|
Plagegeister aller Art und deren Bekämpfung: Bundespolizei Einheit 5.2 entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
16.07.2012, 20:33 | #1 |
| Bundespolizei Einheit 5.2 entfernen Hallo an alle wollte fragen wie Ich den Virus Bundespolizei entfernen kann. Mit dem abgesicherten Modus komme ich nicht rein er schreibt mir dann einen bluescrean. Kann mir jemand helfen. Danke |
16.07.2012, 21:23 | #2 |
/// Helfer-Team | Bundespolizei Einheit 5.2 entfernenMit einem sauberen 2. Rechner eine OTLPE-CD erstellen und den infizierten Rechner dann von dieser CD booten: Falls Du kein Brennprogramm installiert hast, lade dir bitte ISOBurner herunter. Das Programm wird Dir erlauben, OTLPE auf eine CD zu brennen und sie bootfähig zu machen. Du brauchst das Tool nur zu installieren, der Rest läuft automatisch => Wie brenne ich eine ISO Datei auf CD/DVD.
__________________ |
16.07.2012, 22:23 | #3 |
| Bundespolizei Einheit 5.2 entfernen Hallo
__________________es war nur die OTL.Txt datei vorhanden oder habe ich etwas falsch gemacht. MFG OTL Logfile: Code:
ATTFilter OTL logfile created on: 7/17/2012 12:10:10 AM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 81.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 232.88 Gb Total Space | 104.81 Gb Free Space | 45.01% Space Free | Partition Type: NTFS Drive D: | 883.25 Mb Total Space | 882.30 Mb Free Space | 99.89% Space Free | Partition Type: FAT Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet003 ========== Win32 Services (SafeList) ========== SRV - File not found [Auto] -- -- (USBDLM) SRV - File not found [Auto] -- -- (RoxLiveShare9) SRV - [2012/07/02 00:02:38 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/05/08 09:13:28 | 000,185,856 | ---- | M] () [Auto] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) SRV - [2011/12/20 06:34:29 | 000,077,944 | ---- | M] (Autodesk) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2011/07/02 00:18:57 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011/04/21 01:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010/05/04 06:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2009/06/05 05:48:14 | 000,144,712 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2008/09/29 08:49:46 | 000,066,848 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe -- (FTActivationBoost) SRV - [2008/07/25 03:39:26 | 001,971,768 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSLINX\RSLINX.EXE -- (RSLinx) SRV - [2008/07/14 13:02:20 | 000,069,685 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Siemens\Step7\S7BIN\s7asysvx.exe -- (s7asysvx) SRV - [2008/07/03 07:30:28 | 001,571,912 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\S7IEPG\s7oiehsx.exe -- (s7oiehsx) SRV - [2008/07/03 07:30:28 | 000,240,712 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe -- (S7TraceServiceX) SRV - [2008/06/30 05:54:57 | 001,036,288 | ---- | M] (Kepware) [Auto] -- C:\Programme\KEPServerEnterprise\ServerMain.exe -- (KEPServerEnterpriseService) SRV - [2008/06/25 07:17:06 | 000,218,408 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RsvcHost.exe -- (RsvcHost) SRV - [2008/06/25 07:15:22 | 000,148,776 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagReceiver.exe -- (RNADiagReceiver) SRV - [2008/06/25 07:15:18 | 000,034,088 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagnosticsSrv.exe -- (RNADiagnosticsService) SRV - [2008/05/27 05:20:38 | 000,070,952 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSLINX\dnwhodisp.exe -- (dnWhoDisp) SRV - [2008/05/24 03:25:12 | 000,202,024 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSCommon\RSOBSERV.EXE -- (Harmony) SRV - [2008/05/20 10:10:42 | 001,146,880 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\sws\almsrv\almsrvx.exe -- (almservice) SRV - [2007/11/21 11:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto] -- C:\WINDOWS\system32\TODDSrv.exe -- (TODDSrv) SRV - [2007/09/28 10:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2007/09/18 14:34:28 | 000,147,456 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSView Enterprise\TagSrv.exe -- (Rockwell Tag Server) SRV - [2007/09/18 14:26:24 | 000,077,824 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe -- (Rockwell HMI Diagnostics) SRV - [2007/09/17 18:57:28 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RdcyHost.exe -- (RdcyHost) SRV - [2007/09/17 18:57:20 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\NmspHost.exe -- (NmspHost) SRV - [2007/09/17 17:43:08 | 000,991,232 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADirMultiplexor.exe -- (RNADirMultiplexor) SRV - [2007/09/17 17:42:44 | 000,897,024 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RnaDirServer.exe -- (RNADirectory) SRV - [2007/09/17 17:36:32 | 000,282,624 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventClientMultiplexer.exe -- (EventClientMultiplexer) SRV - [2007/09/17 17:36:08 | 000,217,088 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventServer.exe -- (EventServer) SRV - [2007/08/09 08:58:34 | 001,757,696 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms) SRV - [2007/07/09 04:47:58 | 000,094,208 | ---- | M] () [On_Demand] -- C:\Programme\Rockwell Software\RSLinx Enterprise\LogReceiver.exe -- (LogReceiver) SRV - [2007/06/26 09:11:48 | 000,217,088 | ---- | M] (Rockwell Automation) [Auto] -- C:\Programme\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe -- (RSLinxNG) SRV - [2007/04/17 02:07:50 | 000,135,168 | ---- | M] (OPC Foundation) [On_Demand] -- C:\WINDOWS\system32\opcenum.exe -- (OpcEnum) SRV - [2007/02/12 11:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto] -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash) SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2005/04/03 18:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2005/01/17 11:38:00 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs) SRV - [2004/03/23 09:40:20 | 000,028,672 | ---- | M] ( ) [Auto] -- C:\Programme\Rockwell Software\RSView32 Service\RSV32ServiceAD.exe -- (RSView32 Service for AD) SRV - [2003/11/17 13:50:50 | 000,659,456 | ---- | M] (Macrovision Corporation) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\lmgrd.exe -- (FactoryTalk Activation Service) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand] -- -- (WINIO) DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | System] -- -- (VirtualBackplane) DRV - File not found [Kernel | Auto] -- -- (S7oppilx) DRV - File not found [Kernel | On_Demand] -- -- (RimUsb) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand] -- -- (pcidnt) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | System] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand] -- -- (hwdatacard) DRV - File not found [Kernel | On_Demand] -- -- (GenericMount) DRV - File not found [Kernel | System] -- -- (Changer) DRV - [2011/07/02 00:18:59 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2011/07/02 00:18:59 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009/10/08 11:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008/07/05 12:19:52 | 000,155,440 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\RSSERIAL.SYS -- (RSSERIAL) DRV - [2008/07/05 12:19:50 | 000,039,067 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\RSIKT.SYS -- (RsiKtControl) DRV - [2008/07/03 07:10:08 | 000,508,416 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7otranx.sys -- (s7otranx) DRV - [2008/07/03 07:07:36 | 000,173,568 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\s7osmcax.sys -- (s7osmcax) DRV - [2008/07/03 07:06:02 | 000,095,232 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7oppitx.sys -- (s7oppitx) DRV - [2008/07/03 07:04:42 | 000,031,232 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7opcsrtx.sys -- (S7opcsrtx) PROFINET IO RT-Protocol (LLDP) DRV - [2008/07/03 07:03:10 | 000,077,312 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\S7odpx2x.sys -- (s7odpx2x) DRV - [2008/06/30 01:15:26 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt) DRV - [2008/04/13 14:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2008/03/13 08:51:52 | 000,057,536 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2008/03/13 08:50:02 | 000,072,000 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K) DRV - [2008/03/04 04:12:06 | 000,048,600 | ---- | M] (O2Micro ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\o2media.sys -- (O2MDRDR) DRV - [2008/02/19 09:39:44 | 000,191,424 | ---- | M] (Jungo) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6) DRV - [2008/02/01 08:18:56 | 000,732,160 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (CnxtHdAudAddService) DRV - [2008/01/30 11:21:12 | 002,846,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008/01/15 05:40:53 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2008/01/15 05:40:53 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2007/12/28 04:51:00 | 000,285,952 | ---- | M] (Marvell) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2007/12/05 05:51:04 | 000,310,144 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\SNTIE.SYS -- (SNTIE) SIMATIC Industrial Ethernet (ISO) DRV - [2007/11/06 10:25:36 | 000,101,888 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2007/11/01 11:26:36 | 000,989,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2007/11/01 11:25:32 | 000,211,456 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2007/11/01 11:25:22 | 000,731,520 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2007/10/12 09:42:56 | 000,255,872 | ---- | M] (PEAK-System Technik GmbH, Darmstadt, Germany) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Peakcan.sys -- (Peakcan) DRV - [2007/10/02 05:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2007/09/26 01:01:32 | 002,236,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R) DRV - [2007/08/29 14:24:06 | 000,012,333 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s7oupc2x.sys -- (s7oupc2x) DRV - [2007/07/30 06:06:04 | 000,071,168 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7snsrtx.sys -- (s7snsrtx) DRV - [2007/07/23 10:12:44 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshhl.sys -- (akshhl) DRV - [2007/07/05 10:16:56 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp) DRV - [2007/07/05 10:16:56 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb) DRV - [2007/06/25 09:47:16 | 000,028,363 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\dpmtrcdd.sys -- (Dpmtrcdd) DRV - [2007/05/29 05:01:50 | 000,006,912 | ---- | M] (TOSHIBA) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\QIOMem.sys -- (QIOMem) DRV - [2007/05/28 04:02:02 | 000,352,256 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge) DRV - [2007/03/26 06:22:18 | 000,105,856 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\tdudf.sys -- (tdudf) DRV - [2007/03/20 05:33:28 | 000,028,672 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0) DRV - [2007/03/01 06:12:16 | 000,075,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabser.sys -- (slabser) DRV - [2007/03/01 06:12:16 | 000,058,368 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabbus.sys -- (slabbus) CP210x USB Composite Device driver (WDM) DRV - [2007/02/19 06:15:32 | 000,134,016 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\trudf.sys -- (trudf) DRV - [2006/12/28 06:44:44 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AtiHdAud.sys -- (HdAudAddService) DRV - [2006/11/22 04:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock) DRV - [2006/10/23 10:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfec.sys -- (tosrfec) DRV - [2006/10/18 05:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tdcmdpst.sys -- (tdcmdpst) DRV - [2006/10/10 13:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte) DRV - [2006/01/12 10:21:18 | 000,031,872 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qkbfiltr.sys -- (qkbfiltr) DRV - [2005/06/10 16:42:00 | 000,005,504 | ---- | M] (Quanta Computer Corp) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BoiHwSetup.sys -- (BoiHwsetup) DRV - [2005/05/05 08:27:38 | 000,007,936 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qmofiltr.sys -- (qmofiltr) DRV - [2003/01/29 09:35:00 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio) DRV - [2002/11/13 08:38:40 | 000,016,447 | ---- | M] (Rockwell Automation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSI-PKTX-A.SYS -- (RSI-PKTX-A) DRV - [2002/11/13 04:40:28 | 000,002,976 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\FwKbd.sys -- (fwkbd) DRV - [2002/10/17 20:34:14 | 000,030,512 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\s7oefs_x.sys -- (s7oefs_x) DRV - [2002/04/23 13:02:26 | 000,038,999 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSIKTNG.SYS -- (RSLINXNGKtControl) DRV - [2001/10/25 04:21:48 | 000,063,972 | ---- | M] (Siemens AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\dpmcslv.sys -- (dpmcslv) DRV - [2001/06/21 15:39:02 | 000,073,728 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel) DRV - [2001/06/21 15:39:02 | 000,020,032 | R--- | M] (Rainbow Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (Sntnlusb) DRV - [2001/02/28 21:15:00 | 000,006,144 | ---- | M] (Erik Salaj) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\IOPORT.SYS -- (IOPort) DRV - [1998/07/09 22:31:00 | 000,007,328 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ds1410d.sys -- (DS1410D) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data] IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/ IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ IE - HKU\Administrator_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701 IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data] IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/ IE - HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://suche.aon.at IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKU\mgombotz_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb139?a=6PQz7vCB0W&i=26 IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.at/ IE - HKU\mgrabner_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgrabner_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox [2012/06/01 00:46:59 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/07/02 00:02:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012/05/18 04:27:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions [2012/03/12 14:29:54 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions File not found (No name found) -- [2012/07/02 00:02:40 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll [2012/07/02 00:02:31 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml [2012/07/02 00:02:31 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml [2012/07/02 00:02:31 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml [2012/07/02 00:02:31 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml [2012/07/02 00:02:31 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml [2012/07/02 00:02:31 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2008/01/15 05:26:47 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - File not found O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll () O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\IEPlugin32.dll (Media Finder) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\gencrawler_gc.dll () O2 - BHO: (ADDICT-THING Class) - {CDE76C9A-C062-F8FE-474B-6A6705EAE133} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING\bhoclass.dll () O3 - HKLM\..\Toolbar: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - File not found O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD) O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgombotz_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [AutoRunnerX] C:\Programme\AutoRunnerX\arxsrv.exe (Bernhard Fomm, Munich) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BluetoothAuthenticationAgent] File not found O4 - HKLM..\Run: [DDWMon] C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe () O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe (HP) O4 - HKLM..\Run: [ITSecMng] C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION) O4 - HKLM..\Run: [S7UB Start] C:\Programme\Gemeinsame Dateien\Siemens\S7ubtoox\s7ubtstx.exe (SIEMENS AG) O4 - HKLM..\Run: [SmoothView] C:\Programme\Toshiba\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [topi] C:\Programme\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA) O4 - HKLM..\Run: [Toshiba Controls Utility] C:\Programme\Toshiba\Controls\VolumeIndicator.exe (TOSHIBA Inc.) O4 - HKLM..\Run: [Toshiba Hotkey Utility] C:\Programme\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.) O4 - HKLM..\Run: [TPSMain] File not found O4 - HKLM..\Run: [UnlockerAssistant] File not found O4 - HKLM..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKLM..\Run: [UsbCipHelper] C:\Programme\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.) O4 - HKU\administrator.ABALON-HARDWOOD.000_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\administrator.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\Administrator_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\Administrator_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\eunger_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\mgombotz.ABALON-HARDWOOD_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation) O4 - HKU\mgombotz_ON_C..\Run: [swg] File not found O4 - HKU\mgombotz_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\mgrabner_ON_C..\Run: [Media Finder] File not found O4 - HKU\mgrabner_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe (Autodesk, Inc) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\LEO Server.lnk = C:\Programme\RSW\Leo8\LeoServer\LeoServer.exe (RSW Technik GmbH) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 O7 - HKU\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/DE-AT/a-UNO1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1214216227406 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} https://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab (UI File Upload Control) O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/mygarmin/m/GarminAxControl.CAB (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = abalon-hardwood.com O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - File not found O20 - HKLM Winlogon: UIHost - (logonui.exe) - File not found O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - File not found O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - File not found O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - File not found O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - File not found O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - File not found O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - File not found O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - File not found O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found O29 - HKLM SecurityProviders - (schannel.dll) - File not found O29 - HKLM SecurityProviders - (digest.dll) - File not found O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008/04/07 12:08:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012/07/13 08:08:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\Facebook [2012/07/13 00:11:36 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012/07/12 00:51:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++ [2012/07/12 00:51:53 | 000,000,000 | ---D | C] -- C:\Programme\Kabel++ [2012/07/03 06:58:25 | 000,000,000 | ---D | C] -- C:\FreePDF [2012/06/29 02:40:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Unterlagen Allgemein [2012/06/25 07:31:17 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll [2009/02/13 10:34:03 | 000,570,128 | ---- | C] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\dao350.dll [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012/07/16 16:26:14 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012/07/16 16:25:54 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat [2012/07/16 16:22:18 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012/07/16 16:22:17 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job [2012/07/16 16:16:47 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys [2012/07/16 16:12:35 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable [2012/07/16 08:49:18 | 000,142,848 | ---- | M] () -- C:\WINDOWS\System32\fest0r_ot.exe [2012/07/16 08:39:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012/07/16 05:42:19 | 000,138,742 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf [2012/07/16 00:21:50 | 000,000,772 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk [2012/07/13 01:08:58 | 000,445,312 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012/07/13 00:12:19 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012/07/12 00:51:59 | 000,000,662 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk [2012/07/12 00:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++ [2012/07/09 07:10:51 | 000,001,744 | ---- | M] () -- C:\WINDOWS\UtahS7Integrate.ini [2012/07/06 07:28:06 | 000,066,296 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf [2012/07/04 09:37:51 | 000,071,656 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf [2012/07/04 00:12:14 | 000,128,570 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf [2012/07/03 07:00:38 | 000,114,598 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf [2012/06/29 00:31:42 | 000,002,505 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Microsoft Office Excel 2007.lnk [2012/06/25 10:17:31 | 000,523,690 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2012/06/25 10:17:31 | 000,494,480 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012/06/25 10:17:31 | 000,110,826 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2012/06/25 10:17:31 | 000,091,040 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files Created - No Company Name ========== [2012/07/16 16:12:35 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable [2012/07/16 08:49:24 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\fest0r_ot.exe [2012/07/16 05:42:17 | 000,138,742 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf [2012/07/12 00:51:59 | 000,000,662 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk [2012/07/06 07:28:03 | 000,066,296 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf [2012/07/04 09:35:49 | 000,071,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf [2012/07/04 00:12:12 | 000,128,570 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf [2012/07/03 07:00:34 | 000,114,598 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf [2012/05/09 05:58:18 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2012/05/09 05:58:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe [2012/05/03 08:01:45 | 000,006,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/04/17 05:18:24 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2012/04/17 04:59:58 | 000,000,166 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2012/04/04 00:28:04 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\$_hpcst$.hpc [2012/03/08 05:47:40 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/02/15 01:14:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012/01/25 10:08:26 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2012/01/25 08:36:43 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A5W.INI [2011/12/07 08:09:36 | 000,004,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/11/08 08:54:44 | 000,000,061 | R--- | C] () -- C:\WINDOWS\System32\uninstall.ini [2011/11/08 07:49:03 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\eunger\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011/10/10 04:06:20 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011/07/26 04:42:03 | 000,000,066 | ---- | C] () -- C:\WINDOWS\HRMINIA 2.0.INI [2011/07/26 03:37:11 | 000,006,688 | ---- | C] () -- C:\WINDOWS\MOVEXE.EXE [2011/07/26 03:12:29 | 000,000,045 | ---- | C] () -- C:\WINDOWS\MINIA 2.0.INI [2009/11/24 22:45:58 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\sdc1ml3.dll [2009/08/12 10:17:15 | 000,135,253 | R--- | C] () -- C:\WINDOWS\System32\WdReg.exe [2009/07/30 