Web Offer + eZula

[los-gurkos]

hiho
habe seit einigen tagen probleme mit meinem Internet explorer....
sobald ich ihn öffne, kommt die fehlermeldung: unbekannter fehler....Problem senden; nicht senden und der explorer schließt sich sofort.

seit gestern habe ich nun noch ein problem:
es ertönt ein klicken und mein aktuelles fenster wird inaktiv. beim spielen werde ich aus dem spiel auf den desktop geworfen.
ich glaube, dass auch hier der IE schuld ist, da ich vor 20 min ein 50x50 pixel großen IE fenster sah das sich mit dem klicken geöfnet hat, und da mein IE kaputt ist sich sofort wieder geschlossen hat.

ich verzweifle, bitte helft mir
mfg

[Fat_Mike]

bitte hjt log posten (ich sehe dunkle wolken aufziehen...).
http://www.holy-infos.de/de/intern/forum/hjtbeb.htm


gruss
fat.

[los-gurkos]

Logfile of HijackThis v1.99.1
Scan saved at 21:17:21, on 21.05.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\RGllc2Vs\command.exe
C:\Programme\Network Associates\Common Framework\FrameworkService.exe
C:\Programme\Network Associates\VirusScan\Mcshield.exe
C:\Programme\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programme\Network Associates\VirusScan\SHSTAT.EXE
C:\Programme\Network Associates\Common Framework\UpdaterUI.exe
C:\Programme\Gemeinsame Dateien\Network Associates\TalkBack\TBMon.exe
C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programme\Analog Devices\SoundMAX\Smax4.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Anti-Blaxx 1.18\Anti-Blaxx.exe
C:\defender19a.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\FRAPS\FRAPS.EXE
C:\Programme\Skype\Phone\Skype.exe
C:\PROGRA~1\GEMEIN~1\ooiu\ooium.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Logitech\SetPoint\KEM.exe
C:\Programme\Mousometer\mousometer.exe
C:\Programme\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\GEMEIN~1\MICROS~1\Msinfo\OFFPROV.EXE
C:\PROGRA~1\GEMEIN~1\MICROS~1\Msinfo\OFFPRV10.EXE
C:\PROGRA~1\GEMEIN~1\ooiu\ooiua.exe
C:\WINDOWS\explorer.exe
C:\Programme\eMule\eMule.exe
C:\Programme\Steam\Steam.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\Rar$EX00.516\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.at/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - C:\WINDOWS\pxwma.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ShStatEXE] "C:\Programme\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Programme\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Programme\Gemeinsame Dateien\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programme\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [shell32] C:\WINDOWS\system32\shell32.exe
O4 - HKLM\..\Run: [sp2protect] C:\WINDOWS\system32\sp2protect.exe
O4 - HKLM\..\Run: [Windows update] C:\WINDOWS\system32\udupdate.exe
O4 - HKLM\..\Run: [I downloaded pirated Software from P2P] C:\WINDOWS\system32\Battlefield2 .exe
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Programme\Anti-Blaxx 1.18\Anti-Blaxx.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [defender] C:\\defender19a.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Wallpaper4U] C:\PROGRA~1\WALLPA~1\WALLPA~1.EXE -w
O4 - HKCU\..\Run: [SnowBoardParkTycoon_Setup.exe] E:\SNOWBO~1.EXE /r
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Programme\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [eZWO] C:\PROGRA~1\Web Offer\wo.exe
O4 - HKCU\..\Run: [ooiu] C:\PROGRA~1\GEMEIN~1\ooiu\ooium.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Steam] "c:\programme\steam\steam.exe" -silent
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Programme\eMule\eMule.exe -AutoStart
O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\system32\sp2protect.exe
O4 - Startup: Mousometer.lnk = C:\Programme\Mousometer\mousometer.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.1_06\bin\npjpi141_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.1_06\bin\npjpi141_06.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O15 - Trusted Zone: www.otherchance.com
O15 - Trusted Zone: www.superspots.biz
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\MBT2FW95.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\RGllc2Vs\command.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework-Dienst (McAfeeFramework) - Network Associates, Inc. - C:\Programme\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Programme\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Programme\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[Holy Marcell]

// Verdammt dunkle Zeiten.

