|
Internetseiten-Fehler Hallo Leute, mein Problem ist, wenn ich Mozilla Firefox öffne kommt als Startseite Google, was ja noch richtig ist. Wenn man bei Google dann den gewünschten Suchbegriff eingibt zeigt dieser ja mehrere Links zu dem Begriff. Nun das Problem : Klicke ich auf den gewünschten Link dann dauert es einen kurzen moment und dann leitet (Google?) mich auf andere Werbeseiten wie z.B. "Gamezone" oder so. Es ist nicht immer so aber zu 80%. Was ist das und wer kann mir vielleicht helfen? Danke schonmal im vorraus!:) Kevin |
:hallo: Ich werde dir bei deinem Problem helfen. Eine Bereinigung ist mitunter mit viel Arbeit für Dich (und mich) verbunden. Bevor es los geht, habe ich etwas Lesestoff für dich. Schritt 1: In das inifizierte Benutzerkonto einloggen Schritt 2: Customscan mit OTL
|
OTL logfile created on: 11/23/2012 3:17:39 PM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Robi\Downloads Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 764.56 Mb Total Physical Memory | 416.65 Mb Available Physical Memory | 54.50% Memory free 1.79 Gb Paging File | 0.74 Gb Available in Paging File | 41.31% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 215.59 Gb Total Space | 80.42 Gb Free Space | 37.30% Space Free | Partition Type: NTFS Drive F: | 1.99 Gb Total Space | 0.00 Gb Free Space | 0.12% Space Free | Partition Type: FAT32 Computer Name: ROBI-HP | User Name: Robi | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Robi\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation) PRC - C:\Program Files\Remote Mouse\server\server.exe () PRC - C:\Program Files\Remote Mouse\RemoteMouse.exe () PRC - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) PRC - C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.) PRC - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) PRC - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.) PRC - C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) PRC - C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) PRC - C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe (Hewlett-Packard Development Company L.P.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Windows\System32\atieclxx.exe (AMD) PRC - C:\Windows\System32\atiesrxx.exe (AMD) PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) PRC - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.) PRC - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe (Hewlett-Packard) PRC - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard) PRC - C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.) PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\stacsv.exe (IDT, Inc.) PRC - C:\Program Files\PDF Complete\pdfsvc.exe (PDF Complete Inc) PRC - C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe (Hewlett-Packard Company) PRC - C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe (Hewlett-Packard Company) PRC - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.) PRC - C:\Windows\System32\atibtmon.exe (Advanced Micro Devices, Inc.) PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\AEstSrv.exe (Andrea Electronics Corporation) PRC - C:\Program Files\RocketDock\RocketDock.exe () ========== Modules (No Company Name) ========== MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\66694f9192bd0dddc2eaf90fbcbcd555\System.Management.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\239d84cfdb9de9730c1efb43840ef2eb\System.Core.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7c4de95aa433eb8d81a81caf805947a8\PresentationFramework.Aero.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\03cfab5534482e8fc313ead6edc19100\System.Web.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\413288993ff690e8251d2dbe32bee01f\System.Runtime.Remoting.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ec80905a71750be50dfc7981ad5ae28\PresentationFramework.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53d6d827964619285771ed72332d3659\PresentationCore.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b311b783e1efaa9527f4c2c9680c44d1\WindowsBase.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll () MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll () MOD - C:\Program Files\Remote Mouse\server\server.exe () MOD - C:\Program Files\Remote Mouse\RemoteMouse.exe () MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - C:\Program Files\Remote Mouse\server\win32gui.pyd () MOD - C:\Program Files\Remote Mouse\server\win32api.pyd () MOD - C:\Program Files\Remote Mouse\server\pywintypes26.dll () MOD - C:\windows\assembly\GAC_MSIL\CaslShared\3.5.1.1__9c6f83d5b7f3d097\CaslShared.dll () MOD - C:\windows\assembly\GAC_MSIL\hpcasl\3.5.1.1__9c6f83d5b7f3d097\hpcasl.dll () MOD - C:\windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll () MOD - C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll () MOD - C:\windows\assembly\GAC_MSIL\System.Core.resources\3.5.0.0_de_b77a5c561934e089\System.Core.resources.dll () MOD - C:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll () MOD - C:\windows\assembly\GAC_MSIL\hpCASLLibrary\3.0.1.1__67b8d1b5179ba5f8\hpCASLLibrary.dll () MOD - C:\Program Files\Remote Mouse\server\_ctypes.pyd () MOD - C:\Program Files\Remote Mouse\server\_ssl.pyd () MOD - C:\Program Files\Remote Mouse\server\_socket.pyd () MOD - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll () MOD - C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll () MOD - C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll () MOD - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll () MOD - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll () MOD - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll () MOD - C:\Program Files\Common Files\LightScribe\QtGui4.dll () MOD - C:\Program Files\Common Files\LightScribe\QtCore4.dll () MOD - C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll () MOD - C:\Program Files\Remote Mouse\server\autopy.mouse.pyd () MOD - C:\Program Files\Remote Mouse\server\autopy.key.pyd () MOD - C:\Program Files\RocketDock\RocketDock.exe () MOD - C:\Program Files\RocketDock\RocketDock.dll () ========== Services (SafeList) ========== SRV - (HP Support Assistant Service) -- C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe File not found SRV - (SystemStoreService) -- C:\Program Files\Freetec\SystemStore\SystemStore.exe () SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation) SRV - (sftvsa) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) SRV - (sftlist) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD) SRV - (btwdins) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.) SRV - (HP Wireless Assistant Service) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard) SRV - (STacSV) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\stacsv.exe (IDT, Inc.) SRV - (pdfcDispatcher) -- C:\Program Files\PDF Complete\pdfsvc.exe (PDF Complete Inc) SRV - (hpHotkeyMonitor) -- C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe (Hewlett-Packard Company) SRV - (PSI_SVC_2) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (AESTFilters) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\AEstSrv.exe (Andrea Electronics Corporation) ========== Driver Services (SafeList) ========== DRV - (hwdatacard) -- system32\DRIVERS\ewusbmdm.sys File not found DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH) DRV - (mv2) -- C:\Windows\System32\drivers\mv2.sys (UVNC BVBA) DRV - (SMARTMouseFilterx86) -- C:\Windows\System32\drivers\SMARTMouseFilterx86.sys (SMART Technologies ULC) DRV - (SMARTVTabletPCx86) -- C:\Windows\System32\drivers\SMARTVTabletPCx86.sys (SMART Technologies ULC) DRV - (SMARTVHidMini2000x86) -- C:\Windows\System32\drivers\SMARTVHidMini2000x86.sys (SMART Technologies ULC) DRV - (Sftvol) -- C:\Windows\System32\drivers\Sftvollh.sys (Microsoft Corporation) DRV - (Sftredir) -- C:\Windows\System32\drivers\Sftredirlh.sys (Microsoft Corporation) DRV - (Sftplay) -- C:\Windows\System32\drivers\Sftplaylh.sys (Microsoft Corporation) DRV - (Sftfs) -- C:\Windows\System32\drivers\Sftfslh.sys (Microsoft Corporation) DRV - (dc3d) -- C:\Windows\System32\drivers\dc3d.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (AtiHdmiService) -- C:\Windows\System32\drivers\AtiHdmi.sys (ATI Technologies, Inc.) DRV - (amdkmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (rtsuvc) -- C:\Windows\System32\drivers\rtsuvc.sys (Realtek Semiconductor Corp.) DRV - (STHDA) -- C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.) DRV - (AtiPcie) -- C:\Windows\System32\drivers\AtiPcie.sys (Advanced Micro Devices Inc.) DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Company) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) DRV - (TPM) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation) DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = ChatZum Search IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - No CLSID value found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} IE - HKLM\..\SearchScopes\{531795A6-54C6-47E1-8ED6-34F290D57429}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.chatzum.com/?q={searchTerms} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = 04 00 5E 03 0F 00 00 00 12 D2 81 26 01 00 00 80 06 00 5E 03 00 00 00 00 [binary data] IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Babylon Search IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - No CLSID value found IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\URLSearchHook: {5786d022-540e-4699-b350-b4be0ae94b79} - No CLSID value found IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes,DefaultScope = {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110824&tt=4712_6&babsrc=SP_ss&mntrId=ac513dbf000000000000002682cb6ddb IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes\{531795A6-54C6-47E1-8ED6-34F290D57429}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.chatzum.com/?q={searchTerms} IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes\{7FA1E07F-182B-4840-8746-1D4F740CCBA3}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=2eddcdec-482e-487e-b9d2-d337c083fa0c&apn_sauid=16503CEE-24EC-4F95-9BC2-30168582F901 IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = hxxp://search.chatzum.com/?q={SearchTerms} IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..CT2481020.browser.search.defaultthis.engineName: true FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "Search the web" FF - prefs.js..browser.search.selectedEngine: "Firefox Add-ons" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "https://www.google.de/" FF - prefs.js..extensions.enabledAddons: {64161300-e22b-11db-8314-0800200c9a66}:0.9.6.10 FF - prefs.js..extensions.enabledAddons: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:4.1.1.5 FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2 FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..keyword.URL: "hxxp://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.9&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search the web" FF - prefs.js..browser.startup.homepage: "chrome://speeddial/content/speeddial.xul" FF - user.js..browser.search.order.1: "Search the web" FF - user.js..keyword.URL: "hxxp://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/10/28 18:46:51 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/10/28 18:46:47 | 000,000,000 | ---D | M] [2011/02/18 16:52:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\Extensions [2012/11/23 14:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\Firefox\Profiles\e7qdcxpt.default\extensions [2012/11/20 22:21:57 | 000,000,000 | ---D | M] ("DVDVideoSoft YouTube MP3 and Video Download") -- C:\Users\Robi\AppData\Roaming\mozilla\Firefox\Profiles\e7qdcxpt.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2012/11/23 14:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\Firefox\Profiles\e7qdcxpt.default\extensions\staged [2012/11/20 22:21:19 | 000,111,107 | ---- | M] () (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\extensions\extension@preispilot.com.xpi [2012/10/11 12:06:25 | 000,281,285 | ---- | M] () (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2012/11/20 22:21:56 | 000,035,785 | ---- | M] () (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012/11/23 14:59:58 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012/11/23 14:59:45 | 000,035,614 | ---- | M] () (No name found) -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\extensions\staged\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012/11/21 18:14:00 | 000,002,497 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\browsemngr.xml [2012/11/21 11:53:59 | 000,001,632 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\firefox-add-ons.xml [2012/11/21 18:14:00 | 000,000,828 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\icqplugin-2.xml [2012/11/21 18:14:00 | 000,000,828 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\icqplugin-3.xml [2012/11/21 18:14:00 | 000,000,828 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\icqplugin-4.xml [2012/11/21 18:14:00 | 000,000,828 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\icqplugin-5.xml [2012/11/21 18:14:00 | 000,000,828 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\icqplugin-6.xml [2012/11/21 18:14:00 | 000,000,842 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\mozilla\firefox\profiles\e7qdcxpt.default\searchplugins\icqplugin.xml [2012/10/28 18:46:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions [2012/10/28 18:46:51 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012/04/16 18:51:34 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012/02/15 15:48:02 | 000,378,880 | ---- | M] (InfiniAd GmbH) -- C:\Program Files\mozilla firefox\plugins\npmieze.dll [2012/11/21 18:14:00 | 000,001,400 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2012/11/21 18:14:00 | 000,002,173 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012/11/21 18:14:00 | 000,001,679 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012/11/21 18:14:00 | 000,000,947 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2012/11/21 18:14:00 | 000,006,818 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011/12/25 19:11:09 | 000,000,158 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search the web.src [2012/11/20 12:32:01 | 000,001,278 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2012/11/21 18:14:00 | 000,000,903 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009/06/10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {0f369707-379f-46df-a5c5-d04390f3459b} - No CLSID value found. O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (no name) - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - No CLSID value found. O3 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\Toolbar\WebBrowser: (no name) - {0F369707-379F-46DF-A5C5-D04390F3459B} - No CLSID value found. O3 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe () O4 - HKLM..