Code:
Alles auswählen Aufklappen ATTFilter
OTL logfile created on: 9/18/2012 7:13:07 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18372)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,015.00 Mb Total Physical Memory | 803.00 Mb Available Physical Memory | 79.00% Memory free
903.00 Mb Paging File | 847.00 Mb Available in Paging File | 94.00% Paging File free
Paging file location(s): C:\pagefile.sys 1522 1522 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 80.01 Gb Total Space | 55.07 Gb Free Space | 68.82% Space Free | Partition Type: NTFS
Drive D: | 69.00 Gb Total Space | 68.36 Gb Free Space | 99.08% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet004
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand] -- -- (AppMgmt)
SRV - [2012/09/10 04:42:52 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/09/04 04:04:16 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/07/13 07:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/03/26 11:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2008/08/29 12:56:58 | 000,081,920 | ---- | M] (Prolific Technology Inc.) [Auto] -- C:\Programme\Nero\Nero BackItUp 4\IoctlSvc.exe -- (PLFlash DeviceIoControl Service)
SRV - [2008/08/29 10:20:56 | 000,935,208 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007/09/20 16:05:06 | 000,589,824 | ---- | M] ( ) [Auto] -- C:\WINDOWS\System32\lxdocoms.exe -- (lxdo_device)
SRV - [2007/07/17 08:26:03 | 000,094,208 | ---- | M] () [Auto] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdoserv.exe -- (lxdoCATSCustConnectService)
SRV - [2007/01/04 13:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto] -- C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
SRV - [2005/04/03 19:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004/09/29 07:14:36 | 000,069,632 | ---- | M] (HP) [Auto] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | System] -- -- (twcwkbld)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2011/09/29 03:04:22 | 000,021,632 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ManyCam.sys -- (ManyCam)
DRV - [2010/02/11 08:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008/07/16 06:52:00 | 004,747,776 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/06/23 21:59:08 | 000,991,400 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008/06/11 02:14:18 | 000,047,272 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008/05/29 23:46:12 | 000,534,568 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008/04/14 08:00:00 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008/03/28 11:38:16 | 000,625,024 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86)
DRV - [2008/03/11 13:37:00 | 000,036,864 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\l1e51x86.sys -- (L1e)
DRV - [2008/03/10 06:18:42 | 000,057,384 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2008/02/04 05:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2007/09/19 23:59:14 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2007/07/26 14:00:38 | 000,011,264 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ASUSACPI.SYS -- (AsusACPI)
DRV - [2006/08/15 22:56:50 | 000,041,984 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://eeepc.asus.com/global
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = WEB.DE - E-Mail-Adresse kostenlos, FreeMail, Nachrichten & Services [binary data]
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com Search Engine – Better Web Search
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 50 22 13 27 1D BC C9 01 [binary data]
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKU\Dieter_Name_ON_C\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\Dieter_Name_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/09/10 04:42:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012/09/10 04:40:20 | 000,000,000 | ---D | M]
[2012/09/10 04:40:17 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012/09/10 04:40:16 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/09/10 04:40:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012/09/10 04:40:18 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012/09/10 04:40:07 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2012/09/10 04:40:14 | 000,000,000 | ---D | M] (WEB.DE MailCheck) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
[2012/09/10 04:42:55 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012/01/01 12:14:06 | 000,113,976 | ---- | M] (Cisco WebEx LLC) -- C:\Programme\mozilla firefox\plugins\atgpcdec.dll
[2012/01/01 12:14:07 | 000,574,264 | ---- | M] (Cisco WebEx LLC) -- C:\Programme\mozilla firefox\plugins\atgpcext.dll
[2012/01/01 12:14:03 | 000,176,952 | ---- | M] (Cisco WebEx LLC) -- C:\Programme\mozilla firefox\plugins\npatgpc.dll
[2012/08/24 22:49:52 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/08/24 22:49:52 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/08/24 22:49:52 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/08/24 22:49:52 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/08/24 22:49:52 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/08/24 22:49:52 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2008/04/14 08:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll (Google Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\Dieter_Name_ON_C\..\Toolbar\ShellBrowser: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O3 - HKU\Dieter_Name_ON_C\..\Toolbar\WebBrowser: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O3 - HKU\Dieter_Name_ON_C\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKU\Dieter_Name_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ApnUpdater] C:\Programme\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [AsusACPIServer] C:\Programme\EeePC\ACPI\AsAcpiSvr.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AsusEPCMonitor] C:\Programme\EeePC\ACPI\AsEPCMon.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AsusTray] C:\Programme\EeePC\ACPI\AsTray.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [ETDWare] C:\Programme\Elantech\ETDCTRL.EXE (ELANTECH Devices Corp.)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [Lexmark 9500 Series Fax Server] C:\Programme\Lexmark 9500 Series\fm3032.exe ()
