Windows XP: Sperrschirm nach Bundespolizei-Virus

OTL logfile created on: 1/28/2014 11:24:58 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
1,022.00 Mb Total Physical Memory | 803.00 Mb Available Physical Memory | 79.00% Memory free
906.00 Mb Paging File | 851.00 Mb Available in Paging File | 94.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 93.16 Gb Total Space | 49.34 Gb Free Space | 52.96% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [On_Demand] --  -- (AppMgmt)
SRV - [2013/12/28 10:26:42 | 000,317,440 | ---- | M] (hxxp://tortoisesvn.net) [Auto] -- C:\DOKUME~1\ALLUSE~1.WIN\ANWEND~1\ijzl7tv.jss -- (winmgmt)
SRV - [2013/12/28 10:23:41 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/09/06 12:29:38 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Programme\McAfee Security Scan\3.8.130\McCHSvc.exe -- (McComponentHostService)
SRV - [2012/04/20 20:16:42 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011/10/24 15:32:00 | 000,055,144 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/09/29 02:57:46 | 000,616,448 | ---- | M] (Nokia) [On_Demand] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008/05/07 09:12:54 | 003,425,632 | ---- | M] (Symantec Corporation) [Auto] -- C:\Programme\Norton Save and Restore\Agent\VProSvc.exe -- (Norton Save and Restore)
SRV - [2006/11/08 05:42:27 | 002,541,248 | ---- | M] (Symantec Corporation) [On_Demand] -- C:\Programme\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2006/11/08 05:42:27 | 000,194,240 | ---- | M] (Symantec Corporation) [Auto] -- C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Automatisches LiveUpdate - Scheduler)
SRV - [2006/01/06 16:25:12 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2005/11/24 10:03:22 | 000,053,337 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2005/11/24 09:57:44 | 000,053,337 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2005/11/24 09:47:30 | 000,069,718 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2005/11/13 18:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/06/20 16:10:30 | 000,053,248 | ---- | M] (Hewlett-Packard Company) [Auto] -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe -- (LightScribeService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (UsbserFilt)
DRV - File not found [Kernel | On_Demand] --  -- (upperdev)
DRV - File not found [Kernel | Auto] --  -- (SSPORT)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand] --  -- (nmwcdnsuc)
DRV - File not found [Kernel | On_Demand] --  -- (nmwcdnsu)
DRV - File not found [Kernel | On_Demand] --  -- (nmwcdc)
DRV - File not found [Kernel | On_Demand] --  -- (nmwcd)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2011/08/02 11:38:44 | 000,018,432 | ---- | M] (Apple Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\netaapl.sys -- (Netaapl)
DRV - [2008/08/26 03:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008/05/07 08:59:20 | 000,137,952 | ---- | M] (StorageCraft) [File_System | Boot] -- C:\WINDOWS\system32\drivers\symsnap.sys -- (symsnap)
DRV - [2007/08/24 12:45:22 | 000,101,120 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007/06/27 11:31:26 | 000,014,072 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\vproeventmonitor.sys -- (VProEventMonitor)
DRV - [2007/02/13 12:06:36 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- C:\WINDOWS\system32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007/02/13 11:33:04 | 000,037,864 | ---- | M] (Symantec Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\v2imount.sys -- (v2imount)
DRV - [2007/01/17 04:25:12 | 000,041,984 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp)
DRV - [2005/03/16 07:43:06 | 000,159,488 | ---- | M] (Texas Instruments) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2005/03/10 04:41:52 | 000,371,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2005/03/08 16:36:52 | 000,988,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005/03/04 06:10:26 | 000,074,496 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2004/12/15 10:18:34 | 000,207,232 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2004/12/15 10:18:28 | 000,703,232 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004/12/15 10:18:26 | 001,038,208 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2004/11/17 05:17:58 | 000,280,192 | R--- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\camchal.sys -- (CAMCHALA)
DRV - [2004/11/17 05:17:14 | 000,293,120 | R--- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\camcaud.sys -- (CAMCAUD)
DRV - [2004/08/03 16:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C)
DRV - [2004/06/02 11:13:32 | 000,016,896 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2004/06/02 10:50:16 | 000,053,816 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2004/06/02 10:07:28 | 001,240,938 | ---- | M] (WIDCOMM, Inc.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2004/06/02 10:00:10 | 000,147,864 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2004/06/02 09:59:58 | 000,030,235 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004/04/14 00:36:50 | 000,007,432 | ---- | M] (Hewlett-Packard Company) [Kernel | System] -- C:\WINDOWS\system32\drivers\eabfiltr.sys -- (eabfiltr)
DRV - [2003/06/06 04:46:16 | 000,005,220 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\EabUsb.sys -- (eabusb)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\Hansjörg.GROSSEN_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/
IE - HKU\Hansjörg.GROSSEN_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Hansjörg.GROSSEN_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
 
