,048,938 | ---- | C] () -- C:\Users\Paul\Documents\Planeten319.png
[2012.02.13 16:01:43 | 000,048,859 | ---- | C] () -- C:\Users\Paul\Documents\Planeten318.png
[2012.02.13 16:01:41 | 000,048,819 | ---- | C] () -- C:\Users\Paul\Documents\Planeten317.png
[2012.02.13 16:01:38 | 000,048,900 | ---- | C] () -- C:\Users\Paul\Documents\Planeten316.png
[2012.02.13 16:01:35 | 000,048,799 | ---- | C] () -- C:\Users\Paul\Documents\Planeten315.png
[2012.02.13 16:01:33 | 000,048,712 | ---- | C] () -- C:\Users\Paul\Documents\Planeten314.png
[2012.02.13 16:01:30 | 000,048,763 | ---- | C] () -- C:\Users\Paul\Documents\Planeten313.png
[2012.02.13 16:01:28 | 000,048,700 | ---- | C] () -- C:\Users\Paul\Documents\Planeten312.png
[2012.02.13 16:01:26 | 000,048,638 | ---- | C] () -- C:\Users\Paul\Documents\Planeten311.png
[2012.02.13 16:01:24 | 000,048,645 | ---- | C] () -- C:\Users\Paul\Documents\Planeten310.png
[2012.02.13 16:01:21 | 000,048,622 | ---- | C] () -- C:\Users\Paul\Documents\Planeten309.png
[2012.02.13 16:01:19 | 000,048,651 | ---- | C] () -- C:\Users\Paul\Documents\Planeten308.png
[2012.02.13 16:01:17 | 000,048,586 | ---- | C] () -- C:\Users\Paul\Documents\Planeten307.png
[2012.02.13 16:01:14 | 000,048,561 | ---- | C] () -- C:\Users\Paul\Documents\Planeten306.png
[2012.02.13 16:01:12 | 000,048,499 | ---- | C] () -- C:\Users\Paul\Documents\Planeten305.png
[2012.02.13 16:01:10 | 000,048,488 | ---- | C] () -- C:\Users\Paul\Documents\Planeten304.png
[2012.02.13 16:01:08 | 000,048,432 | ---- | C] () -- C:\Users\Paul\Documents\Planeten303.png
[2012.02.13 16:01:05 | 000,048,390 | ---- | C] () -- C:\Users\Paul\Documents\Planeten302.png
[2012.02.13 16:01:03 | 000,048,514 | ---- | C] () -- C:\Users\Paul\Documents\Planeten301.png
[2012.02.13 16:01:01 | 000,048,428 | ---- | C] () -- C:\Users\Paul\Documents\Planeten300.png
[2012.02.13 16:00:58 | 000,048,286 | ---- | C] () -- C:\Users\Paul\Documents\Planeten299.png
[2012.02.13 16:00:56 | 000,048,302 | ---- | C] () -- C:\Users\Paul\Documents\Planeten298.png
[2012.02.13 16:00:54 | 000,048,310 | ---- | C] () -- C:\Users\Paul\Documents\Planeten297.png
[2012.02.13 16:00:52 | 000,048,390 | ---- | C] () -- C:\Users\Paul\Documents\Planeten296.png
[2012.02.13 16:00:49 | 000,048,295 | ---- | C] () -- C:\Users\Paul\Documents\Planeten295.png
[2012.02.13 16:00:47 | 000,048,290 | ---- | C] () -- C:\Users\Paul\Documents\Planeten294.png
[2012.02.13 16:00:45 | 000,048,284 | ---- | C] () -- C:\Users\Paul\Documents\Planeten293.png
[2012.02.13 16:00:42 | 000,048,268 | ---- | C] () -- C:\Users\Paul\Documents\Planeten292.png
[2012.02.13 16:00:40 | 000,048,231 | ---- | C] () -- C:\Users\Paul\Documents\Planeten291.png
[2012.02.13 16:00:38 | 000,048,206 | ---- | C] () -- C:\Users\Paul\Documents\Planeten290.png
[2012.02.13 16:00:36 | 000,048,339 | ---- | C] () -- C:\Users\Paul\Documents\Planeten289.png
[2012.02.13 16:00:33 | 000,048,436 | ---- | C] () -- C:\Users\Paul\Documents\Planeten288.png
[2012.02.13 16:00:31 | 000,048,462 | ---- | C] () -- C:\Users\Paul\Documents\Planeten287.png
[2012.02.13 16:00:29 | 000,048,312 | ---- | C] () -- C:\Users\Paul\Documents\Planeten286.png
[2012.02.13 16:00:27 | 000,048,456 | ---- | C] () -- C:\Users\Paul\Documents\Planeten285.png
[2012.02.13 16:00:24 | 000,048,567 | ---- | C] () -- C:\Users\Paul\Documents\Planeten284.png
[2012.02.13 16:00:22 | 000,048,618 | ---- | C] () -- C:\Users\Paul\Documents\Planeten283.png
[2012.02.13 16:00:20 | 000,048,596 | ---- | C] () -- C:\Users\Paul\Documents\Planeten282.png
[2012.02.13 16:00:18 | 000,048,612 | ---- | C] () -- C:\Users\Paul\Documents\Planeten281.png
[2012.02.13 16:00:15 | 000,048,712 | ---- | C] () -- C:\Users\Paul\Documents\Planeten280.png
[2012.02.13 16:00:13 | 000,048,635 | ---- | C] () -- C:\Users\Paul\Documents\Planeten279.png
[2012.02.13 16:00:11 | 000,048,515 | ---- | C] () -- C:\Users\Paul\Documents\Planeten278.png
[2012.02.13 16:00:09 | 000,048,555 | ---- | C] () -- C:\Users\Paul\Documents\Planeten277.png
[2012.02.13 16:00:06 | 000,048,565 | ---- | C] () -- C:\Users\Paul\Documents\Planeten276.png
[2012.02.13 16:00:04 | 000,048,588 | ---- | C] () -- C:\Users\Paul\Documents\Planeten275.png
[2012.02.13 16:00:02 | 000,048,634 | ---- | C] () -- C:\Users\Paul\Documents\Planeten274.png
[2012.02.13 16:00:00 | 000,048,833 | ---- | C] () -- C:\Users\Paul\Documents\Planeten273.png
[2012.02.13 15:59:57 | 000,048,842 | ---- | C] () -- C:\Users\Paul\Documents\Planeten272.png
[2012.02.13 15:59:55 | 000,048,890 | ---- | C] () -- C:\Users\Paul\Documents\Planeten271.png
[2012.02.13 15:59:53 | 000,048,879 | ---- | C] () -- C:\Users\Paul\Documents\Planeten270.png
[2012.02.13 15:59:51 | 000,048,877 | ---- | C] () -- C:\Users\Paul\Documents\Planeten269.png