\Run: [QLBController] C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.) O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.) O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.) O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [Remote Mouse] C:\Program Files\Remote Mouse\RemoteMouse.exe () O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe () O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [SystemExplorerAutoStart] "C:\Program Files\System Explorer\SystemExplorer.exe" /TRAY File not found O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\Run: [Tonido] "C:\Users\Robi\AppData\Roaming\Tonido\launcher.exe" /nobrowser File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001..\RunOnce: [FlashPlayerUpdate] C:\windows\System32\Macromed\Flash\FlashUtil32_11_4_402_265_Plugin.exe (Adobe Systems Incorporated) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-2944064596-2206248867-496890886-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Free YouTube Download - C:\Users\Robi\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Robi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O15 - HKLM\..Trusted Domains: //about.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //Exclude.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //FWEvent.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //LanguageSelection.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //Message.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //MyAgttryCmd.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //MyAgttryNag.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //MyNotification.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //NOCLessUpdate.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //quarantine.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //ScanNow.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //strings.vbs/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //Template.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //Update.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: //VirFound.htm/ ([]myui in Trusted sites) O15 - HKLM\..Trusted Domains: mcafee.com ([*] http in Trusted sites) O15 - HKLM\..Trusted Domains: mcafee.com ([*] https in Trusted sites) O15 - HKLM\..Trusted Domains: mcafeeasap.com ([betavscan] http in Trusted sites) O15 - HKLM\..Trusted Domains: mcafeeasap.com ([betavscan] https in Trusted sites) O15 - HKLM\..Trusted Domains: mcafeeasap.com ([vs] http in Trusted sites) O15 - HKLM\..Trusted Domains: mcafeeasap.com ([vs] https in Trusted sites) O15 - HKLM\..Trusted Domains: mcafeeasap.com ([www] http in Trusted sites) O15 - HKLM\..Trusted Domains: mcafeeasap.com ([www] https in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B4FCF358-0D16-48CE-8144-1A6C7EBEBD6C}: DhcpNameServer = 192.168.2.1 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{08e171f4-0894-11e1-ae71-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{08e171f4-0894-11e1-ae71-70f395cd17d6}\Shell\AutoRun\command - "" = D:\LaunchU3.exe -a O33 - MountPoints2\{1b084906-b87f-11e0-afee-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{1b084906-b87f-11e0-afee-70f395cd17d6}\Shell\AutoRun\command - "" = I:\SETUP.EXE O33 - MountPoints2\{1b084906-b87f-11e0-afee-70f395cd17d6}\Shell\configure\command - "" = I:\SETUP.EXE O33 - MountPoints2\{1b084906-b87f-11e0-afee-70f395cd17d6}\Shell\install\command - "" = I:\SETUP.EXE O33 - MountPoints2\{1b08492c-b87f-11e0-afee-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{1b08492c-b87f-11e0-afee-70f395cd17d6}\Shell\AutoRun\command - "" = J:\autorun.exe O33 - MountPoints2\{31e487ea-845d-11e0-a0d1-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{31e487ea-845d-11e0-a0d1-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{31e48800-845d-11e0-a0d1-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{31e48800-845d-11e0-a0d1-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{702b32a5-f1d6-11e1-9117-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{702b32a5-f1d6-11e1-9117-70f395cd17d6}\Shell\AutoRun\command - "" = D:\Startme.exe O33 - MountPoints2\{a5983634-a092-11e0-a5dc-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{a5983634-a092-11e0-a5dc-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{a598363f-a092-11e0-a5dc-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{a598363f-a092-11e0-a5dc-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{afb8bd0e-b0af-11e0-b94b-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{afb8bd0e-b0af-11e0-b94b-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{afb8bd19-b0af-11e0-b94b-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{afb8bd19-b0af-11e0-b94b-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{c757b64d-2b10-11e0-bb70-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{c757b64d-2b10-11e0-bb70-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{c757b65a-2b10-11e0-bb70-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{c757b65a-2b10-11e0-bb70-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{c757b6d4-2b10-11e0-bb70-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{c757b6d4-2b10-11e0-bb70-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{d8911338-8222-11e0-a14d-002682cb6ddb}\Shell - "" = AutoRun O33 - MountPoints2\{d8911338-8222-11e0-a14d-002682cb6ddb}\Shell\AutoRun\command - "" = D:\laucher.exe O33 - MountPoints2\{e7f8fdef-1b6f-11e1-a6de-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{e7f8fdef-1b6f-11e1-a6de-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O33 - MountPoints2\{e7f8fdf3-1b6f-11e1-a6de-70f395cd17d6}\Shell - "" = AutoRun O33 - MountPoints2\{e7f8fdf3-1b6f-11e1-a6de-70f395cd17d6}\Shell\AutoRun\command - "" = D:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (MACHINE BootExecut) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2B9268EE-8B1B-DB49-CE17-85553FB2DE6D} - Internet Explorer ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {9C8AC2D4-98F3-46ED-7D1E-5256B13F43C7} - Microsoft Windows Media Player 12.0 ActiveX: {B158681E-71E9-7278-2A49-DF3D4F8C73FD} - Internet Explorer ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpFolder: C:^Users^Robi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk - - File not found MsConfig - StartUpReg: APSDaemon - hkey= - key= - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) MsConfig - StartUpReg: Google Update - hkey= - key= - File not found MsConfig - StartUpReg: iTunesHelper - hkey= - key= - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.) MsConfig - StartUpReg: msnmsgr - hkey= - key= - File not found MsConfig - StartUpReg: PDF Complete - hkey= - key= - C:\Program Files\PDF Complete\pdfsty.exe (PDF Complete Inc) MsConfig - StartUpReg: RocketDock - hkey= - key= - C:\Program Files\RocketDock\RocketDock.exe () MsConfig - StartUpReg: VirtualCloneDrive - hkey= - key= - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG) MsConfig - State: "bootini" - 2 MsConfig - State: "startup" - 2 Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.) Drivers32: VIDC.IV41 - C:\windows\System32\ir41_32.ax (Intel Corporation) SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012/11/22 12:16:43 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Local\{56F4D31D-2F68-4B81-8FE6-4F6101085ECD} [2012/11/22 11:55:12 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Local\{66E052C8-5437-413C-8AC1-0CB48B0DB0BA} [2012/11/21 18:14:00 | 000,000,000 | ---D | C] -- C:\windows\System32\IO [2012/11/21 16:06:26 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2012/11/21 11:43:21 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software [2012/11/21 11:43:21 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2012/11/20 12:32:34 | 000,493,056 | ---- | C] ( datenhaus GmbH) -- C:\windows\System32\dhRichClient3.dll [2012/11/20 12:32:11 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Roaming\DesktopIconForAmazon [2012/11/20 12:32:01 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Roaming\Opera [2012/11/20 12:31:51 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Roaming\OCS [2012/11/20 12:04:29 | 000,000,000 | ---D | C] -- C:\Program Files\SelfUpdater [2012/11/20 11:58:43 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Roaming\Bloson [2012/11/20 11:57:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer [2012/11/20 11:57:53 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Local\Wajam [2012/11/19 17:21:17 | 000,000,000 | ---D | C] -- C:\Users\Robi\Desktop\päda filmr fotos [2012/11/17 22:23:11 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\WdfLdr.sys [2012/11/17 22:23:11 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wdfres.dll [2012/11/17 22:22:39 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFPlatform.dll [2012/11/17 22:22:38 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFx.dll [2012/11/17 22:22:38 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFCoinstaller.dll [2012/11/17 22:20:23 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb [2012/11/17 22:20:22 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll [2012/11/17 22:20:22 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll [2012/11/17 22:20:22 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe [2012/11/17 22:20:22 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll [2012/11/17 22:20:20 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll [2012/11/17 22:20:19 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\url.dll [2012/11/17 22:20:17 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl [2012/11/17 20:48:26 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcorehc.dll [2012/11/17 20:48:26 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncsi.dll [2012/11/17 20:48:26 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netevent.dll [2012/11/17 20:48:17 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\synceng.dll [2012/11/17 20:48:12 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys [2012/11/17 20:48:10 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcore6.dll [2012/11/17 20:48:10 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcsvc6.dll [2012/11/09 06:36:20 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Local\{23ABBB6E-6153-4E10-9C0F-8A4C7CFA2B33} [2012/11/08 12:36:46 | 000,000,000 | ---D | C] -- C:\Users\Robi\Documents\GTA San Andreas User Files [2012/11/08 08:04:59 | 000,000,000 | ---D | C] -- C:\Users\Robi\AppData\Local\{449D7202-ACCA-46FD-A049-6FA5561DDDE6} [2012/11/07 16:06:32 | 000,000,000 | ---D | C] -- C:\Program Files\Safari [2012/10/28 18:46:42 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2011/03/15 16:12:29 | 000,885,024 | ---- | C] (Sun Microsystems, Inc.) -- C:\Users\Robi\JavaSetup6u24.exe [2011/02/17 19:45:10 | 008,417,616 | ---- | C] (Mozilla) -- C:\Users\Robi\Firefox_Setup_3.6.13.exe [2011/02/07 17:25:15 | 060,458,664 | ---- | C] (DVDVideoSoft Limited. ) -- C:\Program Files\FreeStudio.exe [2011/01/30 18:36:11 | 008,417,616 | ---- | C] (Mozilla) -- C:\Program Files\Firefox.exe [10 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012/11/23 15:25:11 | 004,718,592 | ---- | M] () -- C:\Users\Robi\ntuser.dat [2012/11/23 15:01:47 | 000,019,760 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/11/23 15:01:46 | 000,019,760 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/11/23 15:01:39 | 000,002,828 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys [2012/11/23 15:01:38 | 000,000,088 | RHS- | M] () -- C:\ProgramData\32C99DC932.sys [2012/11/23 14:50:23 | 000,000,314 | ---- | M] () -- C:\windows\tasks\asilfsat.job [2012/11/23 14:50:12 | 000,016,384 | ---- | M] () -- C:\windows\System32\Ikeext.etl [2012/11/23 14:50:10 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT [2012/11/23 14:50:06 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012/11/23 14:49:58 | 801,697,792 | -HS- | M] () -- C:\hiberfil.sys [2012/11/22 13:46:00 | 002,544,613 | -H-- | M] () -- C:\Users\Robi\AppData\Local\IconCache.db [2012/11/22 13:21:13 | 000,007,250 | ---- | M] () -- C:\Users\Robi\Documents\Pädagogik Projekt.wlmp [2012/11/22 12:21:02 | 001,500,254 | ---- | M] () -- C:\windows\System32\PerfStringBackup.INI [2012/11/22 12:21:02 | 000,654,844 | ---- | M] () -- C:\windows\System32\perfh007.dat [2012/11/22 12:21:02 | 000,616,686 | ---- | M] () -- C:\windows\System32\perfh009.dat [2012/11/22 12:21:02 | 000,130,426 | ---- | M] () -- C:\windows\System32\perfc007.dat [2012/11/22 12:21:02 | 000,106,808 | ---- | M] () -- C:\windows\System32\perfc009.dat [2012/11/21 23:05:20 | 000,211,168 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Altenheim 09.07.2012 - 03.08.2012.jpg [2012/11/21 23:03:25 | 000,203,440 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Altenheim 02.04.2012 - 13.04.2012.jpg [2012/11/21 23:01:38 | 000,370,461 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Diakonie 02.01.2012 - 06.01.2012.jpg [2012/11/21 22:59:28 | 000,361,755 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Altenheim schulisch 21.03.2011 - 08.04.2011.jpg [2012/11/21 22:57:34 | 000,327,275 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Kindergarten 15.11.2010 - 03.12.2010.jpg [2012/11/21 22:52:42 | 000,289,663 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Altenheim 11.10.2010 - 22.10.2010.jpg [2012/11/21 22:50:54 | 000,276,004 | ---- | M] () -- C:\Users\Robi\Desktop\Praktika Altenheim 26.07.2010 - 13.08.2010.jpg [2012/11/21 22:47:21 | 000,343,463 | ---- | M] () -- C:\Users\Robi\Desktop\Halbjahreszeugnis der Fachhochschulreife 2.jpg [2012/11/21 22:45:59 | 000,306,644 | ---- | M] () -- C:\Users\Robi\Desktop\Halbjahreszeugnis der Fachhochschulreife 1.jpg [2012/11/21 22:43:07 | 000,180,681 | ---- | M] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 4.jpg [2012/11/21 22:41:51 | 000,292,828 | ---- | M] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 3.jpg [2012/11/21 22:40:39 | 000,234,454 | ---- | M] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 2.jpg [2012/11/21 22:39:14 | 000,240,593 | ---- | M] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 1.jpg [2012/11/21 