01:44:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Autoplay.INI [2009/07/24 15:47:45 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESETW.INI [2009/04/17 13:01:13 | 000,000,256 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\pool.bin [2009/04/15 02:18:41 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESET.INI [2009/04/13 11:21:09 | 000,319,696 | ---- | C] () -- C:\WINDOWS\System32\BOCOF.DLL [2009/04/13 05:03:29 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin [2009/02/25 06:20:16 | 000,000,097 | ---- | C] () -- C:\WINDOWS\usrwiz.ini [2009/02/25 05:20:01 | 000,000,324 | ---- | C] () -- C:\WINDOWS\Sew_ra.ini [2009/02/25 05:19:58 | 000,000,076 | ---- | C] () -- C:\WINDOWS\SEW_OEL.INI [2009/02/25 05:19:56 | 000,001,363 | ---- | C] () -- C:\WINDOWS\SEW_KAT.INI [2009/02/25 05:19:56 | 000,000,194 | ---- | C] () -- C:\WINDOWS\KONVERT.INI [2009/02/25 05:15:16 | 000,000,412 | ---- | C] () -- C:\WINDOWS\Sew_glob.ini [2009/02/24 08:28:57 | 000,000,292 | ---- | C] () -- C:\WINDOWS\Microwin.ini [2009/02/23 03:39:30 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI [2009/02/18 12:58:20 | 000,000,146 | ---- | C] () -- C:\WINDOWS\CAPTURE.INI [2009/02/18 12:56:09 | 000,000,036 | ---- | C] () -- C:\WINDOWS\ACROREAD.INI [2009/02/18 12:54:33 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll [2009/02/18 12:54:33 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll [2009/02/18 12:54:33 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\ltfil60n.dll [2009/02/18 12:54:33 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll [2009/02/18 12:54:33 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll [2009/02/18 12:54:33 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll [2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll [2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll [2009/02/18 12:54:32 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll [2009/02/18 12:54:32 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll [2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll [2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll [2009/02/18 12:54:32 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll [2009/02/18 12:54:32 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll [2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll [2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\implode.dll [2009/02/18 12:53:28 | 000,002,469 | ---- | C] () -- C:\WINDOWS\pspice91.ini [2009/02/13 10:55:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\FwSim.INI [2009/02/13 10:48:52 | 000,104,633 | ---- | C] () -- C:\WINDOWS\System32\drivers\fwDH485.sys [2009/02/13 10:48:52 | 000,002,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\FwKbd.sys [2009/02/13 10:48:51 | 000,032,768 | ---- | C] () -- C:\WINDOWS\fwkbd.exe [2009/02/13 10:48:48 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\s7200L2.dll [2009/02/13 10:48:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\ptuninst.exe [2009/02/13 10:36:35 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\ptuninst.exe [2009/02/02 02:06:46 | 000,048,128 | ---- | C] () -- C:\WINDOWS\AKDeInstall.exe [2008/11/06 04:19:49 | 000,001,467 | ---- | C] () -- C:\WINDOWS\cdwl2.ini [2008/09/18 15:08:02 | 000,290,904 | ---- | C] () -- C:\WINDOWS\System32\vc6-re200l.dll [2008/09/13 08:28:26 | 000,002,721 | ---- | C] () -- C:\WINDOWS\cvavr.ini [2008/08/12 01:02:55 | 000,012,074 | ---- | C] () -- C:\WINDOWS\hpdj6122.ini [2008/08/07 11:16:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MERuntime.INI [2008/07/28 12:38:59 | 000,000,012 | ---- | C] () -- C:\WINDOWS\bthservsdp.dat [2008/07/25 04:08:34 | 000,036,408 | ---- | C] () -- C:\WINDOWS\System32\LINXVDD.DLL [2008/07/10 12:01:07 | 000,007,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\ds1410d.sys [2008/07/05 12:19:52 | 000,007,449 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDHP.BIN [2008/07/05 12:19:52 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\slcnewkt.bin [2008/07/05 12:19:52 | 000,005,433 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDH.BIN [2008/07/05 12:19:50 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTC.BIN [2008/07/05 12:19:50 | 000,015,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMK485.BIN [2008/07/05 12:19:50 | 000,015,557 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTX485.BIN [2008/07/05 12:19:50 | 000,009,282 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKPCL.BIN [2008/07/05 12:19:50 | 000,009,139 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXPCL.BIN [2008/07/05 12:19:50 | 000,007,575 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLPCL.BIN [2008/07/05 12:19:50 | 000,001,825 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST2.BIN [2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST3.BIN [2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST2.BIN [2008/07/05 12:19:50 | 000,001,801 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST1.BIN [2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST1.BIN [2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST1.BIN [2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST1.BIN [2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST0.BIN [2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST0.BIN [2008/07/05 12:19:50 | 000,000,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST0.BIN [2008/07/05 12:19:50 | 000,000,177 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST0.BIN [2008/07/05 12:19:50 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST2.BIN [2008/07/01 06:05:40 | 000,000,235 | ---- | C] () -- C:\WINDOWS\RLEIcons.ini [2008/06/30 11:37:05 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EvmoveW.INI [2008/06/30 05:55:27 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\machnm1.exe [2008/06/30 03:37:13 | 000,010,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008/06/30 03:22:40 | 000,000,088 | ---- | C] () -- C:\WINDOWS\PIDCal.ini [2008/06/30 02:40:54 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EVMOVE.INI [2008/06/30 01:15:26 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys [2008/06/30 01:15:21 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdduinst.exe [2008/06/30 01:15:21 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI [2008/06/30 01:15:20 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE [2008/06/28 00:59:22 | 000,020,992 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/06/26 06:12:17 | 000,002,488 | ---- | C] () -- C:\WINDOWS\EDS.ini [2008/06/26 00:16:14 | 000,000,121 | ---- | C] () -- C:\WINDOWS\rocksoft.ini [2008/06/24 13:36:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008/06/23 07:35:21 | 000,000,193 | ---- | C] () -- C:\WINDOWS\hpbafd.ini [2008/06/23 07:28:56 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/06/23 07:25:04 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/06/23 05:59:29 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/06/23 05:57:28 | 001,399,880 | ---- | C] () -- C:\WINDOWS\System32\igklg450.dll [2008/06/23 05:57:26 | 001,843,784 | ---- | C] () -- C:\WINDOWS\System32\igklg400.dll [2008/06/23 05:57:26 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll [2008/06/23 05:57:26 | 000,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll [2008/04/08 01:37:57 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2008/04/08 01:35:48 | 000,000,562 | ---- | C] () -- C:\WINDOWS\TBTdetect.ini [2008/04/08 01:30:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2008/04/07 13:12:03 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2008/04/07 13:12:03 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2008/04/07 13:12:03 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2008/04/07 13:12:03 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll [2008/04/07 13:07:00 | 000,013,992 | ---- | C] () -- C:\WINDOWS\HWSetupStr.ini [2008/04/07 13:07:00 | 000,002,182 | ---- | C] () -- C:\WINDOWS\SVPW32Str.ini [2008/04/07 13:04:09 | 000,004,313 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008/04/07 13:03:36 | 000,445,312 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2008/04/07 12:58:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI [2008/04/07 12:57:13 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini [2008/04/07 12:57:13 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll [2008/04/07 12:57:13 | 000,009,480 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini [2008/04/07 12:57:13 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini [2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2008/04/07 12:53:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2008/04/07 12:52:59 | 000,165,782 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2008/04/07 12:25:16 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/04/07 12:22:53 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll [2008/04/07 12:21:16 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini [2008/04/07 12:20:35 | 000,159,744 | ---- | C] () -- C:\WINDOWS\MakeMrk.exe [2008/04/07 12:20:35 | 000,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2008/04/07 12:10:07 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2008/04/07 12:06:27 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2008/04/07 11:58:14 | 000,523,690 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat [2008/04/07 11:58:14 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat [2008/04/07 11:58:14 | 000,110,826 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat [2008/04/07 11:58:14 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat [2008/04/07 11:58:09 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008/04/07 11:58:08 | 000,494,480 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008/04/07 11:58:08 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008/04/07 11:58:08 | 000,091,040 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008/04/07 11:58:08 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008/04/07 11:58:07 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008/04/07 11:58:07 | 000,004,631 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008/04/07 11:58:07 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2008/04/07 11:58:06 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008/04/07 11:58:06 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008/04/07 11:58:02 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008/04/07 11:58:02 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2007/12/21 10:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll [2007/12/18 08:47:16 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\TPeculiarity.dll [2007/12/14 11:01:30 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\tsbwls.dll [2007/11/14 21:24:14 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\wceprv.dll [2007/09/28 05:30:54 | 000,198,680 | ---- | C] () -- C:\WINDOWS\System32\WL40ENT.DLL [2007/09/28 05:30:54 | 000,023,064 | ---- | C] () -- C:\WINDOWS\System32\WTR40T.DLL [2005/07/22 15:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll [2005/06/10 02:46:52 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\FDT100.dll [2004/03/31 18:10:28 | 000,001,744 | ---- | C] () -- C:\WINDOWS\UtahS7Integrate.ini [2000/03/13 08:12:54 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\IBSUBC32.dll [1999/11/08 09:55:46 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\S7oformx.dll [1999/11/08 09:55:34 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\s7oformx.exe [1999/10/23 05:05:54 | 000,526,872 | ---- | C] () -- C:\WINDOWS\System32\rtdsk40.exe [1999/07/16 08:37:56 | 000,136,704 | ---- | C] () -- C:\WINDOWS\System32\TDCTRL.dll [1996/12/19 08:37:38 | 000,103,360 | ---- | C] () -- C:\WINDOWS\System32\S7OSC16X.DLL [1996/12/19 08:36:48 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\S7OSC32X.DLL ========== LOP Check ========== [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\toshiba [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\toshiba [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\toshiba [2011/12/20 06:36:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Autodesk [2012/02/16 10:52:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar [2011/06/15 09:35:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ICQ Toolbar [2011/11/08 07:47:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Pegtop [2011/12/20 04:48:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\PriceGong [2012/05/18 04:20:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\RSW [2011/10/28 04:34:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TeamViewer [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\toshiba [2011/11/08 07:41:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Uniblue [2011/12/14 10:35:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\uTorrent [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\toshiba [2008/09/12 05:48:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Aucotec [2008/09/13 08:45:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Echo Software [2009/04/03 11:17:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\GARMIN [2008/06/24 08:51:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ [2009/06/15 05:29:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ Toolbar [2008/11/25 07:29:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterTrust [2008/06/25 01:39:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterVideo [2009/07/27 13:59:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Leadertech [2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\mquadr.at [2009/06/19 14:50:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Pegtop [2009/04/13 05:03:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Research In Motion [2009/02/13 09:58:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\SIEMENS AG [2009/06/21 12:31:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\StarOffice8 [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\TMP [2008/07/01 09:46:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\toshiba [2009/08/07 14:13:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Uniblue [2008/06/24 11:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\ICQ Toolbar [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\toshiba [2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Autodesk [2012/05/09 05:58:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\FreePDF [2012/06/04 00:25:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Incredibar.com [2012/05/22 15:02:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\InterVideo [2012/04/17 09:55:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Pegtop [2012/05/14 08:01:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\RSW [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\toshiba [2011/12/20 06:45:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Autodesk [2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon [2012/02/14 10:09:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar [2012/04/02 02:26:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\becker [2011/10/10 05:04:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\ICQ Toolbar [2012/03/12 14:25:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder [2012/01/25 10:08:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\pdfforge [2012/02/29 07:14:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\QuickStoresToolbar [2012/02/13 10:48:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TeamViewer [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\toshiba [2012/03/06 01:42:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\uTorrent [2012/06/04 00:25:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING [2008/09/12 05:32:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aucotec [2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Autodesk [2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon [2012/03/06 02:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FileServe Limited [2012/06/01 00:49:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\InstallMate [2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\m2backup [2009/01/06 13:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mquadr.at [2012/06/01 00:49:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium [2008/07/01 06:05:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell [2009/04/23 04:22:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Automation [2009/08/07 11:23:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Software [2008/11/06 04:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SEW [2008/11/07 04:11:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens [2009/02/13 09:42:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens AG [2012/03/06 02:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web Installer [2009/04/23 06:27:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WFCU [2008/06/23 14:09:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [2011/12/20 04:52:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{1C6FDDD8-FC9E-4C12-9FA5-1AAD377097B3} [2009/01/06 13:13:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{783529ED-FB56-4E47-9A20-F9C23D22C2D0} [2009/01/06 13:14:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8AF9D3CF-B9B5-4F8E-B47F-D26DF984D190} [2009/06/13 14:26:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2009/01/06 13:13:44 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C3358ED5-0ADD-4BA0-8F60-B5A7CD34BD14} [2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job ========== Purity Check ========== < End of report > |
17.07.2012, 06:33 | #4 |
| Bundespolizei Einheit 5.2 entfernen hallo habe scan heute nochmal gemacht Anbei die Dateien |
17.07.2012, 06:36 | #5 |
| Bundespolizei Einheit 5.2 entfernen und die otl datei OTL Logfile: Code:
ATTFilter OTL logfile created on: 7/17/2012 9:21:34 AM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 80.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 95.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 232.88 Gb Total Space | 104.81 Gb Free Space | 45.01% Space Free | Partition Type: NTFS Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet003 ========== Win32 Services (SafeList) ========== SRV - File not found [Auto] -- -- (USBDLM) SRV - File not found [Auto] -- -- (RoxLiveShare9) SRV - [2012/07/02 00:02:38 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/05/08 09:13:28 | 000,185,856 | ---- | M] () [Auto] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) SRV - [2011/12/20 06:34:29 | 000,077,944 | ---- | M] (Autodesk) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2011/07/02 00:18:57 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011/04/21 01:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010/05/04 06:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2009/06/05 05:48:14 | 000,144,712 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2008/09/29 08:49:46 | 000,066,848 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe -- (FTActivationBoost) SRV - [2008/07/25 03:39:26 | 001,971,768 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSLINX\RSLINX.EXE -- (RSLinx) SRV - [2008/07/14 13:02:20 | 000,069,685 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Siemens\Step7\S7BIN\s7asysvx.exe -- (s7asysvx) SRV - [2008/07/03 07:30:28 | 001,571,912 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\S7IEPG\s7oiehsx.exe -- (s7oiehsx) SRV - [2008/07/03 07:30:28 | 000,240,712 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe -- (S7TraceServiceX) SRV - [2008/06/30 05:54:57 | 001,036,288 | ---- | M] (Kepware) [Auto] -- C:\Programme\KEPServerEnterprise\ServerMain.exe -- (KEPServerEnterpriseService) SRV - [2008/06/25 07:17:06 | 000,218,408 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RsvcHost.exe -- (RsvcHost) SRV - [2008/06/25 07:15:22 | 000,148,776 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagReceiver.exe -- (RNADiagReceiver) SRV - [2008/06/25 07:15:18 | 000,034,088 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagnosticsSrv.exe -- (RNADiagnosticsService) SRV - [2008/05/27 05:20:38 | 000,070,952 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSLINX\dnwhodisp.exe -- (dnWhoDisp) SRV - [2008/05/24 03:25:12 | 000,202,024 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSCommon\RSOBSERV.EXE -- (Harmony) SRV - [2008/05/20 10:10:42 | 001,146,880 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\sws\almsrv\almsrvx.exe -- (almservice) SRV - [2007/11/21 11:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto] -- C:\WINDOWS\system32\TODDSrv.exe -- (TODDSrv) SRV - [2007/09/28 10:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2007/09/18 14:34:28 | 000,147,456 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSView Enterprise\TagSrv.exe -- (Rockwell Tag Server) SRV - [2007/09/18 14:26:24 | 000,077,824 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe -- (Rockwell HMI Diagnostics) SRV - [2007/09/17 18:57:28 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RdcyHost.exe -- (RdcyHost) SRV - [2007/09/17 18:57:20 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\NmspHost.exe -- (NmspHost) SRV - [2007/09/17 17:43:08 | 000,991,232 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADirMultiplexor.exe -- (RNADirMultiplexor) SRV - [2007/09/17 17:42:44 | 000,897,024 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RnaDirServer.exe -- (RNADirectory) SRV - [2007/09/17 17:36:32 | 000,282,624 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventClientMultiplexer.exe -- (EventClientMultiplexer) SRV - [2007/09/17 17:36:08 | 000,217,088 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventServer.exe -- (EventServer) SRV - [2007/08/09 08:58:34 | 001,757,696 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms) SRV - [2007/07/09 04:47:58 | 000,094,208 | ---- | M] () [On_Demand] -- C:\Programme\Rockwell Software\RSLinx Enterprise\LogReceiver.exe -- (LogReceiver) SRV - [2007/06/26 09:11:48 | 000,217,088 | ---- | M] (Rockwell Automation) [Auto] -- C:\Programme\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe -- (RSLinxNG) SRV - [2007/04/17 02:07:50 | 000,135,168 | ---- | M] (OPC Foundation) [On_Demand] -- C:\WINDOWS\system32\opcenum.exe -- (OpcEnum) SRV - [2007/02/12 11:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto] -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash) SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2005/04/03 18:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2005/01/17 11:38:00 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs) SRV - [2004/03/23 09:40:20 | 000,028,672 | ---- | M] ( ) [Auto] -- C:\Programme\Rockwell Software\RSView32 Service\RSV32ServiceAD.exe -- (RSView32 Service for AD) SRV - [2003/11/17 13:50:50 | 000,659,456 | ---- | M] (Macrovision Corporation) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\lmgrd.exe -- (FactoryTalk Activation Service) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand] -- -- (WINIO) DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | System] -- -- (VirtualBackplane) DRV - File not found [Kernel | Auto] -- -- (S7oppilx) DRV - File not found [Kernel | On_Demand] -- -- (RimUsb) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand] -- -- (pcidnt) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | System] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand] -- -- (hwdatacard) DRV - File not found [Kernel | On_Demand] -- -- (GenericMount) DRV - File not found [Kernel | System] -- -- (Changer) DRV - [2011/07/02 00:18:59 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2011/07/02 00:18:59 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009/10/08 11:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008/07/05 12:19:52 | 000,155,440 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\RSSERIAL.SYS -- (RSSERIAL) DRV - [2008/07/05 12:19:50 | 000,039,067 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\RSIKT.SYS -- (RsiKtControl) DRV - [2008/07/03 07:10:08 | 000,508,416 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7otranx.sys -- (s7otranx) DRV - [2008/07/03 07:07:36 | 000,173,568 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\s7osmcax.sys -- (s7osmcax) DRV - [2008/07/03 07:06:02 | 000,095,232 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7oppitx.sys -- (s7oppitx) DRV - [2008/07/03 07:04:42 | 000,031,232 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7opcsrtx.sys -- (S7opcsrtx) PROFINET IO RT-Protocol (LLDP) DRV - [2008/07/03 07:03:10 | 000,077,312 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\S7odpx2x.sys -- (s7odpx2x) DRV - [2008/06/30 01:15:26 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt) DRV - [2008/04/13 14:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2008/03/13 08:51:52 | 000,057,536 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2008/03/13 08:50:02 | 000,072,000 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K) DRV - [2008/03/04 04:12:06 | 000,048,600 | ---- | M] (O2Micro ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\o2media.sys -- (O2MDRDR) DRV - [2008/02/19 09:39:44 | 000,191,424 | ---- | M] (Jungo) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6) DRV - [2008/02/01 08:18:56 | 000,732,160 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (CnxtHdAudAddService) DRV - [2008/01/30 11:21:12 | 002,846,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008/01/15 05:40:53 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2008/01/15 05:40:53 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2007/12/28 04:51:00 | 000,285,952 | ---- | M] (Marvell) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2007/12/05 05:51:04 | 000,310,144 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\SNTIE.SYS -- (SNTIE) SIMATIC Industrial Ethernet (ISO) DRV - [2007/11/06 10:25:36 | 000,101,888 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2007/11/01 11:26:36 | 000,989,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2007/11/01 11:25:32 | 000,211,456 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2007/11/01 11:25:22 | 000,731,520 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2007/10/12 09:42:56 | 000,255,872 | ---- | M] (PEAK-System Technik GmbH, Darmstadt, Germany) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Peakcan.sys -- (Peakcan) DRV - [2007/10/02 05:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2007/09/26 01:01:32 | 002,236,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R) DRV - [2007/08/29 14:24:06 | 000,012,333 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s7oupc2x.sys -- (s7oupc2x) DRV - [2007/07/30 06:06:04 | 000,071,168 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7snsrtx.sys -- (s7snsrtx) DRV - [2007/07/23 10:12:44 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshhl.sys -- (akshhl) DRV - [2007/07/05 10:16:56 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp) DRV - [2007/07/05 10:16:56 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb) DRV - [2007/06/25 09:47:16 | 000,028,363 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\dpmtrcdd.sys -- (Dpmtrcdd) DRV - [2007/05/29 05:01:50 | 000,006,912 | ---- | M] (TOSHIBA) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\QIOMem.sys -- (QIOMem) DRV - [2007/05/28 04:02:02 | 000,352,256 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge) DRV - [2007/03/26 06:22:18 | 000,105,856 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\tdudf.sys -- (tdudf) DRV - [2007/03/20 05:33:28 | 000,028,672 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0) DRV - [2007/03/01 06:12:16 | 000,075,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabser.sys -- (slabser) DRV - [2007/03/01 06:12:16 | 000,058,368 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabbus.sys -- (slabbus) CP210x USB Composite Device driver (WDM) DRV - [2007/02/19 06:15:32 | 000,134,016 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\trudf.sys -- (trudf) DRV - [2006/12/28 06:44:44 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AtiHdAud.sys -- (HdAudAddService) DRV - [2006/11/22 04:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock) DRV - [2006/10/23 10:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfec.sys -- (tosrfec) DRV - [2006/10/18 05:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tdcmdpst.sys -- (tdcmdpst) DRV - [2006/10/10 13:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte) DRV - [2006/01/12 10:21:18 | 000,031,872 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qkbfiltr.sys -- (qkbfiltr) DRV - [2005/06/10 16:42:00 | 000,005,504 | ---- | M] (Quanta Computer Corp) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BoiHwSetup.sys -- (BoiHwsetup) DRV - [2005/05/05 08:27:38 | 000,007,936 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qmofiltr.sys -- (qmofiltr) DRV - [2003/01/29 09:35:00 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio) DRV - [2002/11/13 08:38:40 | 000,016,447 | ---- | M] (Rockwell Automation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSI-PKTX-A.SYS -- (RSI-PKTX-A) DRV - [2002/11/13 04:40:28 | 000,002,976 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\FwKbd.sys -- (fwkbd) DRV - [2002/10/17 20:34:14 | 000,030,512 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\s7oefs_x.sys -- (s7oefs_x) DRV - [2002/04/23 13:02:26 | 000,038,999 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSIKTNG.SYS -- (RSLINXNGKtControl) DRV - [2001/10/25 04:21:48 | 000,063,972 | ---- | M] (Siemens AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\dpmcslv.sys -- (dpmcslv) DRV - [2001/06/21 15:39:02 | 000,073,728 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel) DRV - [2001/06/21 15:39:02 | 000,020,032 | R--- | M] (Rainbow Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (Sntnlusb) DRV - [2001/02/28 21:15:00 | 000,006,144 | ---- | M] (Erik Salaj) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\IOPORT.SYS -- (IOPort) DRV - [1998/07/09 22:31:00 | 000,007,328 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ds1410d.sys -- (DS1410D) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data] IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/ IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ IE - HKU\Administrator_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701 IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data] IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/ IE - HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://suche.aon.at IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKU\mgombotz_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb139?a=6PQz7vCB0W&i=26 IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/ IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data] IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.at/ IE - HKU\mgrabner_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgrabner_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox [2012/06/01 00:46:59 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/07/02 00:02:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012/05/18 04:27:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions [2012/03/12 14:29:54 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions File not found (No name found) -- [2012/07/02 00:02:40 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll [2012/07/02 00:02:31 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml [2012/07/02 00:02:31 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml [2012/07/02 00:02:31 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml [2012/07/02 00:02:31 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml [2012/07/02 00:02:31 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml [2012/07/02 00:02:31 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2008/01/15 05:26:47 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - File not found O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll () O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\IEPlugin32.dll (Media Finder) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\gencrawler_gc.dll () O2 - BHO: (ADDICT-THING Class) - {CDE76C9A-C062-F8FE-474B-6A6705EAE133} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING\bhoclass.dll () O3 - HKLM\..\Toolbar: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - File not found O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD) O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgombotz_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [AutoRunnerX] C:\Programme\AutoRunnerX\arxsrv.exe (Bernhard Fomm, Munich) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BluetoothAuthenticationAgent] File not found O4 - HKLM..\Run: [DDWMon] C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe () O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe (HP) O4 - HKLM..\Run: [ITSecMng] C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION) O4 - HKLM..\Run: [S7UB Start] C:\Programme\Gemeinsame Dateien\Siemens\S7ubtoox\s7ubtstx.exe (SIEMENS AG) O4 - HKLM..\Run: [SmoothView] C:\Programme\Toshiba\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [topi] C:\Programme\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA) O4 - HKLM..\Run: [Toshiba Controls Utility] C:\Programme\Toshiba\Controls\VolumeIndicator.exe (TOSHIBA Inc.) O4 - HKLM..\Run: [Toshiba Hotkey Utility] C:\Programme\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.) O4 - HKLM..\Run: [TPSMain] File not found O4 - HKLM..\Run: [UnlockerAssistant] File not found O4 - HKLM..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKLM..\Run: [UsbCipHelper] C:\Programme\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.) O4 - HKU\administrator.ABALON-HARDWOOD.000_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\administrator.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\Administrator_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\Administrator_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\eunger_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\mgombotz.ABALON-HARDWOOD_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation) O4 - HKU\mgombotz_ON_C..\Run: [swg] File not found O4 - HKU\mgombotz_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\mgrabner_ON_C..\Run: [Media Finder] File not found O4 - HKU\mgrabner_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe (Autodesk, Inc) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\LEO Server.lnk = C:\Programme\RSW\Leo8\LeoServer\LeoServer.exe (RSW Technik GmbH) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 O7 - HKU\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/DE-AT/a-UNO1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1214216227406 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} https://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab (UI File Upload Control) O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/mygarmin/m/GarminAxControl.CAB (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = abalon-hardwood.com O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - File not found O20 - HKLM Winlogon: UIHost - (logonui.exe) - File not found O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - File not found O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - File not found O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - File not found O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - File not found O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - File not found O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - File not found O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - File not found O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found O29 - HKLM SecurityProviders - (schannel.dll) - File not found O29 - HKLM SecurityProviders - (digest.dll) - File not found O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008/04/07 12:08:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012/07/13 08:08:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\Facebook [2012/07/13 00:11:36 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012/07/12 