Ebenfalls ein Problem mit dem Verschlüsselungstrojaner

OTL logfile created on: 5/3/2012 8:26:33 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,023.00 Mb Total Physical Memory | 825.00 Mb Available Physical Memory | 81.00% Memory free
907.00 Mb Paging File | 848.00 Mb Available in Paging File | 94.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 87.41 Gb Total Space | 6.69 Gb Free Space | 7.65% Space Free | Partition Type: NTFS
Drive D: | 1.02 Gb Total Space | 0.35 Gb Free Space | 34.51% Space Free | Partition Type: FAT32
Drive E: | 14.89 Gb Total Space | 0.02 Gb Free Space | 0.12% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Disabled] --  -- (HidServ)
SRV - File not found [On_Demand] --  -- (AppMgmt)
SRV - [2012/04/26 15:48:47 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/04/15 12:27:43 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2011/02/11 09:09:27 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2006/08/16 08:36:33 | 000,068,096 | ---- | M] () [On_Demand] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2006/03/22 05:07:22 | 000,040,960 | ---- | M] () [Auto] -- C:\Programme\System Control Manager\edd.exe -- (NishService)
SRV - [2006/03/02 13:33:06 | 000,061,440 | ---- | M] (Cyberlink) [Auto] -- C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service)
SRV - [2006/03/02 13:32:20 | 000,221,281 | ---- | M] () [Auto] -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2006/03/02 13:32:20 | 000,110,687 | ---- | M] () [Auto] -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2005/04/06 11:03:28 | 000,110,592 | ---- | M] () [Auto] -- C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service)
SRV - [2005/01/27 11:33:58 | 000,036,864 | ---- | M] () [Auto] -- C:\WINDOWS\system32\o2flash.exe -- (O2Flash)
SRV - [2004/11/09 16:36:01 | 001,140,312 | ---- | M] (America Online, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe -- (AOL ACS)
SRV - [2004/10/21 22:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004/06/25 19:17:06 | 000,254,224 | ---- | M] (Computer Associates International, Inc.) [Auto] -- C:\Programme\CA\eTrust Antivirus\InoTask.exe -- (InoTask)
SRV - [2004/06/25 19:16:54 | 000,241,936 | ---- | M] (Computer Associates International, Inc.) [Auto] -- C:\Programme\CA\eTrust Antivirus\InoRT.exe -- (InoRT)
SRV - [2004/06/25 19:16:50 | 000,139,536 | ---- | M] (Computer Associates International, Inc.) [Auto] -- C:\Programme\CA\eTrust Antivirus\InoRpc.exe -- (InoRPC)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (Ssfssspi)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2008/11/11 07:42:00 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2008/11/11 07:41:00 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2008/11/11 07:41:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2008/04/13 14:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2006/03/08 08:27:12 | 004,246,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/01/18 07:43:16 | 000,129,024 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\atswpdrv.sys -- (ATSWPDRV) AuthenTec TruePrint USB Driver (AES2500)
DRV - [2006/01/10 16:54:22 | 001,421,312 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005/11/16 11:08:16 | 000,078,976 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTL8023xp)
DRV - [2005/11/14 08:28:34 | 000,034,176 | ---- | M] (O2Micro ) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2005/10/31 10:49:48 | 000,028,800 | ---- | M] (O2Micro ) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\o2sd.sys -- (O2SDRDR)
DRV - [2005/09/26 07:21:24 | 001,145,728 | ---- | M] (Agere Systems) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005/09/07 10:49:56 | 000,243,200 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RT2500.sys -- (RT2500)
DRV - [2005/08/26 14:06:28 | 000,660,992 | R--- | M] (Animation Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LVHybrid.sys -- (LVHybrid)
DRV - [2005/08/25 17:55:04 | 008,807,424 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\snp2sxp.sys -- (SNP2STD) USB2.0 PC Camera (SNP2STD)
DRV - [2005/08/09 10:11:00 | 000,024,704 | R--- | M] (Elantech Devices Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Ktp3.sys -- (Ktp3) Elantech TouchPad(KTP3)
DRV - [2005/07/12 16:58:00 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PCASp50.sys -- (PCASp50)
DRV - [2005/05/31 10:40:20 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2005/05/31 04:42:28 | 000,023,000 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2005/04/30 09:50:20 | 000,011,860 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2005/04/30 09:50:10 | 000,028,271 | ---- | M] (IVT Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2005/04/30 09:48:58 | 000,010,804 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BtNetDrv.sys -- (BT)
DRV - [2005/03/25 12:18:48 | 000,082,148 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2005/03/10 03:56:08 | 000,020,128 | ---- | M] (Your Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\MGHwCtrl.sys -- (MGHwCtrl)
DRV - [2005/03/09 10:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004/10/19 08:37:38 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2004/08/08 03:08:14 | 000,153,728 | ---- | M] (Computer Associates) [File_System | Auto] -- C:\WINDOWS\system32\drivers\ino_fltr.sys -- (INO_FLTR)
DRV - [2003/12/08 13:55:14 | 000,019,712 | R--- | M] (Computer Associates) [File_System | Boot] -- C:\WINDOWS\system32\drivers\ino_flpy.sys -- (INO_FLPY)
DRV - [2003/01/10 17:13:04 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.targa.de
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.web.de/home
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://go.web.de/tab2 [binary data]
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.web.de [binary data]
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.web.de/start_ie
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Bethage_Dirk_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.targa.de
 
IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.targa.de
 
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_233.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/04/26 15:48:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/05/01 15:21:47 | 000,000,000 | ---D | M]
 
[2009/12/18 05:52:28 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\mozilla\Extensions
[2012/04/25 17:29:40 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\mozilla\Firefox\Profiles\mdd55li4.default\extensions
[2010/06/30 14:26:19 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\mozilla\Firefox\Profiles\mdd55li4.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/05/01 12:28:18 | 000,000,000 | ---D | M] ("Avira SearchFree Toolbar plus Web Protection") -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\mozilla\Firefox\Profiles\mdd55li4.default\extensions\toolbar@ask.com
[2011/11/17 17:29:38 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010/03/21 14:43:18 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
File not found (No name found) -- 
[2012/04/26 15:48:46 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/02/02 15:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2012/02/24 17:48:06 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/02/24 17:48:06 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/02/24 17:48:06 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/02/24 17:48:06 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/02/24 17:48:06 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/02/24 17:48:06 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2004/08/04 08:00:00 | 000,000,820 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (WEB.DE Browser Configuration by mquadr.at) - {D48FF4B4-E68F-47D1-8E25-81A0F0EEB341} - C:\WINDOWS\system32\ieconfig_1und1.dll (mquadr.at softwareengineering und consulting gmbh)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\Bethage_Dirk_ON_C\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AntivirusRegistration] C:\Programme\CA\Etrust Antivirus\Register.exe ()
O4 - HKLM..\Run: [AOLDialer] C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe (America Online, Inc)
O4 - HKLM..\Run: [ApnUpdater] C:\Programme\Ask.com\Updater\Updater.exe ({StringFileInfo_CompanyName})
O4 - HKLM..\Run: [ATICCC] C:\Programme\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [ControlCenter3] C:\Programme\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [InstantOn] C:\Programme\CyberLink\PowerCinema Linux\ion_install.exe ()
O4 - HKLM..\Run: [KTPWare] C:\Programme\Elantech\Ktp3.exe (ELANTECH Devices Corp.)
O4 - HKLM..\Run: [MGSysCtrl] C:\Programme\System Control Manager\MGSysCtrl.exe (MSI)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [OEM-Reset]  File not found
O4 - HKLM..\Run: [PCMService] C:\Programme\CyberLink\PowerCinema\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Realtime Monitor] C:\Programme\CA\Etrust Antivirus\Realmon.exe (Computer Associates International, Inc.)
O4 - HKLM..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe (Sonix)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe (sonix)
O4 - HKLM..\Run: [WEB.DE Update] C:\Programme\WEB.DE\LiveUpdate\m2LUTray.exe ()
O4 - HKU\Bethage_Dirk_ON_C..\Run: [BCD35B67] C:\WINDOWS\system32\B30A8238BCD35B676B3A.exe (THHiq)
O4 - HKU\Bethage_Dirk_ON_C..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe (Northcode Inc.)
O4 - HKU\Bethage_Dirk_ON_C..\Run: [Realtecdriver] C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\Realtec\Realtecdriver.exe (THHiq)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AOL 9.0 Tray-Symbol.lnk = C:\Programme\AOL 9.0\aoltray.exe (America Online, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe (IVT Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\Bethage Dirk\Startmenü\Programme\Autostart\PMB Medien-Prüfung.lnk = C:\Programme\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (Sony Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegedit = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Bethage_Dirk_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Bethage_Dirk_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\Bethage_Dirk_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegedit = 1
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1142601238406 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\B30A8238BCD35B676B3A.exe) - C:\WINDOWS\system32\B30A8238BCD35B676B3A.exe (THHiq)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: 
O24 - Desktop BackupWallPaper: 
O27 - HKLM IFEO\msconfig.exe: Debugger - P9KDMF.EXE File not found
O27 - HKLM IFEO\regedit.exe: Debugger - P9KDMF.EXE File not found
O27 - HKLM IFEO\taskmgr.exe: Debugger - P9KDMF.EXE File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/09 13:31:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2004/01/15 10:25:14 | 000,000,053 | ---- | M] () - D:\Autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2004/01/20 15:50:52 | 000,020,480 | ---- | M] (TARGA GmbH) - D:\Autorun.exe -- [ FAT32 ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{400ac75c-af99-11da-bd0e-806d6172696f}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2004/01/20 15:50:52 | 000,020,480 | ---- | M] (TARGA GmbH)
O33 - MountPoints2\{bf4c4fcd-7d5f-11df-b7ac-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{bf4c4fcd-7d5f-11df-b7ac-00038a000015}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{bf4c4fcd-7d5f-11df-b7ac-00038a000015}\Shell\AutoRun\command - "" = F:\USBAutoRun.exe