22:37:58 | 000,337,336 | ---- | M] () -- C:\Users\Robi\Desktop\Arbeits und Sozialverhalten.jpg [2012/11/21 16:27:40 | 000,002,577 | ---- | M] () -- C:\windows\System32\config.nt [2012/11/18 19:25:53 | 000,076,784 | ---- | M] () -- C:\Users\Robi\AppData\Local\GDIPFONTCACHEV1.DAT [2012/11/18 19:23:40 | 000,339,296 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT [2012/11/17 22:19:49 | 000,000,867 | ---- | M] () -- C:\windows\win.ini [2012/11/09 08:38:08 | 000,000,316 | ---- | M] () -- C:\windows\tasks\HPCeeScheduleForRobi.job [2012/11/07 16:19:00 | 000,119,300 | -H-- | M] () -- C:\windows\System32\mlfcache.dat [2012/11/03 11:35:40 | 000,000,017 | ---- | M] () -- C:\windows\System32\shortcut_ex.dat [10 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2012/11/22 13:21:13 | 000,007,250 | ---- | C] () -- C:\Users\Robi\Documents\Pädagogik Projekt.wlmp [2012/11/21 23:05:20 | 000,211,168 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Altenheim 09.07.2012 - 03.08.2012.jpg [2012/11/21 23:03:25 | 000,203,440 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Altenheim 02.04.2012 - 13.04.2012.jpg [2012/11/21 23:01:37 | 000,370,461 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Diakonie 02.01.2012 - 06.01.2012.jpg [2012/11/21 22:59:28 | 000,361,755 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Altenheim schulisch 21.03.2011 - 08.04.2011.jpg [2012/11/21 22:57:34 | 000,327,275 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Kindergarten 15.11.2010 - 03.12.2010.jpg [2012/11/21 22:52:41 | 000,289,663 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Altenheim 11.10.2010 - 22.10.2010.jpg [2012/11/21 22:50:54 | 000,276,004 | ---- | C] () -- C:\Users\Robi\Desktop\Praktika Altenheim 26.07.2010 - 13.08.2010.jpg [2012/11/21 22:47:21 | 000,343,463 | ---- | C] () -- C:\Users\Robi\Desktop\Halbjahreszeugnis der Fachhochschulreife 2.jpg [2012/11/21 22:45:59 | 000,306,644 | ---- | C] () -- C:\Users\Robi\Desktop\Halbjahreszeugnis der Fachhochschulreife 1.jpg [2012/11/21 22:43:07 | 000,180,681 | ---- | C] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 4.jpg [2012/11/21 22:41:50 | 000,292,828 | ---- | C] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 3.jpg [2012/11/21 22:40:39 | 000,234,454 | ---- | C] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 2.jpg [2012/11/21 22:39:13 | 000,240,593 | ---- | C] () -- C:\Users\Robi\Desktop\Zeugnis der Fachhochschulreife 1.jpg [2012/11/21 22:37:57 | 000,337,336 | ---- | C] () -- C:\Users\Robi\Desktop\Arbeits und Sozialverhalten.jpg [2012/11/20 12:32:34 | 000,338,432 | ---- | C] () -- C:\windows\System32\sqlite36_engine.dll [2012/11/17 22:23:14 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf [2012/11/17 22:22:38 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf [2012/11/07 16:07:32 | 000,002,491 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk [2012/11/03 11:35:40 | 000,000,017 | ---- | C] () -- C:\windows\System32\shortcut_ex.dat [2012/09/17 21:10:21 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{1053e764-0103-11e2-9662-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms [2012/09/17 21:10:21 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{1053e764-0103-11e2-9662-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms [2012/09/17 21:10:21 | 000,065,536 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{1053e764-0103-11e2-9662-806e6f6e6963}.TM.blf [2012/09/17 21:02:28 | 000,001,652 | ---- | C] () -- C:\windows\System32\ASOROSet.bin [2012/09/03 20:25:13 | 000,000,193 | ---- | C] () -- C:\windows\WORDPAD.INI [2012/07/22 19:46:16 | 000,000,000 | ---- | C] () -- C:\windows\appXYqt3.ini [2012/06/17 23:40:45 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r06 [2012/06/17 23:40:43 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r05 [2012/06/17 23:40:43 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r04 [2012/06/17 23:40:39 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r03 [2012/06/17 23:40:39 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r02 [2012/06/17 23:40:39 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r01 [2012/06/17 23:40:38 | 015,000,000 | ---- | C] () -- C:\Users\Robi\aoe-project.r00 [2012/06/17 23:40:38 | 000,009,006 | ---- | C] () -- C:\Users\Robi\aoe-project.nfo [2012/05/13 18:11:07 | 000,119,300 | -H-- | C] () -- C:\windows\System32\mlfcache.dat [2012/04/27 17:19:28 | 000,027,969 | ---- | C] () -- C:\Users\Robi\AppData\Roaming\UserTile.png [2012/04/24 10:12:02 | 000,139,264 | ---- | C] () -- C:\windows\System32\usbceipi.dll [2012/04/23 21:10:30 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{6e5fe737-8d7e-11e1-bc0d-70f395cd17d6}.TMContainer00000000000000000002.regtrans-ms [2012/04/23 21:10:29 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{6e5fe737-8d7e-11e1-bc0d-70f395cd17d6}.TMContainer00000000000000000001.regtrans-ms [2012/04/23 21:10:28 | 000,065,536 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{6e5fe737-8d7e-11e1-bc0d-70f395cd17d6}.TM.blf [2012/03/26 14:50:10 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{4fead9e9-7747-11e1-86aa-70f395cd17d6}.TMContainer00000000000000000002.regtrans-ms [2012/03/26 14:50:10 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{4fead9e9-7747-11e1-86aa-70f395cd17d6}.TMContainer00000000000000000001.regtrans-ms [2012/03/26 14:50:09 | 000,065,536 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{4fead9e9-7747-11e1-86aa-70f395cd17d6}.TM.blf [2012/03/20 21:21:18 | 000,000,046 | ---- | C] () -- C:\windows\QTW.INI [2012/03/09 09:15:19 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{f3a25e61-69bf-11e1-903e-70f395cd17d6}.TMContainer00000000000000000002.regtrans-ms [2012/03/09 09:15:19 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{f3a25e61-69bf-11e1-903e-70f395cd17d6}.TMContainer00000000000000000001.regtrans-ms [2012/03/09 09:15:19 | 000,065,536 | -HS- | C] () -- C:\Users\Robi\ntuser.dat{f3a25e61-69bf-11e1-903e-70f395cd17d6}.TM.blf [2012/02/21 10:51:49 | 000,000,190 | ---- | C] () -- C:\windows\cncscore.ini [2012/02/17 18:30:29 | 000,286,720 | ---- | C] () -- C:\windows\vsnpstd.exe [2012/02/17 18:30:28 | 000,053,248 | ---- | C] () -- C:\windows\System32\dsnpstd.dll [2012/02/17 18:30:19 | 000,061,440 | ---- | C] ( ) -- C:\windows\System32\rsnpstd.dll [2012/01/29 21:29:47 | 000,000,109 | ---- | C] () -- C:\windows\disney.ini [2011/11/17 19:11:31 | 000,000,236 | ---- | C] () -- C:\ProgramData\{5CAFA1B7-9EEF-4cc7-B9F7-9DDB3DAA679E} [2011/10/26 16:04:43 | 000,139,152 | ---- | C] () -- C:\windows\System32\drivers\PnkBstrK.sys [2011/10/26 16:04:43 | 000,139,152 | ---- | C] () -- C:\Users\Robi\AppData\Roaming\PnkBstrK.sys [2011/10/26 16:04:32 | 000,111,928 | ---- | C] () -- C:\windows\System32\PnkBstrB.exe [2011/10/26 16:04:14 | 002,793,768 | ---- | C] () -- C:\windows\System32\pbsvc.exe [2011/10/26 16:04:14 | 000,066,872 | ---- | C] () -- C:\windows\System32\PnkBstrA.exe [2011/08/02 10:34:12 | 000,000,528 | R--- | C] () -- C:\Program Files\MediaID.bin [2011/07/27 19:48:14 | 000,021,840 | ---- | C] () -- C:\windows\System32\SIntfNT.dll [2011/07/27 19:48:14 | 000,017,212 | ---- | C] () -- C:\windows\System32\SIntf32.dll [2011/07/27 19:48:14 | 000,012,067 | ---- | C] () -- C:\windows\System32\SIntf16.dll [2011/07/27 19:46:30 | 000,000,228 | ---- | C] () -- C:\windows\SIERRA.INI [2011/07/21 21:18:46 | 000,000,236 | ---- | C] () -- C:\ProgramData\{701ACAF9-F102-47c2-8907-36246F4DFB51} [2011/07/02 23:43:21 | 000,053,600 | ---- | C] () -- C:\windows\System32\dosx.exe [2011/06/23 21:02:37 | 000,137,216 | ---- | C] () -- C:\windows\epuninstall.exe [2011/04/24 17:21:37 | 000,000,032 | ---- | C] () -- C:\windows\Menu.INI [2011/04/09 20:30:55 | 000,001,849 | ---- | C] () -- C:\Users\Robi\AppData\Roaming\GhostObjGAFix.xml [2011/03/26 12:21:10 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\NTUSER.DAT{0c0f6de5-579b-11e0-b54f-70f395cd17d6}.TMContainer00000000000000000002.regtrans-ms [2011/03/26 12:21:09 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\NTUSER.DAT{0c0f6de5-579b-11e0-b54f-70f395cd17d6}.TMContainer00000000000000000001.regtrans-ms [2011/03/26 12:21:09 | 000,065,536 | -HS- | C] () -- C:\Users\Robi\NTUSER.DAT{0c0f6de5-579b-11e0-b54f-70f395cd17d6}.TM.blf [2011/03/14 15:18:14 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2011/01/30 19:14:14 | 000,000,000 | ---- | C] () -- C:\windows\nsreg.dat [2011/01/28 23:32:42 | 000,000,088 | RHS- | C] () -- C:\ProgramData\32C99DC932.sys [2011/01/28 23:32:28 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2011/01/28 21:39:21 | 002,544,613 | -H-- | C] () -- C:\Users\Robi\AppData\Local\IconCache.db [2011/01/28 20:11:47 | 000,076,784 | ---- | C] () -- C:\Users\Robi\AppData\Local\GDIPFONTCACHEV1.DAT [2011/01/28 20:05:33 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2011/01/28 20:05:33 | 000,524,288 | -HS- | C] () -- C:\Users\Robi\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2011/01/28 20:05:33 | 000,065,536 | -HS- | C] () -- C:\Users\Robi\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2011/01/28 20:05:32 | 004,980,736 | -HS- | C] () -- C:\Users\Robi\ntuser.dat.bak [2011/01/28 20:05:32 | 004,718,592 | ---- | C] () -- C:\Users\Robi\ntuser.dat [2011/01/28 20:05:32 | 000,000,020 | -HS- | C] () -- C:\Users\Robi\ntuser.ini ========== ZeroAccess Check ========== [2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2012/08/17 20:21:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Ashampoo [2012/02/28 18:20:46 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Babylon [2012/11/20 22:27:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Bloson [2012/04/30 23:09:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DAEMON Tools Lite [2011/11/17 19:11:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Degener [2012/11/21 18:15:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DesktopIconForAmazon [2012/10/05 19:28:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DVDVideoSoft [2012/09/16 20:20:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DVDVideoSoftIEHelpers [2011/06/23 14:49:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\GetRightToGo [2012/03/24 23:38:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Lazy 8 Studios [2011/10/14 16:23:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Leadertech [2012/03/15 21:07:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\loadtbs [2012/11/20 12:31:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\OCS [2012/10/20 18:24:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\OpenCandy [2012/04/16 18:56:37 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\OpenOffice.org [2012/11/20 12:32:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Opera [2012/04/07 19:19:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Rovio [2012/04/24 18:48:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SMART Technologies [2012/04/24 10:50:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SMART Technologies Inc [2012/09/17 13:56:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SoftGrid Client [2011/10/01 14:10:46 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SpringLobby [2011/10/01 14:10:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\springsettings [2011/01/30 08:27:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\supertuxkart [2012/10/13 12:08:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Systweak [2011/10/24 17:13:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Teeworlds [2012/10/14 14:02:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Tonido [2012/02/11 16:50:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\toolplugin [2011/01/28 23:08:32 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\TP [2011/05/02 22:00:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Visan [2011/10/01 11:23:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Windows Live Writer [2012/03/25 22:34:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Windows SideBar ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2011/01/28 20:12:52 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2010/09/09 20:25:48 | 000,000,000 | ---D | M] -- C:\6b4adc41778d39ee87afcdf02bbacb6c [2010/09/09 19:47:22 | 000,000,000 | ---D | M] -- C:\amd64 [2010/04/25 09:41:22 | 000,000,000 | -HSD | M] -- C:\boot [2012/11/21 11:45:08 | 000,000,000 | -HSD | M] -- C:\Config.Msi [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2010/09/09 10:49:15 | 000,000,000 | ---D | M] -- C:\EFI [2011/05/03 19:12:37 | 000,000,000 | ---D | M] -- C:\GTA Vice City User Files [2010/09/09 20:56:48 | 000,000,000 | -H-D | M] -- C:\hp [2011/02/12 22:50:39 | 000,000,000 | RH-D | M] -- C:\MSOCache [2009/07/14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs [2012/11/21 18:15:10 | 000,000,000 | R--D | M] -- C:\Program Files [2012/11/21 16:48:53 | 000,000,000 | -H-D | M] -- C:\ProgramData [2010/04/25 08:48:57 | 000,000,000 | -HSD | M] -- C:\Recovery [2012/07/26 02:12:21 | 000,000,000 | ---D | M] -- C:\Sierra [2012/02/05 21:55:53 | 000,000,000 | ---D | M] -- C:\swsetup [2012/11/23 15:21:02 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2011/01/28 21:33:17 | 000,000,000 | -H-D | M] -- C:\SYSTEM.SAV [2011/01/28 20:05:31 | 000,000,000 | R--D | M] -- C:\Users [2012/11/21 16:32:56 | 000,000,000 | ---D | M] -- C:\Windows [2010/09/09 19:47:22 | 000,000,000 | ---D | M] -- C:\x86 < %SYSTEMDRIVE%\*.