00:51:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++ [2012/07/12 00:51:53 | 000,000,000 | ---D | C] -- C:\Programme\Kabel++ [2012/07/03 06:58:25 | 000,000,000 | ---D | C] -- C:\FreePDF [2012/06/29 02:40:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Unterlagen Allgemein [2012/06/25 07:31:17 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll [2009/02/13 10:34:03 | 000,570,128 | ---- | C] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\dao350.dll [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012/07/17 01:50:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012/07/17 01:49:51 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat [2012/07/17 01:49:20 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys [2012/07/16 16:22:18 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012/07/16 16:22:17 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job [2012/07/16 16:12:35 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable [2012/07/16 08:49:18 | 000,142,848 | ---- | M] () -- C:\WINDOWS\System32\fest0r_ot.exe [2012/07/16 08:39:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012/07/16 05:42:19 | 000,138,742 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf [2012/07/16 00:21:50 | 000,000,772 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk [2012/07/13 01:08:58 | 000,445,312 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012/07/13 00:12:19 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012/07/12 00:51:59 | 000,000,662 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk [2012/07/12 00:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++ [2012/07/09 07:10:51 | 000,001,744 | ---- | M] () -- C:\WINDOWS\UtahS7Integrate.ini [2012/07/06 07:28:06 | 000,066,296 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf [2012/07/04 09:37:51 | 000,071,656 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf [2012/07/04 00:12:14 | 000,128,570 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf [2012/07/03 07:00:38 | 000,114,598 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf [2012/06/29 00:31:42 | 000,002,505 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Microsoft Office Excel 2007.lnk [2012/06/25 10:17:31 | 000,523,690 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2012/06/25 10:17:31 | 000,494,480 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012/06/25 10:17:31 | 000,110,826 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2012/06/25 10:17:31 | 000,091,040 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files Created - No Company Name ========== [2012/07/16 16:12:35 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable [2012/07/16 08:49:24 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\fest0r_ot.exe [2012/07/16 05:42:17 | 000,138,742 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf [2012/07/12 00:51:59 | 000,000,662 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk [2012/07/06 07:28:03 | 000,066,296 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf [2012/07/04 09:35:49 | 000,071,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf [2012/07/04 00:12:12 | 000,128,570 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf [2012/07/03 07:00:34 | 000,114,598 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf [2012/05/09 05:58:18 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2012/05/09 05:58:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe [2012/05/03 08:01:45 | 000,006,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/04/17 05:18:24 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2012/04/17 04:59:58 | 000,000,166 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2012/04/04 00:28:04 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\$_hpcst$.hpc [2012/03/08 05:47:40 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/02/15 01:14:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012/01/25 10:08:26 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2012/01/25 08:36:43 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A5W.INI [2011/12/07 08:09:36 | 000,004,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/11/08 08:54:44 | 000,000,061 | R--- | C] () -- C:\WINDOWS\System32\uninstall.ini [2011/11/08 07:49:03 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\eunger\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011/10/10 04:06:20 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011/07/26 04:42:03 | 000,000,066 | ---- | C] () -- C:\WINDOWS\HRMINIA 2.0.INI [2011/07/26 03:37:11 | 000,006,688 | ---- | C] () -- C:\WINDOWS\MOVEXE.EXE [2011/07/26 03:12:29 | 000,000,045 | ---- | C] () -- C:\WINDOWS\MINIA 2.0.INI [2009/11/24 22:45:58 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\sdc1ml3.dll [2009/08/12 10:17:15 | 000,135,253 | R--- | C] () -- C:\WINDOWS\System32\WdReg.exe [2009/07/30 01:44:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Autoplay.INI [2009/07/24 15:47:45 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESETW.INI [2009/04/17 13:01:13 | 000,000,256 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\pool.bin [2009/04/15 02:18:41 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESET.INI [2009/04/13 11:21:09 | 000,319,696 | ---- | C] () -- C:\WINDOWS\System32\BOCOF.DLL [2009/04/13 05:03:29 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin [2009/02/25 06:20:16 | 000,000,097 | ---- | C] () -- C:\WINDOWS\usrwiz.ini [2009/02/25 05:20:01 | 000,000,324 | ---- | C] () -- C:\WINDOWS\Sew_ra.ini [2009/02/25 05:19:58 | 000,000,076 | ---- | C] () -- C:\WINDOWS\SEW_OEL.INI [2009/02/25 05:19:56 | 000,001,363 | ---- | C] () -- C:\WINDOWS\SEW_KAT.INI [2009/02/25 05:19:56 | 000,000,194 | ---- | C] () -- C:\WINDOWS\KONVERT.INI [2009/02/25 05:15:16 | 000,000,412 | ---- | C] () -- C:\WINDOWS\Sew_glob.ini [2009/02/24 08:28:57 | 000,000,292 | ---- | C] () -- C:\WINDOWS\Microwin.ini [2009/02/23 03:39:30 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI [2009/02/18 12:58:20 | 000,000,146 | ---- | C] () -- C:\WINDOWS\CAPTURE.INI [2009/02/18 12:56:09 | 000,000,036 | ---- | C] () -- C:\WINDOWS\ACROREAD.INI [2009/02/18 12:54:33 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll [2009/02/18 12:54:33 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll [2009/02/18 12:54:33 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\ltfil60n.dll [2009/02/18 12:54:33 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll [2009/02/18 12:54:33 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll [2009/02/18 12:54:33 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll [2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll [2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll [2009/02/18 12:54:32 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll [2009/02/18 12:54:32 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll [2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll [2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll [2009/02/18 12:54:32 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll [2009/02/18 12:54:32 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll [2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll [2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\implode.dll [2009/02/18 12:53:28 | 000,002,469 | ---- | C] () -- C:\WINDOWS\pspice91.ini [2009/02/13 10:55:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\FwSim.INI [2009/02/13 10:48:52 | 000,104,633 | ---- | C] () -- C:\WINDOWS\System32\drivers\fwDH485.sys [2009/02/13 10:48:52 | 000,002,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\FwKbd.sys [2009/02/13 10:48:51 | 000,032,768 | ---- | C] () -- C:\WINDOWS\fwkbd.exe [2009/02/13 10:48:48 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\s7200L2.dll [2009/02/13 10:48:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\ptuninst.exe [2009/02/13 10:36:35 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\ptuninst.exe [2009/02/02 02:06:46 | 000,048,128 | ---- | C] () -- C:\WINDOWS\AKDeInstall.exe [2008/11/06 04:19:49 | 000,001,467 | ---- | C] () -- C:\WINDOWS\cdwl2.ini [2008/09/18 15:08:02 | 000,290,904 | ---- | C] () -- C:\WINDOWS\System32\vc6-re200l.dll [2008/09/13 08:28:26 | 000,002,721 | ---- | C] () -- C:\WINDOWS\cvavr.ini [2008/08/12 01:02:55 | 000,012,074 | ---- | C] () -- C:\WINDOWS\hpdj6122.ini [2008/08/07 11:16:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MERuntime.INI [2008/07/28 12:38:59 | 000,000,012 | ---- | C] () -- C:\WINDOWS\bthservsdp.dat [2008/07/25 04:08:34 | 000,036,408 | ---- | C] () -- C:\WINDOWS\System32\LINXVDD.DLL [2008/07/10 12:01:07 | 000,007,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\ds1410d.sys [2008/07/05 12:19:52 | 000,007,449 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDHP.BIN [2008/07/05 12:19:52 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\slcnewkt.bin [2008/07/05 12:19:52 | 000,005,433 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDH.BIN [2008/07/05 12:19:50 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTC.BIN [2008/07/05 12:19:50 | 000,015,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMK485.BIN [2008/07/05 12:19:50 | 000,015,557 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTX485.BIN [2008/07/05 12:19:50 | 000,009,282 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKPCL.BIN [2008/07/05 12:19:50 | 000,009,139 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXPCL.BIN [2008/07/05 12:19:50 | 000,007,575 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLPCL.BIN [2008/07/05 12:19:50 | 000,001,825 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST2.BIN [2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST3.BIN [2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST2.BIN [2008/07/05 12:19:50 | 000,001,801 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST1.BIN [2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST1.BIN [2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST1.BIN [2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST1.BIN [2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST0.BIN [2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST0.BIN [2008/07/05 12:19:50 | 000,000,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST0.BIN [2008/07/05 12:19:50 | 000,000,177 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST0.BIN [2008/07/05 12:19:50 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST2.BIN [2008/07/01 06:05:40 | 000,000,235 | ---- | C] () -- C:\WINDOWS\RLEIcons.ini [2008/06/30 11:37:05 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EvmoveW.INI [2008/06/30 05:55:27 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\machnm1.exe [2008/06/30 03:37:13 | 000,010,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008/06/30 03:22:40 | 000,000,088 | ---- | C] () -- C:\WINDOWS\PIDCal.ini [2008/06/30 02:40:54 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EVMOVE.INI [2008/06/30 01:15:26 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys [2008/06/30 01:15:21 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdduinst.exe [2008/06/30 01:15:21 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI [2008/06/30 01:15:20 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE [2008/06/28 00:59:22 | 000,020,992 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/06/26 06:12:17 | 000,002,488 | ---- | C] () -- C:\WINDOWS\EDS.ini [2008/06/26 00:16:14 | 000,000,121 | ---- | C] () -- C:\WINDOWS\rocksoft.ini [2008/06/24 13:36:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008/06/23 07:35:21 | 000,000,193 | ---- | C] () -- C:\WINDOWS\hpbafd.ini [2008/06/23 07:28:56 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/06/23 07:25:04 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/06/23 05:59:29 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/06/23 05:57:28 | 001,399,880 | ---- | C] () -- C:\WINDOWS\System32\igklg450.dll [2008/06/23 05:57:26 | 001,843,784 | ---- | C] () -- C:\WINDOWS\System32\igklg400.dll [2008/06/23 05:57:26 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll [2008/06/23 05:57:26 | 