O4 - HKLM..\Run: [LGODDFU] C:\Programme\lg_fwupdate\fwupdate.exe (BitLeader)
O4 - HKLM..\Run: [lxdoamon] C:\Programme\Lexmark 9500 Series\lxdoamon.exe ()
O4 - HKLM..\Run: [lxdomon.exe] C:\Programme\Lexmark 9500 Series\lxdomon.exe ()
O4 - HKLM..\Run: [MSC] C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NBKeyScan] File not found
O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WrtMon.exe] C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe ()
O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - HKU\Dieter_Name_ON_C..\Run: [msnmsgr] File not found
O4 - HKU\Dieter_Name_ON_C..\Run: [OfficeSyncProcess] File not found
O4 - HKU\Dieter_Name_ON_C..\Run: [RegistryBooster] File not found
O4 - HKU\Dieter_Name_ON_C..\Run: [xgylviwvlohokqb] C:\WINDOWS\xgylviwv.exe ()
O4 - HKLM..\RunOnce: [WIAWizardMenu] C:\WINDOWS\System32\sti_ci.dll (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk = C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Dieter_Name_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Dieter_Name_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Senden an &Bluetooth-Gerät... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Senden an Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About========== Files/Folders - Created Within 30 Days ==========
[2012/09/16 15:50:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\itcjdnablvyntay
[2012/09/10 04:40:07 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2012/09/03 16:11:59 | 000,157,680 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012/09/03 16:11:59 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012/09/03 16:11:59 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2009/12/11 06:08:24 | 000,438,272 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdohcp.dll
[2007/09/20 16:12:56 | 000,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdopmui.dll
[2007/09/20 16:09:35 | 001,069,056 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdoserv.dll
[2007/09/20 16:06:19 | 000,569,344 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdolmpm.dll
[2007/09/20 16:06:19 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdoiesc.dll
[2007/09/20 16:06:04 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdocomm.dll
[2007/09/20 16:05:47 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdocfg.exe
[2007/09/20 16:05:30 | 000,315,392 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdoih.exe
[2007/09/20 16:05:06 | 000,589,824 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdocoms.exe
[2007/09/20 16:05:01 | 000,663,552 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdohbn3.dll
[2007/09/20 16:04:32 | 000,954,368 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdousb1.dll
[2007/09/20 16:04:01 | 000,851,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdocomc.dll
[2007/09/20 16:02:58 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdoprox.dll
[2007/09/20 16:01:11 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdoinpa.dll
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/09/18 11:37:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/09/18 11:37:02 | 000,000,333 | ---- | M] () -- C:\WINDOWS\lgfwup.ini
[2012/09/18 11:37:00 | 000,000,242 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2012/09/18 11:36:23 | 000,001,100 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/09/18 11:30:22 | 000,000,434 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{56E32B87-6D74-406F-8F5B-B5B0A383D4DB}.job
[2012/09/18 09:27:02 | 000,001,104 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/09/18 09:27:00 | 000,000,252 | ---- | M] () -- C:\WINDOWS\tasks\Auf Updates für Windows Live Toolbar prüfen.job
[2012/09/16 15:50:06 | 000,076,340 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\nzwgywcmtgtmgbi
[2012/09/16 15:49:29 | 000,083,968 | ---- | M] () -- C:\WINDOWS\xgylviwv.exe
[2012/09/16 15:49:29 | 000,083,968 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xgylviwv.exe
[2012/09/16 15:49:29 | 000,083,968 | ---- | M] () -- C:\Dokumente und Einstellungen\Dieter Name\ms.exe
[2012/09/16 15:20:24 | 000,000,386 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/09/15 13:34:19 | 000,002,243 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2012/09/15 13:12:07 | 000,452,472 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/15 10:01:17 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/15 09:41:05 | 000,001,620 | ---- | M] () -- C:\Dokumente und Einstellungen\Dieter Name\Desktop\Office Professional 2010 Trial_1347716464703.lnk
[2012/09/13 12:33:16 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/09/11 05:34:30 | 000,028,150 | ---- | M] () -- C:\Dokumente und Einstellungen\Dieter_Name\Eigene Dateien\Fwd_ Dieter_Name___ Erfahren Sie es heute exklusiv im Interview....html
[2012/09/07 03:33:34 | 000,001,620 | ---- | M] () -- C:\Dokumente und Einstellungen\Dieter_Name\Desktop\Office Professional 2010 Trial_1347003212734.lnk
[2012/09/04 04:43:10 | 000,000,714 | ---- | M] () -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/09/04 04:43:10 | 000,000,702 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
[2012/09/04 04:43:10 | 000,000,696 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2012/09/04 04:04:16 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/04 04:04:16 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/03 16:30:11 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/08/30 05:33:06 | 000,008,728 | ---- | M] () -- C:\Dokumente und Einstellungen\Name\Anwendungsdaten\wklnhst.dat