[2012.02.13 15:59:48 | 000,048,797 | ---- | C] () -- C:\Users\Paul\Documents\Planeten268.png
[2012.02.13 15:59:46 | 000,048,890 | ---- | C] () -- C:\Users\Paul\Documents\Planeten267.png
[2012.02.13 15:59:44 | 000,048,896 | ---- | C] () -- C:\Users\Paul\Documents\Planeten266.png
[2012.02.13 15:59:42 | 000,048,922 | ---- | C] () -- C:\Users\Paul\Documents\Planeten265.png
[2012.02.13 15:59:39 | 000,048,965 | ---- | C] () -- C:\Users\Paul\Documents\Planeten264.png
[2012.02.13 15:59:37 | 000,048,962 | ---- | C] () -- C:\Users\Paul\Documents\Planeten263.png
[2012.02.13 15:59:35 | 000,048,785 | ---- | C] () -- C:\Users\Paul\Documents\Planeten262.png
[2012.02.13 15:59:33 | 000,048,853 | ---- | C] () -- C:\Users\Paul\Documents\Planeten261.png
[2012.02.13 15:59:30 | 000,048,740 | ---- | C] () -- C:\Users\Paul\Documents\Planeten260.png
[2012.02.13 15:59:28 | 000,048,832 | ---- | C] () -- C:\Users\Paul\Documents\Planeten259.png
[2012.02.13 15:59:26 | 000,048,719 | ---- | C] () -- C:\Users\Paul\Documents\Planeten258.png
[2012.02.13 15:59:24 | 000,048,798 | ---- | C] () -- C:\Users\Paul\Documents\Planeten257.png
[2012.02.13 15:59:21 | 000,048,756 | ---- | C] () -- C:\Users\Paul\Documents\Planeten256.png
[2012.02.13 15:59:19 | 000,048,765 | ---- | C] () -- C:\Users\Paul\Documents\Planeten255.png
[2012.02.13 15:59:17 | 000,048,810 | ---- | C] () -- C:\Users\Paul\Documents\Planeten254.png
[2012.02.13 15:59:15 | 000,048,936 | ---- | C] () -- C:\Users\Paul\Documents\Planeten253.png
[2012.02.13 15:59:12 | 000,048,858 | ---- | C] () -- C:\Users\Paul\Documents\Planeten252.png
[2012.02.13 15:59:10 | 000,048,841 | ---- | C] () -- C:\Users\Paul\Documents\Planeten251.png
[2012.02.13 15:59:08 | 000,048,879 | ---- | C] () -- C:\Users\Paul\Documents\Planeten250.png
[2012.02.13 15:59:06 | 000,048,850 | ---- | C] () -- C:\Users\Paul\Documents\Planeten249.png
[2012.02.13 15:59:03 | 000,048,807 | ---- | C] () -- C:\Users\Paul\Documents\Planeten248.png
[2012.02.13 15:59:01 | 000,048,826 | ---- | C] () -- C:\Users\Paul\Documents\Planeten247.png
[2012.02.13 15:58:59 | 000,048,971 | ---- | C] () -- C:\Users\Paul\Documents\Planeten246.png
[2012.02.13 15:58:56 | 000,048,897 | ---- | C] () -- C:\Users\Paul\Documents\Planeten245.png
[2012.02.13 15:58:54 | 000,048,962 | ---- | C] () -- C:\Users\Paul\Documents\Planeten244.png
[2012.02.13 15:58:52 | 000,048,930 | ---- | C] () -- C:\Users\Paul\Documents\Planeten243.png
[2012.02.13 15:58:50 | 000,049,044 | ---- | C] () -- C:\Users\Paul\Documents\Planeten242.png
[2012.02.13 15:58:47 | 000,049,062 | ---- | C] () -- C:\Users\Paul\Documents\Planeten241.png
[2012.02.13 15:58:45 | 000,049,037 | ---- | C] () -- C:\Users\Paul\Documents\Planeten240.png
[2012.02.13 15:58:43 | 000,049,048 | ---- | C] () -- C:\Users\Paul\Documents\Planeten239.png
[2012.02.13 15:58:41 | 000,049,045 | ---- | C] () -- C:\Users\Paul\Documents\Planeten238.png
[2012.02.13 15:58:38 | 000,049,048 | ---- | C] () -- C:\Users\Paul\Documents\Planeten237.png
[2012.02.13 15:58:36 | 000,049,073 | ---- | C] () -- C:\Users\Paul\Documents\Planeten236.png
[2012.02.13 15:58:34 | 000,049,019 | ---- | C] () -- C:\Users\Paul\Documents\Planeten235.png
[2012.02.13 15:58:32 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten234.png
[2012.02.13 15:58:29 | 000,048,938 | ---- | C] () -- C:\Users\Paul\Documents\Planeten233.png
[2012.02.13 15:58:27 | 000,048,945 | ---- | C] () -- C:\Users\Paul\Documents\Planeten232.png
[2012.02.13 15:58:25 | 000,049,039 | ---- | C] () -- C:\Users\Paul\Documents\Planeten231.png
[2012.02.13 15:58:23 | 000,048,943 | ---- | C] () -- C:\Users\Paul\Documents\Planeten230.png
[2012.02.13 15:58:20 | 000,049,017 | ---- | C] () -- C:\Users\Paul\Documents\Planeten229.png
[2012.02.13 15:58:18 | 000,048,965 | ---- | C] () -- C:\Users\Paul\Documents\Planeten228.png
[2012.02.13 15:58:16 | 000,049,015 | ---- | C] () -- C:\Users\Paul\Documents\Planeten227.png
[2012.02.13 15:58:14 | 000,048,988 | ---- | C] () -- C:\Users\Paul\Documents\Planeten226.png
[2012.02.13 15:58:11 | 000,048,950 | ---- | C] () -- C:\Users\Paul\Documents\Planeten225.png
[2012.02.13 15:58:09 | 000,048,948 | ---- | C] () -- C:\Users\Paul\Documents\Planeten224.png
[2012.02.13 15:58:07 | 000,049,120 | ---- | C] () -- C:\Users\Paul\Documents\Planeten223.png
[2012.02.13 15:58:05 | 000,049,149 | ---- | C] () -- C:\Users\Paul\Documents\Planeten222.png
[2012.02.13 15:58:02 | 000,049,128 | ---- | C] () -- C:\Users\Paul\Documents\Planeten221.png
[2012.02.13 15:58:00 | 000,049,021 | ---- | C] () -- C:\Users\Paul\Documents\Planeten220.png
[2012.02.13 15:57:58 | 000,048,908 | ---- | C] () -- C:\Users\Paul\Documents\Planeten219.png
[2012.02.13 15:57:56 | 000,048,766 | ---- | C] () -- C:\Users\Paul\Documents\Planeten218.png
