| Knallballer | 24.05.2012 16:52 |
Hi,
hier die beiden Files...
otl.txt:OTL Logfile: Code:
OTL logfile created on: 24.05.2012 17:39:00 - Run 1
OTL by OldTimer - Version 3.2.43.1 Folder = C:\Users\Benedikt Frank\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,86 Gb Total Physical Memory | 2,25 Gb Available Physical Memory | 58,23% Memory free
7,73 Gb Paging File | 5,89 Gb Available in Paging File | 76,30% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 59,62 Gb Total Space | 20,67 Gb Free Space | 34,68% Space Free | Partition Type: NTFS
Drive D: | 574,05 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: SPEEDSTER | User Name: Benedikt Frank | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.05.24 17:36:44 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Benedikt Frank\Desktop\OTL.exe
PRC - [2012.05.20 19:58:11 | 000,529,232 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2012.05.08 23:26:28 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.08 23:26:28 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.08 23:26:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2012.03.09 22:52:31 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2012.02.15 01:03:14 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Benedikt Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
========== Modules (No Company Name) ==========
MOD - [2012.05.20 19:58:11 | 020,313,384 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2012.05.20 19:58:10 | 001,099,576 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll
MOD - [2012.05.20 19:58:10 | 000,895,312 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll
MOD - [2012.05.20 19:58:10 | 000,190,776 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll
MOD - [2012.05.20 19:58:10 | 000,123,192 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll
========== Win32 Services (SafeList) ==========
SRV:64bit: - [2011.07.08 05:25:02 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.05.20 19:58:11 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.05.08 23:26:28 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.05.08 23:26:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.05 20:54:04 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.04.27 01:01:59 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.03.28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2012.05.08 23:26:28 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.05.08 23:26:28 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.09.16 17:08:07 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.07.08 06:15:50 | 009,884,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011.07.08 04:47:04 | 000,307,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2009.10.05 16:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009.09.17 20:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.volley.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = CD 9A 1A 7F B9 4E CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {9F9F1FFA-56C4-459C-BCB2-6780932ADE88}
IE - HKCU\..\SearchScopes\{9F9F1FFA-56C4-459C-BCB2-6780932ADE88}: "URL" = hxxp://www.google.de/search?q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 59899
FF - prefs.js..network.proxy.type: 4
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.27 01:01:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.27 01:01:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.27 01:01:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.27 01:01:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.27 01:01:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.27 01:01:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2011.07.31 01:02:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt Frank\AppData\Roaming\mozilla\Extensions
[2012.05.02 15:54:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt Frank\AppData\Roaming\mozilla\Firefox\Profiles\mm1ooqcs.default\extensions
[2012.03.19 17:54:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012.04.27 01:01:59 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.12.21 07:08:50 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.12.21 07:02:40 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.12.21 07:08:50 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.12.21 07:08:50 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.12.21 07:08:50 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.12.21 07:08:50 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\Benedikt Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Benedikt Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{69E7437F-DA56-47A2-9B3D-44D6EAC12782}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKCU Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{71dfb48d-d269-11e0-b98a-ef36aa4e9f7b}\Shell - "" = AutoRun
O33 - MountPoints2\{71dfb48d-d269-11e0-b98a-ef36aa4e9f7b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{71dfb499-d269-11e0-b98a-ef36aa4e9f7b}\Shell - "" = AutoRun
O33 - MountPoints2\{71dfb499-d269-11e0-b98a-ef36aa4e9f7b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d8d85eae-d0ed-11e0-8172-aebc2aaba205}\Shell - "" = AutoRun
O33 - MountPoints2\{d8d85eae-d0ed-11e0-8172-aebc2aaba205}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{d8d85eb2-d0ed-11e0-8172-aebc2aaba205}\Shell - "" = AutoRun
O33 - MountPoints2\{d8d85eb2-d0ed-11e0-8172-aebc2aaba205}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{e0d947de-d59e-11e0-827c-d3058bddf47b}\Shell - "" = AutoRun
O33 - MountPoints2\{e0d947de-d59e-11e0-827c-d3058bddf47b}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{B5930B6C-394C-4F34-85DE-B91485792E76} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
MsConfig:64bit - StartUpFolder: C:^Users^Benedikt Frank^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe - ()
MsConfig:64bit - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: EA Core - hkey= - key= - File not found
MsConfig:64bit - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig:64bit - State: "services" - Reg Error: Key error.
