Mozilla Firefox- /gzo.jsjava.net/sd/wrap-0.01.html?u=

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2013 01
Ran by Administrator (administrator) on MB-LAPTOP on 23-10-2013 21:48:00
Running from C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Downloads
Microsoft Windows XP Professional Service Pack 3, v.3244 (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(Check Point Software Technologies LTD) C:\Programme\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies) C:\Programme\CheckPoint\ZAForceField\IswSvc.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Adobe Systems Inc.) C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
(Check Point Software Technologies LTD) C:\Programme\CheckPoint\ZoneAlarm\zatray.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Skype Technologies S.A.) C:\Programme\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [15600128 2005-11-17] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Acrobat Assistant 7.0] - C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2004-12-14] (Adobe Systems Inc.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [ZoneAlarm] - C:\Programme\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-03-27] (Check Point Software Technologies LTD)
HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [ISW] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-08] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKCU\...\Run: [Skype] - C:\Programme\Skype\Phone\Skype.exe [17706088 2013-02-07] (Skype Technologies S.A.)
HKCU\...\Policies\Explorer: [NoSMHelp] 1
HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKCU\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKCU\...\Policies\Explorer: [NoResolveSearch] 1
HKCU\...\Policies\Explorer: [NoInstrumentation] 1
HKCU\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKCU\...\Policies\Explorer: [NoStartBanner] 1
HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKCU\...\Policies\Explorer: [NoStartMenuPinnedList] 1
HKCU\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Acrobat - Schnellstart.lnk
ShortcutTarget: Adobe Acrobat - Schnellstart.lnk -> C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe ()
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoCAD-Startbeschleuniger.lnk
ShortcutTarget: AutoCAD-Startbeschleuniger.lnk -> C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe (Autodesk, Inc)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 195.202.138.3 195.202.128.3 62.40.128.2

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\k6lcbkaq.default
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.3 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: zonealarm.com - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\k6lcbkaq.default\Extensions\ffxtlbr@zonealarm.com
FF Extension: No Name - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\k6lcbkaq.default\Extensions\WebSiteRecommendation@weliketheweb.com
FF Extension: No Name - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\k6lcbkaq.default\Extensions\{58e1c1fa-8531-ca4f-e562-16735cff279d}
FF Extension: No Name - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\k6lcbkaq.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\k6lcbkaq.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Programme\CheckPoint\ZAForceField\TrustChecker
FF Extension: ZoneAlarm Security Engine - C:\Programme\CheckPoint\ZAForceField\TrustChecker

========================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe [69632 2009-12-02] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-09-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-08] (Avira Operations GmbH & Co. KG)
S3 Autodesk Licensing Service; C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe [77944 2009-12-02] (Autodesk)
R2 IswSvc; C:\Programme\CheckPoint\ZAForceField\IswSvc.exe [497320 2012-11-22] (Check Point Software Technologies)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-20] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-10-02] (Mozilla Foundation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [161384 2013-02-07] (Skype Technologies)
R2 vsmon; C:\Programme\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-03-27] (Check Point Software Technologies LTD)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-08] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-08] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-08-31] (Avira Operations GmbH & Co. KG)
R3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [132352 2005-04-05] (Broadcom Corporation)
R3 HSFHWAZL; C:\Windows\System32\DRIVERS\HSFHWAZL.sys [202240 2005-11-08] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\Windows\System32\DRIVERS\HSF_DPV.sys [997376 2005-11-08] (Conexant Systems, Inc.)
R2 ISWKL; C:\Programme\CheckPoint\ZAForceField\ISWKL.sys [27056 2012-11-22] (Check Point Software Technologies)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [133208 2012-01-09] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2012-01-09] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [485808 2012-01-09] (Kaspersky Lab)
R3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
S3 Secdrv; C:\Windows\System32\DRIVERS\secdrv.sys [27440 2006-12-29] ()
R3 SMCIRDA; C:\Windows\System32\DRIVERS\smcirda.sys [35913 2001-08-18] (SMC)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-31] (Avira GmbH)
R1 Vsdatant; C:\Windows\System32\vsdatant.sys [527848 2013-03-27] (Check Point Software Technologies LTD)
R3 w39n51; C:\Windows\System32\DRIVERS\w39n51.sys [1427968 2005-11-27] (Intel® Corporation)
S4 IntelIde; No ImagePath
U5 Tcpip6; C:\Windows\System32\Drivers\Tcpip6.sys [225664 2007-10-30] (Microsoft Corporation)
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-23 20:24 - 2013-10-23 20:29 - 00000000 ____D C:\AdwCleaner
2013-10-23 16:23 - 2013-10-23 16:23 - 00000000 ____D C:\FRST
2013-10-20 16:13 - 2013-10-20 16:13 - 102068998 _____ C:\WINDOWS\system32\檐纳嘄6
2013-10-20 10:24 - 2013-10-20 10:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\WebPlayer
2013-10-19 20:29 - 2013-10-19 20:29 - 101983560 _____ C:\WINDOWS\system32\벖鐨唄6
2013-10-19 14:30 - 2013-10-19 14:30 - 101916422 _____ C:\WINDOWS\system32\唄6
2013-10-16 20:48 - 2013-10-16 20:48 - 101406750 _____ C:\WINDOWS\system32\榩唄6
2013-10-14 19:30 - 2013-10-14 19:30 - 100910526 _____ C:\WINDOWS\system32\摗꿷唄6
2013-10-13 16:48 - 2013-10-13 16:48 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Desktop\office
2013-10-10 19:58 - 2013-10-20 12:39 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Desktop\LUKAS
2013-10-04 15:15 - 2013-10-04 15:15 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google
2013-10-04 15:15 - 2013-10-04 15:15 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\My Cheat Tables
2013-10-02 19:34 - 2013-10-04 14:25 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-09-27 19:40 - 2013-09-27 19:40 - 98286374 _____ C:\WINDOWS\system32\₁깬唄6
2013-09-23 21:00 - 2013-09-23 21:08 - 00000000 ____D C:\Programme\MidiPiano