IE - HKU\systemprofile_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..browser.search.selectedEngine: "Ask.com Search"
FF - prefs.js..browser.search.order.1: "Ask.com Search"
FF - prefs.js..browser.search.defaultengine: "Ask.com Search"
FF - prefs.js..browser.search.defaultenginename: "Ask.com Search"
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Programme\McAfee Security Scan\3.8.130\npMcAfeeMSS.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/05/19 04:18:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins
 
[2012/05/19 04:19:12 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\mozilla\Extensions
[2013/02/23 12:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\mozilla\Firefox\Profiles\p8c52jhi.default\extensions
[2013/02/23 12:16:33 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\mozilla\Firefox\Profiles\p8c52jhi.default\extensions\toolbar@ask.com
[2013/02/08 08:53:16 | 000,002,333 | ---- | M] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Mozilla\Firefox\Profiles\p8c52jhi.default\searchplugins\askcom.xml
[2012/09/02 10:41:35 | 000,002,306 | ---- | M] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Mozilla\Firefox\Profiles\p8c52jhi.default\searchplugins\askcomsearch.xml
[2012/10/18 08:46:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012/06/23 06:18:34 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012/09/02 10:40:59 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012/10/18 08:46:05 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
File not found (No name found) -- 
[2012/04/20 20:18:00 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012/04/20 20:54:08 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/04/20 20:54:08 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/04/20 20:54:08 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/04/20 20:54:08 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/04/20 20:54:08 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/04/20 20:54:08 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2014/01/28 23:20:01 | 000,450,647 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1	localhost
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 15468 more lines...
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -  File not found
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} -  File not found
O3 - HKLM\..\Toolbar: (no name) -  - No CLSID value found.
O3 - HKLM\..\Toolbar: (HP-Ansicht) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Programme\Hp\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} -  File not found
O3 - HKU\Hansjörg.GROSSEN_ON_C\..\Toolbar\ShellBrowser: (HP-Ansicht) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Programme\Hp\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKU\Hansjörg.GROSSEN_ON_C\..\Toolbar\WebBrowser: (HP-Ansicht) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Programme\Hp\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKU\Hansjörg.GROSSEN_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} -  File not found
O4 - HKLM..\Run: [LSBWatcher] C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe (Hewlett-Packard Company)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk = C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (WIDCOMM, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\BTTray.lnk.disabled ()
O4 - Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\McAfee Security Scan Plus.lnk.disabled ()
O4 - Startup: C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Startmenü\Programme\Autostart\OpenOffice.org 3.2.lnk.disabled ()
O4 - Startup: C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Startmenü\Programme\Autostart\vt7lzji.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Startmenü\Programme\Autostart\vt7lzji.lnk.disabled ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Hansjörg.GROSSEN_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService.NT-AUTORITÄT_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService.NT-AUTORITÄT_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\systemprofile_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\widimg {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (WIDCOMM, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 () - hxxp://ehg-nokiafin.hitbox.com/HG?hc=we88&cd=1&hv=6&ce=u&hb=DM541007JIDE&n=all+accessories&vcon=/find+products/accessories/all+accessories&seg=&cmp=&gp=&fnl=&pec=&dcmp=&ra=&gn=&cv=&ld=&la=&c1=&c2=&c3=&c4=&vpc=090101rn
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O24 - Desktop Components:2 (E-Mail Login) - hxxp://www.bluewin.ch/de/email/
O24 - Desktop WallPaper: 
O24 - Desktop BackupWallPaper: 
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/09/28 05:08:55 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{0014c7d8-92ac-11dd-92d4-0010c6d8f6f9}\Shell - "" = AutoRun
O33 - MountPoints2\{0014c7d8-92ac-11dd-92d4-0010c6d8f6f9}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0014c7d8-92ac-11dd-92d4-0010c6d8f6f9}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{0014c7db-92ac-11dd-92d4-0010c6d8f6f9}\Shell - "" = AutoRun
O33 - MountPoints2\{0014c7db-92ac-11dd-92d4-0010c6d8f6f9}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0014c7db-92ac-11dd-92d4-0010c6d8f6f9}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{6fe2c365-adad-11dd-9916-0010c6d8f6f9}\Shell - "" = AutoRun
O33 - MountPoints2\{6fe2c365-adad-11dd-9916-0010c6d8f6f9}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{6fe2c365-adad-11dd-9916-0010c6d8f6f9}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{95dd9525-8b00-11de-afff-0010c6d8f6f9}\Shell - "" = AutoRun