[2012.02.13 15:57:53 | 000,048,819 | ---- | C] () -- C:\Users\Paul\Documents\Planeten217.png
[2012.02.13 15:57:51 | 000,048,910 | ---- | C] () -- C:\Users\Paul\Documents\Planeten216.png
[2012.02.13 15:57:49 | 000,048,880 | ---- | C] () -- C:\Users\Paul\Documents\Planeten215.png
[2012.02.13 15:57:47 | 000,048,857 | ---- | C] () -- C:\Users\Paul\Documents\Planeten214.png
[2012.02.13 15:57:44 | 000,048,906 | ---- | C] () -- C:\Users\Paul\Documents\Planeten213.png
[2012.02.13 15:57:42 | 000,048,901 | ---- | C] () -- C:\Users\Paul\Documents\Planeten212.png
[2012.02.13 15:57:40 | 000,048,956 | ---- | C] () -- C:\Users\Paul\Documents\Planeten211.png
[2012.02.13 15:57:38 | 000,048,977 | ---- | C] () -- C:\Users\Paul\Documents\Planeten210.png
[2012.02.13 15:57:36 | 000,049,089 | ---- | C] () -- C:\Users\Paul\Documents\Planeten209.png
[2012.02.13 15:57:33 | 000,048,966 | ---- | C] () -- C:\Users\Paul\Documents\Planeten208.png
[2012.02.13 15:57:31 | 000,049,113 | ---- | C] () -- C:\Users\Paul\Documents\Planeten207.png
[2012.02.13 15:57:29 | 000,049,019 | ---- | C] () -- C:\Users\Paul\Documents\Planeten206.png
[2012.02.13 15:57:26 | 000,049,103 | ---- | C] () -- C:\Users\Paul\Documents\Planeten205.png
[2012.02.13 15:57:24 | 000,049,018 | ---- | C] () -- C:\Users\Paul\Documents\Planeten204.png
[2012.02.13 15:57:22 | 000,049,037 | ---- | C] () -- C:\Users\Paul\Documents\Planeten203.png
[2012.02.13 15:57:20 | 000,048,964 | ---- | C] () -- C:\Users\Paul\Documents\Planeten202.png
[2012.02.13 15:57:17 | 000,048,928 | ---- | C] () -- C:\Users\Paul\Documents\Planeten201.png
[2012.02.13 15:57:15 | 000,048,985 | ---- | C] () -- C:\Users\Paul\Documents\Planeten200.png
[2012.02.13 15:57:13 | 000,049,031 | ---- | C] () -- C:\Users\Paul\Documents\Planeten199.png
[2012.02.13 15:57:11 | 000,049,198 | ---- | C] () -- C:\Users\Paul\Documents\Planeten198.png
[2012.02.13 15:57:08 | 000,049,200 | ---- | C] () -- C:\Users\Paul\Documents\Planeten197.png
[2012.02.13 15:57:06 | 000,049,090 | ---- | C] () -- C:\Users\Paul\Documents\Planeten196.png
[2012.02.13 15:57:04 | 000,049,123 | ---- | C] () -- C:\Users\Paul\Documents\Planeten195.png
[2012.02.13 15:57:02 | 000,049,170 | ---- | C] () -- C:\Users\Paul\Documents\Planeten194.png
[2012.02.13 15:56:59 | 000,049,232 | ---- | C] () -- C:\Users\Paul\Documents\Planeten193.png
[2012.02.13 15:56:57 | 000,049,170 | ---- | C] () -- C:\Users\Paul\Documents\Planeten192.png
[2012.02.13 15:56:55 | 000,049,150 | ---- | C] () -- C:\Users\Paul\Documents\Planeten191.png
[2012.02.13 15:56:52 | 000,049,043 | ---- | C] () -- C:\Users\Paul\Documents\Planeten190.png
[2012.02.13 15:56:50 | 000,048,925 | ---- | C] () -- C:\Users\Paul\Documents\Planeten189.png
[2012.02.13 15:56:48 | 000,048,927 | ---- | C] () -- C:\Users\Paul\Documents\Planeten188.png
[2012.02.13 15:56:46 | 000,048,775 | ---- | C] () -- C:\Users\Paul\Documents\Planeten187.png
[2012.02.13 15:56:43 | 000,048,934 | ---- | C] () -- C:\Users\Paul\Documents\Planeten186.png
[2012.02.13 15:56:41 | 000,048,853 | ---- | C] () -- C:\Users\Paul\Documents\Planeten185.png
[2012.02.13 15:56:39 | 000,048,889 | ---- | C] () -- C:\Users\Paul\Documents\Planeten184.png
[2012.02.13 15:56:37 | 000,048,947 | ---- | C] () -- C:\Users\Paul\Documents\Planeten183.png
[2012.02.13 15:56:34 | 000,049,090 | ---- | C] () -- C:\Users\Paul\Documents\Planeten182.png
[2012.02.13 15:56:32 | 000,049,199 | ---- | C] () -- C:\Users\Paul\Documents\Planeten181.png
[2012.02.13 15:56:30 | 000,049,187 | ---- | C] () -- C:\Users\Paul\Documents\Planeten180.png
[2012.02.13 15:56:28 | 000,049,162 | ---- | C] () -- C:\Users\Paul\Documents\Planeten179.png
[2012.02.13 15:56:25 | 000,049,086 | ---- | C] () -- C:\Users\Paul\Documents\Planeten178.png
[2012.02.13 15:56:23 | 000,049,053 | ---- | C] () -- C:\Users\Paul\Documents\Planeten177.png
[2012.02.13 15:56:21 | 000,049,080 | ---- | C] () -- C:\Users\Paul\Documents\Planeten176.png
[2012.02.13 15:56:19 | 000,049,008 | ---- | C] () -- C:\Users\Paul\Documents\Planeten175.png
[2012.02.13 15:56:16 | 000,049,020 | ---- | C] () -- C:\Users\Paul\Documents\Planeten174.png
[2012.02.13 15:56:14 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten173.png
[2012.02.13 15:56:12 | 000,048,880 | ---- | C] () -- C:\Users\Paul\Documents\Planeten172.png
[2012.02.13 15:56:10 | 000,048,957 | ---- | C] () -- C:\Users\Paul\Documents\Planeten171.png
[2012.02.13 15:56:07 | 000,048,911 | ---- | C] () -- C:\Users\Paul\Documents\Planeten170.png
[2012.02.13 15:56:05 | 000,049,058 | ---- | C] () -- C:\Users\Paul\Documents\Planeten169.png
[2012.02.13 15:56:03 | 000,049,155 | ---- | C] () -- C:\Users\Paul\Documents\Planeten168.png
[2012.02.13 15:56:01 | 000,049,125 | ---- | C] () -- C:\Users\Paul\Documents\Planeten167.png
[2012.02.13 15:55:58 | 000,049,131 | ---- | C] () -- C:\Users\Paul\Documents\Planeten166.png
