Code:
OTL logfile created on: 07.01.2012 22:55:43 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Fabi\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18904)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,87 Gb Total Physical Memory | 0,61 Gb Available Physical Memory | 32,66% Memory free
3,92 Gb Paging File | 2,09 Gb Available in Paging File | 53,23% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 129,47 Gb Total Space | 9,55 Gb Free Space | 7,38% Space Free | Partition Type: NTFS
Drive D: | 19,57 Gb Total Space | 14,28 Gb Free Space | 72,99% Space Free | Partition Type: FAT32
Computer Name: FABI-PC | User Name: Fabi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.01.07 22:54:47 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Fabi\Desktop\OTL.exe
PRC - [2011.12.04 00:48:48 | 000,247,968 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil11e_ActiveX.exe
PRC - [2011.11.12 13:14:54 | 000,307,376 | ---- | M] (Google Inc.) -- C:\Programme\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2011.10.25 07:22:57 | 019,721,728 | ---- | M] (Europe Support Ltd. N.V.) -- C:\Games\Game Alarm\gamealarm.exe
PRC - [2011.07.14 18:52:48 | 000,491,520 | ---- | M] () -- C:\Games\Game Alarm\updater.exe
PRC - [2011.06.15 14:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Security Client\msseces.exe
PRC - [2011.04.27 14:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe
PRC - [2010.04.05 20:55:01 | 000,116,104 | ---- | M] () -- C:\Programme\Canon\IJPLM\ijplmsvc.exe
PRC - [2010.04.02 10:18:54 | 001,185,112 | ---- | M] (CANON INC.) -- C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE
PRC - [2010.03.25 03:50:00 | 002,516,296 | ---- | M] (CANON INC.) -- C:\Programme\Canon\MyPrinter\BJMYPRT.EXE
PRC - [2010.02.23 07:39:16 | 000,638,232 | ---- | M] (Microsoft Corporation) -- C:\Programme\Internet Explorer\iexplore.exe
PRC - [2009.09.16 11:30:00 | 000,772,608 | ---- | M] (Sony Ericsson Mobile Communications AB) -- C:\Programme\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
PRC - [2009.01.21 12:08:06 | 001,095,560 | ---- | M] (PC Tools) -- C:\Programme\Spyware Doctor\pctsSvc.exe
PRC - [2009.01.07 11:40:56 | 000,348,752 | ---- | M] (PC Tools) -- C:\Programme\Spyware Doctor\pctsAuxs.exe
PRC - [2008.12.08 12:33:48 | 001,173,384 | ---- | M] (PC Tools) -- C:\Programme\Spyware Doctor\pctsTray.exe
PRC - [2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008.03.30 12:58:18 | 000,185,632 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Common Files\Real\Update_OB\realsched.exe
PRC - [2008.01.10 15:24:56 | 001,232,896 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe
PRC - [2007.12.27 15:39:30 | 000,166,520 | ---- | M] () -- C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
PRC - [2007.12.27 15:39:28 | 000,706,056 | ---- | M] (IVT Corporation.) -- C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
PRC - [2007.12.27 15:39:20 | 000,051,816 | ---- | M] () -- C:\Programme\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
PRC - [2007.12.27 15:39:14 | 000,136,792 | ---- | M] (IVT Corporation.) -- C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe
PRC - [2007.09.04 13:52:08 | 000,095,536 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Programme\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
PRC - [2007.08.14 11:23:00 | 000,776,192 | ---- | M] (Google) -- C:\Programme\Google\Google Desktop Search\GoogleDesktopIndex.exe
PRC - [2007.04.16 14:24:10 | 000,192,512 | ---- | M] (Wistron) -- C:\Programme\Launch Manager\HotkeyApp.exe
PRC - [2007.02.15 19:52:16 | 000,118,784 | ---- | M] (Synaptics, Inc.) -- C:\Programme\Synaptics\SynTP\SynMedion.exe
PRC - [2007.02.15 16:07:16 | 004,390,912 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2006.12.26 10:23:34 | 000,180,224 | ---- | M] (Wistron Corp.) -- C:\Programme\Launch Manager\OSD.exe
PRC - [2006.11.17 19:45:26 | 000,118,784 | ---- | M] (Wistron Corp.) -- C:\Programme\Launch Manager\WisLMSvc.exe
PRC - [2006.11.09 13:37:52 | 000,086,016 | ---- | M] () -- C:\Programme\Launch Manager\WButton.exe
PRC - [2006.11.02 13:36:04 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2006.11.02 13:36:04 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
PRC - [2005.07.25 12:36:40 | 000,032,768 | ---- | M] () -- C:\Programme\Launch Manager\LaunchAp.exe
========== Modules (No Company Name) ==========