O33 - MountPoints2\{95dd9525-8b00-11de-afff-0010c6d8f6f9}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{95dd9525-8b00-11de-afff-0010c6d8f6f9}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{993ba7d7-6aac-11da-9bee-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{993ba7d7-6aac-11da-9bee-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{993ba7d7-6aac-11da-9bee-806d6172696f}\Shell\AutoRun\command - "" = Z:\setup.exe
O33 - MountPoints2\{9b71553b-ac59-11de-bd9b-0010c6d8f6f9}\Shell\AutoRun\command - "" = D:\avira.exe
O33 - MountPoints2\{cfb045b5-2ba0-11e0-be77-0010c6d8f6f9}\Shell\AutoRun\command - "" = D:\TranscendService(JF).exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/01/27 16:12:46 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
[2014/01/27 16:12:46 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo
[2014/01/27 16:12:46 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten
[2014/01/27 16:12:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
[2014/01/27 16:12:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü
[2014/01/27 16:12:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
[2014/01/27 16:12:46 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies
[2014/01/27 16:12:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen
[2014/01/27 16:12:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent
[2014/01/27 16:12:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung
[2014/01/27 16:12:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen
[2014/01/27 16:12:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Druckumgebung
[2014/01/27 16:12:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2014/01/27 16:12:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten
[2014/01/27 16:12:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop
[2013/12/28 10:26:42 | 000,317,440 | ---- | C] (hxxp://tortoisesvn.net) -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\ijzl7tv.jss
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014/01/29 00:42:54 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart
[2014/01/29 00:37:35 | 000,000,245 | ---- | M] () -- C:\boot.ini
[2014/01/28 23:20:01 | 000,450,647 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2014/01/28 22:01:57 | 000,450,647 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20140128-202001.backup
[2014/01/28 16:12:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014/01/28 16:12:09 | 1072,222,208 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/28 16:03:57 | 095,025,368 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\vt7lzji.fee
[2014/01/28 16:03:51 | 000,000,806 | ---- | M] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Startmenü\Programme\Autostart\vt7lzji.lnk
[2014/01/28 16:03:48 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\vt7lzji.odd
[2014/01/28 03:26:16 | 000,450,647 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20140128-190156.backup
[2014/01/28 01:04:18 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job.bak
[2014/01/28 01:04:18 | 000,000,520 | ---- | M] () -- C:\WINDOWS\tasks\Automatische Wartung.job.bak
[2014/01/27 17:31:00 | 000,000,232 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job.bak
[2014/01/27 17:27:57 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job.bak
[2014/01/27 17:20:15 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job.bak
[2014/01/27 16:06:55 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{463D7B0A-3E50-4E5B-A6EC-36E20130A166}.job.bak
[2014/01/27 15:59:08 | 000,446,295 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20140128-002615.backup
[2014/01/27 15:54:56 | 000,446,295 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20140127-215908.backup
[2014/01/27 15:43:46 | 000,446,295 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20140127-215456.backup
[2014/01/27 14:22:44 | 000,013,736 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014/01/28 16:03:50 | 000,000,806 | ---- | C] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Startmenü\Programme\Autostart\vt7lzji.lnk
[2014/01/27 17:15:00 | 1072,222,208 | -HS- | C] () -- C:\hiberfil.sys
[2014/01/27 16:12:47 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk
[2014/01/27 16:12:47 | 000,000,772 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Windows Media Player.lnk
[2013/12/28 10:27:39 | 000,000,411 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\vt7lzji.reg
[2013/12/28 10:26:51 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\vt7lzji.odd
[2013/12/28 10:26:44 | 095,025,368 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\vt7lzji.fee
[2012/02/18 07:48:38 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/11/15 15:19:51 | 000,037,868 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/09/01 08:30:30 | 000,000,183 | ---- | C] () -- C:\Programme\Verknüpfung mit Wechseldatenträger (D).lnk
[2008/12/12 14:55:35 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2008/11/22 09:27:10 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2008/11/15 03:24:30 | 000,005,120 | ---- | C] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/11/15 02:20:48 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2008/10/09 15:10:26 | 000,215,144 | R--- | C] () -- C:\WINDOWS\patchw32.dll
[2008/10/09 15:08:41 | 000,215,144 | R--- | C] () -- C:\WINDOWS\pw32a.dll
[2008/10/04 01:29:36 | 000,001,638 | ---- | C] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\wklnhst.dat
[2008/10/04 01:03:04 | 000,051,078 | ---- | C] () -- C:\WINDOWS\hpdins05.dat
