Bildschirm beim Booten aus nach Bary Virus

OTL logfile created on: 26.06.2012 23:09:14 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,55 Gb Available Physical Memory | 77,56% Memory free
3,85 Gb Paging File | 3,64 Gb Available in Paging File | 94,43% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 298,08 Gb Total Space | 113,22 Gb Free Space | 37,98% Space Free | Partition Type: NTFS
 
Computer Name: BEGEISTERUNG | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.06.26 23:08:57 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Downloads\OTL.exe
PRC - [2012.06.07 10:14:45 | 001,239,576 | ---- | M] (Google Inc.) -- C:\Programme\Google\Chrome\Application\chrome.exe
PRC - [2008.07.09 09:05:18 | 000,075,304 | ---- | M] (Zone Labs, LLC) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe
PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.06.07 10:14:43 | 000,441,880 | ---- | M] () -- C:\Programme\Google\Chrome\Application\19.0.1084.56\ppgooglenaclpluginchrome.dll
MOD - [2012.06.07 10:14:42 | 003,922,456 | ---- | M] () -- C:\Programme\Google\Chrome\Application\19.0.1084.56\pdf.dll
MOD - [2012.06.07 10:13:16 | 000,134,696 | ---- | M] () -- C:\Programme\Google\Chrome\Application\19.0.1084.56\avutil-51.dll
MOD - [2012.06.07 10:13:15 | 000,250,408 | ---- | M] () -- C:\Programme\Google\Chrome\Application\19.0.1084.56\avformat-54.dll
MOD - [2012.06.07 10:13:14 | 002,375,720 | ---- | M] () -- C:\Programme\Google\Chrome\Application\19.0.1084.56\avcodec-54.dll
MOD - [2008.07.09 09:06:24 | 000,144,880 | ---- | M] () -- C:\WINDOWS\system32\ZoneLabs\lib\pyd\pyexpat.pyd
MOD - [2008.07.09 09:06:24 | 000,046,576 | ---- | M] () -- C:\WINDOWS\system32\ZoneLabs\lib\pyd\_socket.pyd
MOD - [2008.07.09 09:06:24 | 000,026,096 | ---- | M] () -- C:\WINDOWS\system32\ZoneLabs\lib\pyd\signedDll.pyd
MOD - [2008.07.09 09:06:24 | 000,026,096 | ---- | M] () -- C:\WINDOWS\system32\ZoneLabs\lib\pyd\pyvsinit.pyd
MOD - [2008.07.09 09:05:08 | 000,796,048 | ---- | M] () -- C:\WINDOWS\system32\libeay32_0.9.6l.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012.06.19 17:32:30 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.04.02 10:55:23 | 000,253,600 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.02.29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.06.21 19:12:28 | 000,196,912 | ---- | M] (Nitro PDF Software) [Auto | Stopped] -- C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe -- (NitroReaderDriverReadSpool2)
SRV - [2011.03.01 09:56:36 | 000,052,288 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Programme\NOS\bin\getPlus_Helper_3004.dll -- (nosGetPlusHelper) getPlus(R)
SRV - [2011.02.21 20:05:08 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011.01.07 19:21:50 | 000,072,704 | ---- | M] (Adobe Systems) [Disabled | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2011.01.05 12:59:50 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010.01.15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009.09.06 13:38:06 | 000,071,096 | ---- | M] () [Auto | Stopped] -- C:\Programme\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2009.08.24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- C:\Programme\Ashampoo\Ashampoo WinOptimizer 2010 Advanced\DfSdkS.exe -- (DfSdkS)
SRV - [2008.11.07 16:40:52 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2008.07.09 09:05:18 | 000,075,304 | ---- | M] (Zone Labs, LLC) [Auto | Running] -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2007.08.30 10:28:10 | 000,165,120 | ---- | M] (Avanquest Software USA, Inc.) [Auto | Stopped] -- C:\Programme\VCOM\Fix-It\mxtask.exe -- (Fix-It Utilities Task Manager)
SRV - [2005.11.17 14:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2005.11.14 02:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003.07.28 12:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2001.11.12 14:31:48 | 000,020,480 | ---- | M] (X10) [Auto | Stopped] -- C:\Programme\Common Files\X10\Common\X10nets.exe -- (x10nets)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOKUME~1\GESUND~1\LOKALE~1\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | Auto | Stopped] --  -- (adfs)
DRV - [2011.07.07 17:39:06 | 006,367,848 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2010.12.31 19:33:48 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2010.12.18 13:03:56 | 000,021,696 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)
DRV - [2009.11.18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.09.28 21:57:28 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2008.09.26 09:53:00 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2008.09.26 09:52:00 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2008.09.26 09:52:00 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2008.09.26 09:52:00 | 000,010,384 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE)
DRV - [2008.07.09 09:05:22 | 000,394,952 | ---- | M] (Zone Labs, LLC) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2008.04.04 18:34:26 | 000,014,208 | ---- | M] (MAGIX) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\disksec.sys -- (DiskSec)
DRV - [2008.03.31 16:43:28 | 000,533,888 | ---- | M] (PixArt Imaging Incorporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GUCI_AVS.sys -- (GUCI_AVS)
DRV - [2008.02.27 03:10:44 | 000,051,176 | ---- | M] (Zone Labs, LLC) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\ZoneLabs\srescan.sys -- (srescan)
DRV - [2007.03.19 16:00:14 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RLVrtAuCbl.sys -- (ReallusionVirtualAudio)
DRV - [2007.02.16 02:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006.10.27 17:18:00 | 000,011,264 | R--- | M] (VIA Technologies,Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\xfilt.sys -- (xfilt)
DRV - [2006.10.27 17:18:00 | 000,009,728 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\videX32.sys -- (videX32)
DRV - [2006.10.01 14:37:02 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0801.sys -- (tap0801)
DRV - [2005.11.28 11:45:16 | 000,007,040 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\x10hid.sys -- (X10Hid)
DRV - [2005.05.19 16:52:58 | 000,017,792 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\x10ufx2.sys -- (XUIF)
DRV - [2003.07.16 14:58:30 | 000,013,056 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdrbsvsd.sys -- (cdrbsvsd)
DRV - [1996.04.03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nosltd.com/getPlus+(R),version=1.6.2.100: C:\Programme\NOS\bin\np_gp.dll (NOS Microsystems Ltd.)
FF - HKLM\Software\MozillaPlugins\@nosltd.com/getPlus+(R),version=1.6.2.99: C:\Programme\NOS\bin\np_gp.dll (NOS Microsystems Ltd.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\NitroPDF: C:\Programme\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Programme\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009.06.25 12:30:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Programme\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011.04.13 17:39:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.12.30 09:54:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012.05.16 07:34:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.22\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2011.01.28 14:55:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.0.11\extensions\\Components: C:\Programme\SeaMonkey\components [2011.02.04 21:06:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.0.11\extensions\\Plugins: C:\Programme\SeaMonkey\plugins [2012.05.16 08:16:21 | 000,000,000 | ---D | M]
 
[2012.05.15 22:26:06 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.06.22 15:07:58 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.02.29 20:23:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2011.12.30 09:54:44 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2010.03.27 18:06:04 | 000,067,032 | ---- | M] (Adobe Systems, Inc.) -- C:\Programme\mozilla firefox\plugins\npContribute.dll
[2012.02.29 20:22:52 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2012.01.23 11:50:38 | 000,170,080 | ---- | M] (Tracker Software Products (Canada) Ltd.) -- C:\Programme\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
[2011.12.30 09:54:41 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.12.30 09:54:41 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011.12.30 09:54:41 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011.12.30 09:54:41 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.12.30 09:54:41 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.12.30 09:54:41 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll
CHR - plugin: Skype Click to Call (Enabled) = C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.0.0.10297_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Contribute CS5  (Enabled) = C:\Programme\Mozilla Firefox\plugins\npContribute.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Programme\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Programme\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Programme\Microsoft\Office Live\npOLW.dll
CHR - plugin: PDF-XChange Viewer (Enabled) = C:\Programme\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Reallusion CT4Player for Mozilla (Enabled) = C:\Programme\Mozilla Firefox\plugins\npRLCT4Player.dll
CHR - plugin: getPlusPlus for Adobe 162100 (Enabled) = C:\Programme\Mozilla Firefox\plugins\np_gp.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Programme\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Nitro PDF Plug-In (Enabled) = C:\Programme\Nitro PDF\Reader 2\npnitromozilla.dll
CHR - plugin: DocuCom PDF Plus (Enabled) = C:\Programme\Nuance\PDF Reader\bin\nppdf.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Programme\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Skype Click to Call = C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.0.0.10297_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\
 
O1 HOSTS File: ([2012.05.23 16:16:47 | 000,443,145 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com      
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 192.168.178.28 HP001F2971440D
O1 - Hosts: 127.98.9.2                        pop.1und1.com.b9  
O1 - Hosts: 127.98.9.1                        pop.1und1.de.b9  
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 15222 more lines...
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Programme\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Programme\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [ZoneAlarm Client] C:\Programme\ZoneAlarm\zlclient.exe (Zone Labs, LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1275750736093 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1295441544156 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D19056A5-EE24-47AC-87D9-3F8A37245436}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - (c:\programme\gemeinsame dateien\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop BackupWallPaper: 
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.21 01:54:13 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.06.26 23:03:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Downloads
[2012.06.26 23:02:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Adobe
[2012.06.26 22:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google
[2012.06.26 22:54:45 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Eigene Dateien
[2012.06.26 22:54:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Opera
[2012.06.26 22:54:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Opera
[2012.06.26 22:54:25 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\IETldCache
[2012.06.16 11:39:37 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\OpenOffice.org 3.4
[2012.06.16 11:01:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NVIDIA Corporation
[2012.06.16 10:59:04 | 000,061,440 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2012.06.16 10:58:25 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation
[2012.06.16 10:57:53 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2012.06.07 16:09:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\VCOM
[2012.06.02 07:06:11 | 000,000,000 | ---D | C] -- C:\Programme\Dropbox
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.06.26 23:10:02 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.06.26 23:06:24 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.06.26 23:05:30 | 000,358,382 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2012.06.26 23:05:01 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.06.26 23:04:01 | 000,000,020 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator\defogger_reenable
[2012.06.25 07:30:52 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.06.24 21:25:15 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.06.24 20:52:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.06.16 16:41:39 | 003,734,200 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.06.16 14:47:03 | 147,556,384 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2012.06.16 14:47:03 | 001,735,472 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx
[2012.06.16 11:39:38 | 000,000,909 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\OpenOffice.org 3.4.lnk
[2012.06.16 11:01:00 | 000,273,800 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012.06.16 11:01:00 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012.06.16 11:00:58 | 000,273,800 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012.06.16 11:00:58 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\nvdrswr.lk
[2012.06.16 02:00:18 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-BEGEISTERUNG-Gesundheit.job
[2012.06.15 07:16:07 | 000,182,038 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012.06.12 09:46:45 | 000,677,264 | ---- | M] () -- C:\WINDOWS\System32\sig.bin
[2012.06.12 09:46:45 | 000,040,693 | ---- | M] () -- C:\WINDOWS\System32\nmp.map
[2012.06.09 21:08:10 | 000,002,243 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.06.26 23:03:46 | 000,000,020 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\defogger_reenable
[2012.06.16 11:39:38 | 000,000,909 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\OpenOffice.org 3.4.lnk
[2012.06.16 11:00:58 | 000,273,800 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012.06.16 11:00:58 | 000,273,800 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012.06.16 11:00:58 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012.06.16 11:00:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\nvdrswr.lk
[2012.06.16 10:59:04 | 002,123,906 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2012.06.16 10:59:04 | 000,003,249 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2012.05.15 22:49:39 | 000,677,264 | ---- | C] () -- C:\WINDOWS\System32\sig.bin
[2012.05.13 23:05:43 | 000,276,808 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2012.02.25 09:44:17 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.06.24 21:14:20 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011.02.01 23:46:41 | 000,094,864 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2011.01.07 19:28:39 | 000,016,384 | ---- | C] () -- C:\WINDOWS\System32\FileOps.exe
[2010.10.10 14:34:46 | 000,000,111 | ---- | C] () -- C:\WINDOWS\installation.ini
[2010.10.01 19:47:46 | 000,000,933 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2010.10.01 19:05:28 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2010.07.21 10:33:35 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2010.04.17 14:27:40 | 000,040,960 | ---- | C] () -- C:\Programme\Uninstall_CDS.exe
[2010.02.10 08:49:05 | 000,697,926 | ---- | C] () -- C:\Programme\unins000.exe
[2010.02.10 08:49:05 | 000,001,731 | ---- | C] () -- C:\Programme\unins000.dat
[2009.06.23 15:03:24 | 000,000,041 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
 