[2012/08/28 14:24:56 | 000,477,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012/08/28 14:24:53 | 000,473,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012/08/28 14:10:12 | 000,157,680 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012/08/28 14:10:07 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012/08/28 14:09:57 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012/08/28 12:39:23 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/09/16 15:50:05 | 000,083,968 | ---- | C] () -- C:\WINDOWS\xgylviwv.exe
[2012/09/16 15:50:04 | 000,083,968 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xgylviwv.exe
[2012/09/16 15:49:31 | 000,076,340 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\nzwgywcmtgtmgbi
[2012/09/16 15:49:24 | 000,083,968 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\ms.exe
[2012/09/15 09:41:05 | 000,001,620 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Desktop\Office Professional 2010 Trial_1347716464703.lnk
[2012/09/11 05:34:27 | 000,028,150 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Eigene Dateien\Fwd_ Dieter_Name___ Erfahren Sie es heute exklusiv im Interview....html
[2012/09/07 03:33:34 | 000,001,620 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Desktop\Office Professional 2010 Trial_1347003212734.lnk
[2012/04/02 14:01:19 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2012/04/02 13:44:37 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012/04/02 05:02:30 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/02/15 05:07:03 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/11/10 14:19:51 | 000,068,865 | ---- | C] () -- C:\WINDOWS\hpoins05.dat
[2011/11/10 14:19:51 | 000,019,696 | ---- | C] () -- C:\WINDOWS\hpomdl05.dat
[2010/10/31 12:18:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/07/10 15:00:24 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2010/07/10 14:45:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/07/10 14:44:56 | 000,452,472 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/07/10 14:28:21 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2010/07/10 14:28:21 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2010/07/10 14:28:21 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2010/07/10 14:28:21 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2010/07/10 14:28:21 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2010/07/10 14:28:21 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2010/07/10 14:17:27 | 000,049,152 | ---- | C] () -- C:\WINDOWS\INSTALLEEE.EXE
[2010/07/10 14:12:32 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll
[2010/07/10 14:10:51 | 000,000,520 | R--- | C] () -- C:\WINDOWS\System32\drivers\SamSfPa.dat
[2010/07/10 13:55:14 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/07/10 13:50:54 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/01/30 06:15:36 | 000,000,309 | -H-- | C] () -- C:\WINDOWS\.picasa.ini
[2009/12/19 06:48:32 | 000,000,069 | ---- | C] () -- C:\WINDOWS\usm.ini
[2009/12/19 06:45:47 | 000,000,217 | ---- | C] () -- C:\WINDOWS\mslands.ini
[2009/12/14 06:51:56 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2009/12/11 06:14:03 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXDOPMON.DLL
[2009/12/11 06:14:03 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXDOFXPU.DLL
[2009/12/11 06:13:43 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdooem.dll
[2009/12/11 06:08:28 | 000,000,060 | -H-- | C] () -- C:\WINDOWS\System32\lxdorwrd.ini
[2009/12/11 06:08:25 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\lxdoinst.dll
[2009/12/11 06:07:02 | 000,348,160 | R--- | C] () -- C:\WINDOWS\System32\lxdocoin.dll
[2009/12/11 05:43:46 | 000,028,672 | ---- | C] () -- C:\WINDOWS\hookdllX.dll
[2009/12/11 05:43:46 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll
[2009/09/13 04:29:52 | 000,030,283 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2009/09/13 04:22:55 | 000,029,458 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009/09/13 04:22:55 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009/09/01 07:42:16 | 000,009,728 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/11 11:21:07 | 000,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008/12/10 07:50:10 | 000,000,268 | RH-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Synth Leads
[2008/12/10 07:50:10 | 000,000,268 | RH-- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\SupportPrinters
[2008/12/10 07:50:10 | 000,000,020 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLdu.DAT
[2008/12/10 07:50:10 | 000,000,012 | RH-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Techno Kit
[2008/12/10 07:12:30 | 000,000,333 | ---- | C] () -- C:\WINDOWS\lgfwup.ini
[2008/11/30 13:17:43 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Name\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/11/30 09:56:41 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/11/30 09:51:01 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2008/11/30 09:46:19 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\MGXRDR32.DLL
[2008/11/30 09:46:19 | 000,306,688 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2008/11/30 09:46:19 | 000,095,232 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2008/11/30 09:45:39 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\MSVCRT10.DLL
[2008/11/30 09:45:02 | 000,038,912 | ---- | C] () -- C:\WINDOWS\System32\FVDS70.DLL
[2008/11/30 09:44:53 | 000,172,544 | ---- | C] () -- C:\WINDOWS\Mgxclean.exe
[2008/11/30 09:44:53 | 000,082,944 | ---- | C] () -- C:\WINDOWS\System32\Ppiv20.dll
