OTL logfile created on: 4/21/2011 5:33:21 PM - Run 
OTLPE by OldTimer - Version 3.1.46.0     Folder = X:\Programs\OTLPE
Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000809 | Country: Großbritannien | Language: ENG | Date Format: dd/MM/yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 223.44 Gb Total Space | 89.02 Gb Free Space | 39.84% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto] --  -- (CLTNetCnService)
SRV - [2011/03/16 13:57:30 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/01/16 05:01:27 | 000,135,336 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009/12/08 15:04:34 | 000,673,136 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe -- (VUAgent)
SRV - [2008/09/08 08:39:07 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008/07/04 06:52:18 | 000,014,336 | ---- | M] (Vodafone) [Auto] -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe -- (VMCService)
SRV - [2008/01/19 03:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/10/31 03:40:08 | 000,125,440 | ---- | M] (ArcSoft, Inc.) [Auto] -- C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe -- (uCamMonitor)
SRV - [2007/09/28 15:11:44 | 000,292,128 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr)
SRV - [2007/09/20 12:52:32 | 000,079,136 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe -- (VcmXmlIfHelper)
SRV - [2007/09/10 18:45:04 | 000,124,832 | ---- | M] () [Auto] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0)
SRV - [2007/08/28 10:27:12 | 000,131,072 | ---- | M] (Sony Corporation) [Auto] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe -- (VzFw)
SRV - [2007/08/28 10:27:10 | 000,192,512 | ---- | M] (Sony Corporation) [Auto] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc)
SRV - [2007/08/14 15:05:18 | 000,182,392 | ---- | M] (Sony Corporation) [Auto] -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service)
SRV - [2007/06/28 02:53:04 | 000,073,728 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service)
SRV - [2007/06/28 02:52:48 | 000,274,432 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -- (Vcsw)
SRV - [2007/06/20 09:35:06 | 002,523,136 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe -- (VAIOMediaPlatform-IntegratedServer-AppServer)
SRV - [2007/06/20 09:34:52 | 000,499,712 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe -- (VAIOMediaPlatform-Mobile-Gateway)
SRV - [2007/06/20 09:34:50 | 001,089,536 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe -- (VAIOMediaPlatform-UCLS-UPnP) VAIO Media Content Collection (UPnP)
SRV - [2007/06/20 09:34:50 | 001,089,536 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe -- (VAIOMediaPlatform-IntegratedServer-UPnP) VAIO Media Integrated Server (UPnP)
SRV - [2007/06/20 09:34:50 | 000,397,312 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe -- (VAIOMediaPlatform-UCLS-HTTP) VAIO Media Content Collection (HTTP)
SRV - [2007/06/20 09:34:50 | 000,397,312 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe -- (VAIOMediaPlatform-IntegratedServer-HTTP) VAIO Media Integrated Server (HTTP)
SRV - [2007/04/03 11:18:08 | 001,516,584 | ---- | M] (Cisco Systems, Inc.) [Auto] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2007/01/10 10:51:06 | 000,745,472 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe -- (VAIOMediaPlatform-UCLS-AppServer)
SRV - [2007/01/04 13:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
SRV - [2006/12/13 20:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006/12/13 20:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006/12/13 19:46:16 | 000,057,344 | ---- | M] () [On_Demand] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand] --  -- (MRESP50a64)
DRV - File not found [Kernel | On_Demand] --  -- (MRENDIS5)
DRV - File not found [Kernel | On_Demand] --  -- (MREMPR5)
DRV - File not found [Kernel | On_Demand] --  -- (MREMP50a64)
DRV - File not found [Kernel | On_Demand] --  -- (IpInIp)
DRV - [2011/03/16 13:57:30 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/01/16 05:01:27 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/10/07 08:11:37 | 006,639,616 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\NETwLv32.sys -- (NETwLv32)     Intel(R)
DRV - [2010/08/25 09:41:36 | 000,263,272 | ---- | M] (Realtek                                            ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009/05/11 04:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/03/17 05:05:30 | 000,101,632 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008/02/07 05:38:41 | 000,019,712 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\Program Files\Common Files\Motive\MREMP50.sys -- (MREMP50)
DRV - [2008/02/07 05:38:38 | 000,018,304 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\Program Files\Common Files\Motive\MRESP50.sys -- (MRESP50)
DRV - [2008/01/19 02:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2007/11/15 20:29:22 | 000,818,688 | ---- | M] (Texas Instruments) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ti21sony.sys -- (ti21sony)