MOD - [2011.07.14 18:52:48 | 000,491,520 | ---- | M] () -- C:\Games\Game Alarm\updater.exe
MOD - [2011.01.08 01:20:58 | 000,159,744 | ---- | M] () -- C:\Games\Game Alarm\rt\jetrt\baseline720.dll
MOD - [2011.01.08 01:20:54 | 000,126,976 | ---- | M] () -- C:\Games\Game Alarm\rt\bin\zip.dll
MOD - [2011.01.08 01:20:52 | 000,069,632 | ---- | M] () -- C:\Games\Game Alarm\rt\bin\java.dll
MOD - [2011.01.08 01:20:52 | 000,020,480 | ---- | M] () -- C:\Games\Game Alarm\rt\bin\jetvm\jvm.dll
MOD - [2010.06.03 12:46:00 | 000,067,872 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2007.08.06 17:58:48 | 000,065,536 | ---- | M] () -- C:\Programme\IVT Corporation\BlueSoleil\BsVistaCommon.dll
MOD - [2006.11.09 13:37:52 | 000,086,016 | ---- | M] () -- C:\Programme\Launch Manager\WButton.exe
MOD - [2005.07.25 12:36:40 | 000,032,768 | ---- | M] () -- C:\Programme\Launch Manager\LaunchAp.exe
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- -- (NMIndexingService)
SRV - [2011.04.27 14:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () [Auto | Running] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010.04.05 20:55:01 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Programme\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2009.01.21 12:08:06 | 001,095,560 | ---- | M] (PC Tools) [Auto | Running] -- C:\Programme\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2009.01.07 11:40:56 | 000,348,752 | ---- | M] (PC Tools) [Auto | Running] -- C:\Programme\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2007.12.27 15:39:30 | 000,166,520 | ---- | M] () [Auto | Running] -- C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service)
SRV - [2007.12.27 15:39:20 | 000,051,816 | ---- | M] () [Auto | Running] -- C:\Programme\IVT Corporation\BlueSoleil\StartSkysolSvc.exe -- (Start BT in service)
SRV - [2007.08.14 11:23:00 | 000,069,120 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe -- (GoogleDesktopManager)
SRV - [2007.08.13 04:59:24 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006.11.17 19:45:26 | 000,118,784 | ---- | M] (Wistron Corp.) [On_Demand | Running] -- C:\Program Files\Launch Manager\WisLMSvc.exe -- (WisLMSvc)
========== Driver Services (SafeList) ==========
DRV - [2012.01.07 22:29:37 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{72B080FC-1AD1-4F6A-AFA1-5EB56DA5FB74}\MpKsl754161c8.sys -- (MpKsl754161c8)
DRV - [2011.04.18 12:18:50 | 000,043,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\MpNWMon.sys -- (MpNWMon)
DRV - [2010.03.19 14:40:55 | 000,097,792 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\ACEDRV05.sys -- (ACEDRV05)
DRV - [2009.05.25 13:35:00 | 000,116,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029unic.sys -- (s1029unic) Sony Ericsson Device 1029 USB Ethernet Emulation (WDM)
DRV - [2009.05.25 13:34:56 | 000,122,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029mdm.sys -- (s1029mdm)
DRV - [2009.05.25 13:34:56 | 000,090,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029bus.sys -- (s1029bus) Sony Ericsson Device 1029 driver (WDM)
DRV - [2009.05.25 13:34:56 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029mdfl.sys -- (s1029mdfl)
DRV - [2009.05.25 13:34:54 | 000,115,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029mgmt.sys -- (s1029mgmt) Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM)
DRV - [2009.05.25 13:34:54 | 000,111,912 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029obex.sys -- (s1029obex)
DRV - [2009.05.25 13:34:54 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029nd5.sys -- (s1029nd5) Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS)
DRV - [2009.04.03 10:18:26 | 000,130,936 | ---- | M] (PC Tools) [File_System | Boot | Running] -- C:\Windows\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2008.11.03 20:38:33 | 000,081,288 | ---- | M] (PCTools Research Pty Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\iksyssec.sys -- (IKSysSec)
DRV - [2008.11.03 20:38:33 | 000,066,952 | ---- | M] (PCTools Research Pty Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\iksysflt.sys -- (IKSysFlt)
DRV - [2008.11.03 20:38:33 | 000,040,840 | ---- | M] (PCTools Research Pty Ltd.) [File_System | Boot | Running] -- C:\Windows\system32\drivers\ikfilesec.sys -- (IKFileSec)
DRV - [2007.06.25 10:43:38 | 000,098,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117obex.sys -- (s117obex)
DRV - [2007.06.25 10:43:36 | 000,108,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117mdm.sys -- (s117mdm)