* > [2012/02/03 15:11:10 | 000,000,000 | ---- | M] () -- C:\AILog.txt [2011/11/07 15:49:03 | 000,356,420 | ---- | M] () -- C:\AnalysisLog.sr0 [2009/07/14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2012/08/30 00:15:30 | 003,782,214 | ---- | M] () -- C:\chatzum_nt.exe [1997/02/17 11:37:54 | 000,171,520 | ---- | M] (Europress Software) -- C:\CNCS32.dll [2012/08/17 20:22:33 | 000,000,009 | ---- | M] () -- C:\END [2012/11/23 14:49:58 | 801,697,792 | -HS- | M] () -- C:\hiberfil.sys [2011/05/19 15:30:55 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2011/02/18 00:05:09 | 000,000,601 | ---- | M] () -- C:\MFW0.xml [2011/03/04 20:10:52 | 000,000,601 | ---- | M] () -- C:\MFW1.xml [2011/03/06 18:39:32 | 000,000,601 | ---- | M] () -- C:\MFW2.xml [2011/03/19 12:36:54 | 000,000,601 | ---- | M] () -- C:\MFW3.xml [2011/03/23 23:00:18 | 000,000,601 | ---- | M] () -- C:\MFW4.xml [2011/03/24 11:35:29 | 000,000,601 | ---- | M] () -- C:\MFW5.xml [2011/03/27 21:55:58 | 000,000,601 | ---- | M] () -- C:\MFW6.xml [2011/03/29 16:39:37 | 000,000,601 | ---- | M] () -- C:\MFW7.xml [2011/05/19 15:30:55 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2012/11/23 15:04:07 | 1119,809,536 | -HS- | M] () -- C:\pagefile.sys [2011/01/30 09:29:24 | 000,002,471 | ---- | M] () -- C:\pdfco.log [2012/02/16 16:37:48 | 000,000,510 | ---- | M] () -- C:\settings.ini [2009/10/19 23:43:50 | 000,047,104 | ---- | M] () -- C:\Thumbs.db [2012/03/02 15:17:32 | 000,000,474 | ---- | M] () -- C:\user.js [2011/12/29 15:33:31 | 000,000,979 | ---- | M] () -- C:\WinRAR.lnk < %PROGRAMFILES%\*.exe > [2011/01/30 18:36:13 | 008,417,616 | ---- | M] (Mozilla) -- C:\Program Files\Firefox.exe [2011/02/04 17:17:44 | 060,458,664 | ---- | M] (DVDVideoSoft Limited. ) -- C:\Program Files\FreeStudio.exe Invalid Environment Variable: PROGRAMFILES(X86) < %systemroot%\*. /mp /s > < %windir%\installer\*. /10 > [2012/11/20 12:03:48 | 000,000,000 | ---D | M] -- C:\windows\installer\MSIF4F2.tmp- [2012/11/17 21:00:27 | 000,000,000 | ---D | M] -- C:\windows\installer\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3} [2012/11/17 21:00:28 | 000,000,000 | ---D | M] -- C:\windows\installer\{787D1A33-A97B-4245-87C0-7174609A540C} [2012/11/17 22:24:14 | 000,000,000 | ---D | M] -- C:\windows\installer\{90140000-0018-0000-0000-0000000FF1CE} [2012/11/17 22:24:36 | 000,000,000 | ---D | M] -- C:\windows\installer\{90140000-001B-0000-0000-0000000FF1CE} [2012/11/17 22:24:45 | 000,000,000 | ---D | M] -- C:\windows\installer\{95140000-00AF-0407-0000-0000000FF1CE} < %appdata%\*. > [2011/01/28 22:22:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Adobe [2012/11/07 16:09:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Apple Computer [2012/08/17 20:21:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Ashampoo [2011/01/28 20:14:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\ATI [2012/09/23 08:12:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Avira [2012/02/28 18:20:46 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Babylon [2012/11/20 22:27:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Bloson [2011/01/28 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Corel [2012/09/03 20:28:37 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\CorelHomeOffice [2012/04/30 23:09:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DAEMON Tools Lite [2011/11/17 19:11:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Degener [2012/11/21 18:15:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DesktopIconForAmazon [2011/12/25 19:24:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DivX [2011/06/15 21:08:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\dvdcss [2012/10/05 19:28:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DVDVideoSoft [2012/09/16 20:20:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\DVDVideoSoftIEHelpers [2011/06/23 14:49:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\GetRightToGo [2011/07/09 16:06:39 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Hewlett-Packard [2012/06/26 10:22:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\hpqLog [2012/11/17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\HpUpdate [2011/01/28 20:12:54 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Identities [2012/03/24 23:38:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Lazy 8 Studios [2011/10/14 16:23:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Leadertech [2012/03/15 21:07:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\loadtbs [2011/01/28 22:22:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Macromedia [2012/10/13 16:51:46 | 000,000,000 | --SD | M] -- C:\Users\Robi\AppData\Roaming\Microsoft [2011/02/18 16:52:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Mozilla [2012/11/20 12:31:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\OCS [2012/10/20 18:24:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\OpenCandy [2012/04/16 18:56:37 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\OpenOffice.org [2012/11/20 12:32:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Opera [2012/04/07 19:19:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Rovio [2012/09/16 19:09:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Roxio Log Files [2011/07/21 21:15:47 | 000,000,000 | RH-D | M] -- C:\Users\Robi\AppData\Roaming\SecuROM [2011/04/07 22:28:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Skype [2011/03/14 16:05:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\skypePM [2012/04/24 18:48:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SMART Technologies [2012/04/24 10:50:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SMART Technologies Inc [2012/09/17 13:56:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SoftGrid Client [2011/10/01 14:10:46 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\SpringLobby [2011/10/01 14:10:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\springsettings [2011/01/30 08:27:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\supertuxkart [2012/10/13 12:08:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Systweak [2011/10/24 17:13:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Teeworlds [2012/10/14 14:02:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Tonido [2012/02/11 16:50:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\toolplugin [2011/01/28 23:08:32 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\TP [2012/01/23 08:35:19 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\U3 [2012/08/07 17:07:16 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\UltraVNC [2011/05/02 22:00:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Visan [2012/10/14 11:22:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\vlc [2011/10/01 11:23:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Windows Live Writer [2012/03/25 22:34:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\Windows SideBar [2011/12/29 15:33:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Roaming\WinRAR < %appdata%\*.* > [2011/05/28 14:35:34 | 000,001,849 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\GhostObjGAFix.xml [2011/10/26 16:04:43 | 000,139,152 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\PnkBstrK.sys [2012/04/27 17:19:28 | 000,027,969 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\UserTile.png < %appdata%\*.exe /s > [2012/11/20 12:32:10 | 000,753,664 | ---- | M] (Microsoft) -- C:\Users\Robi\AppData\Roaming\DesktopIconForAmazon\IconForAmazon.exe [2012/03/07 13:45:24 | 001,242,112 | ---- | M] (InfiniAd GmbH) -- C:\Users\Robi\AppData\Roaming\loadtbs\uninstall.exe [2012/02/09 12:05:06 | 000,694,784 | ---- | M] (InfiniAd GmbH) -- C:\Users\Robi\AppData\Roaming\loadtbs\ytdl.exe [2011/12/11 18:13:50 | 003,763,360 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\Robi\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe [2012/03/24 23:38:17 | 000,176,730 | R--- | M] () -- C:\Users\Robi\AppData\Roaming\Microsoft\Installer\{3B1329C8-C239-45F8-A4A7-E4477A9B0FED}\_8AED56ACCE516E2F8F20BE.exe [2012/03/24 23:38:18 | 000,176,730 | R--- | M] () -- C:\Users\Robi\AppData\Roaming\Microsoft\Installer\{3B1329C8-C239-45F8-A4A7-E4477A9B0FED}\_D1620478A9711C91595E58.exe [2012/11/20 12:31:51 | 000,106,496 | ---- | M] (OCS) -- C:\Users\Robi\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [2012/11/20 12:31:51 | 000,040,960 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [2012/09/24 20:17:24 | 027,448,224 | ---- | M] (TuneUp Software) -- C:\Users\Robi\AppData\Roaming\OpenCandy\769CCBC6B0AD43259C4F3CAF6474461D\TuneUpUtilities2013_2200218_de-DE.exe [2012/02/06 23:49:12 | 052,016,336 | ---- | M] (Rovio) -- C:\Users\Robi\AppData\Roaming\Rovio\Angry Birds Rio\updates\Update\AngryBirdsRioInstaller_1.4.2.exe [2012/08/09 14:46:44 | 034,269,024 | ---- | M] (Rovio) -- C:\Users\Robi\AppData\Roaming\Rovio\Angry Birds Space\updates\Update\AngryBirdsSpaceInstaller_1.2.2.exe [2011/08/04 17:04:56 | 046,370,928 | ---- | M] (Rovio) -- C:\Users\Robi\AppData\Roaming\Rovio\Angry Birds\updates\Update\AngryBirdsInstaller_1.6.2.exe [2011/11/01 17:34:20 | 046,678,912 | ---- | M] (Rovio) -- C:\Users\Robi\AppData\Roaming\Rovio\Angry Birds\updates\Update\AngryBirdsInstaller_1.6.3.1.exe [2012/02/11 18:26:14 | 041,044,728 | ---- | M] (Rovio) -- C:\Users\Robi\AppData\Roaming\Rovio\Angry Birds\updates\Update\AngryBirdsInstaller_2.0.2-1.exe [2007/10/23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Robi\AppData\Roaming\U3\temp\cleanup.exe [2008/05/02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\Robi\AppData\Roaming\U3\temp\Launchpad Removal.exe < %localappdata%\*. > [2011/01/28 20:05:33 | 000,000,000 | -HSD | M] -- C:\Users\Robi\AppData\Local\Anwendungsdaten [2012/04/27 12:14:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Apple [2012/11/07 16:09:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Apple Computer [2012/08/17 20:21:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\ashampoo [2011/01/28 20:14:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\ATI [2011/01/28 20:13:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Broadcom [2012/08/24 15:56:00 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Conduit [2011/02/16 20:12:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\ConduitEngine [2012/08/17 20:21:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\CRE [2012/11/08 20:42:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Diagnostics [2011/10/14 16:23:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Downloaded Installations [2012/10/02 08:22:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\ElevatedDiagnostics [2012/10/20 18:28:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Freetec [2011/02/16 20:12:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Funload.de [2012/10/13 12:04:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Google [2012/03/25 00:02:14 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Halfbrick [2011/02/20 18:53:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Hewlett-Packard [2011/05/02 21:12:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\HP [2012/03/25 00:00:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Intel [2012/09/16 20:33:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Macromedia [2012/11/07 17:09:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Microsoft [2011/09/08 17:33:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Microsoft Games [2012/10/13 13:41:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Microsoft Help [2011/07/24 01:44:33 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\MicroVision Applications [2011/01/30 09:50:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\MigWiz [2011/01/30 17:53:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Mozilla [2012/04/14 12:29:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\NFS Underground 2 [2011/01/28 20:13:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\PDFC [2011/01/28 22:51:24 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Roxio [2012/04/24 10:57:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\SMART Technologies [2012/04/24 10:50:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\SMART Technologies Inc [2011/01/28 23:08:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\SoftGrid Client [2012/11/23 15:17:35 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Temp [2011/01/28 20:05:33 | 000,000,000 | -HSD | M] -- C:\Users\Robi\AppData\Local\Temporary Internet Files [2012/10/20 18:35:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\TubeBox [2011/01/28 20:05:33 | 000,000,000 | -HSD | M] -- C:\Users\Robi\AppData\Local\Verlauf [2012/09/16 20:03:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\VirtualStore [2012/11/20 11:57:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Wajam [2012/08/14 12:34:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Windows Live [2011/06/09 22:29:48 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\Windows Live Writer [2011/01/30 14:46:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\WinZip [2011/12/31 14:04:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{015FAEAB-4E38-4C7C-A023-3B8D2BC8EFA1} [2011/11/25 08:38:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{019BD3E5-0135-4A6F-B55E-7E628D678B4E} [2012/05/11 12:40:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{026C27B0-F8AD-4D08-BCD0-9C5D40DCF3A0} [2011/10/28 11:58:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{037A8D08-A32C-4E5B-9A9F-85BE5E0292EE} [2012/07/15 16:42:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{03C9BE97-91F7-4817-A050-50CBE50717C2} [2011/10/10 18:14:16 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{04B3D14E-C9BD-4E4F-9775-82AE9247AE07} [2011/06/23 09:50:39 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{067ACE15-4291-4035-8882-D114A9EC20F1} [2011/10/12 13:03:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{06ADD07A-BA19-4D65-A0E9-CEB699CFC352} [2011/08/12 10:20:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{07155021-628E-4E61-8388-2E7E8B9F36CC} [2011/06/30 13:30:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{07730E8A-ADC8-4545-BD8D-DECC0BB66517} [2011/10/20 15:49:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0837252E-7BCE-4635-BDE7-56CF9FB9CD80} [2011/07/04 22:16:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0B5D2CB1-9755-4199-8468-36D40E0289D7} [2012/01/02 15:01:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0B6BA510-2F40-477D-BC70-E37D3850C002} [2012/01/01 12:38:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0BB50477-762E-4D8C-B53D-99E75F6E9A60} [2011/11/13 17:51:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0C899784-31F4-447B-83E7-CBD8D8CD5EF1} [2011/11/15 08:24:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0C92F768-0EBC-4C5F-9D29-C24D23317A75} [2012/02/09 09:00:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0D1C2B12-A264-414F-ACE6-101085FBFDF4} [2011/11/30 17:27:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0DDBAAC6-D40A-4C09-85A8-A7C495AD549F} [2011/08/29 17:35:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0E919348-B08B-4FD2-855C-BE88B87F4103} [2011/10/21 15:13:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0F41F39F-A506-465C-9A5D-431BEF8F801B} [2011/12/29 13:20:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0F5E16E9-AA65-4DC7-AB74-74E8AD4ABBE3} [2012/05/08 15:44:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{0F9B8568-8400-402B-885E-6E361FC27614} [2011/07/18 21:06:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{119646BE-0952-4B13-979A-2ABABD03F14C} [2011/06/17 