DRV - [2007/10/29 13:30:30 | 000,017,920 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter)
DRV - [2007/10/18 20:22:07 | 002,930,176 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007/10/16 20:01:59 | 000,073,472 | ---- | M] (Ricoh) [Kernel | On_Demand] -- C:\Windows\System32\drivers\R5U870FLx86.sys -- (R5U870FLx86)
DRV - [2007/10/16 20:01:59 | 000,043,904 | ---- | M] (Ricoh) [Kernel | On_Demand] -- C:\Windows\System32\drivers\R5U870FUx86.sys -- (R5U870FUx86)
DRV - [2007/10/15 23:57:24 | 000,743,424 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2007/09/19 08:38:18 | 000,010,216 | ---- | M] (Sony Corporation) [Kernel | System] -- C:\Windows\System32\drivers\DMICall.sys -- (DMICall)
DRV - [2007/09/18 23:29:09 | 002,222,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Intel(R)
DRV - [2007/09/04 20:02:46 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007/08/28 21:58:45 | 000,009,344 | ---- | M] (Sony Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SFEP.sys -- (SFEP)
DRV - [2007/05/26 04:03:06 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007/04/17 14:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto] -- C:\Windows\System32\drivers\regi.sys -- (regi)
DRV - [2007/04/03 11:17:08 | 000,306,295 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto] -- C:\Windows\System32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2007/01/31 08:45:06 | 000,127,376 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2007/01/18 09:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006/11/02 03:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\admin_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\admin_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\admin_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bluewin.ch/index_d.html
IE - HKU\admin_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\admin_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\admin_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
IE - HKU\admin_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 10.64.230.6:80
 
 
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: vodafone_video_plugin@vodafone.com:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.3
FF - prefs.js..network.proxy.backup.ftp: ""
FF - prefs.js..network.proxy.backup.ftp_port: 0
FF - prefs.js..network.proxy.backup.gopher: ""
FF - prefs.js..network.proxy.backup.gopher_port: 0
FF - prefs.js..network.proxy.backup.socks: ""
FF - prefs.js..network.proxy.backup.socks_port: 0
FF - prefs.js..network.proxy.backup.ssl: ""
FF - prefs.js..network.proxy.backup.ssl_port: 0
FF - prefs.js..network.proxy.ftp: "10.64.230.6"
FF - prefs.js..network.proxy.ftp_port: 80
FF - prefs.js..network.proxy.gopher: "10.64.230.6"
FF - prefs.js..network.proxy.gopher_port: 80
FF - prefs.js..network.proxy.http: "10.64.230.6"
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "10.64.230.6"
FF - prefs.js..network.proxy.socks_port: 80
FF - prefs.js..network.proxy.ssl: "10.64.230.6"
FF - prefs.js..network.proxy.ssl_port: 80
 
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/23 11:35:47 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/28 10:01:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010/12/27 07:31:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011/03/28 10:01:38 | 000,000,000 | ---D | M]
 
[2010/10/06 19:02:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\Mozilla\Extensions
[2010/10/06 19:02:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/04/07 16:34:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2myhvjz.default\extensions
[2011/02/16 10:03:45 | 000,000,000 | ---D | M] ("Garmin Communicator") -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2myhvjz.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2010/10/02 05:55:52 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2myhvjz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/01/05 19:33:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2myhvjz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(476)
[2010/10/19 02:42:40 | 000,000,000 | ---D | M] (Vodafone Video Plugin for Firefox) -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2myhvjz.default\extensions\vodafone_video_plugin@vodafone.com
[2011/03/23 11:32:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/06/21 15:53:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/25 15:28:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/11/08 17:32:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
File not found (No name found) -- 
() (No name found) -- C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y2MYHVJZ.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011/03/18 13:56:37 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010/07/16 23:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2008/06/30 16:02:00 | 000,663,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\npOGAPlugin.dll