DRV - [2007.06.25 10:43:36 | 000,100,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117mgmt.sys -- (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM)
DRV - [2007.06.25 10:43:36 | 000,098,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117unic.sys -- (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM)
DRV - [2007.06.25 10:43:36 | 000,022,952 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117nd5.sys -- (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS)
DRV - [2007.06.25 10:43:26 | 000,014,888 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117mdfl.sys -- (s117mdfl)
DRV - [2007.06.25 10:43:22 | 000,082,984 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117bus.sys -- (s117bus) Sony Ericsson Device 117 driver (WDM)
DRV - [2007.06.24 21:56:54 | 000,038,920 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2007.06.24 21:56:40 | 000,027,656 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2007.06.24 21:56:34 | 000,034,312 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2007.03.05 20:59:04 | 000,018,320 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetdrv.sys -- (BT)
DRV - [2007.03.05 20:56:18 | 000,035,600 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2007.03.05 20:55:12 | 000,020,880 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2007.03.05 20:53:18 | 000,044,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VCommMgr.sys -- (VcommMgr)
DRV - [2007.03.05 20:52:18 | 000,034,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VComm.sys -- (VComm)
DRV - [2007.02.07 17:35:10 | 001,729,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2007.01.13 09:40:00 | 004,452,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007.01.08 18:34:04 | 000,449,024 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athrusb.sys -- (athrusb)
DRV - [2006.11.15 16:16:24 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2006.11.15 11:42:46 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006.11.15 09:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2006.11.02 08:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2006.11.02 08:30:56 | 000,429,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm60x32.sys -- (NVENETFD)
DRV - [2006.09.15 07:44:18 | 000,011,520 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2003.04.28 10:27:06 | 000,009,867 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\HOTKEY.sys -- (Hotkey)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.medion.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.medion.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files\Picasa2\npPicasa2.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2910: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Fabi\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)
FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{0E810812-F4BB-4309-942A-755587587A5E}: C:\Program Files\BullGuard Software\BullGuard\antispam\tbspamfilter
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1908.5032\npCIDetect14.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Move Media Player 7 (Enabled) = C:\Users\Fabi\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Fabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: Google-Suche = C:\Users\Fabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Google Mail = C:\Users\Fabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,736 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: ::1 localhost
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Turnabout Helper) - {87FF76F0-BCA9-40DC-B1E5-254062EEE8F4} - C:\Programme\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll (Google Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (Reify Toolbar) - {B99F805C-F0B1-48EA-8C8B-753BFCBED912} - C:\Programme\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.)
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (Reify Toolbar) - {B99F805C-F0B1-48EA-8C8B-753BFCBED912} - C:\Programme\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe" File not found
O4 - HKLM..\Run: [Google Updater] C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)
O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe ()
O4 - HKLM..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSD.exe (Wistron Corp.)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe (OLYMPUS IMAGING CORP.)