========== LOP Check ==========
 
[2012.06.26 22:54:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Opera
[2010.01.01 02:07:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ashampoo
[2011.01.19 14:45:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BVRP Software
[2009.12.31 12:39:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Canneverbe Limited
[2010.12.31 19:55:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2009.10.31 23:13:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF
[2009.10.31 23:21:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF 6
[2009.10.31 23:13:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF Jobs
[2012.06.15 23:50:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\G DATA
[2011.12.23 00:38:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Langenscheidt
[2010.10.10 14:33:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2009.06.21 22:09:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier
[2011.09.10 13:25:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound
[2011.04.23 20:14:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nitro PDF
[2012.05.16 07:51:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nuance
[2011.04.13 18:09:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\regid.1986-12.com.adobe
[2011.06.22 22:29:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rosetta Stone
[2012.05.16 07:44:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft
[2009.06.21 22:02:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\X10 Settings
[2011.08.13 17:56:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011.02.01 23:25:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011.09.13 13:47:01 | 000,000,296 | ---- | M] () -- C:\WINDOWS\Tasks\expressripShakeIcon.job
[2011.09.30 19:05:07 | 000,000,274 | ---- | M] () -- C:\WINDOWS\Tasks\switchSevenDays.job
[2011.09.30 20:29:12 | 000,000,274 | ---- | M] () -- C:\WINDOWS\Tasks\switchShakeIcon.job
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 24 bytes -> C:\WINDOWS:DE9517B696AE9605

< End of report >
         

OTL Extras logfile created on: 26.06.2012 23:09:14 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,55 Gb Available Physical Memory | 77,56% Memory free
3,85 Gb Paging File | 3,64 Gb Available in Paging File | 94,43% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 298,08 Gb Total Space | 113,22 Gb Free Space | 37,98% Space Free | Partition Type: NTFS
 