[2008/11/30 09:30:08 | 000,000,584 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2008/11/30 09:26:39 | 000,008,728 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\wklnhst.dat
[2008/11/30 09:16:29 | 000,000,116 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2008/11/30 09:16:27 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2008/11/30 09:15:32 | 000,462,848 | ---- | C] () -- C:\WINDOWS\ssndii.exe
[2008/11/30 09:14:27 | 000,073,728 | R--- | C] () -- C:\WINDOWS\WiaInst.exe
[2008/11/30 09:14:23 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\WIASTIIO.dll
[2008/11/30 09:14:22 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\WIAIPH.dll
[2008/11/30 09:14:21 | 000,081,920 | R--- | C] () -- C:\WINDOWS\System32\WIAEH.dll
[2008/11/30 09:14:21 | 000,057,344 | R--- | C] () -- C:\WINDOWS\System32\Sswiadrv.dll
[2008/11/30 07:46:25 | 000,000,356 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Eigene Dateien.lnk
[2008/11/30 07:46:15 | 000,000,104 | ---- | C] () -- C:\Dokumente und Einstellungen\Dieter_Name\Bluetooth-Umgebung.lnk
[2008/07/24 15:13:19 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008/07/08 09:59:10 | 000,005,312 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2008/07/08 09:59:07 | 000,492,864 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2008/07/08 09:59:07 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2008/07/08 09:59:07 | 000,099,528 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2008/07/08 09:59:07 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2008/07/08 09:59:01 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/07/08 09:59:00 | 000,469,060 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/07/08 09:59:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/07/08 09:59:00 | 000,083,118 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/07/08 09:59:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/07/08 09:58:59 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/07/08 09:58:59 | 000,004,562 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/07/08 09:58:58 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2008/07/08 09:58:57 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/07/08 09:58:57 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/07/08 09:58:54 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/07/08 09:58:51 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/07/07 10:11:32 | 002,854,912 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2008/03/20 03:58:30 | 000,000,173 | ---- | C] () -- C:\WINDOWS\explorer.exe.config
[2008/03/17 09:54:36 | 000,012,208 | ---- | C] () -- C:\WINDOWS\AsTrayLang.ini
[2007/09/19 07:09:59 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdogrd.dll
[2007/09/06 16:40:36 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdodrs.dll
[2007/06/14 16:45:05 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdocnv4.dll
[2007/05/22 10:10:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdocaps.dll
[2006/08/01 01:53:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdovs.dll
[2003/09/18 02:38:20 | 000,019,968 | R--- | C] () -- C:\WINDOWS\System32\Cpuinf32.dll
[2002/06/06 22:02:02 | 000,116,736 | ---- | C] () -- C:\WINDOWS\System32\PCDLIB32.DLL
[2001/11/14 08:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[1999/01/22 14:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
========== LOP Check ==========
[2012/04/02 20:52:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\1707843
[2009/12/11 06:44:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\9500 Series
[2011/05/20 16:22:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\AntiVirus AntiSpyware 2011
[2010/04/19 05:13:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\Diercke Globus Online
[2012/02/03 18:47:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\EurekaLog
[2011/05/10 02:33:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\InterVideo
[2009/12/11 06:56:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\Lexmark Productivity Studio
[2012/05/01 15:34:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\ManyCam
[2009/12/14 06:51:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\NewSoft
[2008/12/02 07:27:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\StarOffice8
[2008/12/23 09:58:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\Template
[2010/07/29 04:06:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\Uniblue
[2012/01/01 12:18:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dieter_Name\Anwendungsdaten\Webex
[2010/02/13 09:48:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Lexmark Productivity Studio
[2008/12/10 10:19:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ECAP
[2008/12/10 07:50:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\EnterNHelp
[2012/09/16 15:50:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\itcjdnablvyntay
[2012/05/01 15:34:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ManyCam
[2008/12/10 07:50:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nikon
[2012/02/03 08:45:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SBS-Softwaresysteme
[2009/04/05 11:04:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2008/12/10 07:50:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ultima_T15
[2012/02/03 08:49:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Valentin EnergieSoftware
[2012/09/18 09:27:00 | 000,000,252 | ---- | M] () -- C:\WINDOWS\Tasks\Auf Updates für Windows Live Toolbar prüfen.job
[2012/09/18 11:37:00 | 000,000,242 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
[2012/09/18 11:30:22 | 000,000,434 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{56E32B87-6D74-406F-8F5B-B5B0A383D4DB}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 116 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2
< End of report >
19.09.2012, 14:39
Baum-Darstellung