[2012.02.13 15:55:56 | 000,049,144 | ---- | C] () -- C:\Users\Paul\Documents\Planeten165.png
[2012.02.13 15:55:54 | 000,049,157 | ---- | C] () -- C:\Users\Paul\Documents\Planeten164.png
[2012.02.13 15:55:52 | 000,049,068 | ---- | C] () -- C:\Users\Paul\Documents\Planeten163.png
[2012.02.13 15:55:49 | 000,048,952 | ---- | C] () -- C:\Users\Paul\Documents\Planeten162.png
[2012.02.13 15:55:47 | 000,048,969 | ---- | C] () -- C:\Users\Paul\Documents\Planeten161.png
[2012.02.13 15:55:45 | 000,049,005 | ---- | C] () -- C:\Users\Paul\Documents\Planeten160.png
[2012.02.13 15:55:43 | 000,048,839 | ---- | C] () -- C:\Users\Paul\Documents\Planeten159.png
[2012.02.13 15:55:40 | 000,048,842 | ---- | C] () -- C:\Users\Paul\Documents\Planeten158.png
[2012.02.13 15:55:38 | 000,048,843 | ---- | C] () -- C:\Users\Paul\Documents\Planeten157.png
[2012.02.13 15:55:36 | 000,048,833 | ---- | C] () -- C:\Users\Paul\Documents\Planeten156.png
[2012.02.13 15:55:34 | 000,048,743 | ---- | C] () -- C:\Users\Paul\Documents\Planeten155.png
[2012.02.13 15:55:31 | 000,048,715 | ---- | C] () -- C:\Users\Paul\Documents\Planeten154.png
[2012.02.13 15:55:29 | 000,048,811 | ---- | C] () -- C:\Users\Paul\Documents\Planeten153.png
[2012.02.13 15:55:27 | 000,048,965 | ---- | C] () -- C:\Users\Paul\Documents\Planeten152.png
[2012.02.13 15:55:25 | 000,048,911 | ---- | C] () -- C:\Users\Paul\Documents\Planeten151.png
[2012.02.13 15:55:22 | 000,048,752 | ---- | C] () -- C:\Users\Paul\Documents\Planeten150.png
[2012.02.13 15:55:20 | 000,048,810 | ---- | C] () -- C:\Users\Paul\Documents\Planeten149.png
[2012.02.13 15:55:18 | 000,048,840 | ---- | C] () -- C:\Users\Paul\Documents\Planeten148.png
[2012.02.13 15:55:16 | 000,048,797 | ---- | C] () -- C:\Users\Paul\Documents\Planeten147.png
[2012.02.13 15:55:13 | 000,048,802 | ---- | C] () -- C:\Users\Paul\Documents\Planeten146.png
[2012.02.13 15:55:11 | 000,048,781 | ---- | C] () -- C:\Users\Paul\Documents\Planeten145.png
[2012.02.13 15:55:09 | 000,048,764 | ---- | C] () -- C:\Users\Paul\Documents\Planeten144.png
[2012.02.13 15:55:07 | 000,048,780 | ---- | C] () -- C:\Users\Paul\Documents\Planeten143.png
[2012.02.13 15:55:04 | 000,048,827 | ---- | C] () -- C:\Users\Paul\Documents\Planeten142.png
[2012.02.13 15:55:02 | 000,048,783 | ---- | C] () -- C:\Users\Paul\Documents\Planeten141.png
[2012.02.13 15:55:00 | 000,048,836 | ---- | C] () -- C:\Users\Paul\Documents\Planeten140.png
[2012.02.13 15:54:57 | 000,048,804 | ---- | C] () -- C:\Users\Paul\Documents\Planeten139.png
[2012.02.13 15:54:55 | 000,048,799 | ---- | C] () -- C:\Users\Paul\Documents\Planeten138.png
[2012.02.13 15:54:53 | 000,048,753 | ---- | C] () -- C:\Users\Paul\Documents\Planeten137.png
[2012.02.13 15:54:51 | 000,048,869 | ---- | C] () -- C:\Users\Paul\Documents\Planeten136.png
[2012.02.13 15:54:48 | 000,048,818 | ---- | C] () -- C:\Users\Paul\Documents\Planeten135.png
[2012.02.13 15:54:46 | 000,048,859 | ---- | C] () -- C:\Users\Paul\Documents\Planeten134.png
[2012.02.13 15:54:44 | 000,048,712 | ---- | C] () -- C:\Users\Paul\Documents\Planeten133.png
[2012.02.13 15:54:42 | 000,048,636 | ---- | C] () -- C:\Users\Paul\Documents\Planeten132.png
[2012.02.13 15:54:39 | 000,048,606 | ---- | C] () -- C:\Users\Paul\Documents\Planeten131.png
[2012.02.13 15:54:37 | 000,048,599 | ---- | C] () -- C:\Users\Paul\Documents\Planeten130.png
[2012.02.13 15:54:35 | 000,048,629 | ---- | C] () -- C:\Users\Paul\Documents\Planeten129.png
[2012.02.13 15:54:32 | 000,048,557 | ---- | C] () -- C:\Users\Paul\Documents\Planeten128.png
[2012.02.13 15:54:30 | 000,048,591 | ---- | C] () -- C:\Users\Paul\Documents\Planeten127.png
[2012.02.13 15:54:28 | 000,048,556 | ---- | C] () -- C:\Users\Paul\Documents\Planeten126.png
[2012.02.13 15:54:26 | 000,048,561 | ---- | C] () -- C:\Users\Paul\Documents\Planeten125.png
[2012.02.13 15:54:24 | 000,048,512 | ---- | C] () -- C:\Users\Paul\Documents\Planeten124.png
[2012.02.13 15:54:21 | 000,048,547 | ---- | C] () -- C:\Users\Paul\Documents\Planeten123.png
[2012.02.13 15:54:19 | 000,048,543 | ---- | C] () -- C:\Users\Paul\Documents\Planeten122.png
[2012.02.13 15:54:17 | 000,048,612 | ---- | C] () -- C:\Users\Paul\Documents\Planeten121.png
[2012.02.13 15:54:15 | 000,048,549 | ---- | C] () -- C:\Users\Paul\Documents\Planeten120.png
[2012.02.13 15:54:12 | 000,048,596 | ---- | C] () -- C:\Users\Paul\Documents\Planeten119.png
[2012.02.13 15:54:10 | 000,048,523 | ---- | C] () -- C:\Users\Paul\Documents\Planeten118.png
[2012.02.13 15:54:08 | 000,048,582 | ---- | C] () -- C:\Users\Paul\Documents\Planeten117.png
[2012.02.13 15:54:06 | 000,048,497 | ---- | C] () -- C:\Users\Paul\Documents\Planeten116.png
[2012.02.13 15:54:03 | 000,048,651 | ---- | C] () -- C:\Users\Paul\Documents\Planeten115.png