MsConfig:64bit - State: "startup" - Reg Error: Key error.
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012.05.24 17:37:00 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Benedikt Frank\Desktop\OTL.exe
[2012.05.24 07:32:35 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A177B248-0CAA-4A50-9943-14A83E5F5D61}
[2012.05.24 07:32:24 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{3E1806B3-68A7-4F3F-8876-22071201917D}
[2012.05.24 07:32:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{8C4E616B-F633-4588-807F-0420D45ADE1B}
[2012.05.23 19:31:50 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{59E4B2BE-3F77-4A39-AC44-1F11C30C01C2}
[2012.05.23 19:31:40 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{94A94627-FFBA-4C3C-9690-91775C648137}
[2012.05.23 17:35:53 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Benedikt Frank\Desktop\dds.com
[2012.05.23 07:31:16 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{539F318F-CC00-4EFB-B531-9B8F7E04E511}
[2012.05.23 07:31:06 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0802774F-FE34-4817-B375-BFDCD447C67A}
[2012.05.23 07:30:44 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{B3C1D2AA-8E5E-4EFE-BB5D-24E85FE31326}
[2012.05.22 19:30:31 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{9A9D1DFE-A02D-4806-87CC-24CB6735656D}
[2012.05.22 19:30:21 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{370EA4DC-BC18-4C4F-81CE-013C28CA65FB}
[2012.05.22 19:30:10 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0E7E16A4-824D-4352-BEB7-C54BF293CAF1}
[2012.05.22 19:29:59 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2E074DDC-AB0D-4093-98C4-53A7B69E5466}
[2012.05.22 17:05:56 | 000,000,000 | ---D | C] -- C:\ProgramData\GFI Software
[2012.05.22 16:14:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012.05.22 16:14:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.05.22 16:14:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2012.05.22 07:29:35 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6C693239-FD2F-45D6-9A76-CD851F860E8A}
[2012.05.22 07:29:24 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{78C44C3F-BF99-44C3-9576-802DC6681E0E}
[2012.05.22 07:29:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{EBC4A21F-EE7A-4DD9-8080-49C1F53FC899}
[2012.05.21 19:28:50 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{350B38B0-BDD9-4FE7-BA27-97A78B2412E6}
[2012.05.21 19:28:40 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A965C6B7-2049-403C-8E47-ECD62DF72AA6}
[2012.05.21 19:28:18 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{ED82CE4C-44CE-4AB8-A0AA-B672B635C2A0}
[2012.05.21 07:28:06 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C4F509E0-DD96-4135-AA66-39B7BD69B884}
[2012.05.21 07:27:56 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{93AFDB58-DF48-45BC-AED3-B38D27709E77}
[2012.05.21 07:27:45 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A1851634-6B97-41F0-8F18-12AE69CA8DA7}
[2012.05.21 07:27:34 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{71ECD140-91C4-4207-84FE-8C572966B450}
[2012.05.20 11:37:22 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{DF07807A-887F-484C-ABA0-31AB0152398B}
[2012.05.20 11:37:12 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C5DAA15C-B5C0-4B54-A0C6-10A963631CBA}
[2012.05.20 11:37:01 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D6BD107B-0D3B-4508-BE56-04600B33A966}
[2012.05.19 23:36:37 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{77A7BAE7-F2B4-46EB-96E9-EA698F6342F0}
[2012.05.19 23:36:27 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6CA5474D-A55C-45BF-87F6-C368E9F70E7B}
[2012.05.19 23:36:05 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{B397690A-0B09-4314-8FED-4D3AAE1431F3}
[2012.05.19 11:35:52 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{9EDD7CE1-5AC5-4473-876F-550EE80F65CE}
[2012.05.19 11:35:42 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{4DA087B2-DDB3-4F54-968A-C89259F95E8F}