====================

Cleanup
Nutze Cleanup wie beschrieben:
http://virus-protect.org/cleanup.html

Arbeite das hier ab ==> Poste alle 4 Logs der letzten 3 Monate:
http://virus-protect.org/datfindbat.html

// Rest macht Nikita.

MfG,

[los-gurkos]

?????????was?????????

[Fat_Mike]

lesen kannst du?


@hm: ist noch nicht so düster wie ich befürchtet hatte...


gruss
fat.

[los-gurkos]

vll wäre es einfach wenn du mir sagstw as du siehst und mir dann sagst was ich für ien problem habe und wie ich es löse



lesen? was ist das

[Fat_Mike]

Cleanup
Nutze Cleanup wie beschrieben:
http://virus-protect.org/cleanup.html

Arbeite das hier ab ==> Poste alle 4 Logs der letzten 3 Monate:
http://virus-protect.org/datfindbat.html

// Rest macht Nikita.

vielleicht wäre es einfacher wenn du die hilfe annimmst die man dir bietet. wir sitzen nicht vor deinem rechner und wir werden dir auch nicht jeden schritt einzeln 80mal vorkauen. ein bisschen was musst du schon selbst machen.


gruss
fat.

[los-gurkos]

oO
sorry
dachte das ist in seiner signatur und hat nichts mit dem thema zu tun

[Fat_Mike]

die signatur kommt meisten nach mfg...


gruss
fat.

[los-gurkos]

^^
jaja hab nichtmal geschaut, weil ich dachte si signatur.... back 3 topic:

soll ich den text vom datfindbat rein kopieren?

[los-gurkos]

und dei sachen die das cleanup gefundet hat löschen?
kenn mich da nix aus

[los-gurkos]

...

[Nikita]

was soll das???
es stand geschrieben, dass es 4 Logs sind und ich sehe, dass der Thread schon voellig verspamt ist..nur, weil du anscheinend nicht lesen kannst

wenn es um P2P geht, scheinst du auch nicht richtig lesen zu koennen ...und klickst auf alles, was da so steht...

I downloaded pirated Software from P2P] C:\WINDOWS\system32\Battlefield2 .exe

nur leider, leider, sind es viren....................

[los-gurkos]

wenn es um P2P geht, scheinst du auch nicht richtig lesen zu koennen ...und klickst auf alles, was da so steht...