Computer Name: BEGEISTERUNG | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Programme\Opera\Opera.exe (Opera Software)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- "C:\Programme\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Programme\Opera\Opera.exe" "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Betrachten mit XnView] -- "C:\Programme\XnView\xnview.exe" "%1" (XnView, hxxp://www.xnview.com)
Directory [Bridge] -- C:\Programme\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 1
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe" = C:\Programme\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe:*:Enabled:Rosetta Stone Ltd Services -- (Rosetta Stone Ltd.  )
"C:\Programme\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe" = C:\Programme\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe:*:Enabled:Rosetta Stone Version 3 Application -- (Rosetta Stone Ltd.  )
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\setup\HPZNET01.EXE" = D:\setup\HPZNET01.EXE:*:Enabled:hpznet01.exe
"D:\setup\HPONICIFS01.EXE" = D:\setup\HPONICIFS01.EXE:*:Enabled:hponicifs01.exe
"C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = C:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Programme\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Programme\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard)
"C:\Programme\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Programme\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Programme\CyberLink\PCM4Everio\PCM4Everio.exe" = C:\Programme\CyberLink\PCM4Everio\PCM4Everio.exe:*:Enabled:CyberLink PowerCinema NE for Everio -- (CyberLink Corp.)
"C:\Programme\CyberLink\PCM4Everio\EverioService.exe" = C:\Programme\CyberLink\PCM4Everio\EverioService.exe:*:Enabled:CyberLink PowerCinema NE for Everio Resident Program -- (CyberLink Corp.)
"C:\Programme\CyberLink\PowerDirector Express\PDX.exe" = C:\Programme\CyberLink\PowerDirector Express\PDX.exe:*:Enabled:CyberLink PowerDirector Express -- (CyberLink Corp.)
"C:\Programme\Skype\Plugin Manager\skypePM.exe" = C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\Programme\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe" = C:\Programme\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe:*:Enabled:Rosetta Stone Ltd Services -- (Rosetta Stone Ltd.  )
"C:\Programme\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe" = C:\Programme\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe:*:Enabled:Rosetta Stone Version 3 Application -- (Rosetta Stone Ltd.  )
"C:\Programme\Opera\opera.exe" = C:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Dokumente und Einstellungen\Gesundheit\Anwendungsdaten\Dropbox\bin\Dropbox.exe" = C:\Dokumente und Einstellungen\Gesundheit\Anwendungsdaten\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A55CDBB-0566-4AA2-A15B-24C7F27C6FF4}" = BPD_Scan
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{138BD312-3557-40F8-BC5E-6DFF00A6880D}" = BPDSoftware_Ini
"{148E08FF-D7C4-46ED-8D4D-601C67FE0AFD}" = Rosetta Stone Version 3
"{17E81C48-407E-499f-A105-1B49ACDB9BA4}" = ProductContext
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}" = Adobe Creative Suite 5 Master Collection
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20aa4150-b5f4-11de-8a39-0800200c9a66}_is1" = KompoZer 0.8b3
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28A7EEF4-BD0D-45D3-85C6-AAAB68764061}" = iSlim 330
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{33286280-8617-11E1-8FF6-B8AC6F97B88E}" = Google Earth Plug-in
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{39CEE1F2-12B6-4C50-9131-04BFCA110578}" = PowerCinema NE for Everio
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A6F4A31-8CFD-46B4-8385-E1F384DB121E}" = PDF-XChange Viewer
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go 3.0
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{49FC50FC-F965-40D9-89B4-CBFF80941031}" = Windows Movie Maker 2.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE80E7B-6633-4046-9C15-D3B281C4F73D}" = BPDSoftware