[2012.05.19 11:35:31 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{EFB01AEB-8054-4170-ACF8-D5BEEF732C5B}
[2012.05.19 11:35:20 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E1BB5D9E-D55E-4686-B1D4-E944C973BE6B}
[2012.05.18 23:34:54 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6AA7A1D7-1D8C-4138-8B57-192C43BCD83E}
[2012.05.18 23:34:44 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0DCF5892-4739-4DDD-A2FA-1A003D212C42}
[2012.05.18 11:34:20 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{5545601B-DFD9-4C55-A8C8-8DF0C018EC63}
[2012.05.18 11:34:06 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{80262B48-EDF5-4DCA-881F-08EB856B5CCE}
[2012.05.17 14:31:54 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{060ABB0E-9F64-4F48-8F91-4A77DB13950F}
[2012.05.17 14:31:44 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{BE9EFFB4-76C5-4A62-9171-9FCF5D40F6BB}
[2012.05.17 14:31:33 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{8CACFB8B-B4CE-4FCD-A7C5-16110A7E9EBA}
[2012.05.17 14:31:22 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{608920E2-D1EF-417D-8D3A-9139618A4CCF}
[2012.05.17 02:30:57 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{466DC8B7-6319-4BA5-AAF0-184AC7503444}
[2012.05.17 02:30:46 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{86414917-88BF-4F66-888F-1D5877ED2753}
[2012.05.17 02:30:36 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{537C602F-A767-4E9A-B703-76B2FDC02D26}
[2012.05.16 14:30:12 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D8A3A347-A6F8-44D5-8FAE-1E3E81D26846}
[2012.05.16 14:30:02 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C1BB60D2-3F68-4CDF-9688-EBB6EC09312D}
[2012.05.16 14:29:51 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{416BAF8F-7BCA-4CB3-BEB4-6E59DA06345B}
[2012.05.16 14:29:39 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{058E0CF2-E0B2-4CB1-9A47-FC5E3E0B5686}
[2012.05.16 02:17:31 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D144F3F6-558F-4683-9210-F496EF995839}
[2012.05.16 02:17:20 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{18AF329B-14FF-4794-846B-6AC2D5CD1CA6}
[2012.05.15 14:16:55 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{766B89BC-80B5-42B7-BF37-D101BAFA759B}
[2012.05.15 14:16:44 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{12D9F60A-876F-482F-9C33-8993C452FE36}
[2012.05.14 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{F7F44EAD-C812-4995-BF80-113DE3CFF4DD}
[2012.05.14 22:14:23 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{44F7501E-8A48-464C-9F7F-85564C13239E}
[2012.05.14 22:14:12 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{04C07414-E3D2-464F-8C56-532059A66682}
[2012.05.14 10:13:49 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{77F4AED7-A308-4647-8424-F7F41650083A}
[2012.05.14 10:13:38 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A873C826-4B19-4693-A0AB-4AD2E7AAD70E}
[2012.05.14 10:13:28 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{81CE74B7-AB82-4CC0-BBB8-B41160074CFD}
[2012.05.13 22:13:04 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{644436AA-07C3-485B-879A-6CF4E337CA9B}
[2012.05.13 22:12:54 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{58309527-692F-4015-9F63-451E68A16B1D}
[2012.05.13 22:12:31 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{7AE6E60C-1C91-40E3-952B-D78C5A35D5EF}
[2012.05.13 10:12:19 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E566AED5-1B00-4808-895A-221B26DBFE4F}
[2012.05.13 10:12:09 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{AB0E247A-1E56-48E7-8E97-769DCCEFE754}
[2012.05.13 10:11:58 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{8A83926F-4721-495B-95AB-194083D1FA2B}
[2012.05.12 22:11:35 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{78F8436E-4905-4902-A0DF-71B1B51B3FFD}
[2012.05.12 22:11:25 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{AB0DA48C-5C7B-46E4-B6D2-DB9B53E08595}
[2012.05.12 22:11:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{3747FC2F-7226-462B-8F15-D27435A61BFF}