I downloaded pirated Software from P2P] C:\WINDOWS\system32\Battlefield2 .exe

jo, die bf2 exe hat mir ein freund gegeben -.-


so hier noch mal ALLE logs...sry

Logfile of HijackThis v1.99.1
Scan saved at 21:17:21, on 21.05.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\RGllc2Vs\command.exe
C:\Programme\Network Associates\Common Framework\FrameworkService.exe
C:\Programme\Network Associates\VirusScan\Mcshield.exe
C:\Programme\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programme\Network Associates\VirusScan\SHSTAT.EXE
C:\Programme\Network Associates\Common Framework\UpdaterUI.exe
C:\Programme\Gemeinsame Dateien\Network Associates\TalkBack\TBMon.exe
C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programme\Analog Devices\SoundMAX\Smax4.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Anti-Blaxx 1.18\Anti-Blaxx.exe
C:\defender19a.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\FRAPS\FRAPS.EXE
C:\Programme\Skype\Phone\Skype.exe
C:\PROGRA~1\GEMEIN~1\ooiu\ooium.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Logitech\SetPoint\KEM.exe
C:\Programme\Mousometer\mousometer.exe
C:\Programme\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\GEMEIN~1\MICROS~1\Msinfo\OFFPROV.EXE
C:\PROGRA~1\GEMEIN~1\MICROS~1\Msinfo\OFFPRV10.EXE
C:\PROGRA~1\GEMEIN~1\ooiu\ooiua.exe
C:\WINDOWS\explorer.exe
C:\Programme\eMule\eMule.exe
C:\Programme\Steam\Steam.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\Rar$EX00.516\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.at/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - C:\WINDOWS\pxwma.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ShStatEXE] "C:\Programme\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Programme\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Programme\Gemeinsame Dateien\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programme\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [shell32] C:\WINDOWS\system32\shell32.exe
O4 - HKLM\..\Run: [sp2protect] C:\WINDOWS\system32\sp2protect.exe
O4 - HKLM\..\Run: [Windows update] C:\WINDOWS\system32\udupdate.exe
O4 - HKLM\..\Run: [I downloaded pirated Software from P2P] C:\WINDOWS\system32\Battlefield2 .exe
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Programme\Anti-Blaxx 1.18\Anti-Blaxx.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [defender] C:\\defender19a.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Wallpaper4U] C:\PROGRA~1\WALLPA~1\WALLPA~1.EXE -w
O4 - HKCU\..\Run: [SnowBoardParkTycoon_Setup.exe] E:\SNOWBO~1.EXE /r
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Programme\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [eZWO] C:\PROGRA~1\Web Offer\wo.exe
O4 - HKCU\..\Run: [ooiu] C:\PROGRA~1\GEMEIN~1\ooiu\ooium.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Steam] "c:\programme\steam\steam.exe" -silent
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Programme\eMule\eMule.exe -AutoStart
O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\system32\sp2protect.exe
O4 - Startup: Mousometer.lnk = C:\Programme\Mousometer\mousometer.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.1_06\bin\npjpi141_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.1_06\bin\npjpi141_06.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O15 - Trusted Zone: www.otherchance.com
O15 - Trusted Zone: www.superspots.biz
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\MBT2FW95.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\RGllc2Vs\command.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework-Dienst (McAfeeFramework) - Network Associates, Inc. - C:\Programme\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Programme\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Programme\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