12:39:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{121E92F7-8A26-42BB-B996-4F7C1B4444D8} [2011/08/04 09:50:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{12FE8392-EDDB-46C2-A04A-0029195D3D3E} [2011/06/19 21:25:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{137842CE-5A49-46B5-A1FA-D5AB7051B51A} [2011/06/21 16:24:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{148905D9-8163-4E08-A5F8-045E14C51E68} [2011/08/30 10:48:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{15F10852-F498-4C3B-BBEB-FE716DD9E072} [2011/07/03 10:24:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{167DF774-2E7F-40D2-B52B-0675482BB10B} [2011/12/09 19:55:34 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1909D481-1047-4DC4-9AA1-DD1E0C56154D} [2011/06/09 22:30:00 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1AEB67FB-FF95-451C-B622-A0A34EF4E042} [2011/12/31 12:07:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1BF16BA0-2834-4528-B15F-886E22DC2560} [2011/09/28 14:16:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1C402B48-BEBC-4EA2-B00A-29BC41EAE4F5} [2011/10/17 20:07:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1CF47066-840C-47AF-90C1-FAFE2AA11CA8} [2012/01/02 02:13:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1FDC9066-A154-4071-BDE8-1F663F818906} [2011/12/10 17:51:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{1FE036A9-B056-4C80-8198-1BFB8461C5BC} [2011/08/16 20:02:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{200BF3D1-B878-47A3-B336-DE12BCA9AC94} [2011/06/12 11:37:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{202D7CEC-067D-4B42-A7FA-917836CEBDA2} [2011/07/08 19:25:57 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2041C2F9-88AE-45FE-A458-7A775725CF1E} [2011/12/17 13:18:38 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{21B18087-AAE8-4975-8306-AAE0C4BB467D} [2011/06/18 19:41:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{21D93EEB-FD02-4861-9A73-734BB7230781} [2011/12/14 15:23:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{22DBF7B2-0F44-465E-B3C9-2D8531323AA6} [2012/11/09 06:36:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{23ABBB6E-6153-4E10-9C0F-8A4C7CFA2B33} [2011/07/05 15:19:33 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{24E16B02-F532-4D6E-968A-D6FDE6C698B7} [2011/08/02 21:14:40 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2864306D-A8AD-4AA7-9991-B4FDA8638541} [2012/05/10 20:33:57 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{29740ACA-4407-4E29-A560-B69BA2D4F08D} [2011/07/24 04:30:15 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{29E7336B-DEB6-4BA8-A4F0-06898CA062AB} [2011/07/06 18:54:35 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2BA77D5E-0AD4-422D-8152-19431BCE7078} [2011/08/10 09:46:37 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2DC84C56-899A-4645-BC60-088FB7888AD2} [2011/12/22 20:44:14 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2EC305F2-2CAA-4E26-9F03-A7164CE8FA38} [2011/06/09 22:28:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local |
\{2F41C724-B8E1-43E8-8DF7-5F41DC041518} [2011/11/04 07:44:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2F7FFBD6-CE33-4152-9D15-131D171B9E89} [2012/07/15 04:34:32 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2F99B4F4-A03E-4242-8171-1E585E627DE8} [2011/09/06 21:39:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2FEC2D11-3FA6-4CB1-B4D3-6B82FAB5A6F2} [2012/01/12 17:45:24 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{2FF8227D-0D66-4C74-9147-145D2A7C1342} [2011/09/06 23:09:19 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{306BC674-D282-4B05-BDCA-9B443492F7DF} [2011/08/31 19:36:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{306F4ADD-DE9E-4208-95C1-8F485059333A} [2011/08/26 13:16:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{31E67955-5FAC-4F83-83FB-1DE8BB7A96AA} [2011/12/16 15:40:24 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{320965F6-D07F-40E6-A242-687EB96DF737} [2011/12/12 14:59:15 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3314E5FB-CD48-46E7-9934-F25E6701D609} [2012/01/06 17:56:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{34BC12E1-8103-4E6A-8A1D-2A943F80AEE1} [2011/06/21 06:25:38 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{34D2F057-D6D5-4C9A-9AD5-C9356D234E16} [2011/06/26 18:12:45 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3501E97D-1F9A-486A-8905-96BD23BAA368} [2012/06/04 11:36:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{36618F64-4264-4CE8-A3C8-2EE8229E9B33} [2011/12/13 19:26:46 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{368562E9-CA00-4B01-9B7A-73A02622A581} [2011/09/11 17:44:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{376D705A-2B29-4ED4-A2A0-2E92CA619E72} [2011/06/11 08:26:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{37F27321-F794-4388-A9A3-D6C234201F2C} [2011/11/25 14:06:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{383E68B0-A3C9-4780-9E16-B6FD6A86BB6A} [2011/10/06 21:27:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3BE2129A-DCAD-4C79-8745-90964CB72C64} [2011/06/07 17:18:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3D32B278-7105-4DAF-8263-96B66EE29062} [2011/12/18 18:43:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3DCCBF37-F4C4-4E60-B056-ED2914A70BBC} [2011/11/28 12:37:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3E5D122D-7044-4685-A7A2-E7F78092A74A} [2012/01/15 19:52:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{3FA97D25-A448-4EED-A1E1-BF329DF1EB31} [2011/06/24 12:44:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{42FCAF6B-DBFD-4A5F-AAE3-322913670F05} [2011/06/20 15:04:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{43B9CE92-5D0A-4792-BBF0-7FF49E1EC880} [2011/11/12 15:38:54 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{446F402A-C989-47D2-B921-18EFF8785F00} [2012/11/08 08:04:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{449D7202-ACCA-46FD-A049-6FA5561DDDE6} [2011/06/27 08:55:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{450F6B32-8D77-46E9-8ED3-204928CF242E} [2011/06/18 08:46:19 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{4596B161-5A47-45CD-BB05-BB787A7B90C0} [2011/07/03 18:37:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{48CFA207-500B-49F3-9630-DCA89EE2A957} [2011/07/06 12:39:21 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{4960DEDA-D7B6-47DE-B1F4-3F9240B2F6BF} [2011/08/24 12:39:54 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{49F64394-3D11-4E46-8BD3-6050558F8056} [2011/06/22 20:55:46 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{4B252EE8-357A-405C-B95D-D62A378C0448} [2011/11/20 10:17:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{4B9E6E9D-EC3C-4BDD-B50E-13D84D3E00B3} [2011/06/09 22:30:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{4D122C6F-EB99-4C19-BBA7-6923DF27645C} [2011/09/05 13:20:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{4FBD5660-7D27-4724-BF16-7D0EA93AF4AA} [2012/01/02 02:13:54 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{508868FD-993F-4088-9F71-5AAA9FFC4F56} [2012/07/14 13:30:55 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{51413F1D-2723-476A-B655-CF039EDC2AEC} [2011/07/12 21:08:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{52F67413-47FA-436E-8168-193BD653AE47} [2011/09/27 08:50:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{53302264-98DE-43E9-A406-4F4109133B43} [2011/10/01 09:16:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{535CC33D-8827-4913-9233-A017EFE9705A} [2011/08/13 13:18:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{54A84A22-FAB6-4D29-82AE-9686DE8BD266} [2011/08/13 15:10:35 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{557E7436-26B7-43DB-8715-D4DF6EC86DA4} [2011/10/27 09:49:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{55942962-9F69-4F72-B521-B7FC308245A6} [2012/01/18 18:41:21 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{55A13A06-3071-4484-98C8-3507CB81A08C} [2012/07/15 04:41:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{55CFDF42-B527-4904-A525-53C8165BD2EB} [2011/10/16 19:53:48 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{562A7E80-451D-4C2C-8C86-25B261805938} [2011/08/19 11:22:27 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{56ED1E51-0F5E-4F81-8B85-4099BBEE5749} [2012/01/14 12:25:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{56EE69BC-A2DC-4E8F-B516-A321097BA4F5} [2012/11/22 12:16:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{56F4D31D-2F68-4B81-8FE6-4F6101085ECD} [2011/11/24 08:17:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{57454150-AAE3-4741-A218-2EE21464E0C3} [2011/08/28 11:22:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{57A06C74-0AD9-4449-B749-A43623AA96E5} [2011/10/04 12:59:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{57CF4DE4-839D-4D59-813A-66195B4D1736} [2011/11/16 08:30:21 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5866F91A-63E2-4408-9F1E-633190C8C05F} [2011/10/15 07:59:06 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{58CF7DA2-B0B4-4A20-BB2B-0DEB3ABF8565} [2011/07/24 21:26:21 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{59AB2185-1CB5-4F73-8F27-6DE0F8D0D513} [2011/06/14 13:53:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5AAE44DB-50F8-4834-B253-E2625EB83909} [2011/12/20 18:39:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5AF0A886-D44F-4848-BBCF-5E278DD2F99B} [2011/07/26 10:16:00 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5B8E9C3E-BE4E-44BF-821A-8F947A32C9A8} [2011/07/02 08:57:14 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5B9B48B7-183A-49E5-B560-7B0CB9404C33} [2011/12/01 16:02:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5D1AABF0-698E-44DE-A37C-276788B5D7C9} [2011/11/16 19:21:55 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5D268991-3BF2-4620-9FF5-A0A1BC9FE977} [2011/06/28 16:28:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5D750822-8319-45DD-9C36-90A371898DE1} [2011/12/27 15:19:09 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5DE3D709-6499-43F0-8307-7565C56FF239} [2011/12/07 15:37:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5E0A34BE-EA35-46CD-B687-616CC3980184} [2011/09/11 08:27:03 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{5E280111-B6DC-4E31-8CB8-DA3C348AF40C} [2011/12/29 18:46:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{605E1A96-DE80-4A2E-9E59-983D91B9A041} [2011/07/04 14:56:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{61C5E91F-4EA4-4469-A164-57253DD57CC4} [2011/06/27 14:09:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{62D1FD99-A0B9-40E1-9A13-A725E5EE3C6E} [2011/06/22 16:33:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{62F8D573-1FBC-41B8-B9C5-77F62EFE185D} [2012/01/13 18:12:48 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{63104BED-5417-421F-974D-7490254A4DD3} [2011/11/23 17:26:09 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6380CF74-5B6B-415E-BEE7-658C525CD568} [2012/02/10 07:20:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6407CD81-670A-4E26-A30C-BD718A50C32A} [2011/10/16 08:46:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6444E09D-A0F2-47FA-A949-9089DBCD9951} [2011/06/10 16:07:32 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{652203F0-CFEB-4492-93FF-C3E855EB2596} [2011/07/09 15:00:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6533D139-954F-4F83-BFA1-03EE19EFB4BE} [2011/06/12 23:37:50 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{65B9AEBD-852F-4F8B-94D2-A63B873033D7} [2011/11/17 13:12:09 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{661A9288-665E-4481-B7AF-73B9925E65F3} [2012/11/22 11:55:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{66E052C8-5437-413C-8AC1-0CB48B0DB0BA} [2011/12/15 17:27:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{696C418F-CE78-42F0-BE38-A0B52AAB9873} [2012/05/11 12:39:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6A835A9E-4777-4694-9CF8-C208587A5F48} [2011/11/02 11:30:40 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6B453144-9CD4-41C6-BA46-4D8FC6A2B7A7} [2011/10/11 13:14:03 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6B5B6CF5-DCB9-4280-88F8-353F714D4450} [2011/07/20 21:23:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6C1598CB-BBC5-4006-9A8E-DC7563BDEFAC} [2012/01/07 21:11:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6C15F4FF-0680-4F40-A3FA-45D03B9EDF33} [2011/07/25 09:33:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6D3044F5-EFAB-45D0-B6D5-713A91A69C95} [2011/08/31 16:50:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6E05B69E-8880-420A-A39E-50099CA22405} [2012/01/24 16:45:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6E7C9D89-4496-47D9-B567-31DF60B231AA} [2011/12/23 19:25:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6EBDBF3A-02F5-4CEE-9C16-698B0607C453} [2011/06/19 09:23:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{6FDC4231-CBD1-4C16-9BAB-64C292488026} [2011/12/06 17:06:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{70A99224-C4A6-4412-A21D-AAAB99599FD6} [2011/10/16 07:41:21 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{711C6700-D325-49B0-BE70-FCF18C81EF53} [2011/10/01 04:45:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{716A8027-CB17-497E-A752-60BFF056F09D} [2011/07/27 09:50:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{71E85588-EFFC-4D4B-B19C-BEB065F0C186} [2011/06/09 22:30:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{72BC01E2-AD1F-4237-A5B0-13E142FB20AD} [2011/07/17 21:05:37 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7383C85B-09F2-43D5-8422-F91B69B66605} [2011/12/28 14:05:26 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{738EE5C6-2A60-453D-8DF3-B0F5FD6F6AC4} [2011/11/04 14:38:34 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{739757AC-66B4-4CE8-B9B1-A81A60EE8B7E} [2011/11/09 17:07:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{73DEA71B-A9AC-4087-B2A9-94F474ABBA86} [2011/11/11 11:32:07 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{73DF16B1-DF32-4FDB-B535-485D0472B88B} [2011/10/02 09:28:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{744A69B4-86B8-4540-BBA5-6ED15DD3660A} [2011/06/16 13:59:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{74DF1748-85D6-49AF-8219-19E9AA867603} [2011/12/22 20:43:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{75225A39-5DFA-455C-9ED4-7978A9D68C53} [2011/08/25 