[2010/01/01 04:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2010/01/01 04:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010/01/01 04:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010/01/01 04:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010/01/01 04:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate]  File not found
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [MarketingTools] C:\Program Files\Sony\Marketing Tools\MarketingTools.exe (Sony NSCE)
O4 - HKLM..\Run: [MobileConnect] C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
O4 - HKLM..\Run: [QuickHelp2_McciTrayApp]  File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [WinampAgent]  File not found
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DICTINRY - Verknüpfung.lnk = C:\Dictionary\DICTINRY.EXE ()
O7 - HKU\admin_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\admin_ON_C Winlogon: Shell - (C:\Users\admin\AppData\Local\Temp\9c0pwrrk.exe) - C:\Users\admin\AppData\Local\Temp\9c0pwrrk.exe (ds SOFTWIN Fas)
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: 
O24 - Desktop BackupWallPaper: 
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{5d450483-9acb-11de-af1b-001a80ce505b}\Shell\AutoRun\command - "" = G:\autorun.exe
O33 - MountPoints2\{5d450489-9acb-11de-af1b-001a80ce505b}\Shell - "" = AutoRun
O33 - MountPoints2\{5d450489-9acb-11de-af1b-001a80ce505b}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{5d45048f-9acb-11de-af1b-001a80ce505b}\Shell - "" = AutoRun
O33 - MountPoints2\{5d45048f-9acb-11de-af1b-001a80ce505b}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{ab083c67-92e0-11dd-b1be-001e3da2e94d}\Shell - "" = AutoRun
O33 - MountPoints2\{ab083c67-92e0-11dd-b1be-001e3da2e94d}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{c605bc8b-d1e6-11df-9ce7-fe654438a990}\Shell - "" = AutoRun
O33 - MountPoints2\{c605bc8b-d1e6-11df-9ce7-fe654438a990}\Shell\AutoRun\command - "" = G:\Vodaphone_uninstaller.exe
O33 - MountPoints2\{c7c5eaeb-3c0e-11e0-8300-f75fb6b320e0}\Shell - "" = AutoRun
O33 - MountPoints2\{c7c5eaeb-3c0e-11e0-8300-f75fb6b320e0}\Shell\AutoRun\command - "" = H:\laucher.exe
O33 - MountPoints2\{d699db42-78c0-11dd-b165-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d699db42-78c0-11dd-b165-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Setup.exe
O33 - MountPoints2\{d699db42-78c0-11dd-b165-806e6f6e6963}\Shell\setup\command - "" = F:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/04/21 07:31:26 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011/04/19 12:07:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office-Bibliothek
[2011/04/19 12:07:48 | 000,045,056 | ---- | C] (Expert System) -- C:\Windows\System32\hookmod.dll
[2011/04/19 12:07:47 | 000,061,440 | ---- | C] (Expert System) -- C:\Windows\System32\lookmod.dll
[2011/04/19 12:07:47 | 000,045,056 | ---- | C] (Expert System) -- C:\Windows\System32\patchmod.dll
[2011/04/19 12:07:32 | 000,000,000 | ---D | C] -- C:\Program Files\Office-Bibliothek
[2011/04/19 06:33:34 | 000,263,272 | ---- | C] (Realtek                                            ) -- C:\Windows\System32\drivers\Rtlh86.sys
[2011/04/19 06:33:34 | 000,100,896 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
[2011/04/19 05:50:34 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2011/04/18 17:17:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Langenscheidt e-Wörterbücher
[2011/04/18 17:17:56 | 000,000,000 | ---D | C] -- C:\Program Files\Langenscheidt
[2011/04/15 21:55:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
[2011/04/15 21:50:11 | 000,000,000 | ---D | C] -- C:\Program Files\Garmin
[2011/04/15 20:05:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Garmin
[2011/04/15 16:47:23 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011/04/15 16:47:22 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011/04/15 16:47:20 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011/04/15 16:47:19 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011/04/15 16:47:11 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011/04/15 16:46:33 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011/04/15 16:46:33 | 000,471,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/04/15 16:46:33 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011/04/15 16:46:32 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011/04/15 16:46:32 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011/04/15 16:46:32 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2011/04/15 16:46:24 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011/04/15 16:46:17 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011/04/15 16:46:16 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011/03/23 09:27:56 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011/03/23 09:27:56 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/04/21 09:14:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/04/21 09:14:23 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011/04/21 09:12:58 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/21 09:12:58 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/21 07:29:46 | 000,008,268 | ---- | M] () -- C:\Users\admin\AppData\Local\d3d9caps.dat