O33 - MountPoints2\{d0701169-c427-11da-bdcc-806d6172696f}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2004/01/20 15:50:52 | 000,020,480 | ---- | M] (TARGA GmbH)
O33 - MountPoints2\{f0e68cca-d2da-11db-b646-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{f0e68cca-d2da-11db-b646-00038a000015}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{f0e68cca-d2da-11db-b646-00038a000015}\Shell\AutoRun\command - "" = F:\LaunchU3.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: AppMgmt -  File not found
NetSvcs: HidServ -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/04/26 15:49:02 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Maintenance Service
[2012/04/26 15:49:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Mozilla
[2012/04/24 15:39:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\Nikjsaf
[2012/04/24 15:37:09 | 000,067,072 | -H-- | C] (THHiq) -- C:\WINDOWS\System32\B30A8238BCD35B676B3A.exe
[2012/04/24 15:36:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\Realtec
[2006/03/17 08:46:55 | 000,049,152 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2std.dll
[2006/03/17 08:46:55 | 000,045,056 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2std.dll
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/05/01 13:54:33 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2012/05/01 13:33:59 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/05/01 13:33:56 | 1073,139,712 | -HS- | M] () -- C:\hiberfil.sys
[2012/05/01 12:27:35 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/05/01 12:12:18 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/04/30 11:29:50 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh321
[2012/04/30 11:29:30 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh320
[2012/04/30 11:28:00 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh323
[2012/04/30 11:26:42 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh322
[2012/04/26 15:50:45 | 000,000,020 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLec.DAT
[2012/04/26 12:38:10 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh325
[2012/04/26 12:37:48 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh324
[2012/04/24 15:37:09 | 000,067,072 | -H-- | M] (THHiq) -- C:\WINDOWS\System32\B30A8238BCD35B676B3A.exe
[2012/04/15 12:27:43 | 000,418,464 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/04/15 12:27:42 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/04/15 12:22:43 | 000,002,495 | ---- | M] () -- C:\Dokumente und Einstellungen\Bethage Dirk\Desktop\Microsoft Word.lnk
[2012/04/13 11:06:08 | 000,023,620 | ---- | M] () -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\wklnhst.dat
[2012/04/11 16:47:24 | 000,460,464 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012/04/11 16:47:24 | 000,442,526 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/04/11 16:47:24 | 000,085,790 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012/04/11 16:47:24 | 000,072,462 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/04/11 16:39:33 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/04/10 15:15:32 | 001,551,640 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/05/01 12:55:48 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh325
[2012/05/01 12:55:48 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh324
[2012/05/01 12:55:48 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh323
[2012/05/01 12:55:47 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh322
[2012/05/01 12:55:47 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh321
[2012/05/01 12:55:47 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh320
[2012/03/18 16:45:21 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\0.6639902585907091h7i.exe
[2012/03/18 11:00:29 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/02/18 13:36:21 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/05/20 06:18:58 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011/05/20 06:18:56 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011/05/20 06:18:50 | 000,631,808 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/05/20 06:18:50 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/05/20 06:18:46 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011/05/18 17:33:41 | 000,000,072 | ---- | C] () -- C:\Dokumente und Einstellungen\Bethage Dirk\Mediaport.conf
[2010/10/24 13:02:11 | 000,000,425 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2010/10/24 13:02:11 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2010/10/24 13:01:41 | 000,000,848 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2010/10/24 13:01:41 | 000,000,149 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2010/10/24 13:01:41 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf07a.dat
[2010/10/24 13:00:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brdfxspd.dat
[2010/03/21 14:48:30 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008/07/23 12:50:52 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008/07/23 12:46:38 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2007/03/30 14:34:21 | 000,000,042 | ---- | C] () -- C:\Dokumente und Einstellungen\Bethage Dirk\default.pls
[2006/08/15 08:18:27 | 000,000,020 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLec.DAT
[2006/08/10 13:58:32 | 000,023,620 | ---- | C] () -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\wklnhst.dat