12:31:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{77F0F236-0D58-40DC-9415-C99B71E9221E} [2011/10/05 13:57:16 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7822489D-8ED3-4C66-9EA8-72DD74CEFA56} [2011/12/01 14:43:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7828F840-D2A5-446B-BC99-AE5458502FAB} [2012/01/02 03:42:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{785736F0-9C0C-4AE8-8D75-55848CC04F20} [2011/08/17 22:34:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7BB6E811-F0DB-4430-B849-E87B8F2CB268} [2011/09/04 21:32:15 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7E2AAB18-1D54-40FB-A8E6-480D2E66C119} [2012/07/15 04:41:24 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7E917084-67D8-4728-B925-079AC94AA397} [2012/05/10 20:57:09 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7EBD6B07-5393-462C-9BC5-B5B028DB18F4} [2011/10/18 13:37:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7F8271EC-AC87-44EE-9272-0BEFD22EFD80} [2011/10/01 11:21:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{7F92378F-5FB4-49F6-8729-197B1E16ECB7} [2011/08/10 19:36:07 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{808621B9-704D-4F6E-BD1D-4F7B31EA314C} [2011/06/30 16:57:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8130DE6E-CB5F-4D5C-93C2-0BF57B734E22} [2011/06/13 18:02:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{82DC4858-7B5F-4553-BE35-0C33AA1CD879} [2011/08/17 10:26:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{82FBFA07-3280-48ED-B360-CE0841F4845E} [2012/07/15 04:33:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{83B383F9-F63C-4E43-A5E9-3789DF512AF9} [2011/07/15 12:21:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{83F57F88-3710-4300-A4A7-1F3D4A7FB768} [2011/08/28 21:27:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{85290049-B90A-4150-8F85-1A95857C6B90} [2011/10/01 11:21:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{853FCA2B-8C36-485C-93C7-FA32C2D52B7B} [2012/08/14 12:33:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{867C2644-A569-4BDB-8680-4201F0BBBCC4} [2011/10/24 13:14:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{87D7FA12-9F72-4312-8469-D6C917FA3861} [2011/09/19 15:02:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{87DB7C43-F973-4953-8F22-E6DD47CACFD5} [2011/07/07 14:14:26 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{881E4076-D1C8-4FBF-B161-7F1BC3EB40B4} [2011/11/07 15:29:11 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{882442F1-49D5-481D-987E-9914BDF12C23} [2011/10/30 17:12:34 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8914DD2A-08B9-4EF0-A2FC-B3A42C1E5676} [2011/08/01 18:40:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8A1FC62F-14E2-4697-A7C5-FBA3FE56AD6D} [2011/07/14 14:03:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8A289378-6024-401B-8867-00527AB5875D} [2011/08/29 13:56:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8E037A85-A20D-4DE1-93EA-E987EFF87CDF} [2012/07/15 16:42:35 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8EF00F16-5F50-4FDE-8B57-643EAE354997} [2011/12/12 10:21:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{8F3D85D4-4625-4BE5-8A3F-2309535F433C} [2012/06/04 11:42:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{902065DB-9A91-4982-B2D3-8505BAD21C1F} [2011/12/18 18:43:07 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{903EE55F-C9B2-4307-B9F0-F6B9A9B94221} [2012/05/08 15:45:34 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9078866F-9045-4472-8766-5071BB5A4E90} [2011/07/29 17:51:03 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{90C8153F-32C9-4952-93B9-3F0DB1E7F190} [2011/11/05 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{91B54AEA-2DEF-4DC3-B77F-2D0CC333B6F9} [2011/12/18 11:03:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{924A48CF-8985-4F3E-ACF6-44C5A5437AE4} [2011/07/04 19:14:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{92698A47-23EB-42DF-A4BE-9F052CE507F1} [2011/11/21 18:30:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{93673367-DA97-4E2C-B666-74936A5FEF77} [2011/07/19 20:23:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{93B98EC8-1BA6-418C-9EFD-234E255A6059} [2011/07/05 19:44:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{93BC14E8-9F98-4A19-B7D0-554315D46715} [2011/06/09 22:28:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{942D06E6-E6B4-4867-9F0E-69F507BF561D} [2011/12/22 17:07:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{95B6DE0F-FD41-4E16-9084-AE5C62A55188} [2011/11/06 19:10:33 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{96A193AD-8197-42CD-9F8C-D558B06734CC} [2012/01/08 20:03:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{98226C24-B267-4F0D-BA1D-E8AE1509E6D3} [2011/10/28 08:40:39 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9AD4C0B2-E6EE-4726-8193-9B8E2C70D38E} [2011/06/17 20:19:39 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9B9D74CA-2C46-433B-BA69-D027A390BD13} [2011/08/03 07:08:30 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9C7B3364-55A0-43F8-884E-1C62AA1AA835} [2011/06/29 21:35:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9E806F7E-359F-4B51-BF31-86DCFE645A43} [2011/12/17 16:27:35 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9E87CD04-A11A-4ED6-810C-BDECDF3FFEB0} [2011/09/19 18:53:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{9F0A1472-D750-4118-91ED-1A6E9403586E} [2011/11/23 19:00:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A1F5BCCE-036C-4814-9E5E-21FFE0CCBA74} [2011/11/03 11:19:26 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A202E1B7-B325-4B53-8EB8-68EA076AF8D3} [2011/07/20 20:28:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A2993A4E-FAC6-42F8-A87A-6162591CBC76} [2012/01/24 00:01:35 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A2E211E3-31E5-4654-9C37-1E234EFEF28C} [2011/09/08 15:00:40 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A4AF41A3-D63C-4D78-A75F-A80F1B2D1DC6} [2012/02/10 07:19:55 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A4BABBC5-8584-4384-B8CF-4C6B40672AFB} [2012/07/15 04:32:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A54F689B-E652-48C2-BD14-CCC57C8EDD9E} [2011/09/05 11:45:30 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A62930E5-44C7-4557-AF45-ED0F8F7F21EA} [2011/10/16 08:46:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A72816B2-D80B-45B3-B083-264BBD9BEFBF} [2011/12/11 20:36:52 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A7B8CF63-E05E-4F28-9514-B5A7354A9086} [2012/05/07 20:05:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A7DF5C3D-CB9D-4C1F-933B-080B632BE6A5} [2011/11/20 17:57:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{A990F812-96AE-4B02-952E-B9F9CF30B0D8} [2011/06/26 20:08:45 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{AA68F806-31B1-4EB0-8A73-68692B1A5F41} [2011/07/22 10:25:26 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{AAC1E2E7-AE62-49F5-80F0-6714210DF6DD} [2011/11/23 12:59:59 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{AB1C91A5-6BB3-41C2-9C18-A5B4F5A61362} [2011/10/14 13:08:15 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{ABF2A2EC-66DC-4409-8E2E-27B99A7DD845} [2011/06/10 16:10:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{AC1928A3-A55E-4144-B701-35CAA1649F2F} [2012/01/03 17:35:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{AE502122-5F14-485D-BDC4-1A945EC840A3} [2011/06/15 13:27:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{AFFE6B76-384C-4D38-83AD-1956A4FED323} [2011/11/24 13:46:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B0688F78-A44E-43D1-BA6F-3AF19890EA0E} [2011/11/18 13:34:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B0F05897-D180-4721-A738-4E1647B25ED1} [2011/08/09 09:48:55 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B121859A-4D47-43A9-B1D8-7946A0FA356D} [2011/08/07 17:52:25 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B2568680-427C-4F00-BF61-0431BF015B75} [2012/05/07 20:06:29 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B2638002-69CE-471D-A309-E1814B056777} [2012/05/10 20:36:48 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B30E9F28-C098-4472-AD89-C50CFE96EDE9} [2011/06/09 19:55:51 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B388EE1B-3894-4AE1-ABCC-73F6DA6C17E0} [2011/08/01 15:17:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B5D68C06-1EB2-47F2-9D74-6B0B966F746E} [2011/11/02 16:16:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B6C1E066-9983-4525-9D0D-F9C76F068521} [2011/06/21 17:44:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B6C955DF-908B-490D-9DA1-29112568A0F8} [2012/05/10 20:57:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B8224A9A-FB0F-4F89-9474-0DD6FBF20989} [2011/07/27 13:49:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B8D3DF2A-FA5A-4898-ACC3-526E7279830E} [2012/08/14 12:33:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B96039F5-B71E-4C77-BC79-C0955F5AD72D} [2012/02/09 09:01:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{B9CF8245-81FC-4384-99FA-A7D9922E0464} [2012/02/06 07:44:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BA26709E-C1F4-43A2-A9A9-5E0D0198B668} [2011/11/30 08:13:39 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BAB0B185-0716-4A74-A7C9-F80D69365C44} [2011/10/15 23:45:26 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BB21B69F-75C2-49BC-8573-01DD093AB138} [2011/12/01 09:48:14 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BC6A57DD-C4F5-4EE2-9847-00C7CFD99034} [2011/06/08 12:46:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BCDFAE04-1359-4F1B-B0F7-5E508B324FE3} [2011/11/23 08:16:26 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BD760273-8CD0-4972-BA9D-E6BB782A63FE} [2011/07/21 21:05:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BEA4E3FF-8A5F-4471-BFFA-5B57B03809D9} [2011/08/03 14:11:07 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{BFD7C650-0AD8-48E5-BC9D-713960345D7D} [2011/09/05 20:46:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C065DD39-40E5-4E79-A867-906A7CB7211C} [2011/10/15 23:18:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C0EAD9D0-D5EE-481E-A680-3D0D6DE16834} [2011/12/29 14:28:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C1DDC10E-9E03-446E-B2BE-F31264FF88D9} [2011/12/21 18:51:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C328E7F0-98BF-4FB5-B6F7-5D832C4E22A2} [2011/06/27 13:06:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C36F7163-3648-475A-9D00-2669515DA472} [2012/01/19 13:00:30 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C3A497A7-C363-4DA0-B09B-6A3A1C9E0955} [2012/01/25 16:23:40 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C4211F9C-18ED-410E-B227-5255195729CA} [2011/09/09 13:27:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C49CCCD0-D48B-4497-8D7B-4D02C011A625} [2012/03/15 21:20:56 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C6B30BFE-0E4D-4447-A6D4-4A5333F4F912} [2011/07/19 11:28:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C82C51BD-1DF9-4252-BEC7-AD49CC1B19DA} [2011/08/23 20:04:22 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C8AAA216-83EF-491F-81D2-79EBE7969005} [2011/12/06 20:57:00 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{C8E65EE0-46FE-4E87-87B4-3C5C6ED656E3} [2011/07/28 13:39:03 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CACDC570-20E8-4A40-8B35-56C058EB51BA} [2011/08/18 21:24:41 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CAF4B6CA-AAF0-4723-AE0C-EE47A493A315} [2011/07/15 19:13:19 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CCD49806-4B4D-486A-955B-702F610D7265} [2011/11/13 10:48:32 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CD6401E8-69FF-4386-8037-61842F1B3FC4} [2012/01/02 03:43:00 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CD8ADF45-8665-4AB4-8509-C23D371406B7} [2011/10/26 15:54:04 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CEED595C-3ACE-42EE-B1E4-55AA46857CB9} [2011/07/24 23:33:08 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{CFC3EB63-860E-429D-A2DF-0ABA494C0DC8} [2011/08/09 21:13:32 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D1406AD6-09E4-4DE5-A9D1-316FBDF17CCF} [2012/07/15 04:33:54 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D1567B91-6831-49BF-B9EF-896BCD58C977} [2012/01/10 18:24:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D1747A60-1748-423D-BAF1-0646B660663B} [2011/11/10 17:06:24 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D3D81E27-D8B2-4428-B1D7-6B5AE71E5744} [2011/06/25 08:01:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D43BA313-1F5A-48D1-B5C8-80E30E5C66A6} [2011/08/11 18:53:16 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D508D7E7-AE25-451C-827F-CCE974249A50} [2011/07/29 15:25:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D5F91A60-C599-44EE-A7C0-BB2C44152B5A} [2011/07/29 09:10:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D851CBE9-ADD7-472D-A268-9250D930FCCD} [2011/07/10 09:21:24 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D94D69BE-5B1D-4B01-AAE3-FD03FC2300F9} [2011/09/06 12:40:47 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{D94EC047-C0A8-4AA2-9B43-82B07A56EF23} [2011/07/01 18:05:37 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{DEF5AA20-ABA3-4F33-A9BA-E652A29D023B} [2012/02/06 07:44:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{DFABEE08-3990-4292-90FD-988D366A3143} [2012/07/15 04:34:05 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E2A496BF-D4F2-4511-B6C9-20F6C1F0D00F} [2011/12/03 09:53:45 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E2E6B485-2EA5-46DE-8309-11C363770690} [2011/09/11 08:27:18 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E3181281-899F-4778-B303-DB8148DD18A6} [2011/11/14 20:59:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E3305830-1B0B-49E4-ABC5-970016916B2D} [2012/01/24 16:58:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E361EC5C-94BD-4D63-8FE4-D79BC6A5A4DD} [2012/05/11 12:40:53 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E3680B68-F986-4D14-BF19-E224DD7A250C} [2011/12/15 09:47:39 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E725DA20-46CB-42C3-A941-76BAA83E2F58} [2011/06/16 22:44:44 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E8315317-B59D-4E4D-8985-C08177942268} [2011/09/22 06:38:20 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E83B3A99-D262-4426-8DAD-B36A8ED9FBE9} [2011/07/25 21:57:17 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E867DE44-8010-43FE-8808-DB34D18D64EC} [2011/08/23 12:06:45 