O4 - HKLM..\Run: [QuickFinder Scheduler] C:\Program Files\WordPerfect Office X3\Programs\QFSCHD130.EXE (Corel Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Program Files\GoogleEULA\EULALauncher.exe File not found
O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\Wbutton.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" File not found
O4 - HKCU..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe (OLYMPUS IMAGING CORP.)
O4 - HKCU..\Run: [Sony Ericsson PC Companion] C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson Mobile Communications AB)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Fabi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Game Alarm.lnk = C:\Games\Game Alarm\gamealarm.exe (Europe Support Ltd. N.V.)
O8 - Extra context menu item: &Windows Live Search - C:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Add to Windows &Live Favorites - hxxp://favorites.live.com/quickadd.aspx File not found
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Öffnen mit WordPerfect - C:\Programme\WordPerfect Office X3\Programs\WPLauncher.hta ()
O9 - Extra 'Tools' menuitem : &Turnabout Options... - {1C1CB5F8-D5A3-4FD9-876C-ECD2BDA32716} - C:\Programme\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.)
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in &Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} hxxp://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldde-de.cab (MSN Photo Upload Tool)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://static.pe.schuelervz.net/photouploader/ImageUploader5.cab?nocache=1227798386 (Image Uploader Control)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/DE-DE/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} hxxp://www.navigram.com/engine/v911/Navigram.cab (Navigram Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldde-de.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {E85362EF-40D4-4E5D-BE07-D6B036CCA277} https://secure.gopetslive.com/dev/gopets.cab (GoPets Control)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} https://secure.gopetslive.com/dev/GoPetsWeb.cab (GoPetsWeb Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{252131F5-C094-4AC0-9132-D2C62238476B}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\data {038664DA-5BA5-47FC-88D9-15ADE940ED55} - C:\Programme\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) -C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Fabi\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Fabi\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007.11.06 19:01:24 | 000,000,076 | ---- | M] () - D:\AUTORUN.INF -- [ FAT32 ]
O33 - MountPoints2\{0255f92b-796d-11df-8600-001583122a35}\Shell - "" = AutoRun
O33 - MountPoints2\{0255f92b-796d-11df-8600-001583122a35}\Shell\AutoRun\command - "" = F:\Startme.exe
O33 - MountPoints2\{79750547-bcbc-11df-b95a-001583122a35}\Shell\AutoRun\command - "" = G:\setupSNK.exe
O33 - MountPoints2\{f5ff8de1-996f-11df-ae43-001583122a35}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Autostart.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012.01.07 22:54:36 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Fabi\Desktop\OTL.exe
[2012.01.07 19:05:30 | 000,000,000 | ---D | C] -- C:\Users\Fabi\AppData\Roaming\Malwarebytes
[2012.01.07 19:05:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.01.07 19:04:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.07 19:03:12 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.01.07 19:03:11 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.01.07 00:49:47 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2007.08.14 11:09:25 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\csnp2uvc.dll
[32 C:\Users\Fabi\Documents\*.tmp files -> C:\Users\Fabi\Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.01.07 23:10:50 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{68F20928-A1BD-45E6-889F-3AF40BD81F0B}.job
[2012.01.07 22:57:00 | 000,000,868 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2012.01.07 22:54:47 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Fabi\Desktop\OTL.exe
[2012.01.07 22:51:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.01.07 22:51:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.01.07 22:33:03 | 000,012,978 | ---- | M] () -- C:\Users\Fabi\AppData\Roaming\nvModes.001
[2012.01.07 22:29:59 | 000,003,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.07 22:29:58 | 000,003,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.07 22:29:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.07 22:29:11 | 2011,873,280 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.07 19:05:09 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.01.07 14:40:07 | 000,012,978 | ---- | M] () -- C:\Users\Fabi\AppData\Roaming\nvModes.dat
[2012.01.07 11:42:29 | 000,001,975 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012.01.07 11:14:00 | 000,000,680 | ---- | M] () -- C:\Users\Fabi\AppData\Local\d3d9caps.dat
[2012.01.07 00:50:23 | 000,029,152 | ---- | M] () -- C:\Users\Fabi\Desktop\Desktop.zip
[2012.01.06 23:39:10 | 000,000,000 | ---- | M] () -- C:\Users\Fabi\defogger_reenable
[2012.01.06 14:42:04 | 000,028,858 | ---- | M] () -- C:\Users\Fabi\Desktop\logo.png
[2012.01.03 17:57:39 | 000,002,637 | ---- | M] () -- C:\Users\Fabi\Desktop\Microsoft Office Word 2003.lnk
[2011.12.23 15:01:12 | 000,000,556 | ---- | M] () -- C:\Windows\tasks\Norton Security Scan for Fabi.job
[2011.12.21 16:42:47 | 000,651,350 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.12.21 16:42:47 | 000,618,470 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.12.21 16:42:47 | 000,121,114 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.12.21 16:42:47 | 000,107,614 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.12.14 22:08:29 | 000,017,408 | -H-- | M] () -- C:\Users\Fabi\Desktop\photothumb.db
[2011.12.10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[32 C:\Users\Fabi\Documents\*.tmp files -> C:\Users\Fabi\Documents\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.01.07 19:05:09 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.01.07 11:22:28 | 2011,873,280 | -HS- | C] () -- C:\hiberfil.sys