==================== One Month Modified Files and Folders =======

2013-10-23 21:08 - 2009-12-02 14:21 - 00002607 _____ C:\Dokumente und Einstellungen\Administrator\Desktop\Microsoft Office Outlook 2003.lnk
2013-10-23 21:05 - 2012-06-16 16:11 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-23 20:32 - 2009-12-02 13:31 - 00942992 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-23 20:31 - 2009-12-02 14:09 - 00000000 ____D C:\WINDOWS\system32\Lang
2013-10-23 20:31 - 2009-12-02 13:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-23 20:31 - 2005-06-11 02:08 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\CheckPoint
2013-10-23 20:30 - 2009-12-02 13:36 - 00032488 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-23 20:30 - 2009-12-02 13:36 - 00000300 ___SH C:\Dokumente und Einstellungen\Administrator\ntuser.ini
2013-10-23 20:30 - 2009-12-02 13:36 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator
2013-10-23 20:29 - 2013-10-23 20:24 - 00000000 ____D C:\AdwCleaner
2013-10-23 20:28 - 2009-12-02 13:26 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2013-10-23 20:28 - 2009-12-02 13:26 - 00000000 ____D C:\Programme
2013-10-23 16:23 - 2013-10-23 16:23 - 00000000 ____D C:\FRST
2013-10-23 16:18 - 2009-12-02 14:21 - 00002433 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Neues Office-Dokument.lnk
2013-10-22 18:46 - 2004-08-04 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-10-20 22:17 - 2013-01-08 19:43 - 00002347 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk
2013-10-20 21:12 - 2009-12-02 13:36 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme
2013-10-20 18:04 - 2013-08-11 12:30 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\.minecraft
2013-10-20 16:13 - 2013-10-20 16:13 - 102068998 _____ C:\WINDOWS\system32\檐纳嘄6
2013-10-20 13:05 - 2013-02-23 22:08 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Skype
2013-10-20 12:39 - 2013-10-10 19:58 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Desktop\LUKAS
2013-10-20 10:24 - 2013-10-20 10:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\WebPlayer
2013-10-19 20:29 - 2013-10-19 20:29 - 101983560 _____ C:\WINDOWS\system32\벖鐨唄6
2013-10-19 14:30 - 2013-10-19 14:30 - 101916422 _____ C:\WINDOWS\system32\唄6
2013-10-16 20:48 - 2013-10-16 20:48 - 101406750 _____ C:\WINDOWS\system32\榩唄6
2013-10-15 20:45 - 2012-06-16 15:36 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-10-14 19:30 - 2013-10-14 19:30 - 100910526 _____ C:\WINDOWS\system32\摗꿷唄6
2013-10-13 16:55 - 2012-09-08 21:39 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\vlc
2013-10-13 16:48 - 2013-10-13 16:48 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Desktop\office
2013-10-10 19:55 - 2013-04-13 07:38 - 00741376 _____ C:\Dokumente und Einstellungen\Administrator\Desktop\mo-alex.xls
2013-10-10 18:05 - 2012-06-16 16:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-10 18:05 - 2012-06-16 16:11 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-08 19:53 - 2012-06-27 20:45 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-10-04 15:15 - 2013-10-04 15:15 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google
2013-10-04 15:15 - 2013-10-04 15:15 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\My Cheat Tables
2013-10-04 14:25 - 2013-10-02 19:34 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-09-27 19:40 - 2013-09-27 19:40 - 98286374 _____ C:\WINDOWS\system32\₁깬唄6
2013-09-23 21:08 - 2013-09-23 21:00 - 00000000 ____D C:\Programme\MidiPiano
2013-09-23 20:58 - 2005-06-01 01:16 - 00093264 _____ C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\a2zLyrics_1060-8102_v122.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\appshat-distribution.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\BabylonTB.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\FreeZip920.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\Installer.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\jre-7u45-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\Quarantine.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\QuickShare1.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\uninst1.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\UpdateCheckerSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2007-10-30 23:51] - [2007-10-30 23:51] - 1036800 ____A (Microsoft Corporation) ea1737c741408ef7731cfdb3cc008e8f 

C:\Windows\System32\winlogon.exe
[2007-10-30 23:51] - [2007-10-30 23:51] - 0513024 ____A (Microsoft Corporation) ae88ea45b54f40f99a0a5ef7f3ec240c 

C:\Windows\System32\svchost.exe
[2007-10-30 23:51] - [2007-10-30 23:51] - 0014336 ____A (Microsoft Corporation) 359534c262da4933c08a5baac49b7af4 

C:\Windows\System32\services.exe
[2007-10-30 23:51] - [2007-10-30 23:51] - 0109056 ____A (Microsoft Corporation) ad846961e2ef28d56b03f11883f0988a 

C:\Windows\System32\User32.dll
[2007-10-30 23:51] - [2007-10-30 23:51] - 0580096 ____A (Microsoft Corporation) fd4c4ba5f711a94a3c78f9b686009b93 

C:\Windows\System32\userinit.exe
[2007-10-30 23:51] - [2007-10-30 23:51] - 0026624 ____A (Microsoft Corporation) 3e4e5f43834cdba04a8870d8f8ab4c93 

C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.

==================== End Of Log ============================