"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{5158974E-2D28-4018-9335-7694C2974746}" = Fix-It Utilities 7
"{519AB108-2449-4353-B2DA-1ED4682CFA6E}" = Langenscheidt Vokabeltrainer 6.0 Spanisch
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}" = Apple Mobile Device Support
"{5BFE01FF-189F-4b75-8FA8-9B7CD7F9C529}" = L7500
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{5F6C549F-78DA-4E0E-AE70-0BD981936D99}" = Nuance PDF Reader
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{6994491D-D491-48F1-AE1F-E179C1FFFC2F}" = HP Photosmart Essential
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{6D2EA8F0-8E1A-4EBC-A94F-067C02847335}" = MultiLingua Spanisch
"{6DE9751D-3FFE-400E-8761-26A92DB734DE}" = BPD_HPSU
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7729A02E-D1AD-4830-8FC5-11853500D90D}" = HP Officejet Pro All-In-One Series
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 3.5.2
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
"{8C045626-4496-4238-B3B8-394CC6D46427}" = 7500_7600_7700_Help
"{8C0DF485-DB3E-453C-BFB3-4C47E636ECF9}" = Serif WebPlus 10
"{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}" = eXPert PDF 6
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{A75BDD40-6540-4922-BFF7-D9DCCECAD714}" = Nitro PDF Reader 2
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A84FB24E-FEB4-4C93-A5F5-DE3B40B2B73D}" = Serif PagePlus X2 - Ressourcen
"{A869A1DA-9571-4287-B170-4A7246994C84}" = Serif WebPlus 10 - Ressourcen
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAD47011-8518-4608-9656-951DA35B587B}" = iTunes
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B00B1355-DD54-4314-90B1-161C6A7D3FD3}" = Serif PagePlus X2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 275.50
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 275.50
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.85
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy਍∀笀䈀㐀䘀䘀㌀㔀㈀䌀ⴀ䘀　㐀㐀ⴀ㐀䐀㔀䄀ⴀ㤀　㈀㠀ⴀ㠀㌀㜀㤀䈀㔀䄀㜀㔀䈀䄀㤀紀∀ 㴀 ㈀㔀⸀　　　 倀栀漀琀漀 䌀氀椀瀀䄀爀琀猀 嘀漀氀⸀㔀ഀ਀∀笀䈀㘀䌀䘀㈀㤀㘀㜀ⴀ䌀㠀㄀䔀ⴀ㐀　䌀　ⴀ㤀㠀㄀㔀ⴀ䌀　㔀㜀㜀㐀䘀䔀䘀㄀㈀　紀∀ 㴀 匀欀礀瀀攀 䌀氀椀挀欀 琀漀 䌀愀氀氀ഀ਀∀笀䈀㜀䄀　䌀䔀　㘀ⴀ　㘀㠀䔀ⴀ㄀㄀䐀㘀ⴀ㤀㜀䘀䐀ⴀ　　㔀　䈀䄀䌀䈀䘀㠀㘀㄀紀∀ 㴀 倀漀眀攀爀倀爀漀搀甀挀攀爀ഀ਀∀笀䈀㤀㜀䌀䘀㔀䌀㌀ⴀ　㐀㠀㜀ⴀ㄀㄀䐀㠀ⴀ䄀㌀㘀䔀ⴀ　　㔀　䈀䄀䔀㌀㄀㜀䔀㄀紀∀ 㴀 䐀嘀䐀 匀漀氀甀琀椀漀渀ഀ਀∀笀䈀䌀䈀㌀㄀㌀䄀㔀ⴀ㄀䄀䐀　ⴀ㐀㠀㈀㤀ⴀ㤀䐀㘀䘀ⴀ䔀䈀㐀㄀䌀㌀䌀䘀䌀䐀㐀䈀紀∀ 㴀 倀栀愀猀攀 㔀 䠀吀䴀䰀ⴀ䔀搀椀琀漀爀ഀ਀∀笀䈀䘀㔀䌀䘀䐀㈀䐀ⴀ䐀　㔀㜀ⴀ㐀䄀㤀㠀ⴀ㤀㘀㈀䘀ⴀ㌀䘀䔀䔀㘀䘀㐀㔀㠀　䔀䘀紀∀ 㴀 䌀爀愀稀礀吀愀氀欀 䄀瘀愀琀愀爀 䌀爀攀愀琀漀爀ഀ਀∀笀䌀　㤀䘀䈀㌀䌀䐀ⴀ㌀䐀　䌀ⴀ㌀䘀㈀䐀ⴀ㠀㤀㤀䄀ⴀ㘀䄀㄀䐀㘀㜀䘀㈀　㜀㌀䘀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㈀⸀　 匀攀爀瘀椀挀攀 倀愀挀欀 ㈀ഀ਀∀笀䌀㈀䌀㈀㠀㐀䐀㈀ⴀ㘀䈀䐀㜀ⴀ㌀䈀㌀㐀ⴀ䈀　䌀㔀ⴀ䈀㈀䌀䄀䔀䐀㄀㘀㠀䐀䘀㜀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㌀⸀　 匀攀爀瘀椀挀攀 倀愀挀欀 ㈀ 䰀愀渀最甀愀最攀 倀愀挀欀 ⴀ 䐀䔀唀ഀ਀∀笀䌀㌀㄀㐀䌀䔀㐀㔀ⴀ㌀㌀㤀㈀ⴀ㌀䈀㜀㌀ⴀ䈀㐀䔀㄀ⴀ㄀㌀㤀䌀䐀㐀㄀䌀䄀㤀㌀㌀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㈀⸀　 匀攀爀瘀椀挀攀 倀愀挀欀 ㈀ 䰀愀渀最甀愀最攀 倀愀挀欀 ⴀ 䐀䔀唀ഀ਀∀笀䌀㐀㄀㌀　　䈀㤀ⴀ㄀㠀㔀䐀ⴀ㐀㜀㔀䔀ⴀ䈀䘀䔀䌀ⴀ㌀㤀䔀䘀㜀㌀㈀䘀㄀㤀䈀㄀紀∀ 㴀 䄀瀀瀀氀攀 匀漀昀琀眀愀爀攀 唀瀀搀愀琀攀ഀ਀∀笀䌀㜀䘀㔀㐀䌀䘀㠀ⴀ䐀㘀䘀䈀ⴀ㐀䔀　䄀ⴀ㤀㌀䄀㌀ⴀ䔀㘀㠀䄀䔀　䐀㘀䌀㐀㜀㘀紀∀ 㴀 匀漀氀甀琀椀漀渀䌀攀渀琀攀爀ഀ਀∀笀䌀㠀㘀䔀㜀䌀㤀㤀ⴀ䔀㐀䄀䐀ⴀ㜀㤀䌀㜀ⴀ㌀㜀㔀䈀ⴀ㄀䄀䔀䘀㤀䄀㤀㄀䔀䌀㈀䈀紀∀ 㴀 䄀挀爀漀戀愀琀⸀挀漀洀ഀ਀∀笀䌀䄀䘀䄀㔀㜀䔀㠀ⴀ㠀㤀㈀㜀ⴀ㐀㤀㄀㈀ⴀ䄀䘀䌀䘀ⴀ䈀　䄀䄀㌀㠀㌀㜀䔀㤀㠀㤀紀∀ 㴀 圀椀渀搀漀眀猀 䰀椀瘀攀 䔀猀猀攀渀琀椀愀氀猀ഀ਀∀笀䌀䔀㈀㐀㌀㐀㐀䘀ⴀ䐀䘀䐀㠀ⴀ㐀　䌀㠀ⴀ㠀䘀䐀㠀ⴀ䌀㤀㜀㐀　䈀㔀䘀㈀㔀䄀䌀紀∀ 㴀 䈀倀䐀昀愀砀ഀ਀∀笀䌀䔀㈀䌀䐀䐀㘀㈀ⴀ　㄀㈀㐀ⴀ㌀㘀䌀䄀ⴀ㠀㐀䐀㌀ⴀ㤀䘀㐀䐀䌀䘀㔀䌀㔀䈀䐀㤀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㌀⸀㔀 匀倀㄀ഀ਀∀笀䌀䘀㤀䌀䐀㌀㜀䌀ⴀ䔀㈀㤀䄀ⴀ㄀㄀䐀㔀ⴀ䄀䔀㌀䐀ⴀ　　㔀　　㐀䈀㠀䔀㌀　䌀紀∀ 㴀 䐀椀最椀琀愀氀 倀栀漀琀漀 一愀瘀椀最愀琀漀爀 ㄀⸀㔀ഀ਀∀笀䐀㄀㔀　㐀䌀㜀㜀ⴀ㄀䈀㄀㤀ⴀ㐀䄀䘀　ⴀ㠀䐀䔀䌀ⴀ㤀㐀㘀㘀㘀㘀㄀㈀㌀䈀㔀㔀紀∀ 㴀 䌀爀愀稀礀吀愀氀欀 䌀愀洀 匀甀椀琀攀ഀ਀∀笀䐀㄀䄀㄀㤀䈀　㈀ⴀ㠀㄀㜀䔀ⴀ㐀㈀㤀㘀ⴀ䄀㐀㔀䈀ⴀ　㜀㠀㔀㌀䘀䐀㜀㐀䐀㔀㜀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀开嘀䌀㠀　开䴀䘀䌀开砀㠀㘀ഀ਀∀笀䐀㈀　㐀㄀䄀㌀㜀ⴀ㔀䘀䔀䌀ⴀ㐀㤀䘀　ⴀ䄀䔀㔀䌀ⴀ㌀䘀㈀䘀䘀䐀䘀䄀䄀㐀䘀㐀紀∀ 㴀 圀椀渀搀漀眀猀 䰀椀瘀攀 䌀愀氀氀ഀ਀∀笀䐀㌀㜀㤀㔀㈀㠀㌀ⴀ㘀㄀㄀㌀ⴀ㐀㈀䄀㈀ⴀ㤀㤀㘀㌀ⴀ䈀㌀㌀䌀㈀㘀䘀䈀㔀䐀㈀㐀紀∀ 㴀 圀攀戀䴀愀琀攀ഀ਀∀笀䐀㐀㠀䄀䐀㔀㌀㌀ⴀ䈀䄀䐀㔀ⴀ㐀㘀㤀䈀ⴀ䄀㤀䄀䄀ⴀ㈀㜀㈀䌀㘀䐀㠀　䔀㜀　䈀紀∀ 㴀 䴀倀䴀ഀ਀∀笀䐀㤀㈀䈀䈀䈀㔀㈀ⴀ㠀㈀䘀䘀ⴀ㐀㈀䔀䐀ⴀ㠀䄀㌀䌀ⴀ㐀䔀　㘀㈀䘀㤀㐀㐀䄀䈀㜀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀开嘀䌀㠀　开䴀䘀䌀䰀伀䌀开砀㠀㘀ഀ਀∀笀䐀䈀䈀䄀㄀㤀䌀㔀ⴀ㘀䔀䈀㐀ⴀ㐀㜀㔀㌀ⴀ䈀㠀㠀㄀ⴀ㄀㠀㤀䌀䘀㘀䄀䌀䈀㤀䌀䐀紀∀ 㴀 伀瀀攀渀嘀倀一ഀ਀∀笀䐀䈀䌀㈀　㜀㌀㔀ⴀ㌀㐀䔀㘀ⴀ㐀䔀㤀㜀ⴀ䄀㤀䔀㔀ⴀ㈀　㘀㘀䈀㘀㘀䈀㈀㐀㌀䐀紀∀ 㴀 吀爀愀礀䄀瀀瀀ഀ਀∀笀䔀㄀䈀㠀　䐀䔀䔀ⴀ䄀㜀㤀㔀ⴀ㐀㈀㔀㠀ⴀ㠀㐀㐀㔀ⴀ　㜀㐀䌀　㘀䄀䔀㌀䄀䈀㠀紀∀ 㴀 䴀愀爀欀攀琀刀攀猀攀愀爀挀栀ഀ਀∀笀䔀㈀㠀㠀㌀䔀㠀䘀ⴀ㐀㜀㈀䘀ⴀ㐀昀戀　ⴀ㤀㔀㈀㈀ⴀ䄀䌀㤀䈀䘀㌀㜀㤀㄀㘀䄀㜀紀∀ 㴀 䄀搀漀戀攀 䐀漀眀渀氀漀愀搀 䴀愀渀愀最攀爀ഀ਀∀笀䔀䐀䔀㜀㈀㄀䔀䌀ⴀ㠀㜀　䄀ⴀ㄀㄀䐀㠀ⴀ㤀䐀㜀㔀ⴀ　　　㄀㈀㤀㜀㘀　䐀㜀㔀紀∀ 㴀 倀漀眀攀爀䐀椀爀攀挀琀漀爀 䔀砀瀀爀攀猀猀ഀ਀∀笀䔀䔀㘀　㤀㜀䐀䐀ⴀ　㔀䘀㐀ⴀ㐀㄀㜀㠀ⴀ㤀㜀㄀㤀ⴀ䐀㌀㄀㜀　䈀䘀　㤀㠀䔀㠀紀∀ 㴀 䄀瀀瀀氀攀 䄀瀀瀀氀椀挀愀琀椀漀渀 匀甀瀀瀀漀爀琀ഀ਀∀笀䔀䔀㜀㈀㔀㜀䄀㈀ⴀ㌀㤀䄀㈀ⴀ㐀䐀㈀䘀ⴀ㤀䐀䄀䌀ⴀ䘀㤀䘀㈀㔀䈀㠀䄀䔀㄀䐀㠀紀∀ 㴀 匀欀礀瀀攀∀‡㔀⸀㠀ഀ਀∀笀䘀　䌀㌀䔀㔀䐀㄀ⴀ㄀䄀䐀䔀ⴀ㌀㈀㄀䔀ⴀ㠀㄀㘀㜀ⴀ㘀㠀䔀䘀　䐀䔀㘀㤀㤀䄀㔀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 嘀椀猀甀愀氀 䌀⬀⬀ ㈀　