[2012.01.07 00:50:23 | 000,029,152 | ---- | C] () -- C:\Users\Fabi\Desktop\Desktop.zip
[2012.01.06 23:39:10 | 000,000,000 | ---- | C] () -- C:\Users\Fabi\defogger_reenable
[2012.01.06 14:42:13 | 000,028,858 | ---- | C] () -- C:\Users\Fabi\Desktop\logo.png
[2011.02.08 22:24:35 | 000,006,371 | ---- | C] () -- C:\Users\Fabi\AppData\Local\rebur_navps.dat
[2011.02.08 22:24:34 | 000,234,193 | ---- | C] () -- C:\Users\Fabi\AppData\Local\rebur_nav.dat
[2011.02.08 22:24:34 | 000,003,390 | ---- | C] () -- C:\Users\Fabi\AppData\Local\rebur.dat
[2011.02.04 22:23:50 | 000,000,087 | ---- | C] () -- C:\Users\Fabi\AppData\Local\wgqzcsc.bat
[2010.07.19 17:22:55 | 000,000,089 | ---- | C] () -- C:\Users\Fabi\AppData\Local\dqgvrfuc.bat
[2010.04.02 12:33:07 | 000,003,415 | ---- | C] () -- C:\Users\Fabi\AppData\Local\amylxk_navps.dat
[2009.06.23 14:02:26 | 000,004,096 | -H-- | C] () -- C:\Users\Fabi\AppData\Local\keyfile3.drm
[2009.01.25 15:02:29 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2008.10.09 21:36:33 | 000,000,090 | ---- | C] () -- C:\Users\Fabi\AppData\Local\cfvro.bat
[2008.03.21 21:11:46 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2008.02.02 18:11:10 | 000,164,352 | ---- | C] () -- C:\Windows\System32\SpoonUninstall.exe
[2007.12.17 18:59:37 | 000,641,021 | ---- | C] () -- C:\Windows\unins000.exe
[2007.12.17 18:59:37 | 000,006,817 | ---- | C] () -- C:\Windows\unins000.dat
[2007.11.26 19:47:42 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2007.11.18 11:28:05 | 000,000,680 | ---- | C] () -- C:\Users\Fabi\AppData\Local\d3d9caps.dat
[2007.11.04 20:45:52 | 000,076,800 | ---- | C] () -- C:\Users\Fabi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.11.04 10:55:19 | 000,012,978 | ---- | C] () -- C:\Users\Fabi\AppData\Roaming\nvModes.001
[2007.11.04 10:48:24 | 000,012,978 | ---- | C] () -- C:\Users\Fabi\AppData\Roaming\nvModes.dat
[2007.11.04 10:17:00 | 000,000,092 | ---- | C] () -- C:\Users\Fabi\AppData\Local\fusioncache.dat
[2007.08.14 11:09:25 | 001,729,152 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2007.08.13 06:07:52 | 000,009,867 | ---- | C] () -- C:\Windows\System32\drivers\HOTKEY.sys
[2007.08.13 05:23:33 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2007.08.13 05:23:18 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2006.12.11 05:06:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2006.11.02 16:33:31 | 000,651,350 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2006.11.02 16:33:31 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2006.11.02 16:33:31 | 000,121,114 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2006.11.02 16:33:31 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 000,367,248 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,618,470 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,107,614 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006.11.02 08:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006.11.02 08:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
========== LOP Check ==========
[2009.01.11 13:13:47 | 000,000,000 | -HSD | M] -- C:\Users\Fabi\AppData\Roaming\.#
[2011.06.24 22:35:49 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\1morebee
[2010.02.15 20:44:14 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Alawar
[2008.06.01 17:57:38 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Alterlab
[2008.11.02 16:03:09 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Amaranth Games
[2010.08.26 03:25:59 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Amazon
[2008.03.04 17:59:47 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Aquapark
[2007.11.19 15:33:02 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Balloon Express
[2008.10.17 14:42:36 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\BeachPartyCraze
[2009.07.31 11:19:09 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\BlamGames
[2010.06.07 18:13:06 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Boomzap
[2010.02.13 00:51:22 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Camel101
[2010.12.21 21:19:02 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Canon
[2009.12.26 00:23:57 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\CasualForge
[2008.03.07 16:56:05 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\eGames
[2010.02.12 15:57:57 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\EleFun Games
[2010.02.21 00:51:03 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Fuzzy Games
[2009.03.28 18:27:25 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\GameInvest
[2008.11.23 17:33:24 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Gamelab
[2008.03.02 13:00:52 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Home Sweet Home
[2010.01.24 13:48:42 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\HSA
[2011.08.31 14:43:17 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\ICQ
[2007.11.07 14:11:42 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\ICQ Toolbar
[2008.10.22 14:52:52 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\ITTNord
[2009.01.18 17:07:56 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\iWin
[2008.03.07 16:14:52 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Jane s Hotel
[2008.11.23 17:01:48 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Ludia
[2008.03.18 16:29:38 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Magic Seeds
[2008.05.25 10:52:03 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Meridian93
[2010.06.11 17:04:21 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Merscom
[2007.12.01 15:28:01 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\MysteryStudio
[2010.10.02 23:47:27 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\oberon
[2009.11.18 16:39:25 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Oberon Games
[2010.07.27 14:08:06 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\panoramik
[2008.10.28 14:41:40 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\PetShowCraze
[2012.01.07 11:21:19 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\PhotoScape