[2011/04/20 11:04:56 | 167,905,903 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/04/19 20:01:56 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
[2011/04/19 13:14:18 | 000,001,919 | ---- | M] () -- C:\Users\Public\Desktop\Age of Mythology.lnk
[2011/04/19 13:08:28 | 000,373,440 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/04/19 12:25:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
[2011/04/19 12:07:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office-Bibliothek
[2011/04/19 11:14:43 | 000,001,042 | ---- | M] () -- C:\Users\admin\Desktop\e-Wörterbücher.lnk
[2011/04/19 08:59:14 | 000,628,742 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011/04/19 08:59:14 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/04/19 08:59:14 | 000,126,260 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011/04/19 08:59:14 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/04/19 08:14:40 | 000,007,410 | ---- | M] () -- C:\Users\admin\Desktop\Xing annual 07.pdf
[2011/04/19 08:09:51 | 000,007,407 | ---- | M] () -- C:\Users\admin\Desktop\An Falko 2.pdf
[2011/04/18 17:18:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Langenscheidt e-Wörterbücher
[2011/04/18 15:50:04 | 000,046,080 | ---- | M] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/18 09:29:57 | 000,212,528 | ---- | M] () -- C:\Users\admin\Desktop\hat-again.jpg
[2011/04/18 09:28:33 | 001,014,289 | ---- | M] () -- C:\Users\admin\Desktop\hat again.jpg
[2011/04/18 09:12:43 | 000,239,407 | ---- | M] () -- C:\Users\admin\Desktop\hat chang.jpg
[2011/04/15 21:55:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
[2011/04/14 08:28:58 | 000,007,437 | ---- | M] () -- C:\Users\admin\Desktop\Zahr4.pdf
[2011/04/13 15:21:31 | 002,180,108 | ---- | M] () -- C:\Users\admin\Desktop\The Shifting Nature of Work in the UK.pdf
[2011/04/12 08:50:17 | 000,001,957 | ---- | M] () -- C:\Users\admin\Desktop\Age of Empires.lnk
[2011/04/08 08:14:22 | 000,099,748 | ---- | M] () -- C:\Users\admin\Desktop\LH_WEBCKI.DE.PORTAL.ucbFdcemAr84auLrUKOjw6.pdf
[2011/04/07 15:57:59 | 000,001,942 | ---- | M] () -- C:\Users\Public\Desktop\Age of Empires Expansion.lnk
[2011/04/05 11:54:14 | 000,142,231 | ---- | M] () -- C:\Users\admin\Desktop\hat.jpg
[2011/03/31 05:24:44 | 000,014,979 | ---- | M] () -- C:\Users\admin\Documents\MBA 3.pdf
[2011/03/31 04:56:16 | 002,526,653 | ---- | M] () -- C:\Users\admin\Documents\WORKSHOP Koraljka.pdf
[2011/03/28 10:01:38 | 000,002,425 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011/03/28 10:01:38 | 000,001,897 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011/03/28 10:00:53 | 000,007,691 | ---- | M] () -- C:\Users\admin\Documents\Transfer 21.pdf
[2011/03/23 15:25:05 | 000,388,604 | ---- | M] () -- C:\Users\admin\Documents\SribH.pdf
[2011/03/23 11:32:21 | 000,000,880 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/03/23 11:32:21 | 000,000,868 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/04/20 11:04:56 | 167,905,903 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2011/04/19 12:25:54 | 000,001,919 | ---- | C] () -- C:\Users\Public\Desktop\Age of Mythology.lnk
[2011/04/19 12:07:48 | 000,135,168 | ---- | C] () -- C:\Windows\System32\TXTUSER.EXE
[2011/04/19 11:14:43 | 000,001,042 | ---- | C] () -- C:\Users\admin\Desktop\e-Wörterbücher.lnk
[2011/04/19 08:14:40 | 000,007,410 | ---- | C] () -- C:\Users\admin\Desktop\Xing annual 07.pdf
[2011/04/19 08:09:51 | 000,007,407 | ---- | C] () -- C:\Users\admin\Desktop\An Falko 2.pdf
[2011/04/19 06:33:34 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/04/18 17:18:09 | 000,036,864 | R--- | C] () -- C:\Windows\System32\Hooks.dll
[2011/04/18 09:29:57 | 000,212,528 | ---- | C] () -- C:\Users\admin\Desktop\hat-again.jpg
[2011/04/18 09:17:51 | 001,014,289 | ---- | C] () -- C:\Users\admin\Desktop\hat again.jpg
[2011/04/18 09:12:43 | 000,239,407 | ---- | C] () -- C:\Users\admin\Desktop\hat chang.jpg
[2011/04/14 08:28:58 | 000,007,437 | ---- | C] () -- C:\Users\admin\Desktop\Zahr4.pdf
[2011/04/13 15:21:31 | 002,180,108 | ---- | C] () -- C:\Users\admin\Desktop\The Shifting Nature of Work in the UK.pdf
[2011/04/12 08:50:17 | 000,001,957 | ---- | C] () -- C:\Users\admin\Desktop\Age of Empires.lnk
[2011/04/08 08:14:21 | 000,099,748 | ---- | C] () -- C:\Users\admin\Desktop\LH_WEBCKI.DE.PORTAL.ucbFdcemAr84auLrUKOjw6.pdf
[2011/04/07 15:57:59 | 000,001,942 | ---- | C] () -- C:\Users\Public\Desktop\Age of Empires Expansion.lnk
[2011/04/05 11:54:13 | 000,142,231 | ---- | C] () -- C:\Users\admin\Desktop\hat.jpg
[2011/03/31 05:24:44 | 000,014,979 | ---- | C] () -- C:\Users\admin\Documents\MBA 3.pdf
[2011/03/31 04:56:16 | 002,526,653 | ---- | C] () -- C:\Users\admin\Documents\WORKSHOP Koraljka.pdf