㄀　  砀㠀㘀 刀攀搀椀猀琀爀椀戀甀琀愀戀氀攀 ⴀ ㄀　⸀　⸀㐀　㈀㄀㤀ഀ਀∀笀䘀　䔀㄀㈀䈀䈀䄀ⴀ䄀䐀㘀㘀ⴀ㐀　㈀㈀ⴀ䄀㐀㔀㌀ⴀ䄀㄀䌀㠀䄀　䌀㐀䐀㔀㜀　紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 䌀栀漀椀挀攀 䜀甀愀爀搀ഀ਀∀笀䘀㄀㌀㈀䄀䘀㜀䘀ⴀ㜀䈀䌀䄀ⴀ㐀䔀䐀䔀ⴀ㠀䄀㜀䌀ⴀ㤀㔀㠀㄀　㠀䘀䔀㜀䐀䈀䌀紀∀ 㴀 刀攀愀氀琀攀欀 䠀椀最栀 䐀攀昀椀渀椀琀椀漀渀 䄀甀搀椀漀 䐀爀椀瘀攀爀ഀ਀∀笀䘀㄀㔀㜀㐀㘀　䘀ⴀ㜀㈀　䔀ⴀ㐀㠀㈀昀ⴀ㠀㘀㈀㔀ⴀ䄀䐀㜀㠀㐀㌀㠀㤀㄀䔀㔀䘀紀∀ 㴀 䤀渀猀琀愀渀琀匀栀愀爀攀䐀攀瘀椀挀攀猀䴀䘀䌀ഀ਀∀笀䘀㈀㤀䈀㈀㄀䈀䐀ⴀ䌀䄀䄀㘀ⴀ㐀㐀㔀䘀ⴀ㠀䔀䘀㜀ⴀ䄀㜀䔀㈀䈀㤀䐀㠀䈀㄀㐀䔀紀∀ 㴀 䰀漀最椀琀攀挀栀 匀攀琀倀漀椀渀琀ഀ਀∀笀䘀㌀㜀㘀　㜀㈀㐀ⴀ䈀㈀㤀䐀ⴀ㐀㘀㔀䈀ⴀ䈀䌀㔀㌀ⴀ䔀㔀䐀㜀㈀　㤀㔀䈀䌀䌀㐀紀∀ 㴀 匀挀愀渀ഀ਀∀笀䘀㐀　䈀䈀䔀䌀㜀ⴀ䌀㈀䄀㐀ⴀ㐀䄀　　ⴀ㤀䈀㈀㐀ⴀ㜀䄀　㔀㔀䄀㈀䌀㔀㈀㘀㈀紀∀ 㴀 䴀椀挀爀漀猀漀昀琀 伀昀昀椀挀攀 䰀椀瘀攀 䄀搀搀ⴀ椀渀 ㄀⸀㔀ഀ਀∀笀䘀㔀㌀㐀㘀㘀㄀㐀ⴀ䈀㜀䌀㐀ⴀ㐀䔀㤀㐀ⴀ㠀㈀㘀䄀ⴀ䔀㈀㌀㘀㌀㄀㔀㔀㈀㌀㌀䐀紀∀ 㴀 䔀愀猀礀䌀氀攀愀渀攀爀ഀ਀∀笀䘀䈀㄀㔀䔀㈀㈀㐀ⴀ㘀㜀䌀㌀ⴀ㐀㤀㄀䘀ⴀ㤀䘀㔀䌀ⴀ䘀㈀㔀㜀䈀䌀㐀㄀㠀㐀㄀㈀紀∀ 㴀 䐀攀猀琀椀渀愀琀椀漀渀猀ഀ਀∀㜀ⴀ娀椀瀀∀ 㴀 㜀ⴀ娀椀瀀 㤀⸀㈀　ഀ਀∀䄀䌀㌀䘀椀氀琀攀爀开椀猀㄀∀ 㴀 䄀䌀㌀䘀椀氀琀攀爀 ㄀⸀㘀㌀戀ഀ਀∀䄀挀琀椀瘀愀琀椀漀渀 倀爀漀最爀愀洀开椀猀㄀∀ 㴀 䄀挀琀椀瘀愀琀椀漀渀 倀爀漀最爀愀洀 ㄀⸀㔀ഀ਀∀䄀搀漀戀攀 䄀䤀刀∀ 㴀 䄀搀漀戀攀 䄀䤀刀ഀ਀∀䄀搀漀戀攀 䘀氀愀猀栀 倀氀愀礀攀爀 䄀挀琀椀瘀攀堀∀ 㴀 䄀搀漀戀攀 䘀氀愀猀栀 倀氀愀礀攀爀 ㄀㄀ 䄀挀琀椀瘀攀堀ഀ਀∀䄀搀漀戀攀 䘀氀愀猀栀 倀氀愀礀攀爀 倀氀甀最椀渀∀ 㴀 䄀搀漀戀攀 䘀氀愀猀栀 倀氀愀礀攀爀 ㄀㄀ 倀氀甀最椀渀ഀ਀∀䄀搀漀戀攀 匀嘀䜀 嘀椀攀眀攀爀∀ 㴀 䄀搀漀戀攀 匀嘀䜀 嘀椀攀眀攀爀 ㌀⸀　ഀ਀∀愀氀瀀栀愀挀漀洀戀椀砀砀∀ 㴀 愀氀瀀栀愀挀漀洀戀椀砀砀ഀ਀∀愀氀瀀栀愀搀椀砀砀 䰀椀最栀琀 匀瀀愀渀椀猀挀栀∀ 㴀 愀氀瀀栀愀搀椀砀砀 䰀椀最栀琀 匀瀀愀渀椀猀挀栀ഀ਀∀䄀猀栀愀洀瀀漀漀 圀椀渀伀瀀琀椀洀椀稀攀爀 ㈀　㄀　 䄀搀瘀愀渀挀攀搀开椀猀㄀∀ 㴀 䄀猀栀愀洀瀀漀漀 圀椀渀伀瀀琀椀洀椀稀攀爀 ㈀　㄀　 䄀搀瘀愀渀挀攀搀ഀ਀∀䄀甀搀愀挀椀琀礀开椀猀㄀∀ 㴀 䄀甀搀愀挀椀琀礀 ㈀⸀　ഀ਀∀䄀嘀匀 䐀嘀䐀 䄀甀琀栀漀爀椀渀最开椀猀㄀∀ 㴀 䄀嘀匀 䐀嘀䐀 䄀甀琀栀漀爀椀渀最ഀ਀∀䄀嘀匀 䐀嘀䐀 䌀漀瀀礀开椀猀㄀∀ 㴀 䄀嘀匀 䐀嘀䐀 䌀漀瀀礀 瘀攀爀猀椀漀渀 㐀⸀㄀⸀㈀ഀ਀∀䄀嘀匀 倀栀漀琀漀 䔀搀椀琀漀爀开椀猀㄀∀ 㴀 䄀嘀匀 倀栀漀琀漀 䔀搀椀琀漀爀ഀ਀∀䄀嘀匀 匀挀爀攀攀渀 䌀愀瀀琀甀爀攀开椀猀㄀∀ 㴀 䄀嘀匀 匀挀爀攀攀渀 䌀愀瀀琀甀爀攀 瘀攀爀猀椀漀渀 ㈀⸀　⸀㄀ഀ਀∀䄀嘀匀 唀瀀搀愀琀攀 䴀愀渀愀最攀爀开椀猀㄀∀ 㴀 䄀嘀匀 唀瀀搀愀琀攀 䴀愀渀愀最攀爀 ㄀⸀　ഀ਀∀䄀嘀匀 嘀椀搀攀漀 䔀搀椀琀漀爀开椀猀㄀∀ 㴀 䄀嘀匀 嘀椀搀攀漀 䔀搀椀琀漀爀 㘀ഀ਀∀䄀嘀匀 嘀椀搀攀漀 刀攀挀漀爀搀攀爀开椀猀㄀∀ 㴀 䄀嘀匀 嘀椀搀攀漀 刀攀挀漀爀搀攀爀 ㈀⸀㐀ഀ਀∀䄀嘀匀 嘀椀搀攀漀 刀攀䴀愀欀攀爀开椀猀㄀∀ 㴀 䄀嘀匀 嘀椀搀攀漀 刀攀䴀愀欀攀爀 ㌀⸀㄀⸀㄀⸀㠀㌀ഀ਀∀䄀嘀匀 夀漀甀吀甀戀攀 唀瀀氀漀愀搀攀爀 ㈀⸀㄀开椀猀㄀∀ 㴀 䄀嘀匀 夀漀甀吀甀戀攀 唀瀀氀漀愀搀攀爀 瘀攀爀猀椀漀渀 ㈀⸀㄀ഀ਀∀䄀嘀匀㐀夀伀唀 匀漀昀琀眀愀爀攀 一愀瘀椀最愀琀漀爀开椀猀㄀∀ 㴀 䄀嘀匀㐀夀伀唀 匀漀昀琀眀愀爀攀 一愀瘀椀最愀琀漀爀 ㄀⸀㐀ഀ਀∀䄀嘀匀㐀夀伀唀 嘀椀搀攀漀 䌀漀渀瘀攀爀琀攀爀 㘀开椀猀㄀∀ 㴀 䄀嘀匀 嘀椀搀攀漀 䌀漀渀瘀攀爀琀攀爀 㘀ഀ਀∀䄀嘀匀㐀夀伀唀 嘀椀搀攀漀 䌀漀渀瘀攀爀琀攀爀 㜀开椀猀㄀∀ 㴀 䄀嘀匀 嘀椀搀攀漀 䌀漀渀瘀攀爀琀攀爀 㠀ഀ਀∀䄀嘀匀刀攀最椀猀琀爀礀䌀氀攀愀渀攀爀开椀猀㄀∀ 㴀 䄀嘀匀 刀攀最椀猀琀爀礀 䌀氀攀愀渀攀爀 瘀攀爀猀椀漀渀 ㄀⸀㈀ഀ਀∀䈀㤀㤀㄀䈀　㈀　ⴀ㈀㤀㘀㠀ⴀ㄀㄀䐀㠀ⴀ䄀䘀㈀㌀ⴀ㐀㐀㐀㔀㔀㌀㔀㐀　　　　开椀猀㄀∀ 㴀 䘀爀攀攀䴀椀渀搀ഀ਀∀䈀甀爀渀㐀䘀爀攀攀∀ 㴀 䈀甀爀渀㐀䘀爀攀攀 䌀䐀 愀渀搀 䐀嘀䐀ഀ਀∀䈀甀爀渀㐀䘀爀攀攀 吀漀漀氀戀愀爀∀ 㴀 䈀甀爀渀㐀䘀爀攀攀 吀漀漀氀戀愀爀ഀ਀∀䌀䌀氀攀愀渀攀爀∀ 㴀 䌀䌀氀攀愀渀攀爀ഀ਀∀挀栀挀⸀㐀㠀㜀㔀䔀　㈀䐀㤀䘀䈀㈀㄀䔀䔀㌀㠀㤀䘀㜀㌀䈀㠀䐀㄀㜀　㈀䈀㌀㈀　㐀㠀㔀䐀䘀㠀䌀䔀⸀㄀∀ 㴀 䄀搀漀戀攀 䌀漀洀洀甀渀椀琀礀 䠀攀氀瀀ഀ਀∀䌀氀漀渀攀䌀䐀∀ 㴀 䌀氀漀渀攀䌀䐀ഀ਀∀挀漀洀⸀愀搀漀戀攀⸀愀洀瀀⸀㐀㠀㜀㔀䔀　㈀䐀㤀䘀䈀㈀㄀䔀䔀㌀㠀㤀䘀㜀㌀䈀㠀䐀㄀㜀　㈀䈀㌀㈀　㐀㠀㔀䐀䘀㠀䌀䔀⸀㄀∀ 㴀 䄀搀漀戀攀 䴀攀搀椀愀 倀氀愀礀攀爀ഀ਀∀挀漀洀⸀愀搀漀戀攀⸀洀愀甀戀礀⸀㐀㠀㜀㔀䔀　㈀䐀㤀䘀䈀㈀㄀䔀䔀㌀㠀㤀䘀㜀㌀䈀㠀䐀㄀㜀　㈀䈀㌀㈀　㐀㠀㔀䐀䘀㠀䌀䔀⸀㄀∀ 㴀 䄀挀爀漀戀愀琀⸀挀漀洀ഀ਀∀挀漀渀搀甀椀琀䔀渀最椀渀攀∀ 㴀 䌀漀渀搀甀椀琀 䔀渀最椀渀攀 ഀ਀∀䌀漀爀攀䄀嘀䌀 倀爀漀昀攀猀猀椀漀渀愀氀 䔀搀椀琀椀漀渀∀ 㴀 䌀漀爀攀䄀嘀䌀 倀爀漀昀攀猀猀椀漀渀愀氀 䔀搀椀琀椀漀渀 ⠀爀攀洀漀瘀攀 漀渀氀礀⤀ഀ਀∀䐀匀挀愀氀攀爀 㔀 䴀瀀攀最 䐀攀挀漀搀攀爀猀开椀猀㄀∀ 㴀 䐀匀挀愀氀攀爀 㔀 䴀瀀攀最 䐀攀挀漀搀攀爀猀ഀ਀∀䐀嘀䐀嘀椀搀攀漀匀漀昀琀吀䈀 吀漀漀氀戀愀爀∀ 㴀 䐀嘀䐀嘀椀搀攀漀匀漀昀琀吀䈀 吀漀漀氀戀愀爀ഀ਀∀䔀嘀䔀刀䔀匀吀 䠀漀洀攀 䔀搀椀琀椀漀渀开椀猀㄀∀ 㴀 䔀嘀䔀刀䔀匀吀 䠀漀洀攀 䔀搀椀琀椀漀渀 瘀㈀⸀㈀　ഀ਀∀䔀砀瀀爀攀猀猀刀椀瀀∀ 㴀 䔀砀瀀爀攀猀猀 刀椀瀀ഀ਀∀昀昀搀猀栀漀眀开椀猀㄀∀ 㴀 昀昀搀猀栀漀眀 嬀爀攀瘀 ㌀㄀㈀㐀崀 嬀㈀　　㤀ⴀ㄀㄀ⴀ　㌀崀ഀ਀∀䘀椀氀攀娀椀氀氀愀 䌀氀椀攀渀琀∀ 㴀 䘀椀氀攀娀椀氀氀愀 䌀氀椀攀渀琀 ㌀⸀㔀⸀㌀ഀ਀∀䘀椀爀攀戀椀爀搀 匀儀䰀 匀攀爀瘀攀爀 䐀∀ 㴀 䘀椀爀攀戀椀爀搀 匀儀䰀 匀攀爀瘀攀爀 ⴀ 䴀䄀䜀䤀堀 䔀搀椀琀椀漀渀ഀ਀∀䘀椀爀攀琀爀甀猀琀 䈀攀渀椀最渀开椀猀㄀∀ 㴀 䘀椀爀攀琀爀甀猀琀 䈀攀渀椀最渀 ㄀⸀㔀⸀　ഀ਀∀䘀爀攀攀 䄀甀搀椀漀 䌀䐀 䈀甀爀渀攀爀开椀猀㄀∀ 㴀 䘀爀攀攀 䄀甀搀椀漀 䌀䐀 䈀甀爀渀攀爀 瘀攀爀猀椀漀渀 ㄀⸀㐀ഀ਀∀䘀爀攀攀 嘀椀搀攀漀 䐀甀戀开椀猀㄀∀ 㴀 䘀爀攀攀 嘀椀搀攀漀 䐀甀戀 瘀攀爀猀椀漀渀 ㄀⸀㠀⸀㄀　ഀ਀∀䘀爀攀攀 夀漀甀吀甀戀攀 䐀漀眀渀氀漀愀搀开椀猀㄀∀ 㴀 䘀爀攀攀 夀漀甀吀甀戀攀 䐀漀眀渀氀漀愀搀 瘀攀爀猀椀漀渀 ㌀⸀　⸀㈀㈀⸀㈀㈀㄀ഀ਀∀䘀爀攀攀 夀漀甀吀甀戀攀 琀漀 䴀倀㌀ 䌀漀渀瘀攀爀琀攀爀开椀猀㄀∀ 㴀 䘀爀攀攀 夀漀甀吀甀戀攀 琀漀 䴀倀㌀ 䌀漀渀瘀攀爀琀攀爀 瘀攀爀猀椀漀渀 ㌀⸀㤀⸀㐀　⸀㘀　㈀ഀ਀∀䘀爀攀攀䌀漀洀洀愀渀搀攀爀开椀猀㄀∀ 㴀 䘀爀攀攀䌀漀洀洀愀渀搀攀爀 ㈀　　㤀⸀　㈀戀ഀ਀∀䘀爀攀攀倀䐀䘀开堀倀∀ 㴀 䘀爀攀攀倀䐀䘀 堀倀 ⠀刀攀洀漀瘀攀 漀渀氀礀⤀ഀ਀∀䜀漀漀最氀攀 䌀栀爀漀洀攀∀ 㴀 䜀漀漀最氀攀 䌀栀爀漀洀攀ഀ਀∀䜀倀䰀 䜀栀漀猀琀猀挀爀椀瀀琀 㠀⸀㘀㐀∀ 㴀 䜀倀䰀 䜀栀漀猀琀猀挀爀椀瀀琀 㠀⸀㘀㐀ഀ਀∀最爀攀攀渀猀琀爀攀攀琀 倀椀挀琀甀爀攀 䈀爀漀眀猀攀爀∀ 㴀 最爀攀攀渀猀琀爀攀攀琀 倀椀挀琀甀爀攀 䈀爀漀眀猀攀爀ഀ਀∀䠀愀愀氀椀䴀欀砀∀ 㴀 䠀愀愀氀椀 䴀攀搀椀愀 匀瀀氀椀琀琀攀爀ഀ਀∀䠀愀洀猀琀攀爀 䘀爀攀攀 娀䤀倀 䄀爀挀栀椀瘀攀爀开椀猀㄀∀ 㴀 䠀愀洀猀琀攀爀 䘀爀攀攀 娀䤀倀 䄀爀挀栀椀瘀攀爀 ㄀⸀㈀⸀　⸀㘀ഀ਀∀䠀倀 䤀洀愀最椀渀最 䐀攀瘀椀挀攀 䘀甀渀挀琀椀漀渀猀∀ 㴀 䠀倀 䤀洀愀最椀渀最 䐀攀瘀椀挀攀 䘀甀渀挀琀椀漀渀猀 㜀⸀　ഀ਀∀䠀倀 匀漀氀甀琀椀漀渀 䌀攀渀琀攀爀 ☀ 䤀洀愀最椀渀最 匀甀瀀瀀漀爀琀 吀漀漀氀猀∀ 㴀 䠀倀 匀漀氀甀琀椀漀渀 䌀攀渀琀攀爀 㜀⸀　ഀ਀∀䠀倀䔀砀琀攀渀搀攀搀䌀愀瀀愀戀椀氀椀琀椀攀猀∀ 㴀 䠀倀 䌀甀猀琀漀洀攀爀 倀愀爀琀椀挀椀瀀愀琀椀漀渀 倀爀漀最爀愀洀 㜀⸀　ഀ਀∀䠀倀伀䌀刀∀ 㴀 伀䌀刀 匀漀昀琀眀愀爀攀 戀礀 䤀⸀刀⸀䤀⸀匀 㜀⸀　ഀ਀∀䤀䐀一䴀椀琀椀最愀琀椀漀渀䄀倀䤀猀∀ 㴀 䴀椀挀爀漀猀漀昀琀 䤀渀琀攀爀渀愀琀椀漀渀愀氀椀稀攀搀 䐀漀洀愀椀渀 一愀洀攀猀 䴀椀琀椀最愀琀椀漀渀 䄀倀䤀猀ഀ਀∀椀攀㠀∀ 㴀 圀椀渀搀漀眀猀 䤀渀琀攀爀渀攀琀 䔀砀瀀氀漀爀攀爀 㠀ഀ਀∀䤀渀猀琀愀氀氀匀栀椀攀氀搀开笀㈀　䐀㐀䄀㠀㤀㔀ⴀ㜀㐀㠀䌀ⴀ㐀䐀㠀㠀ⴀ㠀㜀㄀䌀ⴀ䘀䐀䈀㄀㘀㤀㔀䈀　㄀㘀㤀紀∀ 㴀 嘀䤀䄀 倀氀愀琀昀漀爀洀 䐀攀瘀椀挀攀 䴀愀渀愀最攀爀ഀ਀∀䤀渀猀琀愀氀氀匀栀椀攀氀搀开笀㘀䐀㈀䔀䄀㠀䘀　ⴀ㠀䔀㄀䄀ⴀ㐀䔀䈀䌀ⴀ䄀㤀㐀䘀ⴀ　㘀㜀䌀　㈀㠀㐀㜀㌀㌀㔀紀∀ 㴀 䴀甀氀琀椀䰀椀渀最甀愀 匀瀀愀渀椀猀挀栀ഀ਀∀䤀渀猀琀愀氀氀匀栀椀攀氀搀开笀䈀㐀䘀䘀㌀㔀㈀䌀ⴀ䘀　㐀㐀ⴀ㐀䐀㔀䄀ⴀ㤀　㈀㠀ⴀ㠀㌀㜀㤀䈀㔀䄀㜀㔀䈀䄀㤀紀∀ 㴀 ㈀㔀⸀　　　 倀栀漀琀漀 䌀氀椀瀀䄀爀琀猀 嘀漀氀⸀㔀ഀ਀∀䤀爀昀愀渀嘀椀攀眀∀ 㴀 䤀爀昀愀渀嘀椀攀眀 ⠀爀攀洀漀瘀攀 漀渀氀礀⤀ഀ਀∀䰀䄀䴀䔀开椀猀㄀∀ 㴀 䰀䄀䴀䔀 瘀㌀⸀㤀㤀⸀㌀ ⠀昀漀爀 圀椀渀搀漀眀猀⤀ഀ਀∀䰀攀爀渀猀琀甀搀椀漀 匀瀀愀渀椀猀挀栀开椀猀㄀∀ 㴀 䰀攀爀渀猀琀甀搀椀漀 匀瀀愀渀椀猀挀栀ഀ਀∀䴀䄀䜀䤀堀 ㌀䐀 䴀愀欀攀爀 䐀∀ 㴀 䴀䄀䜀䤀堀 ㌀䐀 