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E924B061-00F0-43B7-8B3F-0C236480B8A2} [2012/01/24 00:01:49 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{E9D9D2E2-E22A-4C86-AE59-8E2442898E08} [2012/02/07 07:40:00 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EA55884F-46C8-4C49-BA8A-97455B70A4FD} [2011/06/15 18:49:10 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EB932E82-F0BD-480B-B7E4-5AA919C6068E} [2011/11/27 19:52:34 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EBF28265-1B96-4B59-9049-681E31AA9692} [2011/07/27 19:35:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{ED6360A7-44D6-4D43-8E13-7FBE95B96800} [2011/11/15 16:01:09 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{ED784853-9AB8-4DF5-9D6A-5E9181CF45EF} [2012/02/07 07:40:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EDED76D1-0374-4242-85ED-0A61BC528366} [2011/09/27 06:43:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EE133310-E6D1-4A85-8E2A-7FBC0DA503BA} [2011/10/03 19:36:23 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EE6273CE-858A-42A9-B67D-9880DDD9CA56} [2011/12/31 18:02:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EEDD88FB-636C-43CF-B8E6-BFD9F0A60B89} [2012/05/08 15:44:31 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{EF5E2CEF-81A7-4845-A1C2-102E1F947D3F} [2011/08/22 09:53:28 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{F1494E28-43B7-4618-A403-0A6EA3F45B11} [2011/07/17 16:07:36 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{F23C6CB2-34E5-43FF-B4E8-4D99C549310C} [2011/07/23 12:26:12 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{F276223C-7773-4035-BA33-4537C3940826} [2012/06/04 11:33:38 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{F60E382A-56BD-498A-ADDE-1246DCC25421} [2011/08/04 20:07:58 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{F71B717B-AE0A-4D2C-B1F9-E24583AFB7B4} [2011/10/03 11:27:01 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{F7A469AF-6B54-4A4E-A2CE-BB39EF40B8F6} [2011/08/03 18:17:13 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{FDD31FC8-9040-4D7B-99D6-DBC489A518E6} [2011/10/31 16:38:02 | 000,000,000 | ---D | M] -- C:\Users\Robi\AppData\Local\{FEF461D3-64D5-4D25-A8BA-FFD3A22F65C4} < %localappdata%\*.* > [2012/11/18 19:25:53 | 000,076,784 | ---- | M] () -- C:\Users\Robi\AppData\Local\GDIPFONTCACHEV1.DAT [2012/11/22 13:46:00 | 002,544,613 | -H-- | M] () -- C:\Users\Robi\AppData\Local\IconCache.db < %localappdata%\*.exe /s > [2012/05/07 20:05:30 | 001,287,528 | ---- | M] (Microsoft Corporation) -- C:\Users\Robi\AppData\Local\Microsoft\Windows Live\Installer\Catalog\wlsetup.exe [2012/03/26 15:16:31 | 000,020,480 | ---- | M] (Microsoft) -- C:\Users\Robi\AppData\Local\Microsoft\Windows Sidebar\Gadgets\GermanyRain.gadget\RegisterHost.exe [2011/01/30 18:09:47 | 000,003,475 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4KRAUZKB\Firefox_Setup_3.6.13[1].exe [2011/02/18 16:49:22 | 000,003,475 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4KRAUZKB\Firefox_Setup_3.6.13[2].exe [2011/01/30 19:04:13 | 000,030,083 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\71NZKN5I\Firefox_Setup_3.6.13[1].exe [2011/02/17 19:45:47 | 000,032,843 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\71NZKN5I\Firefox_Setup_3.6.13[2].exe [2011/01/30 18:08:42 | 000,002,483 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ENHH61XT\Firefox_Setup_3.6.13[1].exe [2011/01/30 18:56:57 | 000,004,522 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ENHH61XT\Firefox_Setup_3.6.13[2].exe [2011/01/30 19:03:32 | 000,003,475 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ENHH61XT\Firefox_Setup_3.6.13[3].exe [2011/02/17 19:41:13 | 000,003,475 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ENHH61XT\Firefox_Setup_3.6.13[4].exe [2011/02/18 16:49:43 | 000,032,843 | ---- | M] () -- C:\Users\Robi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ENHH61XT\Firefox_Setup_3.6.13[5].exe [2010/03/18 21:56:18 | 000,079,648 | ---- | M] (Microsoft Corporation) -- C:\Users\Robi\AppData\Local\Microsoft\XLive\Updates\5454083b\Content\setup.exe [2005/11/01 04:09:50 | 000,729,088 | ---- | M] (Electronic Arts Inc.) -- C:\Users\Robi\AppData\Local\Temp\AutoRun.exe [2012/09/17 17:02:17 | 003,778,052 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\chatzum_aff50_nt_s.exe [2008/04/24 00:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\Robi\AppData\Local\Temp\DataCard_Setup.exe [2011/10/16 08:48:21 | 048,014,496 | ---- | M] (Electronic Arts, Inc.) -- C:\Users\Robi\AppData\Local\Temp\EAD5DC8.exe [2011/10/16 07:44:10 | 048,014,496 | ---- | M] (Electronic Arts, Inc.) -- C:\Users\Robi\AppData\Local\Temp\EAD66DC.exe [2005/11/01 04:09:50 | 000,344,064 | ---- | M] (Electronic Arts Inc.) -- C:\Users\Robi\AppData\Local\Temp\eauninstall.exe [2008/10/15 11:42:52 | 000,050,432 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Extract.exe [2010/02/08 14:50:24 | 000,167,936 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\ffunzip.exe [2008/10/04 19:16:40 | 001,882,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Users\Robi\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe [2011/01/31 21:53:13 | 002,790,864 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\Robi\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe [2010/10/27 14:36:04 | 002,487,120 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Funload.de.exe [2012/07/01 23:01:00 | 007,742,384 | ---- | M] (Oracle Corporation) -- C:\Users\Robi\AppData\Local\Temp\fx-runtime.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLF4312.tmp.ConduitEngineSetup.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLF4FA0.tmp.ConduitEngineSetup.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLF6F7F.tmp.ConduitEngineSetup.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLFB7D3.tmp.ConduitEngineSetup.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLFC8F4.tmp.ConduitEngineSetup.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLFE866.tmp.ConduitEngineSetup.exe [2010/10/18 12:27:46 | 000,157,536 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\GLFF31F.tmp.ConduitEngineSetup.exe [2012/06/05 23:57:00 | 000,746,336 | ---- | M] (Google Inc.) -- C:\Users\Robi\AppData\Local\Temp\GoogleUpdateSetup.exe1bc300 [2012/01/23 23:32:49 | 000,136,176 | ---- | M] (Google Inc.) -- C:\Users\Robi\AppData\Local\Temp\GoogleUpdate.exec6566 [2010/05/25 17:13:02 | 000,172,600 | ---- | M] (Hewlett-Packard Company) -- C:\Users\Robi\AppData\Local\Temp\HPHASUtil.exe [2008/01/14 23:28:12 | 000,069,632 | ---- | M] (Hewlett-Packard Company) -- C:\Users\Robi\AppData\Local\Temp\HPQSi.exe [2012/07/01 23:00:19 | 000,893,936 | ---- | M] (Oracle Corporation) -- C:\Users\Robi\AppData\Local\Temp\JREInstall160_22.exe [2012/11/20 12:33:34 | 000,163,896 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\MachineIdCreator.exe [2005/10/03 23:26:23 | 000,073,728 | ---- | M] (Electronic Arts Inc.) -- C:\Users\Robi\AppData\Local\Temp\Need for Speed Most Wanted_uninst.exe [2012/11/20 12:33:53 | 002,985,568 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\oi_{E3E87DEF-EB13-4111-99C4-9E2544002164}.exe [2010/03/15 18:06:00 | 000,149,352 | R--- | M] (Microsoft Corporation) -- C:\Users\Robi\AppData\Local\Temp\ose00000.exe [2002/11/11 15:16:30 | 000,024,576 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Play.exe [2012/11/20 11:56:52 | 000,714,640 | ---- | M] (PriceGong) -- C:\Users\Robi\AppData\Local\Temp\pricegong_268.exe [2008/02/19 23:16:48 | 000,007,168 | R--- | M] () -- C:\Users\Robi\AppData\Local\Temp\ResetDevice.exe [2011/02/04 18:20:12 | 000,088,120 | ---- | M] (Hewlett-Packard Company) -- C:\Users\Robi\AppData\Local\Temp\Resource.exe [2011/02/20 18:42:17 | 035,845,112 | ---- | M] (Hewlett-Packard ) -- C:\Users\Robi\AppData\Local\Temp\sp50843.exe.exe [2011/06/26 19:50:11 | 037,043,344 | ---- | M] (Hewlett-Packard ) -- C:\Users\Robi\AppData\Local\Temp\sp52110.exe.exe [2011/07/07 16:12:59 | 001,592,176 | ---- | M] (Hewlett-Packard ) -- C:\Users\Robi\AppData\Local\Temp\SP52407.exe [2011/10/16 08:08:02 | 048,461,176 | ---- | M] (Hewlett-Packard ) -- C:\Users\Robi\AppData\Local\Temp\sp54373.exe [2012/02/05 21:55:40 | 048,868,760 | ---- | M] (Hewlett-Packard ) -- C:\Users\Robi\AppData\Local\Temp\sp54620.exe [2012/09/27 07:25:36 | 015,204,344 | ---- | M] (Freetec) -- C:\Users\Robi\AppData\Local\Temp\TubeBoxSetup.exe [2011/10/26 18:14:31 | 008,634,358 | ---- | M] (Macrovision Corporation) -- C:\Users\Robi\AppData\Local\Temp\ubiBC9D.tmp.exe [2012/10/17 16:37:08 | 000,340,632 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\uninst1.exe [2012/11/21 12:30:37 | 000,961,480 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\UNINSTALL.EXE [2012/09/16 16:37:45 | 001,091,024 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Uninstaller.exe [2011/09/09 17:07:56 | 000,449,592 | ---- | M] (Hewlett-Packard Company) -- C:\Users\Robi\AppData\Local\Temp\UninstallHPSA.exe [2011/06/21 14:55:12 | 000,449,592 | ---- | M] (Hewlett-Packard Company) -- C:\Users\Robi\AppData\Local\Temp\UninstallHPTCA.exe [2011/12/29 14:37:37 | 000,103,888 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Verbindungsassistent.exe [2012/11/20 11:57:46 | 000,417,088 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\wajam_install.exe [2007/01/20 03:46:42 | 000,455,600 | R--- | M] (Macrovision Corporation) -- C:\Users\Robi\AppData\Local\Temp\_is82B6.exe [2007/01/20 03:46:42 | 000,455,600 | R--- | M] (Macrovision Corporation) -- C:\Users\Robi\AppData\Local\Temp\_isBA3.exe [313 C:\Users\Robi\AppData\Local\Temp\*.tmp files -> C:\Users\Robi\AppData\Local\Temp\*.tmp -> ] [2012/11/21 11:41:37 | 002,792,336 | ---- | M] (AVAST Software) -- C:\Users\Robi\AppData\Local\Temp\_av_sfx.tm~a03944\aswOfferTool.exe [2011/03/22 14:38:42 | 001,092,920 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\{3194A6FD-5474-4560-92B6-F84A2C1194EE}\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}\ICQToolbarSetup.exe [2012/09/16 16:40:34 | 000,398,728 | ---- | M] (Acresso Software Inc.) -- C:\Users\Robi\AppData\Local\Temp\{67FEB7D7-1A5A-46C6-8BB9-F5DD6E7EEFD0}\setup.exe [2012/04/05 16:46:45 | 000,398,728 | ---- | M] (Acresso Software Inc.) -- C:\Users\Robi\AppData\Local\Temp\{A364277F-1CAA-40E6-ABE8-7BCE1505DD48}\setup.exe [2012/10/13 13:01:23 | 000,655,032 | ---- | M] (Sony) -- C:\Users\Robi\AppData\Local\Temp\{E895AA35-8E24-40D8-8267-45BD76A89A3F}\setup.exe [2011/10/26 15:56:08 | 000,377,480 | ---- | M] (Macrovision Corporation) -- C:\Users\Robi\AppData\Local\Temp\{EA56A2F8-FBA7-4258-A250-5DFE3FCEBE1A}\setup.exe [2012/10/17 20:29:20 | 010,220,472 | ---- | M] (Adobe Systems Incorporated) -- C:\Users\Robi\AppData\Local\Temp\{EADE20B2-B2E8-4642-A796-7524846F3641}\InstallFlashPlayer.exe [2012/11/20 22:28:04 | 000,655,032 | ---- | M] (Sony) -- C:\Users\Robi\AppData\Local\Temp\{FB14D2C5-584C-421E-8542-56FC9BDD223E}\setup.exe [2011/11/27 13:49:44 | 001,362,728 | ---- | M] (BabylonToolbar) -- C:\Users\Robi\AppData\Local\Temp\36FBF359-BAB0-7891-8F36-663A7D06408B\MyBabylonTB.exe [2012/01/03 10:18:58 | 001,789,040 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\36FBF359-BAB0-7891-8F36-663A7D06408B\Setup.exe [2011/11/27 13:49:44 | 001,362,728 | ---- | M] (BabylonToolbar) -- C:\Users\Robi\AppData\Local\Temp\4DF5AF6A-BAB0-7891-9125-DF8CF7ADF15F\MyBabylonTB.exe [2012/01/03 10:18:58 | 001,789,040 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\4DF5AF6A-BAB0-7891-9125-DF8CF7ADF15F\Setup.exe [2011/05/04 13:11:17 | 002,832,544 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\Robi\AppData\Local\Temp\6C1B.dir\InstallFlashPlayer.exe [2011/05/21 08:13:47 | 003,081,376 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\Robi\AppData\Local\Temp\9C10.dir\InstallFlashPlayer.exe [2012/03/02 15:17:13 | 000,920,176 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\Addons\2431C6F0\babylon.exe [2012/11/20 12:33:56 | 001,087,944 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\avg-secure-search-installer.exe [2012/11/20 12:33:56 | 000,600,008 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\CommonFiles\AVG Secure Search\DriverInstaller.exe [2012/11/20 12:33:56 | 000,146,376 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\CommonFiles\AVG Secure Search\DriverInstaller_64.exe [2012/11/20 12:33:56 | 000,970,696 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\CommonFiles\AVG Secure Search\ScriptHelper.exe [2012/11/20 12:33:56 | 000,711,112 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\CommonFiles\AVG Secure Search\ToolbarUpdater.exe [2012/11/20 12:33:56 | 000,155,592 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\ConfigFiles\MachineIdCreator.exe [2012/11/20 12:33:56 | 000,612,296 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\ProgFiles\AVG Secure Search\lip.exe [2012/11/20 12:33:56 | 000,504,264 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\ProgFiles\AVG Secure Search\PostInstall.exe [2012/11/20 12:33:56 | 001,020,512 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\ProgFiles\AVG Secure Search\ROC_ssl.exe [2012/11/20 12:33:56 | 000,961,480 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\ProgFiles\AVG Secure Search\Uninstall.exe [2012/11/20 12:33:56 | 000,997,320 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\avg_a05752\ProgFiles\AVG Secure Search\vprot.exe [2012/06/27 14:45:38 | 000,155,648 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\CCIS\ccsqlh.exe [2012/08/17 20:21:42 | 002,310,424 | ---- | M] (Conduit) -- C:\Users\Robi\AppData\Local\Temp\ct2481020\chLogic.exe [2012/08/17 20:21:21 | 001,418,464 | ---- | M] (Conduit) -- C:\Users\Robi\AppData\Local\Temp\ct2481020\ffLogic.exe [2012/08/17 20:20:51 | 002,155,560 | ---- | M] (Conduit) -- C:\Users\Robi\AppData\Local\Temp\ct2481020\ieLogic.exe [2012/08/17 20:22:21 | 000,203,656 | ---- | M] (Conduit) -- C:\Users\Robi\AppData\Local\Temp\ct2481020\statisticsStub.exe [2012/09/02 14:08:55 | 010,217,672 | ---- | M] (Adobe Systems Incorporated) -- C:\Users\Robi\AppData\Local\Temp\E0EC.dir\InstallFlashPlayer.exe [2012/06/27 16:40:33 | 001,816,216 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\E264640D-BAB0-7891-B174-E47D4D4BF88A\Setup.exe [2012/10/11 12:18:48 | 001,283,128 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\E264640D-BAB0-7891-B174-E47D4D4BF88A\Latest\BrowserManagerSetup.exe [2012/10/17 16:37:08 | 000,340,632 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\E264640D-BAB0-7891-B174-E47D4D4BF88A\Latest\GUninstaller.exe [2012/10/14 