[2012.02.13 15:54:01 | 000,048,460 | ---- | C] () -- C:\Users\Paul\Documents\Planeten114.png
[2012.02.13 15:53:59 | 000,048,570 | ---- | C] () -- C:\Users\Paul\Documents\Planeten113.png
[2012.02.13 15:53:56 | 000,048,563 | ---- | C] () -- C:\Users\Paul\Documents\Planeten112.png
[2012.02.13 15:53:54 | 000,048,540 | ---- | C] () -- C:\Users\Paul\Documents\Planeten111.png
[2012.02.13 15:53:52 | 000,048,586 | ---- | C] () -- C:\Users\Paul\Documents\Planeten110.png
[2012.02.13 15:53:50 | 000,048,628 | ---- | C] () -- C:\Users\Paul\Documents\Planeten109.png
[2012.02.13 15:53:47 | 000,048,486 | ---- | C] () -- C:\Users\Paul\Documents\Planeten108.png
[2012.02.13 15:53:45 | 000,048,506 | ---- | C] () -- C:\Users\Paul\Documents\Planeten107.png
[2012.02.13 15:53:43 | 000,048,482 | ---- | C] () -- C:\Users\Paul\Documents\Planeten106.png
[2012.02.13 15:53:41 | 000,048,432 | ---- | C] () -- C:\Users\Paul\Documents\Planeten105.png
[2012.02.13 15:53:38 | 000,048,344 | ---- | C] () -- C:\Users\Paul\Documents\Planeten104.png
[2012.02.13 15:53:36 | 000,048,396 | ---- | C] () -- C:\Users\Paul\Documents\Planeten103.png
[2012.02.13 15:53:34 | 000,048,366 | ---- | C] () -- C:\Users\Paul\Documents\Planeten102.png
[2012.02.13 15:53:32 | 000,048,280 | ---- | C] () -- C:\Users\Paul\Documents\Planeten101.png
[2012.02.13 15:53:30 | 000,048,209 | ---- | C] () -- C:\Users\Paul\Documents\Planeten100.png
[2012.02.13 15:53:27 | 000,048,139 | ---- | C] () -- C:\Users\Paul\Documents\Planeten099.png
[2012.02.13 15:53:25 | 000,048,223 | ---- | C] () -- C:\Users\Paul\Documents\Planeten098.png
[2012.02.13 15:53:23 | 000,048,253 | ---- | C] () -- C:\Users\Paul\Documents\Planeten097.png
[2012.02.13 15:53:20 | 000,048,173 | ---- | C] () -- C:\Users\Paul\Documents\Planeten096.png
[2012.02.13 15:53:18 | 000,048,060 | ---- | C] () -- C:\Users\Paul\Documents\Planeten095.png
[2012.02.13 15:53:16 | 000,048,122 | ---- | C] () -- C:\Users\Paul\Documents\Planeten094.png
[2012.02.13 15:53:14 | 000,048,014 | ---- | C] () -- C:\Users\Paul\Documents\Planeten093.png
[2012.02.13 15:53:12 | 000,048,114 | ---- | C] () -- C:\Users\Paul\Documents\Planeten092.png
[2012.02.13 15:53:09 | 000,048,141 | ---- | C] () -- C:\Users\Paul\Documents\Planeten091.png
[2012.02.13 15:53:07 | 000,048,222 | ---- | C] () -- C:\Users\Paul\Documents\Planeten090.png
[2012.02.13 15:53:05 | 000,048,231 | ---- | C] () -- C:\Users\Paul\Documents\Planeten089.png
[2012.02.13 15:53:02 | 000,048,236 | ---- | C] () -- C:\Users\Paul\Documents\Planeten088.png
[2012.02.13 15:53:00 | 000,048,269 | ---- | C] () -- C:\Users\Paul\Documents\Planeten087.png
[2012.02.13 15:52:58 | 000,048,362 | ---- | C] () -- C:\Users\Paul\Documents\Planeten086.png
[2012.02.13 15:52:56 | 000,048,271 | ---- | C] () -- C:\Users\Paul\Documents\Planeten085.png
[2012.02.13 15:52:53 | 000,048,316 | ---- | C] () -- C:\Users\Paul\Documents\Planeten084.png
[2012.02.13 15:52:51 | 000,048,342 | ---- | C] () -- C:\Users\Paul\Documents\Planeten083.png
[2012.02.13 15:52:49 | 000,048,314 | ---- | C] () -- C:\Users\Paul\Documents\Planeten082.png
[2012.02.13 15:52:47 | 000,048,333 | ---- | C] () -- C:\Users\Paul\Documents\Planeten081.png
[2012.02.13 15:52:44 | 000,048,302 | ---- | C] () -- C:\Users\Paul\Documents\Planeten080.png
[2012.02.13 15:52:42 | 000,048,360 | ---- | C] () -- C:\Users\Paul\Documents\Planeten079.png
[2012.02.13 15:52:40 | 000,048,481 | ---- | C] () -- C:\Users\Paul\Documents\Planeten078.png
[2012.02.13 15:52:38 | 000,048,514 | ---- | C] () -- C:\Users\Paul\Documents\Planeten077.png
[2012.02.13 15:52:36 | 000,048,434 | ---- | C] () -- C:\Users\Paul\Documents\Planeten076.png
[2012.02.13 15:52:33 | 000,048,520 | ---- | C] () -- C:\Users\Paul\Documents\Planeten075.png
[2012.02.13 15:52:31 | 000,048,494 | ---- | C] () -- C:\Users\Paul\Documents\Planeten074.png
[2012.02.13 15:52:29 | 000,048,549 | ---- | C] () -- C:\Users\Paul\Documents\Planeten073.png
[2012.02.13 15:52:26 | 000,048,480 | ---- | C] () -- C:\Users\Paul\Documents\Planeten072.png
[2012.02.13 15:52:24 | 000,048,620 | ---- | C] () -- C:\Users\Paul\Documents\Planeten071.png
[2012.02.13 15:52:22 | 000,048,636 | ---- | C] () -- C:\Users\Paul\Documents\Planeten070.png
[2012.02.13 15:52:20 | 000,048,590 | ---- | C] () -- C:\Users\Paul\Documents\Planeten069.png
[2012.02.13 15:52:18 | 000,048,676 | ---- | C] () -- C:\Users\Paul\Documents\Planeten068.png
[2012.02.13 15:52:15 | 000,048,654 | ---- | C] () -- C:\Users\Paul\Documents\Planeten067.png
[2012.02.13 15:52:13 | 000,048,646 | ---- | C] () -- C:\Users\Paul\Documents\Planeten066.png
[2012.02.13 15:52:11 | 000,048,714 | ---- | C] () -- C:\Users\Paul\Documents\Planeten065.png
[2012.02.13 15:52:08 | 000,048,699 | ---- | C] () -- C:\Users\Paul\Documents\Planeten064.png