[2012.05.12 10:10:51 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2B317DFA-CA10-4EB2-8116-6A38D9AABA92}
[2012.05.12 10:10:40 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E878A1AA-002B-46A3-A918-A75BCA288A88}
[2012.05.12 10:10:29 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{7F8C9F61-5D73-49C9-8E87-896179C23407}
[2012.05.11 22:10:06 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{5D160217-423E-458E-AFAD-1C0B02C0B75E}
[2012.05.11 22:09:55 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A17E6D35-0500-4021-89CD-F0B5AA206A5D}
[2012.05.11 22:09:34 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{F67E00D6-FA4C-4241-8582-B13EEE71A704}
[2012.05.11 10:09:22 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{BAAA9069-43BB-45A8-AE65-EF195917AEC8}
[2012.05.11 10:09:11 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D233D104-C9DF-4486-808C-1A9CEEBA1215}
[2012.05.11 10:09:00 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{7A556375-C638-490D-A868-C73823BACACA}
[2012.05.11 10:08:50 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{82DABFB2-46D0-4FE2-BFFB-DA98C1DA96F0}
[2012.05.10 22:08:25 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{77734BF0-A2C8-4766-926A-A1E5DAD4F00D}
[2012.05.10 22:08:14 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{4D0CEC53-2033-4028-BB02-AEAA093F2E60}
[2012.05.10 22:08:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{CEC38E49-B6B3-40CC-8BEB-241D71355A8D}
[2012.05.10 10:07:40 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{AE03E938-6FF9-4674-9381-62393720F586}
[2012.05.10 10:07:29 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{409971C9-037B-439E-A407-5A78B7CAE5E6}
[2012.05.10 10:07:19 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{93E5D477-2226-4A0A-93B5-DDF7EE648D76}
[2012.05.09 22:06:56 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{10CA0C71-8E17-4556-B6D3-058ABC6620E7}
[2012.05.09 22:06:45 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{5F95A173-1CA2-4CD8-9364-EC3E1358819E}
[2012.05.09 22:06:34 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{3F1410C1-FA73-423F-9A23-4BE33350B02E}
[2012.05.09 10:06:11 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{BD31DDB3-FC26-42AA-B90B-77A01403F20F}
[2012.05.09 10:06:00 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{18B9C965-DA68-4FCB-BA04-5C1B4DC65368}
[2012.05.09 10:05:39 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A71DCCD2-5B15-43C3-8839-0DCFE0FAEC9A}
[2012.05.08 22:05:26 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E63A323A-E3F3-40C3-8709-930E48A2F4ED}
[2012.05.08 22:05:16 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{B74570F6-013D-422C-9724-C99E80EFACC9}
[2012.05.08 10:04:52 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D3FCA1FA-056D-40D4-8D0C-33A05E4A7419}
[2012.05.08 10:04:42 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{93B9E7C9-2F0A-478D-9908-E27890C8D446}
[2012.05.08 10:04:31 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0715F635-D9C9-4D5B-A657-DA60C05E4A32}
[2012.05.08 10:04:20 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{03957815-6529-4F61-BCE1-CC85FC04C8E2}
[2012.05.07 22:03:54 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{41D534B7-EE73-4BD1-8317-3843D67BDB13}
[2012.05.07 22:03:43 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{A8C03129-3E53-41D5-8136-9932F42E6C85}
[2012.05.07 22:03:33 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{57810A52-4688-41BB-B17C-A2ED3CA6CFEA}
[2012.05.07 22:03:22 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{162758DB-6B14-48D8-8DE4-2F2FDF25F47D}
[2012.05.07 10:02:57 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{7661CBB7-D7F4-4FE3-9D50-F56251E7DA4B}
[2012.05.07 10:02:44 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6DC9D39D-A9A5-4A61-BBB7-AFC677F425EE}
[2012.05.07 10:02:33 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{843D2420-0F89-47CF-B482-C5D9D330A6B0}