000,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll [2008/04/08 01:37:57 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2008/04/08 01:35:48 | 000,000,562 | ---- | C] () -- C:\WINDOWS\TBTdetect.ini [2008/04/08 01:30:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2008/04/07 13:12:03 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2008/04/07 13:12:03 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2008/04/07 13:12:03 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2008/04/07 13:12:03 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll [2008/04/07 13:07:00 | 000,013,992 | ---- | C] () -- C:\WINDOWS\HWSetupStr.ini [2008/04/07 13:07:00 | 000,002,182 | ---- | C] () -- C:\WINDOWS\SVPW32Str.ini [2008/04/07 13:04:09 | 000,004,313 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008/04/07 13:03:36 | 000,445,312 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2008/04/07 12:58:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI [2008/04/07 12:57:13 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini [2008/04/07 12:57:13 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll [2008/04/07 12:57:13 | 000,009,480 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini [2008/04/07 12:57:13 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini [2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2008/04/07 12:53:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2008/04/07 12:52:59 | 000,165,782 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2008/04/07 12:25:16 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008/04/07 12:22:53 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll [2008/04/07 12:21:16 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini [2008/04/07 12:20:35 | 000,159,744 | ---- | C] () -- C:\WINDOWS\MakeMrk.exe [2008/04/07 12:20:35 | 000,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2008/04/07 12:10:07 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2008/04/07 12:06:27 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2008/04/07 11:58:14 | 000,523,690 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat [2008/04/07 11:58:14 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat [2008/04/07 11:58:14 | 000,110,826 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat [2008/04/07 11:58:14 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat [2008/04/07 11:58:09 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008/04/07 11:58:08 | 000,494,480 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008/04/07 11:58:08 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008/04/07 11:58:08 | 000,091,040 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008/04/07 11:58:08 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008/04/07 11:58:07 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008/04/07 11:58:07 | 000,004,631 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008/04/07 11:58:07 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2008/04/07 11:58:06 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008/04/07 11:58:06 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008/04/07 11:58:02 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008/04/07 11:58:02 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2007/12/21 10:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll [2007/12/18 08:47:16 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\TPeculiarity.dll [2007/12/14 11:01:30 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\tsbwls.dll [2007/11/14 21:24:14 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\wceprv.dll [2007/09/28 05:30:54 | 000,198,680 | ---- | C] () -- C:\WINDOWS\System32\WL40ENT.DLL [2007/09/28 05:30:54 | 000,023,064 | ---- | C] () -- C:\WINDOWS\System32\WTR40T.DLL [2005/07/22 15:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll [2005/06/10 02:46:52 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\FDT100.dll [2004/03/31 18:10:28 | 000,001,744 | ---- | C] () -- C:\WINDOWS\UtahS7Integrate.ini [2000/03/13 08:12:54 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\IBSUBC32.dll [1999/11/08 09:55:46 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\S7oformx.dll [1999/11/08 09:55:34 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\s7oformx.exe [1999/10/23 05:05:54 | 000,526,872 | ---- | C] () -- C:\WINDOWS\System32\rtdsk40.exe [1999/07/16 08:37:56 | 000,136,704 | ---- | C] () -- C:\WINDOWS\System32\TDCTRL.dll [1996/12/19 08:37:38 | 000,103,360 | ---- | C] () -- C:\WINDOWS\System32\S7OSC16X.DLL [1996/12/19 08:36:48 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\S7OSC32X.DLL ========== LOP Check ========== [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\toshiba [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\toshiba [2011/12/20 06:36:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Autodesk [2012/02/16 10:52:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar [2011/06/15 09:35:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ICQ Toolbar [2011/11/08 07:47:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Pegtop [2011/12/20 04:48:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\PriceGong [2012/05/18 04:20:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\RSW [2011/10/28 04:34:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TeamViewer [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\toshiba [2011/11/08 07:41:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Uniblue [2011/12/14 10:35:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\uTorrent [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\toshiba [2008/09/12 05:48:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Aucotec [2008/09/13 08:45:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Echo Software [2009/04/03 11:17:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\GARMIN [2008/06/24 08:51:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ [2009/06/15 05:29:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ Toolbar [2008/11/25 07:29:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterTrust [2008/06/25 01:39:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterVideo [2009/07/27 13:59:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Leadertech [2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\mquadr.at [2009/06/19 14:50:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Pegtop [2009/04/13 05:03:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Research In Motion [2009/02/13 09:58:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\SIEMENS AG [2009/06/21 12:31:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\StarOffice8 [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\TMP [2008/07/01 09:46:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\toshiba [2009/08/07 14:13:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Uniblue [2008/06/24 11:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\ICQ Toolbar [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\toshiba [2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Autodesk [2012/05/09 05:58:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\FreePDF [2012/06/04 00:25:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Incredibar.com [2012/05/22 15:02:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\InterVideo [2012/04/17 09:55:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Pegtop [2012/05/14 08:01:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\RSW [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\toshiba [2011/12/20 06:45:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Autodesk [2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon [2012/02/14 10:09:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar [2012/04/02 02:26:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\becker [2011/10/10 05:04:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\ICQ Toolbar [2012/03/12 14:25:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder [2012/01/25 10:08:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\pdfforge [2012/02/29 07:14:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\QuickStoresToolbar [2012/02/13 10:48:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TeamViewer [2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TMP [2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\toshiba [2012/03/06 01:42:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\uTorrent [2012/06/04 00:25:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING [2008/09/12 05:32:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aucotec [2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Autodesk [2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon [2012/03/06 02:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FileServe Limited [2012/06/01 00:49:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\InstallMate [2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\m2backup [2009/01/06 13:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mquadr.at [2012/06/01 00:49:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium [2008/07/01 06:05:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell [2009/04/23 04:22:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Automation [2009/08/07 11:23:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Software [2008/11/06 04:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SEW [2008/11/07 04:11:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens [2009/02/13 09:42:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens AG [2012/03/06 02:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web Installer [2009/04/23 06:27:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WFCU [2008/06/23 14:09:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [2011/12/20 04:52:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{1C6FDDD8-FC9E-4C12-9FA5-1AAD377097B3} [2009/01/06 13:13:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{783529ED-FB56-4E47-9A20-F9C23D22C2D0} [2009/01/06 13:14:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8AF9D3CF-B9B5-4F8E-B47F-D26DF984D190} [2009/06/13 14:26:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2009/01/06 13:13:44 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C3358ED5-0ADD-4BA0-8F60-B5A7CD34BD14} [2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job ========== Purity Check ========== < End of report > |
17.07.2012, 15:33 | #6 |
/// Helfer-Team | Bundespolizei Einheit 5.2 entfernen Fixen mit OTLpe
Code:
ATTFilter :OTL SRV - [2012/05/08 09:13:28 | 000,185,856 | ---- | M] () [Auto] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Administrator_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\mgombotz_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mgrabner_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\mgrabner_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox [2012/06/01 00:46:59 | 000,000,000 | ---D | M] O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll () O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgombotz_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No CLSID value found. O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [BluetoothAuthenticationAgent] File not found O4 - HKLM..\Run: [DDWMon] C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe () O4 - HKLM..\Run: [TPSMain] File not found O4 - HKLM..\Run: [UnlockerAssistant] File not found O4 - HKLM..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\Administrator_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\mgombotz_ON_C..\Run: [swg] File not found O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe () O4 - HKU\mgrabner_ON_C..\Run: [Media Finder] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 O7 - HKU\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.) O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/mygarmin/m/GarminAxControl.CAB (Reg Error: Key error.) O32 - HKLM CDRom: AutoRun - 1 [2012/07/16 16:22:17 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job [2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job [2012/07/16 08:39:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012/02/16 10:52:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar [2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon [2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon [2012/02/14 10:09:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar :Files C:\WINDOWS\system32\fest0r_ot.exe ipconfig /flushdns /c :Commands [purity] [emptytemp] [emptyflash]