[2012.02.13 15:52:06 | 000,048,732 | ---- | C] () -- C:\Users\Paul\Documents\Planeten063.png
[2012.02.13 15:52:04 | 000,048,813 | ---- | C] () -- C:\Users\Paul\Documents\Planeten062.png
[2012.02.13 15:52:02 | 000,048,970 | ---- | C] () -- C:\Users\Paul\Documents\Planeten061.png
[2012.02.13 15:51:59 | 000,048,912 | ---- | C] () -- C:\Users\Paul\Documents\Planeten060.png
[2012.02.13 15:51:57 | 000,048,988 | ---- | C] () -- C:\Users\Paul\Documents\Planeten059.png
[2012.02.13 15:51:55 | 000,048,960 | ---- | C] () -- C:\Users\Paul\Documents\Planeten058.png
[2012.02.13 15:51:53 | 000,049,059 | ---- | C] () -- C:\Users\Paul\Documents\Planeten057.png
[2012.02.13 15:51:50 | 000,048,994 | ---- | C] () -- C:\Users\Paul\Documents\Planeten056.png
[2012.02.13 15:51:48 | 000,048,954 | ---- | C] () -- C:\Users\Paul\Documents\Planeten055.png
[2012.02.13 15:51:46 | 000,048,939 | ---- | C] () -- C:\Users\Paul\Documents\Planeten054.png
[2012.02.13 15:51:44 | 000,048,864 | ---- | C] () -- C:\Users\Paul\Documents\Planeten053.png
[2012.02.13 15:51:41 | 000,048,800 | ---- | C] () -- C:\Users\Paul\Documents\Planeten052.png
[2012.02.13 15:51:39 | 000,048,745 | ---- | C] () -- C:\Users\Paul\Documents\Planeten051.png
[2012.02.13 15:51:37 | 000,048,829 | ---- | C] () -- C:\Users\Paul\Documents\Planeten050.png
[2012.02.13 15:51:35 | 000,048,894 | ---- | C] () -- C:\Users\Paul\Documents\Planeten049.png
[2012.02.13 15:51:32 | 000,048,857 | ---- | C] () -- C:\Users\Paul\Documents\Planeten048.png
[2012.02.13 15:51:30 | 000,048,870 | ---- | C] () -- C:\Users\Paul\Documents\Planeten047.png
[2012.02.13 15:51:28 | 000,048,813 | ---- | C] () -- C:\Users\Paul\Documents\Planeten046.png
[2012.02.13 15:51:25 | 000,048,854 | ---- | C] () -- C:\Users\Paul\Documents\Planeten045.png
[2012.02.13 15:51:23 | 000,048,869 | ---- | C] () -- C:\Users\Paul\Documents\Planeten044.png
[2012.02.13 15:51:21 | 000,048,885 | ---- | C] () -- C:\Users\Paul\Documents\Planeten043.png
[2012.02.13 15:51:18 | 000,048,956 | ---- | C] () -- C:\Users\Paul\Documents\Planeten042.png
[2012.02.13 15:51:16 | 000,048,930 | ---- | C] () -- C:\Users\Paul\Documents\Planeten041.png
[2012.02.13 15:51:14 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten040.png
[2012.02.13 15:51:12 | 000,048,885 | ---- | C] () -- C:\Users\Paul\Documents\Planeten039.png
[2012.02.13 15:51:09 | 000,048,813 | ---- | C] () -- C:\Users\Paul\Documents\Planeten038.png
[2012.02.13 15:51:07 | 000,048,803 | ---- | C] () -- C:\Users\Paul\Documents\Planeten037.png
[2012.02.13 15:51:05 | 000,048,748 | ---- | C] () -- C:\Users\Paul\Documents\Planeten036.png
[2012.02.13 15:51:02 | 000,048,882 | ---- | C] () -- C:\Users\Paul\Documents\Planeten035.png
[2012.02.13 15:51:00 | 000,048,938 | ---- | C] () -- C:\Users\Paul\Documents\Planeten034.png
[2012.02.13 15:50:58 | 000,048,905 | ---- | C] () -- C:\Users\Paul\Documents\Planeten033.png
[2012.02.13 15:50:56 | 000,048,908 | ---- | C] () -- C:\Users\Paul\Documents\Planeten032.png
[2012.02.13 15:50:54 | 000,049,015 | ---- | C] () -- C:\Users\Paul\Documents\Planeten031.png
[2012.02.13 15:50:51 | 000,048,969 | ---- | C] () -- C:\Users\Paul\Documents\Planeten030.png
[2012.02.13 15:50:49 | 000,048,941 | ---- | C] () -- C:\Users\Paul\Documents\Planeten029.png
[2012.02.13 15:50:47 | 000,048,968 | ---- | C] () -- C:\Users\Paul\Documents\Planeten028.png
[2012.02.13 15:50:44 | 000,049,004 | ---- | C] () -- C:\Users\Paul\Documents\Planeten027.png
[2012.02.13 15:50:42 | 000,049,068 | ---- | C] () -- C:\Users\Paul\Documents\Planeten026.png
[2012.02.13 15:50:40 | 000,048,918 | ---- | C] () -- C:\Users\Paul\Documents\Planeten025.png
[2012.02.13 15:50:38 | 000,049,027 | ---- | C] () -- C:\Users\Paul\Documents\Planeten024.png
[2012.02.13 15:50:35 | 000,048,972 | ---- | C] () -- C:\Users\Paul\Documents\Planeten023.png
[2012.02.13 15:50:33 | 000,048,819 | ---- | C] () -- C:\Users\Paul\Documents\Planeten022.png
[2012.02.13 15:50:31 | 000,048,900 | ---- | C] () -- C:\Users\Paul\Documents\Planeten021.png
[2012.02.13 15:50:29 | 000,048,879 | ---- | C] () -- C:\Users\Paul\Documents\Planeten020.png
[2012.02.13 15:50:26 | 000,048,892 | ---- | C] () -- C:\Users\Paul\Documents\Planeten019.png
[2012.02.13 15:50:24 | 000,048,935 | ---- | C] () -- C:\Users\Paul\Documents\Planeten018.png
[2012.02.13 15:50:22 | 000,049,007 | ---- | C] () -- C:\Users\Paul\Documents\Planeten017.png
[2012.02.13 15:50:20 | 000,048,950 | ---- | C] () -- C:\Users\Paul\Documents\Planeten016.png
[2012.02.13 15:50:17 | 000,049,059 | ---- | C] () -- C:\Users\Paul\Documents\Planeten015.png
[2012.02.13 15:50:15 | 000,049,071 | ---- | C] () -- C:\Users\Paul\Documents\Planeten014.png
[2012.02.13 15:50:13 | 000,049,012 | ---- | C] () -- C:\Users\Paul\Documents\Planeten013.png