[2012.05.07 10:02:22 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{394CACF9-CE5D-4C43-9EF0-03150421ECFD}
[2012.05.06 20:26:24 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{972F3E8E-8117-409B-AC64-214B545CF31E}
[2012.05.06 20:26:14 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{4DB2CF9B-9B9F-4200-AF3D-DDEB85A9288B}
[2012.05.06 20:26:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E3EEB2E4-F59D-42BF-AD5F-481CC0F480DF}
[2012.05.06 20:25:52 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{174C39C2-3D56-4154-BC3B-8463963ABB08}
[2012.05.06 08:25:27 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{84A89826-86A7-43F0-BBAB-E68B2C923A15}
[2012.05.06 08:25:17 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{EC2A0B11-B4D0-43F3-AABA-69D5CB6BDDD1}
[2012.05.06 08:24:55 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D48E1230-507B-4B16-A39A-9C5BD65FB904}
[2012.05.05 20:24:42 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{99C45627-6745-4CB4-8DA6-42CA2FA811A5}
[2012.05.05 20:24:32 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{BBD72781-1957-4948-851D-C7418C7F9108}
[2012.05.05 20:24:21 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{82CA10BD-C3DF-4569-A3FD-827A51581567}
[2012.05.05 08:23:57 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{7677F3F0-B667-4A70-9F4C-1DF191655C48}
[2012.05.05 08:23:47 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{BC79B6FE-8AEF-4DC2-B746-EA545A67FD3A}
[2012.05.05 08:23:36 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D04CFEDC-CA1D-4509-BC42-9093A0AE9B69}
[2012.05.04 20:23:13 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{4C74F2D9-7E9F-4B50-B892-81B78E5F9885}
[2012.05.04 20:23:02 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2BAEBF63-2996-4A81-ADB9-944E5072581A}
[2012.05.04 20:22:51 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2D7D0C3F-4B80-481E-8B23-990382157827}
[2012.05.04 20:22:40 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{F0BC44A4-B511-4342-B67B-5491B7546271}
[2012.05.04 08:22:15 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{73764C40-1DA8-473C-B94B-7B7E49FFC913}
[2012.05.04 08:22:04 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{1FBD39F5-47B9-4130-B856-EA5170D2050F}
[2012.05.03 12:09:21 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{57432D48-1DF2-49B3-AF69-88830D16FAEC}
[2012.05.03 12:09:10 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{94B9E32A-6EDC-4423-888A-E092B5E9C928}
[2012.05.03 12:09:00 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E1E2CB14-6E0E-48D9-BB1A-22D280167BDA}
[2012.05.03 12:08:49 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E0E69C4D-A245-4B3D-88B5-D965AB7742A2}
[2012.05.03 00:08:24 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{84E8F0B9-D699-4627-AED6-E8263064A038}
[2012.05.03 00:08:13 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6556CEFD-0B5A-4097-8F51-2ECF293B749C}
[2012.05.03 00:08:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{9558824B-A452-479D-BB19-39F925950B76}
[2012.05.03 00:07:52 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D77030BD-C28A-4B8E-A742-9197B1394130}
[2012.05.02 12:07:27 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{AA3D1D0E-8180-4491-A837-56CBB3766A1E}
[2012.05.02 12:07:16 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{4F2ACF84-5539-4AEF-841F-873C223099BE}
[2012.05.02 12:07:05 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6B60EDB6-2BF2-4E6D-9B5C-BA718CCD1D8D}
[2012.05.02 12:06:54 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{B282BFA1-0FD5-4FC8-B284-BAC266C26F36}
[2012.05.02 00:06:30 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{7DD2F88A-C956-467A-A4A9-79246F1E5C51}
[2012.05.02 00:06:19 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{B61B832D-9515-4046-9562-9188B87CEA79}
[2012.05.02 00:06:08 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2ED23AC3-CDBC-4C22-BAE0-BAAAFECC6779}