__________________ --> Bundespolizei Einheit 5.2 entfernen |
17.07.2012, 16:28 | #7 |
| Bundespolizei Einheit 5.2 entfernen Das Betriebssystem ist normal hochgefahren. Ich Danke dir für die Hilfe. Anbei die txt. Datei MFG ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Web Assistant Updater deleted successfully. C:\Programme\Web Assistant\ExtensionUpdaterService.exe moved successfully. HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully! HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ not found. HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully! Registry value HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found. HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully! HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully! Registry value HKEY_USERS\mgombotz_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found. HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found. Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ not found. HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully. File C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully. File C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) not found. File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ deleted successfully. C:\Programme\Web Assistant\Extension32.dll moved successfully. Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found. Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found. Registry value HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found. Registry value HKEY_USERS\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found. Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7E111A5C-3D11-4F56-9463-5310C3C69025} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E111A5C-3D11-4F56-9463-5310C3C69025}\ not found. Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found. Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2}\ not found. Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BluetoothAuthenticationAgent deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DDWMon deleted successfully. File move failed. C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe scheduled to be moved on reboot. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TPSMain deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UnlockerAssistant deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully. C:\WINDOWS\system32\fest0r_ot.exe moved successfully. Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully. File C:\WINDOWS\system32\fest0r_ot.exe not found. Registry value HKEY_USERS\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully. Registry value HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully. File C:\WINDOWS\system32\fest0r_ot.exe not found. Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Media Finder deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully. Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Registry value HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Starting removal of ActiveX control {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\eunger_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\mgombotz_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\mgrabner_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_USERS\systemprofile_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control Garmin Communicator Plug-In Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Garmin Communicator Plug-In\DownloadInformation\\INF . Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Garmin Communicator Plug-In\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\eunger_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\mgombotz_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\mgrabner_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. Registry key HKEY_USERS\systemprofile_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully. C:\WINDOWS\tasks\Express Files Updater.job moved successfully. File C:\WINDOWS\Tasks\Express Files Updater.job not found. C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully. C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar\BabylonToolbar folder moved successfully. C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon folder moved successfully. C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon folder moved successfully. C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar\BabylonToolbar folder moved successfully. ========== FILES ========== File\Folder C:\WINDOWS\system32\fest0r_ot.exe not found. < ipconfig /flushdns /c > Windows IP Configuration An internal error occurred: The system cannot find the file specified. Please contact Microsoft Product Support Services for further help. Additional information: Unable to open registry key for tcpip. C:\cmd.bat deleted successfully. C:\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 238076162 bytes ->Temporary Internet Files folder emptied: 587889937 bytes ->Java cache emptied: 2125856 bytes ->FireFox cache emptied: 18591868 bytes ->Flash cache emptied: 13425 bytes User: administrator.ABALON-HARDWOOD ->Temp folder emptied: 3619398 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: administrator.ABALON-HARDWOOD.000 ->Temp folder emptied: 2223 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->Java cache emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: eunger ->Temp folder emptied: 248469 bytes ->Temporary Internet Files folder emptied: 37089 bytes User: LocalService ->Temp folder emptied: 311621 bytes ->Temporary Internet Files folder emptied: 12471019 bytes User: mgombotz ->Temp folder emptied: 1404339 bytes ->Temporary Internet Files folder emptied: 10019058 bytes ->Flash cache emptied: 585 bytes User: mgombotz.ABALON-HARDWOOD ->Temp folder emptied: 1103009174 bytes ->Temporary Internet Files folder emptied: 807270968 bytes ->Java cache emptied: 333226 bytes ->Flash cache emptied: 27027 bytes User: MGOMBO~1~ABA User: mgrabner ->Temp folder emptied: 260459783 bytes ->Temporary Internet Files folder emptied: 661364624 bytes ->Java cache emptied: 91523 bytes ->FireFox cache emptied: 73502625 bytes ->Flash cache emptied: 8448 bytes User: mgrabner.ABALON-HARDWOOD ->Temp folder emptied: 549784436 bytes ->Temporary Internet Files folder emptied: 107866544 bytes ->Java cache emptied: 1603935 bytes ->FireFox cache emptied: 467953034 bytes ->Flash cache emptied: 8336 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33177 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 19569 bytes %systemroot%\System32 .tmp files removed: 2775943 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 357132386 bytes Total Files Cleaned = 5,024.00 mb [EMPTYFLASH] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: administrator.ABALON-HARDWOOD ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: administrator.ABALON-HARDWOOD.000 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: eunger ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: mgombotz ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: mgombotz.ABALON-HARDWOOD ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: MGOMBO~1~ABA User: mgrabner ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: mgrabner.ABALON-HARDWOOD ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes Total Flash Files Cleaned = 0.00 mb OTLPE by OldTimer - Version 3.1.48.0 log created on 07172012_190344 Files\Folders moved on Reboot... File move failed. C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe scheduled to be moved on reboot. File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r4_MMS55_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r5_MMS55_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r1_MMS550_2.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r2_MMS550_SP2_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HandlingBasic_V2.04_MMS55_SP2_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HelpFilesV4_MMS550_SP2.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MC07B_CANopen_Configurator_MMS550_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MMS_V550_MotionStudio_SP2.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudioDriveSync_MMS55_3.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudio_Sample_Projects_550_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIFIT_PD_Monitor_MMS550.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Documentation_MMS55_4.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Docu_News_VersionInfo_MMS550_2.exe not found! Registry entries deleted on Reboot... Files\Folders moved on Reboot... File move failed. C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe scheduled to be moved on reboot. File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r4_MMS55_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r5_MMS55_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r1_MMS550_2.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r2_MMS550_SP2_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HandlingBasic_V2.04_MMS55_SP2_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HelpFilesV4_MMS550_SP2.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MC07B_CANopen_Configurator_MMS550_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MMS_V550_MotionStudio_SP2.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudioDriveSync_MMS55_3.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudio_Sample_Projects_550_1.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIFIT_PD_Monitor_MMS550.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Documentation_MMS55_4.exe not found! File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Docu_News_VersionInfo_MMS550_2.exe not found! Registry entries deleted on Reboot... |
17.07.2012, 16:52 | #8 |
/// Helfer-Team | Bundespolizei Einheit 5.2 entfernen Sehr gut! Wie laeuft der Rechner? 1. Schritt Neue Version! Bitte neu runterladen! Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten. danach: Downloade Dir bitte AdwCleaner auf deinen Desktop.
|
18.07.2012, 06:08 | #9 |
| Bundespolizei Einheit 5.2 entfernen eigentlich sehr gut bis halt beim start braucht er ein bisschen. Hier die Resultate von den anti Malware mfg Geändert von martymge (18.07.2012 um 06:39 Uhr) |
18.07.2012, 06:14 | #10 |
| Bundespolizei Einheit 5.2 entfernen Hier die Resultate von Adwcleaner mfg |
18.07.2012, 09:29 | #11 |
/// Helfer-Team | Bundespolizei Einheit 5.2 entfernen Lasse die Funde in Malwarebytes loeschen!!! dann:
danach nochmal: Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten. |
18.07.2012, 13:49 | #12 |
| Bundespolizei Einheit 5.2 entfernen hier txt datei test wird gerade gemacht danke mfg |
18.07.2012, 15:52 | #13 |
/// Helfer-Team | Bundespolizei Einheit 5.2 entfernen Bitte mit MBAM Log wieder melden. |
18.07.2012, 16:28 | #14 |
| Bundespolizei Einheit 5.2 entfernen so die letzte datei mfg |
18.07.2012, 16:31 | #15 |
/// Helfer-Team | Bundespolizei Einheit 5.2 entfernen Sehr gut! Malware-Scan mit Emsisoft Anti-Malware Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm. Lade über Jetzt Updaten die aktuellen Signaturen herunter. Wähle den Freeware-Modus aus. Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers. Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten. Anleitung: http://www.trojaner-board.de/103809-...i-malware.html |
Themen zu Bundespolizei Einheit 5.2 entfernen |
abgesicherte, abgesicherten, abgesicherten modus, bundespolizei, bundespolizei einheit 5.2, einheit 5.2, entferne, entfernen, frage, fragen, modus, virus, virus bundespolizei |