[2008/10/04 01:03:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpdmdl01.dat
[2008/09/28 06:44:51 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2008/09/28 06:44:51 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2008/09/28 06:44:51 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2008/09/28 06:44:51 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2008/09/28 06:44:51 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2008/09/28 06:44:51 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2008/09/28 06:31:50 | 000,000,149 | ---- | C] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/28 06:27:44 | 000,079,320 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2008/09/28 06:10:28 | 000,010,527 | ---- | C] () -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\SmarThruOptions.xml
[2008/09/28 06:10:08 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\SecSNMP.dll
[2008/09/28 06:09:59 | 000,000,116 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2008/09/28 06:09:55 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2008/09/28 06:08:53 | 000,479,232 | ---- | C] () -- C:\WINDOWS\ssndii.exe
[2008/09/28 06:05:32 | 000,110,592 | R--- | C] () -- C:\WINDOWS\WiaInst.exe
[2008/09/28 06:05:32 | 000,094,208 | R--- | C] () -- C:\WINDOWS\System32\WIAIPH.dll
[2008/09/28 06:05:32 | 000,086,016 | R--- | C] () -- C:\WINDOWS\System32\WIAEH.dll
[2008/09/28 06:05:32 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\Sswiadrv.dll
[2008/09/28 06:05:32 | 000,057,344 | R--- | C] () -- C:\WINDOWS\System32\WIASTIIO.dll
[2008/09/28 06:05:32 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\Ssuiext.dll
[2008/09/28 06:05:15 | 000,022,723 | ---- | C] () -- C:\WINDOWS\System32\cx21sl3.dll
[2008/09/28 05:52:25 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/09/28 05:50:49 | 000,195,368 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/09/28 05:12:04 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/09/28 05:05:25 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005/06/30 22:47:08 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/04 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 07:00:00 | 000,496,626 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/04 07:00:00 | 000,472,650 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 07:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/04 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 07:00:00 | 000,101,084 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/04 07:00:00 | 000,084,522 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 07:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/04 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 07:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 07:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 07:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/06/02 10:28:30 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2002/05/28 12:55:42 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002/05/28 12:54:40 | 000,004,605 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/11/14 06:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
========== LOP Check ==========
 
[2010/01/23 08:38:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Anwendungsdaten\TuneUp Software
[2009/09/28 13:09:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\CoSoSys
[2010/05/30 11:56:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\DVDVideoSoftIEHelpers
[2009/10/26 04:01:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Intervideo
[2008/09/28 06:56:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Leadertech
[2010/10/30 06:48:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Nokia
[2009/02/21 05:41:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Nseries
[2010/03/15 15:37:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\OpenOffice.org
[2010/11/02 14:27:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\PC Suite
[2012/05/16 10:03:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\PriceGong
[2010/01/13 13:34:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\PTV AG
[2008/09/28 06:10:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\SmarThru4
[2008/10/04 01:30:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\Template
[2009/10/26 08:24:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hansjörg.GROSSEN\Anwendungsdaten\TuneUp Software
[2011/10/21 12:09:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Ask
[2010/10/30 06:53:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Installations
[2008/10/04 01:28:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\InterVideo
[2008/12/02 15:33:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Nokia
[2010/10/30 06:36:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\NokiaInstallerCache
[2008/10/11 09:20:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\PC Suite
[2009/12/19 01:47:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TuneUp Software
[2011/11/15 15:16:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/10/26 08:22:58 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357}
[2009/04/14 00:39:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/12/19 01:47:36 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2014/01/28 01:04:18 | 000,000,520 | ---- | M] () -- C:\WINDOWS\Tasks\Automatische Wartung.job.bak
[2014/01/27 17:31:00 | 000,000,232 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job.bak
[2014/01/27 16:06:55 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{463D7B0A-3E50-4E5B-A6EC-36E20130A166}.job.bak
 
========== Purity Check ==========
 
 
< End of report >