[2006/08/10 13:04:02 | 000,005,120 | ---- | C] () -- C:\Dokumente und Einstellungen\Bethage Dirk\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/08/10 13:04:02 | 000,000,145 | ---- | C] () -- C:\Dokumente und Einstellungen\Bethage Dirk\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2006/04/05 17:32:41 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/04/05 10:18:39 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\MGHwCtrl.dll
[2006/04/05 10:18:39 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\MGFPCtrl.dll
[2006/04/05 10:18:39 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\MGPwrShm.dll
[2006/03/22 10:58:30 | 000,000,207 | ---- | C] () -- C:\WINDOWS\WISO.INI
[2006/03/22 08:34:54 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2006/03/22 08:09:27 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/03/22 07:36:17 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll
[2006/03/21 12:19:08 | 000,000,518 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/03/21 11:42:43 | 000,003,072 | R--- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2006/03/21 11:42:34 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2006/03/17 08:46:56 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2std.ini
[2006/03/17 08:46:55 | 008,807,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2sxp.sys
[2006/03/17 08:46:55 | 000,020,480 | ---- | C] () -- C:\WINDOWS\usnp2std.exe
[2006/03/17 07:58:39 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2006/03/17 07:58:39 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2006/03/16 05:50:36 | 000,112,425 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2006/03/09 13:38:05 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2006/03/09 13:32:45 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2006/03/09 13:29:22 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2006/03/09 13:24:43 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006/03/09 13:23:57 | 001,551,640 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006/03/09 13:17:22 | 000,000,854 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006/03/09 13:17:18 | 000,460,464 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2006/03/09 13:17:18 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2006/03/09 13:17:18 | 000,085,790 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2006/03/09 13:17:18 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2006/03/09 13:17:14 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006/03/09 13:17:13 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006/03/09 13:17:13 | 000,442,526 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006/03/09 13:17:13 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006/03/09 13:17:13 | 000,072,462 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006/03/09 13:17:13 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006/03/09 13:17:13 | 000,004,524 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006/03/09 13:17:13 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2006/03/09 13:17:11 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006/03/09 13:17:11 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006/03/09 13:17:09 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006/03/09 13:17:06 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2005/07/29 09:08:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\WlanInstallDll.dll
[2005/07/05 15:32:00 | 000,011,863 | ---- | C] () -- C:\WINDOWS\System32\Wlan.ini
[2005/04/30 09:50:20 | 000,011,860 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys
[2005/01/27 11:33:58 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\o2flash.exe
[2005/01/21 07:02:28 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\RMDevice.dll
[2004/12/16 11:32:54 | 000,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys
 
========== LOP Check ==========
 
[2006/03/21 11:52:27 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\S.A.D
[2012/03/21 15:55:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\AskToolbar
[2011/12/01 08:08:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\go
[2010/06/21 14:08:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\LG Electronics
[2012/04/24 15:39:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\Nikjsaf
[2009/12/29 15:45:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\Nikon
[2011/05/03 15:14:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\PC-FAX TX
[2006/03/21 11:52:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Bethage Dirk\Anwendungsdaten\S.A.D
[2006/03/17 09:11:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Bluetooth
[2011/12/01 08:24:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Easybits GO
[2006/08/15 08:18:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\EnterNHelp
[2006/03/22 10:58:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fun communications
[2010/03/11 12:49:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IEConfiguration1und1
[2006/08/15 08:18:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ultima_T15
[2006/03/22 08:36:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Viewpoint
[2010/03/11 12:49:20 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{ACD22DA6-75BE-4B73-8FEE-D4717AEBEFA5}
[2010/03/11 12:49:32 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C4673A56-EF7C-40A4-9249-68BD43C997F7}
[2012/05/01 13:54:33 | 000,000,240 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
 
========== Purity Check ==========
 
 
< End of report >