[2011/03/28 10:00:53 | 000,007,691 | ---- | C] () -- C:\Users\admin\Documents\Transfer 21.pdf
[2011/03/23 15:25:05 | 000,388,604 | ---- | C] () -- C:\Users\admin\Documents\SribH.pdf
[2011/03/23 11:32:21 | 000,000,880 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/03/23 11:32:21 | 000,000,868 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2010/09/17 13:53:11 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010/09/17 13:53:10 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2008/09/22 09:50:18 | 000,000,000 | ---- | C] () -- C:\Windows\HPMProp.INI
[2008/09/19 02:42:22 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/09/08 08:34:24 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2008/09/06 11:20:05 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2008/09/06 09:03:04 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008/09/02 03:46:31 | 000,046,080 | ---- | C] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/02 03:46:31 | 000,008,268 | ---- | C] () -- C:\Users\admin\AppData\Local\d3d9caps.dat
[2008/06/23 07:02:02 | 000,097,410 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
[2008/05/23 11:48:50 | 000,020,270 | ---- | C] () -- C:\ProgramData\DeviceInstaller.xml
[2008/05/15 01:00:57 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2008/05/15 00:43:08 | 000,019,968 | ---- | C] () -- C:\Windows\System32\Cpuinf32.dll
[2008/05/15 00:42:10 | 000,344,064 | ---- | C] () -- C:\Windows\System32\SSMSIppCustom.dll
[2007/11/26 19:10:31 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2007/11/26 19:10:31 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/11/26 19:10:31 | 000,144,773 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2007/11/26 11:32:07 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2007/11/26 10:25:25 | 000,000,032 | ---- | C] () -- C:\Windows\System32\elcric.dat
[2007/11/26 01:44:22 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2007/10/30 05:44:52 | 000,393,216 | ---- | C] () -- C:\Windows\System32\btwhidcs.dll
[2007/09/11 19:57:44 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2007/04/15 22:24:16 | 000,023,752 | ---- | C] () -- C:\Windows\System32\providers.bin
[2007/04/03 11:18:26 | 000,197,672 | ---- | C] () -- C:\Windows\System32\vpnapi.dll
[2006/11/02 11:33:31 | 000,628,742 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2006/11/02 11:33:31 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2006/11/02 11:33:31 | 000,126,260 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2006/11/02 11:33:31 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006/11/02 08:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,373,440 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,595,996 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,104,070 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2001/11/14 08:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2008/11/21 06:38:03 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Big Yellow Book
[2010/02/28 17:37:39 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Facebook
[2011/02/16 10:10:16 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\GARMIN
[2008/09/26 17:44:13 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\InterVideo
[2010/06/21 16:00:00 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\OpenOffice.org
[2010/10/07 20:14:46 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\SFR
[2010/10/06 19:02:25 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Thunderbird
[2009/09/09 16:02:42 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Vodafone
[2010/12/09 10:05:34 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ZTEEVDO
[2007/11/26 10:18:22 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2009/04/05 07:09:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2007/11/26 10:18:22 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente
[2007/11/26 10:18:22 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2011/04/15 20:05:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin
[2007/11/27 05:52:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Sony
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2007/11/26 10:18:22 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2006/11/02 09:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2011/02/22 12:29:30 | 000,000,000 | ---D | M] -- C:\ProgramData\tmp
[2009/09/09 16:01:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Vodafone
[2007/11/26 10:18:22 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen
[2009/08/30 18:34:57 | 000,000,000 | ---D | M] -- C:\ProgramData\WindowsSearch
[2010/04/06 15:12:37 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/09/13 17:50:22 | 000,000,000 | ---D | M] -- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/05/02 09:18:51 | 000,000,000 | ---D | M] -- C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2011/04/21 09:14:23 | 000,032,518 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
< End of report >