䴀愀欀攀爀 ⠀攀洀戀攀搀攀搀⤀ഀ਀∀䴀䄀䜀䤀堀 倀䌀 䌀栀攀挀欀 ☀ 吀甀渀椀渀最 ㈀　㄀　 䐀∀ 㴀 䴀䄀䜀䤀堀 倀䌀 䌀栀攀挀欀 ☀ 吀甀渀椀渀最 ㈀　㄀　 㔀⸀　⸀㈀㈀⸀㘀㠀㜀 ⠀䐀⤀ഀ਀∀䴀䄀䜀䤀堀 匀挀爀攀攀渀猀栀愀爀攀 䐀∀ 㴀 䴀䄀䜀䤀堀 匀挀爀攀攀渀猀栀愀爀攀ഀ਀∀䴀䄀䜀䤀堀 嘀椀搀攀漀 搀攀氀甀砀攀 ㄀㔀 倀爀攀洀椀甀洀 匀漀渀搀攀爀攀搀椀琀椀漀渀 䐀∀ 㴀 䴀䄀䜀䤀堀 嘀椀搀攀漀 搀攀氀甀砀攀 ㄀㔀 倀爀攀洀椀甀洀 匀漀渀搀攀爀攀搀椀琀椀漀渀 㠀⸀㔀⸀　⸀㈀㠀 ⠀䐀⤀ഀ਀∀䴀䄀䜀䤀堀 堀琀爀攀洀攀 䘀漀琀漀 䐀攀猀椀最渀攀爀 㘀 䐀∀ 㴀 䴀䄀䜀䤀堀 堀琀爀攀洀攀 䘀漀琀漀 䐀攀猀椀最渀攀爀 㘀 㘀⸀　⸀㈀㜀⸀　 ⠀䐀⤀ഀ਀∀䴀愀椀氀圀愀猀栀攀爀 䘀爀攀攀开椀猀㄀∀ 㴀 䴀愀椀氀圀愀猀栀攀爀 䘀爀攀攀 㘀⸀㔀⸀㄀ഀ਀∀䴀愀椀氀圀愀猀栀攀爀 倀爀漀开椀猀㄀∀ 㴀 䴀愀椀氀圀愀猀栀攀爀 倀爀漀ഀ਀∀䴀挀䄀昀攀攀 匀攀挀甀爀椀琀礀 匀挀愀渀∀ 㴀 䴀挀䄀昀攀攀 匀攀挀甀爀椀琀礀 匀挀愀渀 倀氀甀猀ഀ਀∀䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㌀⸀㔀 䰀愀渀最甀愀最攀 倀愀挀欀 匀倀㄀ ⴀ 搀攀甀∀ 㴀 䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㌀⸀㔀 䰀愀渀最甀愀最攀 倀愀挀欀 匀倀㄀ ⴀ 䐀䔀唀ഀ਀∀䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㌀⸀㔀 匀倀㄀∀ 㴀 䴀椀挀爀漀猀漀昀琀 ⸀一䔀吀 䘀爀愀洀攀眀漀爀欀 ㌀⸀㔀 匀倀㄀ഀ਀∀䴀漀稀椀氀氀愀 䘀椀爀攀昀漀砀 㠀⸀　⸀㄀ ⠀砀㠀㘀 搀攀⤀∀ 㴀 䴀漀稀椀氀氀愀 䘀椀爀攀昀漀砀 㠀⸀　⸀㄀ ⠀砀㠀㘀 搀攀⤀ഀ਀∀䴀漀稀椀氀氀愀 吀栀甀渀搀攀爀戀椀爀搀 ⠀㈀⸀　⸀　⸀㈀㈀⤀∀ 㴀 䴀漀稀椀氀氀愀 吀栀甀渀搀攀爀戀椀爀搀 ⠀㈀⸀　⸀　⸀㈀㈀⤀ഀ਀∀䴀倀㌀ⴀ匀瀀爀愀挀栀昀ﰀ栀爀攀爀 匀瀀愀渀椀猀挀栀开椀猀㄀∀ 㴀 䴀倀㌀ⴀ匀瀀爀愀挀栀昀ﰀ栀爀攀爀 匀瀀愀渀椀猀挀栀ഀ਀∀䴀匀䌀漀洀瀀倀愀挀欀嘀㄀∀ 㴀 䴀椀挀爀漀猀漀昀琀 䌀漀洀瀀爀攀猀猀椀漀渀 䌀氀椀攀渀琀 倀愀挀欀 ㄀⸀　 昀漀爀 圀椀渀搀漀眀猀 堀倀ഀ਀∀䴀匀一䤀一匀吀∀ 㴀 䴀匀一ഀ਀∀一愀挀栀爀椀挀栀琀攀渀 猀瀀攀椀挀栀攀爀渀∀ 㴀 一愀挀栀爀椀挀栀琀攀渀 猀瀀攀椀挀栀攀爀渀ഀ਀∀一䰀匀䐀漀眀渀氀攀瘀攀氀䴀愀瀀瀀椀渀最∀ 㴀 䴀椀挀爀漀猀漀昀琀 一愀琀椀漀渀愀氀 䰀愀渀最甀愀最攀 匀甀瀀瀀漀爀琀 䐀漀眀渀氀攀瘀攀氀 䄀倀䤀猀ഀ਀∀一漀琀攀瀀愀搀⬀⬀∀ 㴀 一漀琀攀瀀愀搀⬀⬀ഀ਀∀一嘀䤀䐀䤀䄀 渀嘀椀攀眀 䐀攀猀欀琀漀瀀 䴀愀渀愀最攀爀∀ 㴀 一嘀䤀䐀䤀䄀 渀嘀椀攀眀 䐀攀猀欀琀漀瀀 䴀愀渀愀最攀爀ഀ਀∀伀瀀攀渀匀漀甀爀挀攀 䘀氀愀猀栀 嘀椀搀攀漀 匀瀀氀椀琀琀攀爀∀ 㴀 伀瀀攀渀匀漀甀爀挀攀 䘀氀愀猀栀 嘀椀搀攀漀 匀瀀氀椀琀琀攀爀 ⠀爀攀洀漀瘀攀 漀渀氀礀⤀ഀ਀∀伀瀀攀爀愀 ㄀㄀⸀㘀㈀⸀㄀㌀㐀㜀∀ 㴀 伀瀀攀爀愀 ㄀㄀⸀㘀㈀ഀ਀∀倀䐀䘀吀䬀 䈀甀椀氀搀攀爀开椀猀㄀∀ 㴀 倀䐀䘀吀䬀 䈀甀椀氀搀攀爀 ㌀⸀㔀⸀㌀ഀ਀∀倀䐀䘀ⴀ堀䌀栀愀渀最攀 刀攀最椀猀琀攀爀攀搀 刀攀氀攀愀猀攀∀ 㴀 倀䐀䘀ⴀ堀䌀栀愀渀最攀 刀攀最椀猀琀攀爀攀搀 刀攀氀攀愀猀攀ഀ਀∀倀匀倀愀搀 攀搀椀琀漀爀开椀猀㄀∀ 㴀 倀匀倀愀搀 攀搀椀琀漀爀ഀ਀∀儀甀椀挀欀吀椀洀攀 ㌀⸀　∀ 㴀 儀甀椀挀欀吀椀洀攀 ㌀⸀　ഀ਀∀刀攀愀氀倀氀愀礀攀爀 㘀⸀　∀ 㴀 刀攀愀氀倀氀愀礀攀爀ഀ਀∀刀攀搀椀爀攀挀琀椀漀渀 倀漀爀琀 䴀漀渀椀琀漀爀∀ 㴀 刀攀搀䴀漀渀 ⴀ 刀攀搀椀爀攀挀琀椀漀渀 倀漀爀琀 䴀漀渀椀琀漀爀ഀ਀∀刀攀瘀漀 唀渀椀渀猀琀愀氀氀攀爀∀ 㴀 刀攀瘀漀 唀渀椀渀猀琀愀氀氀攀爀 ㄀⸀㤀　ഀ਀∀匀攀愀䴀漀渀欀攀礀 ⠀㈀⸀　⸀㄀㄀⤀∀ 㴀 匀攀愀䴀漀渀欀攀礀 ⠀㈀⸀　⸀㄀㄀⤀ഀ਀∀匀洀愀爀琀吀漀漀氀猀䄀渀栀愀渀最ⴀ䄀猀猀椀猀琀攀渀琀瘀㈀⸀㔀　∀ 㴀 匀洀愀爀琀吀漀漀氀猀 倀甀戀氀椀猀栀椀渀最 ∀†伀甀琀氀漀漀欀 䄀渀栀愀渀最ⴀ䄀猀猀椀猀琀攀渀琀ഀ਀∀匀洀愀爀琀吀漀漀氀猀䐀椀猀挀氀愀椀洀攀爀 ☀ 匀椀最渀愀琀甀爀ⴀ䄀猀猀椀猀琀攀渀琀瘀㈀⸀　　∀ 㴀 匀洀愀爀琀吀漀漀氀猀 倀甀戀氀椀猀栀椀渀最 ∀†伀甀琀氀漀漀欀 䐀椀猀挀氀愀椀洀攀爀 ☀ 匀椀最渀愀琀甀爀ⴀ䄀猀猀椀猀琀攀渀琀ഀ਀∀猀漀昀琀漀渀椀挀ⴀ搀攀㌀ 吀漀漀氀戀愀爀∀ 㴀 猀漀昀琀漀渀椀挀ⴀ搀攀㌀ 吀漀漀氀戀愀爀ഀ਀∀匀瀀愀渀椀猀挀栀 　㄀∀ 㴀 匀瀀愀渀椀猀挀栀 　㄀ഀ਀∀匀瀀愀渀椀猀挀栀 　㈀∀ 㴀 匀瀀愀渀椀猀挀栀 　㈀ഀ਀∀匀瀀攀攀搀䘀愀渀∀ 㴀 匀瀀攀攀搀䘀愀渀 ⠀爀攀洀漀瘀攀 漀渀氀礀⤀ഀ਀∀匀吀㘀唀一匀吀 ⌀㄀∀ 㴀 倀氀愀琀稀 搀愀ഀ਀∀匀吀㘀唀一匀吀 ⌀㈀∀ 㴀 倀椀挀ⴀ刀攀猀椀稀攀爀ⴀ堀倀ഀ਀∀匀眀椀琀挀栀∀ 㴀 匀眀椀琀挀栀 䄀甀搀椀漀搀愀琀攀椀ⴀ䬀漀渀瘀攀爀琀攀爀ഀ਀∀吀漀琀愀氀挀洀搀∀ 㴀 吀漀琀愀氀 䌀漀洀洀愀渀搀攀爀 ⠀刀攀洀漀瘀攀 漀爀 刀攀瀀愀椀爀⤀ഀ਀∀唀渀椀渀猀琀愀氀氀开椀猀㄀∀ 㴀 唀渀椀渀猀琀愀氀氀 ㄀⸀　⸀　⸀㄀ഀ਀∀嘀䰀䌀 洀攀搀椀愀 瀀氀愀礀攀爀∀ 㴀 嘀䰀䌀 洀攀搀椀愀 瀀氀愀礀攀爀 　⸀㤀⸀㤀ഀ਀∀圀搀昀　㄀　　㔀∀ 㴀 䴀椀挀爀漀猀漀昀琀 䬀攀爀渀攀氀ⴀ䴀漀搀攀 䐀爀椀瘀攀爀 䘀爀愀洀攀眀漀爀欀 䘀攀愀琀甀爀攀 倀愀挀欀 ㄀⸀㔀ഀ਀∀圀䤀䌀∀ 㴀 圀椀渀搀漀眀猀 䤀洀愀最椀渀最 䌀漀洀瀀漀渀攀渀琀ഀ਀∀圀椀渀搀漀眀猀 䴀攀搀椀愀 䘀漀爀洀愀琀 刀甀渀琀椀洀攀∀ 㴀 圀椀渀搀漀眀猀 䴀攀搀椀愀 䘀漀爀洀愀琀 ㄀㄀ 爀甀渀琀椀洀攀ഀ਀∀圀椀渀搀漀眀猀 䴀攀搀椀愀 倀氀愀礀攀爀∀ 㴀 圀椀渀搀漀眀猀 䴀攀搀椀愀 倀氀愀礀攀爀 ㄀㄀ഀ਀∀圀椀渀搀漀眀猀 堀倀 匀攀爀瘀椀挀攀 倀愀挀欀∀ 㴀 圀椀渀搀漀眀猀 堀倀 匀攀爀瘀椀挀攀 倀愀挀欀 ㌀ഀ਀∀圀椀渀䰀椀瘀攀匀甀椀琀攀开圀愀瘀攀㌀∀ 㴀 圀椀渀搀漀眀猀 䰀椀瘀攀 䔀猀猀攀渀琀椀愀氀猀ഀ਀∀圀䴀䘀䐀椀猀琀㄀㄀∀ 㴀 圀椀渀搀漀眀猀 䴀攀搀椀愀 䘀漀爀洀愀琀 ㄀㄀ 爀甀渀琀椀洀攀ഀ਀∀眀洀瀀㄀㄀∀ 㴀 圀椀渀搀漀眀猀 䴀攀搀椀愀 倀氀愀礀攀爀 ㄀㄀ഀ਀∀圀甀搀昀　㄀　　　∀ 㴀 䴀椀挀爀漀猀漀昀琀 唀猀攀爀ⴀ䴀漀搀攀 䐀爀椀瘀攀爀 䘀爀愀洀攀眀漀爀欀 䘀攀愀琀甀爀攀 倀愀挀欀 ㄀⸀　ഀ਀∀堀㄀　䠀愀爀搀眀愀爀攀∀ 㴀 堀㄀　 䠀愀爀搀眀愀爀攀⠀吀䴀⤀ഀ਀∀堀渀嘀椀攀眀开椀猀㄀∀ 㴀 堀渀嘀椀攀眀 ㄀⸀㤀㜀ഀ਀∀堀倀匀䔀倀匀䌀䰀倀∀ 㴀 堀䴀䰀 倀愀瀀攀爀 匀瀀攀挀椀昀椀挀愀琀椀漀渀 匀栀愀爀攀搀 䌀漀洀瀀漀渀攀渀琀猀 䰀愀渀最甀愀最攀 倀愀挀欀 ㄀⸀　ഀ਀∀娀漀渀攀䄀氀愀爀洀∀ 㴀 娀漀渀攀䄀氀愀爀洀ഀ਀∀娀漀漀洀倀氀愀礀攀爀∀ 㴀 娀漀漀洀 倀氀愀礀攀爀 ⠀爀攀洀漀瘀攀 漀渀氀礀⤀ഀ਀ ഀ਀嬀挀漀氀漀爀㴀⌀䔀㔀㘀㜀㄀㜀崀㴀㴀㴀㴀㴀㴀㴀㴀㴀㴀 䰀愀猀琀 ㈀　 䔀瘀攀渀琀 䰀漀最 䔀爀爀漀爀猀 㴀㴀㴀㴀㴀㴀㴀㴀㴀㴀嬀⼀挀漀氀漀爀崀ഀ਀ ഀ਀嬀 䄀瀀瀀氀椀挀愀琀椀漀渀 䔀瘀攀渀琀猀 崀ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㔀⸀㈀　㄀㈀ ㄀㜀㨀　㌀㨀㐀㌀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䜀䐀匀挀愀渀 簀 䤀䐀 㴀 　ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㜀⸀　㔀⸀㈀　㄀㈀ ㄀㈀㨀㐀㌀㨀㈀㔀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 倀攀爀昀一攀琀 簀 䤀䐀 㴀 ㈀　　㐀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀攀爀 匀攀爀瘀攀爀搀椀攀渀猀琀 欀漀渀渀琀攀 渀椀挀栀琀 最攀昀昀渀攀琀 眀攀爀搀攀渀⸀ 䐀椀攀 匀攀爀瘀攀爀ⴀ䰀攀椀猀琀甀渀最猀椀渀昀漀爀洀愀琀椀漀渀攀渀ഀ਀眀攀爀搀攀渀ഀ਀ 渀椀挀栀琀 稀甀爀ﰀ挀欀最攀最攀戀攀渀⸀ 䐀攀爀 稀甀爀ﰀ挀欀最攀最攀戀攀渀攀 䘀攀栀氀攀爀挀漀搀攀 戀攀昀椀渀搀攀琀 猀椀挀栀 椀渀 䐀圀伀刀䐀 　⸀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㤀⸀　㔀⸀㈀　㄀㈀ 　㄀㨀㐀㠀㨀㐀㌀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䜀䐀匀挀愀渀 簀 䤀䐀 㴀 　ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㤀⸀　㔀⸀㈀　㄀㈀ 　㘀㨀㌀㤀㨀㈀㔀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䜀䐀匀挀愀渀 簀 䤀䐀 㴀 　ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㌀㄀⸀　㔀⸀㈀　㄀㈀ 　㜀㨀㌀㌀㨀㈀㐀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 倀攀爀昀一攀琀 簀 䤀䐀 㴀 ㈀　　㐀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀攀爀 匀攀爀瘀攀爀搀椀攀渀猀琀 欀漀渀渀琀攀 渀椀挀栀琀 最攀昀昀渀攀琀 眀攀爀搀攀渀⸀ 䐀椀攀 