21:08:47 | 001,735,084 | ---- | M] (BabylonToolbar) -- C:\Users\Robi\AppData\Local\Temp\E264640D-BAB0-7891-B174-E47D4D4BF88A\Latest\MyBabylonTB.exe [2012/10/15 19:32:43 | 001,837,720 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\E264640D-BAB0-7891-B174-E47D4D4BF88A\Latest\Setup.exe [2011/11/10 00:43:11 | 003,102,920 | ---- | M] (Hewlett-Packard ) -- C:\Users\Robi\AppData\Local\Temp\HpUpdate\25545\hpusetup.exe [2012/10/25 19:51:08 | 000,484,656 | ---- | M] (DealPly) -- C:\Users\Robi\AppData\Local\Temp\is398349909\dp.exe [2012/08/15 14:41:36 | 000,899,224 | ---- | M] (Babylon Ltd.) -- C:\Users\Robi\AppData\Local\Temp\is398349909\MyBabylonTB.exe [2012/10/25 17:47:14 | 015,177,320 | ---- | M] (Freetec) -- C:\Users\Robi\AppData\Local\Temp\is398349909\Tubebox_BrotherSoft_Setup.exe [2012/06/13 18:34:06 | 000,056,232 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\is398349909\wajam_download.exe [2012/10/28 13:20:42 | 001,210,432 | ---- | M] (Web Deals Interactive LLC) -- C:\Users\Robi\AppData\Local\Temp\is398349909\Yontoo-C4.exe [2011/11/08 12:50:52 | 000,073,080 | ---- | M] (Conduit) -- C:\Users\Robi\AppData\Local\Temp\is-G126P.tmp\ConduitInstaller.exe [2011/01/30 13:43:11 | 000,001,380 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\CAU2P8GB\PuzzleCollectionPortable_1.0.paf[1].exe [2012/08/29 20:14:44 | 000,270,304 | ---- | M] (Mozilla Foundation) -- C:\Users\Robi\AppData\Local\Temp\MozUpdater\updater.exe [2012/09/08 20:19:22 | 000,270,304 | ---- | M] (Mozilla Foundation) -- C:\Users\Robi\AppData\Local\Temp\MozUpdater-1\updater.exe [2012/10/20 15:01:26 | 000,270,816 | ---- | M] (Mozilla Foundation) -- C:\Users\Robi\AppData\Local\Temp\MozUpdater-2\updater.exe [2010/03/23 00:18:03 | 015,474,420 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\mtka_tmp\EFLC.exe [2010/01/27 20:22:16 | 005,317,976 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\mtka_tmp\LaunchEFLC_activation.exe [2010/01/27 20:22:34 | 000,101,520 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\mtka_tmp\secupacker_launcher.exe [1 C:\Users\Robi\AppData\Local\Temp\mtka_tmp\*.tmp files -> C:\Users\Robi\AppData\Local\Temp\mtka_tmp\*.tmp -> ] [2012/11/20 12:29:58 | 000,294,912 | ---- | M] (OCS) -- C:\Users\Robi\AppData\Local\Temp\OCS\ocs_v6q.exe [2012/11/20 12:32:31 | 002,377,384 | ---- | M] (FireJump.net ) -- C:\Users\Robi\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\818016712e786dfc9e740090dbadc34a\FireJump_Setup.exe [2012/11/20 12:32:48 | 001,191,596 | ---- | M] (Preispilot ) -- C:\Users\Robi\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\965421448e2ae6935357883e4db13ff5\preispilot-firefox-installer.exe [2012/11/20 12:32:10 | 000,753,664 | ---- | M] (Microsoft) -- C:\Users\Robi\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\9c01e5d71e442bf564f271e62b1d5357\AmazonIconInstaller.exe [2012/11/20 12:31:50 | 000,249,856 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\a3c2caa9cc4cdb568568c06b47f7fb36\SearchAnonymizerStarter.exe [2012/11/20 12:33:31 | 010,224,184 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\a5f109cad706f70230e98e4424126475\avg-secure-setup.exe [2012/11/20 12:32:07 | 001,088,872 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\ee1f7b4c6726cb98d08df809b1f7c2ac\TubeBox_Setup.exe [2011/06/18 19:58:28 | 000,452,923 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Temp1_Doodle.zip\Doodle.exe [2011/02/17 22:23:24 | 005,298,620 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Temp1_gp_win_rc6.1.zip\greenpois0n.exe [2007/10/19 11:36:44 | 001,774,432 | ---- | M] (McAfee, Inc.) -- C:\Users\Robi\AppData\Local\Temp\Temp1_McafeeRootkitDetective_1.1.zip\Rootkit_Detective.exe [2009/09/11 23:00:06 | 003,801,901 | ---- | M] (Netdisaster ) -- C:\Users\Robi\AppData\Local\Temp\Temp1_Netdisaster-1.1.zip\Go.exe [2011/02/21 10:17:14 | 001,401,344 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\Temp1_Visual_Pinball.zip\VPinball911.exe [2012/04/15 23:01:24 | 004,719,408 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Users\Robi\AppData\Local\Temp\Temp2_clickmusicalkeys.zip\BundleSweetIMSetup.exe [2012/07/20 04:16:50 | 000,501,248 | ---- | M] () -- C:\Users\Robi\AppData\Local\Temp\VSDE997.tmp\setup.exe [2012/10/01 20:16:01 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Users\Robi\AppData\Local\Temp\VSDE997.tmp\DotNetFX\dotnetchk.exe [2009/07/18 10:13:30 | 001,843,544 | ---- | M] (Microsoft Corporation) -- C:\Users\Robi\AppData\Local\Temp\VSDE997.tmp\vcredist_x86\vcredist_x86.exe < %allusersprofile%\*. > [2012/09/17 13:51:00 | 000,000,000 | ---D | M] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012/09/16 20:30:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe [2012/04/27 12:13:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple [2012/04/27 12:14:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2012/08/17 20:20:15 | 000,000,000 | ---D | M] -- C:\ProgramData\ashampoo [2011/01/28 20:14:17 | 000,000,000 | ---D | M] -- C:\ProgramData\ATI [2012/11/21 16:42:46 | 000,000,000 | ---D | M] -- C:\ProgramData\AVAST Software [2012/09/23 08:03:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Avira [2012/02/28 18:20:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon [2012/10/20 18:27:24 | 000,000,000 | -H-D | M] -- C:\ProgramData\Common Files [2010/09/09 20:11:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Corel [2012/04/30 18:41:42 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite [2011/11/17 19:11:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Degener [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2011/12/25 19:33:00 | 000,000,000 | ---D | M] -- C:\ProgramData\DivX [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2012/04/24 10:52:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Downloaded Installations [2011/10/14 16:24:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Electronic Arts [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2012/04/24 10:49:19 | 000,000,000 | ---D | M] -- C:\ProgramData\FLEXnet [2012/10/13 12:58:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Hewlett-Packard [2011/06/12 21:06:10 | 000,000,000 | ---D | M] -- C:\ProgramData\HP [2011/08/18 10:26:20 | 000,000,000 | ---D | M] -- C:\ProgramData\HP Photo Creations [2011/06/06 21:25:57 | 000,000,000 | ---D | M] -- C:\ProgramData\ICQ [2012/03/02 15:17:22 | 000,000,000 | ---D | M] -- C:\ProgramData\InstallMate [2012/09/16 16:32:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Intel [2012/04/05 19:34:20 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft [2012/11/17 22:24:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft Help [2012/06/04 10:39:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Mozilla [2011/02/13 10:57:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Norton [2012/11/21 10:31:45 | 000,000,000 | ---D | M] -- C:\ProgramData\PDFC [2012/03/02 15:17:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Premium [2012/04/05 17:38:51 | 000,000,000 | -HSD | M] -- C:\ProgramData\SecuROM [2011/03/14 16:25:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype [2012/04/25 14:29:22 | 000,000,000 | ---D | M] -- C:\ProgramData\SMART Technologies [2011/01/30 09:33:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Sonic [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2012/04/16 18:52:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun [2012/04/23 21:08:57 | 000,000,000 | ---D | M] -- C:\ProgramData\SystemExplorer [2012/11/20 11:57:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Tarma Installer [2012/11/21 16:18:49 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP [2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2012/10/14 15:02:49 | 000,000,000 | ---D | M] -- C:\ProgramData\TheBflix [2012/04/26 11:12:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Trymedia [2012/09/16 22:31:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Uninstall [2011/03/13 13:19:59 | 000,000,000 | ---D | M] -- C:\ProgramData\VirtualizedApplications [2011/05/02 22:00:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Visan [2012/08/24 16:05:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Vokabel Trainer [2011/01/28 20:06:23 | 000,000,000 | ---D | M] -- C:\ProgramData\WinZip [2011/02/20 18:44:51 | 000,000,000 | ---D | M] -- C:\ProgramData\{23D58E70-3B83-4B83-A227-68770F84F5EC} [2012/04/27 12:15:31 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2010/09/09 20:12:17 | 000,000,000 | ---D | M] -- C:\ProgramData\{8D274659-3D84-4410-A197-C170D180BC76} [2012/02/05 21:57:51 | 000,000,000 | ---D | M] -- C:\ProgramData\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E} [2012/10/20 18:27:24 | 000,000,000 | -HSD | M] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2011/10/16 08:15:16 | 000,000,000 | ---D | M] -- C:\ProgramData\{D3B41B92-9BC2-43EB-916A-4FA9E8191837} [2011/06/26 19:52:08 | 000,000,000 | ---D | M] -- C:\ProgramData\{E91883C8-8CDC-46A4-A45F-CB40EB82ED60} < %allusersprofile%\*.* > [2012/11/23 15:01:38 | 000,000,088 | RHS- | M] () -- C:\ProgramData\32C99DC932.sys [2011/03/14 15:18:14 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2012/11/23 15:01:39 | 000,002,828 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys [2011/12/15 12:23:30 | 000,000,236 | ---- | M] () -- C:\ProgramData\{5CAFA1B7-9EEF-4cc7-B9F7-9DDB3DAA679E} [2011/12/15 12:58:48 | 000,000,236 | ---- | M] () -- C:\ProgramData\{701ACAF9-F102-47c2-8907-36246F4DFB51} < %allusersprofile%\*.exe /s > [2012/08/21 12:01:28 | 001,977,816 | ---- | M] (GEAR Software, Inc.) -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\GEARDIFx.exe [2012/08/21 12:01:22 | 000,115,672 | ---- | M] (GEAR Software, Inc.) -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DifXInst32.exe [2012/09/17 13:36:45 | 000,073,624 | ---- | M] (Apple Inc.) -- C:\ProgramData\Apple Computer\Installer Cache\iTunes 10.7.0.21\SetupAdmin.exe [2012/04/25 11:24:06 | 000,073,584 | ---- | M] (Apple Inc.) -- C:\ProgramData\Apple Computer\Installer Cache\Safari 5.34.57.2\SetupAdmin.exe [2012/09/17 13:33:13 | 000,073,576 | ---- | M] (Apple Inc.) -- C:\ProgramData\Apple\Installer Cache\iCloud Control Panel 1.1.0.40\SetupAdmin.exe [2012/11/14 15:23:15 | 000,612,640 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\update.exe [2012/09/07 19:26:02 | 000,047,824 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\updrgui.exe [2011/08/11 01:57:44 | 001,248,312 | ---- | M] (Hewlett-Packard) -- C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [2011/08/18 10:26:01 | 000,161,960 | ---- | M] () -- C:\ProgramData\HP Photo Creations\MessageCheck.exe [2011/08/18 10:26:01 | 000,301,224 | ---- | M] (Visan / RocketLife) -- C:\ProgramData\HP Photo Creations\PhotoProductCore.exe [2011/08/18 10:26:01 | 000,162,208 | ---- | M] () -- C:\ProgramData\HP Photo Creations\PhotoProductReg.exe [2010/05/20 16:12:48 | 004,238,264 | ---- | M] (Adobe Systems, Inc.) -- C:\ProgramData\HP\HP Deskjet 3050 J610 series\Help\flash\FlashPla.exe [2012/02/21 01:45:08 | 000,015,496 | R-S- | M] (Tarma Software Research Pty Ltd) -- C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.exe [2010/03/31 18:11:10 | 001,100,664 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\Office14\setup.exe [2010/03/24 15:57:08 | 000,838,536 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\Office14\Office.de-de\DW20.EXE [2010/03/24 15:57:14 | 000,519,584 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\Office14\Office.de-de\dwtrig20.exe [2010/03/31 18:11:26 | 000,149,352 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\Office14\SingleImage.WW\ose.exe [2010/03/01 00:38:28 | 005,336,456 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\OStarter\de-de\Office.exe [2010/03/31 16:25:30 | 001,629,584 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\OStarter\de-de\SetupConsumerC2R.exe [2010/03/31 16:25:30 | 001,629,584 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\Microsoft\OEMOffice14\OStarter\de-de\SetupConsumerC2ROLW.exe [2011/03/11 04:29:11 | 000,225,936 | R-S- | M] (Tarma Software Research Pty Ltd) -- C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe [2010/04/15 20:17:42 | 003,276,784 | R--- | M] (Sonic Solutions) -- C:\ProgramData\Uninstall\{1D61E881-43CD-447B-9E6B-D2C6138B2862}\setup.exe < > [2009/07/14 05:53:46 | 000,032,640 | ---- | C] () -- C:\windows\Tasks\SCHEDLGU.TXT [2009/07/14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\windows\Tasks\SA.DAT [2011/12/10 17:55:38 | 000,000,316 | ---- | C] () -- C:\windows\Tasks\HPCeeScheduleForRobi.job [2012/04/24 10:12:03 | 000,000,314 | ---- | C] () -- C:\windows\Tasks\asilfsat.job ========== Alternate Data Streams ========== @Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:CB0AACC9 < End of report > hoffe es ist richtig so?:/ hey.. ich habe gar keine ahnung von pc oder laptop:( wenn es falsch ist dann mache ich es gerne nochmal neu. Danke lg Kevinator |
Das ist ganz schön zugemüllt, da müssen wir erst anders ran: Schritt 1: Adware entfernen mit JRT Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden. http://imageshack.us/a/img841/7292/thisisujrt.gif Bitte lade Junkware Removal Tool auf Deinen Desktop.
Schritt 2: Scan mit Combofix Schritt 3: Liste der installierten Programme (Combofix) Bitte suche und poste mir die folgende Datei: |
Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Wie mache ich das?:( hxxp://thisisudax.org/downloads/JRT.exe und den habe ich heruntergeladen, und geöffnet aber der scannt automatisch, ohne dass ich was auswählen kann?! |
Genau der arbeitet alleine. AVira deaktivieren: Rechtsklick auf das Regenschirmsymbol und deaktivieren |
ComboFix sagt mir, das antivirus: AntiVir Desktop und antispyware : AntiVir Desktop aktiv sind und ich sie abschalten muss.. wie mache ich das?? |
Wenn du es deaktiviert hast, dann ist das Okay und du kannst weiter machen. Avira ist ein dümmliches Programm und meldet sich oft nicht korrekt ab. Zitat:
|
Code: ComboFix 12-11-23.02 - Robi 23.11.2012 17:26:01.1.1 - x86Code: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
Das Combofixlog ist nicht vollständig. |
überprüfst du grade die daten? und wird der laptop dadurch auch wieder etwas schneller?:) |
Natürlich prüfe ich das ... ich brauche jedes Logfile komplett und das von Combofix ist es nicht - Schritt 3 fehlt. |
Code: ComboFix 12-11-23.02 - Robi 23.11.2012 17:26:01.1.1 - x86 |
jetzt ist es komplett, Schritt 3 noch |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 21:31 Uhr. |
Copyright ©2000-2025, Trojaner-Board