[2012.05.02 00:05:58 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{80D1F7D9-B541-480E-858B-4D6C5DB418DD}
[2012.05.01 12:05:32 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{47677027-7FB4-4871-9756-208EDB449987}
[2012.05.01 12:05:21 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{B77BD62F-B78D-4F86-A3F8-5FBCE1314354}
[2012.05.01 12:05:10 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C580EBE7-118A-457A-A48A-65228E8BFDCE}
[2012.05.01 00:04:47 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C3C48B1D-126C-4DC8-AA16-F2DFBA435774}
[2012.05.01 00:04:36 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{90E56BC5-0343-4A55-8431-1C6EFECDEB65}
[2012.05.01 00:04:26 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{109ECF49-D6FE-46E7-A3AD-7558A25096C1}
[2012.04.30 12:04:02 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6C989EBE-9BB9-4ABC-99FB-418957656F9E}
[2012.04.30 12:03:51 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{03E64A9E-3F05-4881-8652-E01C2EF5E8AC}
[2012.04.30 12:03:41 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{DB93E67A-C25D-4174-B871-47382E32B110}
[2012.04.30 12:03:05 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{092188F4-B72D-43A4-90B4-29E9E4C8A458}
[2012.04.29 23:38:39 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{8365B33B-4D80-47E5-BF0C-A9AF958901EB}
[2012.04.29 23:38:28 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C88B9960-F7B6-4FDF-BB43-1DE9CB8E7088}
[2012.04.29 23:38:17 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D04CED33-551D-4D84-90EC-84291FF8C42F}
[2012.04.29 23:38:06 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E3E31A7B-AD02-4183-AF9A-7F3B153DDF95}
[2012.04.29 11:37:42 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{33446AD9-94F9-417B-A0A5-84FE4701B565}
[2012.04.29 11:37:31 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{724D3B75-9ED1-4C1E-B17A-2EBBD9CFBD8C}
[2012.04.29 11:37:21 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0A4C7121-1F4B-47C4-B9EA-A79E7892C251}
[2012.04.29 11:37:10 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{D7970C6B-38FE-4DFC-A834-BD2C97916AE1}
[2012.04.28 23:36:45 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{3EB05E76-874E-42B1-AE7E-6C09982915C7}
[2012.04.28 23:36:34 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{ADD0965F-4AE5-4411-9489-BF1685C04127}
[2012.04.28 23:36:13 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{E491CBD7-14FD-4EAD-ACFA-47407035B1E1}
[2012.04.28 11:36:00 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{38534FD5-08D7-498F-9EC7-EE8D6F8D3AC6}
[2012.04.28 11:35:49 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0F466FDB-1FD9-4083-83EB-AB64C654E1F3}
[2012.04.28 11:35:38 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2DEACDE5-BA55-4690-953B-91D3E38A036F}
[2012.04.28 11:35:27 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{CFC43268-9047-4A70-A0C6-2F60F59AE75C}
[2012.04.27 23:35:03 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{666E7255-5277-4893-9A0C-D797657DDB9A}
[2012.04.27 23:34:52 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{6BE1819D-6BF9-4CE4-93FC-04751CBEA3F4}
[2012.04.27 23:34:41 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{677FB271-6340-44EF-A73A-6AC0B72995B0}
[2012.04.27 11:34:17 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{C5F030F6-AB6F-4BD9-846C-1A7A60C07F6F}
[2012.04.27 11:34:07 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{60EE822E-D9D2-416D-96F8-7BD407D7DBB8}
[2012.04.27 11:33:55 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{F5A002F5-069F-4CF1-BABA-8DBE1C42A8BC}
[2012.04.27 01:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012.04.27 01:01:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.04.26 23:15:05 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{91E91B14-5522-448B-AEC9-7C0D08BE3A77}
[2012.04.26 11:14:41 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{0C56197B-4CF6-42A4-AAFB-98FCCC749083}
[2012.04.26 11:14:30 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2B39BFCD-9C6E-495B-A3B9-523A8BC1FC77}