[2012.02.13 15:50:11 | 000,048,996 | ---- | C] () -- C:\Users\Paul\Documents\Planeten012.png
[2012.02.13 15:50:08 | 000,048,972 | ---- | C] () -- C:\Users\Paul\Documents\Planeten011.png
[2012.02.13 15:50:06 | 000,049,019 | ---- | C] () -- C:\Users\Paul\Documents\Planeten010.png
[2012.02.13 15:50:04 | 000,048,941 | ---- | C] () -- C:\Users\Paul\Documents\Planeten009.png
[2012.02.13 15:50:02 | 000,048,876 | ---- | C] () -- C:\Users\Paul\Documents\Planeten008.png
[2012.02.13 15:49:59 | 000,048,848 | ---- | C] () -- C:\Users\Paul\Documents\Planeten007.png
[2012.02.13 15:49:57 | 000,048,858 | ---- | C] () -- C:\Users\Paul\Documents\Planeten006.png
[2012.02.13 15:49:55 | 000,048,849 | ---- | C] () -- C:\Users\Paul\Documents\Planeten005.png
[2012.02.13 15:49:52 | 000,048,876 | ---- | C] () -- C:\Users\Paul\Documents\Planeten004.png
[2012.02.13 15:49:48 | 000,048,937 | ---- | C] () -- C:\Users\Paul\Documents\Planeten002.png
[2012.02.13 15:49:16 | 000,048,918 | ---- | C] () -- C:\Users\Paul\Documents\Planeten003.png
[2012.02.13 15:49:03 | 000,048,966 | ---- | C] () -- C:\Users\Paul\Documents\Planeten001.png
[2012.02.12 22:41:39 | 000,000,200 | ---- | C] () -- C:\Users\Paul\Documents\clock.ini.bak
[2012.02.12 22:41:39 | 000,000,199 | ---- | C] () -- C:\Users\Paul\Documents\clock.ini
[2012.02.12 22:31:51 | 000,000,233 | ---- | C] () -- C:\Users\Paul\Documents\sphere1.ini
[2012.02.12 22:31:51 | 000,000,230 | ---- | C] () -- C:\Users\Paul\Documents\sphere1.ini.bak
[2012.02.12 22:31:17 | 000,000,837 | ---- | C] () -- C:\Users\Paul\Documents\sphere1.pov
[2012.02.09 19:43:57 | 000,000,200 | ---- | C] () -- C:\Users\Paul\Documents\Minecraft-Skin.png
[2011.11.09 07:34:47 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.11.09 07:31:31 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.07.14 03:55:06 | 000,053,760 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.04.13 03:48:48 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
========== LOP Check ==========
[2012.02.24 18:32:06 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\.minecraft
[2012.02.16 22:33:10 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\.Nitrous
[2011.12.24 20:02:05 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ASUS WebStorage
[2012.02.23 15:54:58 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\DVDVideoSoft
[2012.02.21 23:51:16 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.02.24 15:20:52 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\EAC
[2012.02.15 14:16:43 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\FileZilla
[2012.01.17 21:08:38 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\IObit
[2011.12.26 15:07:45 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\OpenOffice.org
[2012.02.03 16:45:36 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\PhotoScape
[2012.02.03 13:28:24 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\POV-Ray
[2012.01.17 16:15:45 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Simfy
[2012.02.25 15:43:58 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Thunderbird
[2012.01.20 16:19:09 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\TS3Client
[2012.01.14 12:42:47 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\ts3overlay
[2012.01.12 19:04:27 | 000,000,000 | ---D | M] -- C:\Users\Paul\AppData\Roaming\Zeon
[2012.02.06 16:09:43 | 000,032,572 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2011.12.24 19:32:43 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2012.03.06 09:25:33 | 000,000,000 | -H-D | M] -- C:\ASUS.DAT
[2011.04.13 03:49:40 | 000,000,000 | ---D | M] -- C:\AsusVibeData
[2009.07.29 07:03:34 | 000,000,000 | -HSD | M] -- C:\Boot
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.11.09 07:42:27 | 000,000,000 | ---D | M] -- C:\eSupport
[2012.02.17 13:41:08 | 000,000,000 | ---D | M] -- C:\Fraps
[2012.01.25 16:47:34 | 000,000,000 | ---D | M] -- C:\Netts
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.02.21 12:16:32 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.02.29 19:32:14 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2012.01.20 17:17:43 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.12.24 19:29:35 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.03.05 17:15:09 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.12.24 19:31:28 | 000,000,000 | R--D | M] -- C:\Users
[2012.03.07 09:46:39 | 000,000,000 | ---D | M] -- C:\Windows
< %PROGRAMFILES%\*.exe >
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< MD5 for: AGP440.SYS >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.20 14:24:46 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
< MD5 for: IASTORV.SYS >