[2009.04.24 14:31:10 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\PlayFirst
[2008.10.22 15:11:25 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Pogo Games
[2007.12.15 11:45:32 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Sandlot Games
[2010.01.18 18:56:38 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Shape games
[2008.05.22 13:21:18 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Sony
[2011.01.23 16:30:25 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\StarOffice8
[2008.01.20 17:19:54 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Super-Cow
[2007.11.04 17:19:25 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\T-Online
[2008.03.12 15:06:45 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Total Eclipse
[2008.02.02 19:59:28 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\URSE Games
[2009.03.21 19:40:14 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Valusoft
[2008.03.02 20:19:35 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\ViquaSoft
[2010.01.23 13:04:13 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\Windows Live Writer
[2009.05.23 21:47:06 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\World-LooM
[2009.12.06 22:54:33 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\YoudaGames
[2009.03.22 18:31:32 | 000,000,000 | ---D | M] -- C:\Users\Fabi\AppData\Roaming\ZEMNOTT
[2007.11.09 17:50:29 | 000,000,252 | ---- | M] () -- C:\Windows\Tasks\Auf Updates für Windows Live Toolbar prüfen.job
[2012.01.07 22:28:05 | 000,032,578 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.01.07 23:10:50 | 000,000,416 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{68F20928-A1BD-45E6-889F-3AF40BD81F0B}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:8643C5BE
@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:551E1CB4
@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:2FF4577A
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:08993BCD
@Alternate Data Stream - 151 bytes -> C:\ProgramData\TEMP:77846FFE
@Alternate Data Stream - 150 bytes -> C:\ProgramData\TEMP:A08FFD4D
@Alternate Data Stream - 148 bytes -> C:\ProgramData\TEMP:41C283B2
@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:E6683E95
@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:CBEB737E
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:002640E3
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:F791B5EF
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:FD444D31
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:273A8657
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:38317199
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:51A22C60
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:A23D24E7
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:74B502CB
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:7079A696
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:F62CAE78
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:E1F04E8D
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:AD171C9E
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:895798AD
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:4C509008
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:26946BE8
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:F50F1555
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:EB603FE4
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:CBCE0A92
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:79F970BE
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:87FA5E8A
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:30C46519
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:1941675B
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:128A6DC9
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:4F58D818
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:25005EFA
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:0EE601C7
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:F86CC73E
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:DCDE7C60
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:76986D86
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:FD6B3FC3
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:E54FA796
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:8FBE0E9C
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:226A6E31
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:BDB40AA4
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:B54102AD
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:95B7F1EC
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:7091055F
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:666FB4AA
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:5711EF65
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:00C31200
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:D66B5EAE
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:6DD87D86
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:3A925163
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:3612C9BE
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:05816AFA
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:A696643D
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:93DE1838
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:42228396
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:1C9565AC
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:158CC5FF
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:A94968B5
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:A4AD016E
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:81ED9272
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:75F5C19E
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:43AA121F
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:052A05A1
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:E6B9E5A3
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:E36F5B57
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:5C270C64
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:20B17557
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:0B61DB9F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:0651F96C