匀攀爀瘀攀爀ⴀ䰀攀椀猀琀甀渀最猀椀渀昀漀爀洀愀琀椀漀渀攀渀ഀ਀眀攀爀搀攀渀ഀ਀ 渀椀挀栀琀 稀甀爀ﰀ挀欀最攀最攀戀攀渀⸀ 䐀攀爀 稀甀爀ﰀ挀欀最攀最攀戀攀渀攀 䘀攀栀氀攀爀挀漀搀攀 戀攀昀椀渀搀攀琀 猀椀挀栀 椀渀 䐀圀伀刀䐀 　⸀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ 　㔀⸀　㘀⸀㈀　㄀㈀ 　㜀㨀㐀㐀㨀㄀㈀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䜀䐀匀挀愀渀 簀 䤀䐀 㴀 　ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ 　㤀⸀　㘀⸀㈀　㄀㈀ ㄀㄀㨀㈀㌀㨀㈀㜀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 倀攀爀昀一攀琀 簀 䤀䐀 㴀 ㈀　　㐀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀攀爀 匀攀爀瘀攀爀搀椀攀渀猀琀 欀漀渀渀琀攀 渀椀挀栀琀 最攀昀昀渀攀琀 眀攀爀搀攀渀⸀ 䐀椀攀 匀攀爀瘀攀爀ⴀ䰀攀椀猀琀甀渀最猀椀渀昀漀爀洀愀琀椀漀渀攀渀ഀ਀眀攀爀搀攀渀ഀ਀ 渀椀挀栀琀 稀甀爀ﰀ挀欀最攀最攀戀攀渀⸀ 䐀攀爀 稀甀爀ﰀ挀欀最攀最攀戀攀渀攀 䘀攀栀氀攀爀挀漀搀攀 戀攀昀椀渀搀攀琀 猀椀挀栀 椀渀 䐀圀伀刀䐀 　⸀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ 　㤀⸀　㘀⸀㈀　㄀㈀ ㄀㄀㨀㈀㐀㨀㄀㤀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䜀䐀匀挀愀渀 簀 䤀䐀 㴀 　ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㄀　⸀　㘀⸀㈀　㄀㈀ ㄀㈀㨀㔀㤀㨀㄀㘀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 倀攀爀昀一攀琀 簀 䤀䐀 㴀 ㈀　　㐀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀攀爀 匀攀爀瘀攀爀搀椀攀渀猀琀 欀漀渀渀琀攀 渀椀挀栀琀 最攀昀昀渀攀琀 眀攀爀搀攀渀⸀ 䐀椀攀 匀攀爀瘀攀爀ⴀ䰀攀椀猀琀甀渀最猀椀渀昀漀爀洀愀琀椀漀渀攀渀ഀ਀眀攀爀搀攀渀ഀ਀ 渀椀挀栀琀 稀甀爀ﰀ挀欀最攀最攀戀攀渀⸀ 䐀攀爀 稀甀爀ﰀ挀欀最攀最攀戀攀渀攀 䘀攀栀氀攀爀挀漀搀攀 戀攀昀椀渀搀攀琀 猀椀挀栀 椀渀 䐀圀伀刀䐀 　⸀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㐀⸀　㘀⸀㈀　㄀㈀ ㄀㄀㨀㐀㤀㨀㄀㌀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䄀瀀瀀氀椀挀愀琀椀漀渀 䔀爀爀漀爀 簀 䤀䐀 㴀 ㄀　　　ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䘀攀栀氀最攀猀挀栀氀愀最攀渀攀 䄀渀眀攀渀搀甀渀最 攀砀瀀氀漀爀攀爀⸀攀砀攀Ⰰ 嘀攀爀猀椀漀渀 㘀⸀　⸀㈀㤀　　⸀㔀㔀㄀㈀Ⰰ 昀攀栀氀最攀猀挀栀氀愀最攀渀攀猀ഀ਀ 䴀漀搀甀氀 甀渀欀渀漀眀渀Ⰰ 嘀攀爀猀椀漀渀 　⸀　⸀　⸀　Ⰰ 䘀攀栀氀攀爀愀搀爀攀猀猀攀 　砀　㐀㤀㘀㈀㠀㜀挀⸀ഀ਀ ഀ਀嬀 匀礀猀琀攀洀 䔀瘀攀渀琀猀 崀ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㘀㨀㔀㐀㨀㄀㜀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀渀攀琀洀愀渀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀䈀䄀㄀㈀㘀䄀䔀㔀ⴀ㈀㄀㘀㘀ⴀ㄀㄀䐀㄀ⴀ䈀㄀䐀　ⴀ　　㠀　㔀䘀䌀㄀㈀㜀　䔀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㘀㨀㔀㔀㨀㄀㌀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀䔀瘀攀渀琀匀礀猀琀攀洀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀㄀䈀䔀㄀䘀㜀㘀㘀ⴀ㔀㔀㌀㘀ⴀ㄀㄀䐀㄀ⴀ䈀㜀㈀㘀ⴀ　　䌀　㐀䘀䈀㤀㈀㘀䄀䘀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㘀㨀㔀㘀㨀㌀㈀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀栀挀瀀 簀 䤀䐀 㴀 ㄀　　㈀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀椀攀 䤀倀ⴀ䄀搀爀攀猀猀氀攀愀猀攀 ㄀㤀㈀⸀㄀㘀㠀⸀㄀㜀㠀⸀㈀㔀 昀ﰀ爀 搀椀攀 一攀琀稀眀攀爀欀欀愀爀琀攀 洀椀琀 搀攀爀 一攀琀稀眀攀爀欀愀搀爀攀猀猀攀ഀ਀ 　　㄀㤀䐀䈀㌀㐀㘀　㤀䐀 眀甀爀搀攀 搀甀爀挀栀  搀攀渀 䐀䠀䌀倀ⴀ匀攀爀瘀攀爀 ㄀㤀㈀⸀㄀㘀㠀⸀　⸀㄀ 愀戀最攀氀攀栀渀琀 ⠀搀攀爀 䐀䠀䌀倀ⴀ匀攀爀瘀攀爀 ഀ਀栀愀琀 攀椀渀攀 䐀䠀䌀倀一䄀䌀䬀ⴀ䴀攀氀搀甀渀最 最攀猀攀渀搀攀琀⤀⸀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㘀㨀㔀㜀㨀　㄀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀䔀瘀攀渀琀匀礀猀琀攀洀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀㄀䈀䔀㄀䘀㜀㘀㘀ⴀ㔀㔀㌀㘀ⴀ㄀㄀䐀㄀ⴀ䈀㜀㈀㘀ⴀ　　䌀　㐀䘀䈀㤀㈀㘀䄀䘀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㘀㨀㔀㠀㨀　　 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 匀攀爀瘀椀挀攀 䌀漀渀琀爀漀氀 䴀愀渀愀最攀爀 簀 䤀䐀 㴀 㜀　㈀㘀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀愀猀 䰀愀搀攀渀 昀漀氀最攀渀搀攀爀 䈀漀漀琀ⴀ 漀搀攀爀 匀礀猀琀攀洀猀琀愀爀琀琀爀攀椀戀攀爀 椀猀琀 昀攀栀氀最攀猀挀栀氀愀最攀渀㨀ഀ਀   䔀氀戀礀䌀䐀䤀伀  䘀椀瀀猀  椀渀琀攀氀瀀瀀洀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㘀㨀㔀㠀㨀㌀㜀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀匀琀椀匀瘀挀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀䄀㄀䘀㐀䔀㜀㈀㘀ⴀ㠀䌀䘀㄀ⴀ㄀㄀䐀㄀ⴀ䈀䘀㤀㈀ⴀ　　㘀　　㠀㄀䔀䐀㠀㄀㄀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㜀㨀　㐀㨀㄀㄀ 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀䔀瘀攀渀琀匀礀猀琀攀洀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀㄀䈀䔀㄀䘀㜀㘀㘀ⴀ㔀㔀㌀㘀ⴀ㄀㄀䐀㄀ⴀ䈀㜀㈀㘀ⴀ　　䌀　㐀䘀䈀㤀㈀㘀䄀䘀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㜀㨀　㔀㨀㌀㐀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀䔀瘀攀渀琀匀礀猀琀攀洀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀㄀䈀䔀㄀䘀㜀㘀㘀ⴀ㔀㔀㌀㘀ⴀ㄀㄀䐀㄀ⴀ䈀㜀㈀㘀ⴀ　　䌀　㐀䘀䈀㤀㈀㘀䄀䘀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㜀㨀　㔀㨀㔀㘀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 䐀䌀伀䴀 簀 䤀䐀 㴀 ㄀　　　㔀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䈀攀椀 䐀䌀伀䴀 椀猀琀 搀攀爀 䘀攀栀氀攀爀 ∀─㄀　㠀㐀∀ 愀甀昀最攀琀爀攀琀攀渀Ⰰ 愀氀猀 搀攀爀 䐀椀攀渀猀琀 ∀匀琀椀匀瘀挀∀ഀ਀ 洀椀琀 搀攀渀 䄀爀最甀洀攀渀琀攀渀 ∀∀  最攀猀琀愀爀琀攀琀 眀甀爀搀攀Ⰰ 甀洀 搀攀渀 昀漀氀最攀渀搀攀渀 匀攀爀瘀攀爀 稀甀 瘀攀爀眀攀渀搀攀渀㨀  笀䄀㄀䘀㐀䔀㜀㈀㘀ⴀ㠀䌀䘀㄀ⴀ㄀㄀䐀㄀ⴀ䈀䘀㤀㈀ⴀ　　㘀　　㠀㄀䔀䐀㠀㄀㄀紀ഀ਀ ഀ਀䔀爀爀漀爀 ⴀ ㈀㘀⸀　㘀⸀㈀　㄀㈀ ㄀㜀㨀　㘀㨀㐀㔀 簀 䌀漀洀瀀甀琀攀爀 一愀洀攀 㴀 䈀䔀䜀䔀䤀匀吀䔀刀唀一䜀 簀 匀漀甀爀挀攀 㴀 匀攀爀瘀椀挀攀 䌀漀渀琀爀漀氀 䴀愀渀愀最攀爀 簀 䤀䐀 㴀 㜀　㈀㘀ഀ਀䐀攀猀挀爀椀瀀琀椀漀渀 㴀 䐀愀猀 䰀愀搀攀渀 昀漀氀最攀渀搀攀爀 䈀漀漀琀ⴀ 漀搀攀爀 匀礀猀琀攀洀猀琀愀爀琀琀爀攀椀戀攀爀 椀猀琀 昀攀栀氀最攀猀挀栀氀愀最攀渀㨀ഀ਀   䔀氀戀礀䌀䐀䤀伀  䘀椀瀀猀  椀渀琀攀氀瀀瀀洀ഀ਀ ഀ਀ ഀ਀㰀 䔀渀搀 漀昀 爀攀瀀漀爀琀 㸀ഀ਀\00
         

GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-06-27 08:59:40
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3320820AS rev.3.AAC
Running: detfvsyy.exe; Driver: C:\DOKUME~1\Administrator\Lokale Einstellungen\Temp\pwlciaog.sys


---- System - GMER 1.0.15 ----

SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwCreateFile [0xB8452930]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwCreateKey [0xB845DA80]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwCreateProcess [0xB845C870]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwCreateProcessEx [0xB845CAA0]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwCreateSection [0xB845FFD0]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwDeleteFile [0xB8452F20]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwDeleteKey [0xB845E6E0]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwDeleteValueKey [0xB845E440]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwDuplicateObject [0xB845C580]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwLoadKey [0xB845E8B0]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwOpenFile [0xB8452D70]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwOpenProcess [0xB845C350]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwOpenThread [0xB845C150]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwRenameKey [0xB845F250]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwReplaceKey [0xB845ECB0]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwRestoreKey [0xB845F080]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwSecureConnectPort [0xB8456220]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwSetInformationFile [0xB8453120]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwSetValueKey [0xB845E140]
SSDT    \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)                                          ZwTerminateProcess [0xB845CCD0]

---- Kernel code sections - GMER 1.0.15 ----

.text   ntoskrnl.exe!ZwYieldExecution + 1FE                                                                                  804E4A58 4 Bytes  CALL E23B02A2 

---- User code sections - GMER 1.0.15 ----

.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtCreateFile + 6                                   7C91D0B4 4 Bytes  [28, 00, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtCreateFile + B                                   7C91D0B9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtMapViewOfSection + 6                             7C91D524 1 Byte  [28]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtMapViewOfSection + 6                             7C91D524 4 Bytes  [28, 03, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtMapViewOfSection + B                             7C91D529 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenFile + 6                                     7C91D5A4 4 Bytes  [68, 00, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenFile + B                                     7C91D5A9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenProcess + 6                                  7C91D604 4 Bytes  [A8, 01, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenProcess + B                                  7C91D609 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenProcessToken + 6                             7C91D614 4 Bytes  CALL 7B91FD1A 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenProcessToken + B                             7C91D619 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenProcessTokenEx + 6                           7C91D624 4 Bytes  [A8, 02, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenProcessTokenEx + B                           7C91D629 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenThread + 6                                   7C91D664 4 Bytes  [68, 01, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenThread + B                                   7C91D669 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenThreadToken + 6                              7C91D674 4 Bytes  [68, 02, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenThreadToken + B                              7C91D679 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenThreadTokenEx + 6                            7C91D684 4 Bytes  CALL 7B91FD8B 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtOpenThreadTokenEx + B                            7C91D689 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtQueryAttributesFile + 6                          7C91D714 4 Bytes  [A8, 00, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtQueryAttributesFile + B                          7C91D719 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtQueryFullAttributesFile + 6                      7C91D7B4 4 Bytes  CALL 7B91FEB9 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtQueryFullAttributesFile + B                      7C91D7B9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtSetInformationFile + 6                           7C91DC64 4 Bytes  [28, 01, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtSetInformationFile + B                           7C91DC69 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtSetInformationThread + 6                         7C91DCB4 4 Bytes  [28, 02, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtSetInformationThread + B                         7C91DCB9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtUnmapViewOfSection + 6                           7C91DF14 1 Byte  [68]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtUnmapViewOfSection + 6                           7C91DF14 4 Bytes  [68, 03, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1360] ntdll.dll!NtUnmapViewOfSection + B                           7C91DF19 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtCreateFile + 6                                   7C91D0B4 4 Bytes  [28, 00, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtCreateFile + B                                   7C91D0B9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtMapViewOfSection + 6                             7C91D524 1 Byte  [28]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtMapViewOfSection + 6                             7C91D524 4 Bytes  [28, 03, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtMapViewOfSection + B                             7C91D529 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenFile + 6                                     7C91D5A4 4 Bytes  [68, 00, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenFile + B                                     7C91D5A9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenProcess + 6                                  7C91D604 4 Bytes  [A8, 01, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenProcess + B                                  7C91D609 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenProcessToken + 6                             7C91D614 4 Bytes  CALL 7B91FD1A 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenProcessToken + B                             7C91D619 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenProcessTokenEx + 6                           7C91D624 4 Bytes  [A8, 02, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenProcessTokenEx + B                           7C91D629 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenThread + 6                                   7C91D664 4 Bytes  [68, 01, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenThread + B                                   7C91D669 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenThreadToken + 6                              7C91D674 4 Bytes  [68, 02, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenThreadToken + B                              7C91D679 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenThreadTokenEx + 6                            7C91D684 4 Bytes  CALL 7B91FD8B 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtOpenThreadTokenEx + B                            7C91D689 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtQueryAttributesFile + 6                          7C91D714 4 Bytes  [A8, 00, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtQueryAttributesFile + B                          7C91D719 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtQueryFullAttributesFile + 6                      7C91D7B4 4 Bytes  CALL 7B91FEB9 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtQueryFullAttributesFile + B                      7C91D7B9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtSetInformationFile + 6                           7C91DC64 4 Bytes  [28, 01, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtSetInformationFile + B                           7C91DC69 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtSetInformationThread + 6                         7C91DCB4 4 Bytes  [28, 02, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtSetInformationThread + B                         7C91DCB9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtUnmapViewOfSection + 6                           7C91DF14 1 Byte  [68]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtUnmapViewOfSection + 6                           7C91DF14 4 Bytes  [68, 03, 27, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1744] ntdll.dll!NtUnmapViewOfSection + B                           7C91DF19 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtCreateFile + 6                                   7C91D0B4 4 Bytes  [28, 00, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtCreateFile + B                                   7C91D0B9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtMapViewOfSection + 6                             7C91D524 1 Byte  [28]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtMapViewOfSection + 6                             7C91D524 4 Bytes  [28, 03, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtMapViewOfSection + B                             7C91D529 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenFile + 6                                     7C91D5A4 4 Bytes  [68, 00, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenFile + B                                     7C91D5A9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenProcess + 6                                  7C91D604 4 Bytes  [A8, 01, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenProcess + B                                  7C91D609 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenProcessToken + 6                             7C91D614 4 Bytes  CALL 7B92131A 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenProcessToken + B                             7C91D619 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenProcessTokenEx + 6                           7C91D624 4 Bytes  [A8, 02, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenProcessTokenEx + B                           7C91D629 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenThread + 6                                   7C91D664 4 Bytes  [68, 01, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenThread + B                                   7C91D669 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenThreadToken + 6                              7C91D674 4 Bytes  [68, 02, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenThreadToken + B                              7C91D679 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenThreadTokenEx + 6                            7C91D684 4 Bytes  CALL 7B92138B 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtOpenThreadTokenEx + B                            7C91D689 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtQueryAttributesFile + 6                          7C91D714 4 Bytes  [A8, 00, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtQueryAttributesFile + B                          7C91D719 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtQueryFullAttributesFile + 6                      7C91D7B4 4 Bytes  CALL 7B9214B9 
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtQueryFullAttributesFile + B                      7C91D7B9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtSetInformationFile + 6                           7C91DC64 4 Bytes  [28, 01, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtSetInformationFile + B                           7C91DC69 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtSetInformationThread + 6                         7C91DCB4 4 Bytes  [28, 02, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtSetInformationThread + B                         7C91DCB9 1 Byte  [E2]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtUnmapViewOfSection + 6                           7C91DF14 1 Byte  [68]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtUnmapViewOfSection + 6                           7C91DF14 4 Bytes  [68, 03, 3D, 00]
.text   C:\Programme\Google\Chrome\Application\chrome.exe[1980] ntdll.dll!NtUnmapViewOfSection + B                           7C91DF19 1 Byte  [E2]

---- Devices - GMER 1.0.15 ----

Device  \Driver\Tcpip \Device\Ip                                                                                             vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)
Device  \Driver\Tcpip \Device\Tcp                                                                                            vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)
Device  \Driver\Tcpip \Device\Udp                                                                                            vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)
Device  \Driver\Tcpip \Device\RawIp                                                                                          vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)
Device  \Driver\Tcpip \Device\IPMULTICAST                                                                                    vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC)

---- Registry - GMER 1.0.15 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4                                     
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                  C:\Programme\DAEMON Tools Lite\
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                  0
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                               0x86 0x59 0x0C 0xD5 ...
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001                            
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                         0x20 0x01 0x00 0x00 ...
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                      0x88 0x88 0xCE 0x52 ...
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40                      
Reg     HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                0xDB 0x8B 0x31 0x0A ...
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)                 
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                      C:\Programme\DAEMON Tools Lite\
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                      0
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                                   0x86 0x59 0x0C 0xD5 ...
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)        
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                             0x20 0x01 0x00 0x00 ...
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                          0x88 0x88 0xCE 0x52 ...
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)  
Reg     HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                    0xDB 0x8B 0x31 0x0A ...
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)                 
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                      C:\Programme\DAEMON Tools Lite\
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                      0
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                                   0x86 0x59 0x0C 0xD5 ...
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)        
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                             0x20 0x01 0x00 0x00 ...
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                          0x88 0x88 0xCE 0x52 ...
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)  
Reg     HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                    0xDB 0x8B 0x31 0x0A ...

---- EOF - GMER 1.0.15 ----