[2012.04.26 11:14:19 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{F11BA12D-7C8F-4327-9C9F-C5304BBA2E14}
[2012.04.26 11:14:08 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{243DFE4D-4903-4D4D-9883-867B0E65535E}
[2012.04.25 23:13:43 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{039648DF-6E57-47CE-9601-794139BB91DA}
[2012.04.25 23:13:33 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{AB191574-3191-4190-BD42-4D051E567F52}
[2012.04.25 23:13:11 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{8BED562F-6978-4A41-B65D-C87A143065B1}
[2012.04.25 11:12:58 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{2ABEC862-606F-46B6-B287-AC1A4BEB7D03}
[2012.04.25 11:12:48 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{36EF502B-289B-447C-9BF8-9A0D08F52C31}
[2012.04.25 11:12:37 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{CF5F5F0D-6F81-4445-B183-20791FA9137A}
[2012.04.25 11:12:26 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{F9F1AA98-DE1F-4251-8ABD-EA8B5E64A286}
[2012.04.24 23:12:00 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{74F6DCE8-803D-4521-AEAB-E6805197A82D}
[2012.04.24 23:11:50 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{EE74F6DF-5833-4DBC-8B35-0675268D0E72}
[2012.04.24 23:11:38 | 000,000,000 | ---D | C] -- C:\Users\Benedikt Frank\AppData\Local\{21012280-5257-4329-B057-62F296C54DAA}
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.05.24 17:36:44 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Benedikt Frank\Desktop\OTL.exe
[2012.05.24 16:54:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.05.24 12:33:12 | 000,019,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.05.24 12:33:12 | 000,019,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.05.23 23:07:05 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.05.23 23:07:05 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.05.23 23:07:05 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.05.23 23:07:05 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.05.23 23:07:05 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.05.23 17:35:53 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Benedikt Frank\Desktop\dds.com
[2012.05.23 17:33:49 | 000,000,000 | ---- | M] () -- C:\Users\Benedikt Frank\defogger_reenable
[2012.05.23 17:31:50 | 000,050,477 | ---- | M] () -- C:\Users\Benedikt Frank\Desktop\Defogger.exe
[2012.05.22 17:07:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.05.22 17:07:29 | 3111,501,824 | -HS- | M] () -- C:\hiberfil.sys
[2012.05.22 16:14:58 | 000,001,225 | ---- | M] () -- C:\Users\Benedikt Frank\Desktop\Spybot - Search & Destroy.lnk
[2012.05.11 03:22:36 | 000,292,872 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.05.08 23:26:28 | 000,132,832 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012.05.08 23:26:28 | 000,098,848 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.05.23 17:33:49 | 000,000,000 | ---- | C] () -- C:\Users\Benedikt Frank\defogger_reenable
[2012.05.23 17:31:50 | 000,050,477 | ---- | C] () -- C:\Users\Benedikt Frank\Desktop\Defogger.exe
[2012.05.22 16:14:58 | 000,001,225 | ---- | C] () -- C:\Users\Benedikt Frank\Desktop\Spybot - Search & Destroy.lnk
[2011.12.18 20:49:27 | 000,338,432 | ---- | C] () -- C:\Windows\SysWow64\sqlite36_engine.dll
[2011.10.21 12:49:26 | 000,069,632 | R--- | C] () -- C:\Windows\SysWow64\xmltok.dll
[2011.10.21 12:49:26 | 000,036,864 | R--- | C] () -- C:\Windows\SysWow64\xmlparse.dll
[2011.10.03 20:52:14 | 000,005,632 | ---- | C] () -- C:\Users\Benedikt Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.07.30 15:44:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.07.07 23:37:28 | 000,053,760 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.03.17 19:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
========== LOP Check ==========
[2011.10.28 12:09:58 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\15632
[2011.08.27 13:58:46 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\AnvSoft