[2010.11.20 14:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 14:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 14:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 14:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 14:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 14:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
< MD5 for: USER32.DLL >
[2010.11.20 13:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.20 13:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010.11.20 14:27:28 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.20 14:27:28 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
< %USERPROFILE%\*.* >
[2012.01.17 16:15:46 | 000,000,032 | ---- | M] () -- C:\Users\Paul\.simfy
[2012.03.07 12:28:56 | 001,572,864 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT
[2012.03.07 12:28:56 | 000,262,144 | -HS- | M] () -- C:\Users\Paul\ntuser.dat.LOG1
[2011.12.24 19:31:29 | 000,000,000 | -HS- | M] () -- C:\Users\Paul\ntuser.dat.LOG2
[2011.12.24 21:10:37 | 000,065,536 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2011.12.24 21:10:37 | 000,524,288 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2011.12.24 21:10:37 | 000,524,288 | -HS- | M] () -- C:\Users\Paul\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2011.12.24 19:31:29 | 000,000,020 | -HS- | M] () -- C:\Users\Paul\ntuser.ini
< %USERPROFILE%\Local Settings\Temp\*.exe >
< %USERPROFILE%\Local Settings\Temp\*.dll >
< %USERPROFILE%\Application Data\*.exe >
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
< >
< End of report >
|
|
07.03.2012, 13:11
| #12 |
| /// Malware-holic | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? hi dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user. wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts. • Starte bitte die OTL.exe • Kopiere nun das Folgende in die Textbox. Code:
ATTFilter :OTL
O4 - HKCU..\Run: [SkypeM] C:\Users\Paul\AppData\Local\Skype\Skype.exe (Rockwell Software, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
:Files
C:\Users\Paul\AppData\Local\Skype
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]
• Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren. starte in den normalen modus. falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang in den Thread posten! Drücke bitte die  + E Taste.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.03.2012, 13:24
| #13 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? da steht im zip ordner war ein virus |
|
07.03.2012, 13:27
| #14 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? Hier die eine Textdatei: Code:
ATTFilter All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SkypeM deleted successfully.
C:\Users\Paul\AppData\Local\Skype\Skype.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
========== COMMANDS ==========
[EMPTYFLASH]
User: All Users
User: Default
->Flash cache emptied: 56475 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: Paul
->Flash cache emptied: 70409 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Paul
->Temp folder emptied: 105687747 bytes
->Temporary Internet Files folder emptied: 334090858 bytes
->Java cache emptied: 90239 bytes
->FireFox cache emptied: 1133174321 bytes
->Google Chrome cache emptied: 383202932 bytes
->Flash cache emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 589825119 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 1586494 bytes
Total Files Cleaned = 2.430,00 mb
OTL by OldTimer - Version 3.2.35.1 log created on 03072012_131259
Files\Folders moved on Reboot...
C:\Users\Paul\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
Registry entries deleted on Reboot...
|
|
07.03.2012, 13:31
| #15 |
| | Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? avira antivir hat also einen virus in der zip datei gefunden heißt das jetzt , dass wir fertig sind? Naja wenn nicht können wir dann weiter machen. Für das was du bis jetzt für mich getan hast erstmal ein dickes,fettes  !!! Ich finds echt genial ,dass es Leute gibt die einem da helfen ich glaube ich wäre sonst völlig verzweifelt^^. Ich finds auf jedenfall klasse was du hier leistest!!! weiter so^^!Falls wir nochnicht fertig sind muss ich später weiter machen ,weil ich jetzt in die Stadt und zum Friseur muss. Geändert von Syntas (07.03.2012 um 13:37 Uhr) |
|
| Themen zu Windows wurde aus Sicherheitsgründen gesperrt!-bezahlen und herunterladen- Virus? |
| abgesicherte, abgesicherten, bezahlen, bezahlen und herunterladen, bildschirm, button, entferne, entfernen, fertig, funktioniert, gesperrt, gestern, hochgefahren, laptop, modus, netzwerk, netzwerktreiber, schrift, schwarzer, schwarzer bildschirm, troja, trojaner-board, virus, virus?, windows, windows 7, windows 7 64 bit, windows gesperrt aus sicherheitsgründen bezahlen herunterladen, wirklich |
Linear-Darstellung