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:F264BECE
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:E5AFE07D
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:D26DD363
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:BB8F0982
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:B723C5EF
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:776E54F2
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:710F4DBF
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:5466F106
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:3780BCC3
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:EA2FBCA1
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:CDFF58FE
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:9FE30AB2
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:36B6EC9F
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:33553E61
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:162E02F7
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:DAFD38AE
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:700CD00E
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:6C491D31
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:1AF93AF4
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:F02F4882
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:AD79E1D8
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:9B52F176
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:4E903DEB
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:3B00070D
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:38849DE5
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:34FC1C45
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:2B4E9D93
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:D8A7F3FF
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:D61069DE
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:AA004D25
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:7DFDF9DF
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:426796C0
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:3447AB86
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:3214A283
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:B14B4A95
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:93C494CA
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:588B60C7
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:558C8E0A
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:91973ED2
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:5C07C19F
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:949483BD
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:6641B59F
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:FA5F15C4
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:A42A9F39
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:9A7901A9
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:943D6A82
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:07536DA3
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:E71141D2
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:4D7FCCD3
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:21745EE1
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:ADE16379
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:997E6AF4
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:61E5F0F7
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:48F0FFF8
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:375E3FC4
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:27AD48A5
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:77F07255
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:4F636E25
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:30376ACC
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:54BAC9A7
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:2B8FEE50
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:5EBA4934
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:492679C1
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:1CB8D545
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:E1982A23
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:6F1F1DBC
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:41099CE9
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:345E21F6
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:1CB3187E
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:1B1330FD
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:F951183D
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:CE7C61DF
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:A69F57F3
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:3064D21D
@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:CF5C4195
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:D690C7F7
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:BB48E5A3
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:9335E3B6
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:6A18D1F5
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:F5BB3657
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:ABE89FFE
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:9AB338B9
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:9A221D63
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:765C6A14
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:37CE0F2E
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:126591AF
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:0207B271
@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:B6FA1F20
@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:87E0E06D
@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:7FC64998
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:DF2EA4BB
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:615435BE
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:567AC0A6
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:12A8EFF7
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:919B0931
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:6A97C459
< End of report > |