[2011.12.18 23:47:57 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\DesktopIconForAmazon
[2012.05.24 13:36:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\Dropbox
[2011.10.17 21:01:46 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\E1315
[2012.01.20 12:44:38 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\IrfanView
[2011.10.01 15:57:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\MusicNet
[2012.04.20 11:52:37 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\My Games
[2011.12.18 20:49:26 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\OCS
[2011.08.01 16:27:10 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\OpenOffice.org
[2011.12.18 20:49:29 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\Opera
[2012.02.16 11:55:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\PDF reDirect
[2011.08.29 08:30:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\PhotoFiltre
[2011.12.18 20:49:44 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\picajet.com
[2011.07.31 23:43:49 | 000,000,000 | ---D | M] -- C:\Users\Benedikt Frank\AppData\Roaming\Windows Live Writer
[2012.02.28 22:20:04 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2011.12.18 18:34:23 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2011.07.30 15:40:04 | 000,000,000 | ---D | M] -- C:\AMD
[2011.07.30 15:40:42 | 000,000,000 | ---D | M] -- C:\ATI
[2011.10.21 01:00:26 | 000,000,000 | ---D | M] -- C:\BlueByte
[2011.07.31 13:40:22 | 000,000,000 | -HSD | M] -- C:\Boot
[2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.07.30 13:59:18 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.01.20 14:54:10 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.05.22 17:06:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)
[2012.05.22 17:06:01 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.07.30 13:59:18 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.07.30 13:59:18 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.05.24 17:40:03 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.08.17 14:25:37 | 000,000,000 | ---D | M] -- C:\temp
[2011.07.30 13:59:25 | 000,000,000 | R--D | M] -- C:\Users
[2012.04.20 13:57:47 | 000,000,000 | ---D | M] -- C:\Windows
< %PROGRAMFILES%\*.exe >
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
< MD5 for: IASTORV.SYS >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
< MD5 for: USER32.DLL >
[2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
[2009.07.14 03:15:21 | 000,462,848 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\FirewallAPI.dll
< %USERPROFILE%\*.* >
[2012.05.23 17:33:49 | 000,000,000 | ---- | M] () -- C:\Users\Benedikt Frank\defogger_reenable
[2012.05.24 17:41:00 | 001,572,864 | -HS- | M] () -- C:\Users\Benedikt Frank\NTUSER.DAT
[2012.05.24 17:41:00 | 000,262,144 | -HS- | M] () -- C:\Users\Benedikt Frank\ntuser.dat.LOG1
[2011.07.30 13:59:27 | 000,000,000 | -HS- | M] () -- C:\Users\Benedikt Frank\ntuser.dat.LOG2
[2011.07.30 14:08:29 | 000,065,536 | -HS- | M] () -- C:\Users\Benedikt Frank\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2011.07.30 14:08:29 | 000,524,288 | -HS- | M] () -- C:\Users\Benedikt Frank\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2011.07.30 14:08:29 | 000,524,288 | -HS- | M] () -- C:\Users\Benedikt Frank\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2011.07.30 13:59:27 | 000,000,020 | -HS- | M] () -- C:\Users\Benedikt Frank\ntuser.ini
[2011.01.19 13:30:10 | 142,700,671 | ---- | M] () -- C:\Users\Benedikt Frank\openofficeorg1.cab
[2011.01.19 13:34:42 | 003,003,392 | ---- | M] () -- C:\Users\Benedikt Frank\openofficeorg33.msi
[2011.01.19 13:33:04 | 000,475,016 | ---- | M] () -- C:\Users\Benedikt Frank\setup.exe
< %USERPROFILE%\Local Settings\Temp\*.exe >
< %USERPROFILE%\Local Settings\Temp\*.dll >
< %USERPROFILE%\Application Data\*.exe >
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
< >
< End of report >
--- --- ---
Danke für Deine Hilfe.... |