CleanUp! started on 05/22/06 10:00:37.
...
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\js[6] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\js[7] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\js[8] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\js[9] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\logo[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\MarkSectpop[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\popuptrafficcode[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\rightMpop[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\rmtag3[1].js - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\search_1[2].jpeg - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\to[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\to[2].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\woinstall[1].exe - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\adserverN[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_100[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_1200[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_1504[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_1610[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_205[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_20[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_2110[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_219[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_240[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_260[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_302[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_30[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_380[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_902[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\AppID_906[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_1991[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_1992[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_1997[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_1999[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_2003[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_653[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_654[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_674[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_676[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_703[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\avatar_710[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\back_head[1].jpeg - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\buds[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\CAX317ZR.HTM - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\datafiles[1].cb - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\dots[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\get_billable_countries[1].xml - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\imp[1] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\imp[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\imp[2] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\imp[3] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\in[1].gif - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\js[1] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\js[2] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\js[3] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\js[4] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\js[5] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\js[6] - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\j[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\j[2].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\paypopup[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\register_user[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\revenewAts[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\rmtag3[1].js - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\rmtag3[2].js - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\rmtag3[3].js - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\style[1].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\style[2].html - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\8M2IN5B8\revenew1[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\8M2IN5B8\zone[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\adserverN[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\adserverN[2].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\MarkSectpop[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\popuptrafficcode[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\to[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\R6UL9VYQ\to[2].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\buds[1].html currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UNSHEJ89\imp[1].html currently in use. Will be deleted when Windows is restarted.
http://c.icq.com/xtraz/img/avatar/avatar_1998.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=778 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=4827 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=30106 - deleted
http://www.searchingbooth.com/partner/a ... y%20online - deleted
http://www.searchingbooth.com/partner/aff01514/dots.gif - deleted
http://app.ezula.com/SniffemWO/install/woinstall.exe - deleted
http://c.icq.com/xtraz/img/avatar/avatar_695.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_706.gif - deleted
http://www.searchingbooth.com/partner/a ... rms=search - deleted
http://www.top-banners.com/tmc/to.php?id=waltrf - deleted
http://ads.z-quest.com/BudsPops.html - deleted
http://ads.z-quest.com/MarkSectpop.html - deleted
http://c.icq.com/xtraz/img/avatar/avatar_677.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_655.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_1999.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=11840 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_803.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=27529 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=12623 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=7376 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_710.gif - deleted
http://www.top-banners.com/tmc/pid=0 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=5447 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=288 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=16944 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=3902 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_1994.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=26308 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=6334 - deleted
http://www.illusionconcept.com/popuptrafficcode.html - deleted
http://127.0.0.1:1027/js.cgi?pca&r=12316 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_2003.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_680.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=26500 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=15724 - deleted
http://www.searchingbooth.com/partner/aff01512/dots.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=5436 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=18467 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=13931 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=29358 - deleted
http://imgfarm.com/images/nocache/tr/in ... /index.jsp - deleted
?CodeDownloadErrorLog!name={00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} - deleted
http://c.icq.com/xtraz/img/avatar/avatar_1991.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_674.gif - deleted
http://www.allthatsearch.com/partner-sc ... arch_1.jpg - deleted
http://app.ezula.com/SniffemWO/data/version.vrn - deleted
http://c.icq.com/xtraz/img/avatar/avatar_694.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=1842 - deleted
http://www.searchingbooth.com/partner/aff01511/logo.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=491 - deleted
http://www.adpowerzone.com/revenew1.html - deleted
http://www.searchingbooth.com/partner/a ... ccessories - deleted
http://c.icq.com/xtraz/img/avatar/avatar_696.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=3035 - deleted
http://www.allthatsearch.com/partner/10 ... php?terms= - deleted
http://www.allthatsearch.com/partner/10103/style.css - deleted
http://www.searchingbooth.com/partner/aff01512/logo.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_1997.gif - deleted
http://www.searchingbooth.com/partner/aff01511/dots.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=28145 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_651.gif - deleted
http://www.popuptraffic.com/assign.php?l=concept - deleted
http://127.0.0.1:1027/js.cgi?pca&r=153 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_2007.gif - deleted
http://www.searchingbooth.com/partner/a ... /style.css - deleted
http://127.0.0.1:1027/js.cgi?pca&r=24464 - deleted
http://www.allthatsearch.com/partner/Sharky/style.css - deleted
http://c.icq.com/xtraz/img/avatar/avatar_703.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=16827 - deleted
http://www.fun-photo.com/buds.html - deleted
http://www.searchingbooth.com/partner/a ... /style.css - deleted
http://www.allthatsearch.com/partner-sc ... k_head.jpg - deleted
http://c.icq.com/xtraz/img/avatar/avatar_652.gif - deleted
http://www.allthatsearch.com/partner/Sh ... wing+boots - deleted
http://www.searchingbooth.com/partner/aff01514/logo.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_2004.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_698.gif - deleted
http://c.icq.com/ibs/get_billable_countries.xml - deleted
http://www.malltek.com/paypopup.html - deleted
http://xtraz.icq.com/xtraz/products/ava ... Galery.xml - deleted
http://c.icq.com/xtraz/img/avatar/avatar_654.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=2995 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=292 - deleted
http://xtraz.icq.com/icqchat/target_chat.php?geo=43 - deleted
http://xtraz.icq.com/random/register_us ... =248792418 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_675.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_1993.gif - deleted
http://www.fun-photo.com/budsPrep.html - deleted
http://127.0.0.1:1027/js.cgi?pca&r=11478 - deleted
http://4.adbrite.com/mb/text_group.php? ... 735f365f32 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_653.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=14604 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=19718 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=9741 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=11942 - deleted
http://c.icq.com/xtraz/img/avatar/avatar_676.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_679.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_699.gif - deleted
http://www.fun-photo.com/BanConPop.html - deleted
http://127.0.0.1:1027/js.cgi?pca&r=22190 - deleted
http://www.searchingbooth.com/partner-s ... bmit_r.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=19954 - deleted
http://www.searchingbooth.com/partner/a ... ch+engines - deleted
http://c.icq.com/xtraz/img/avatar/avatar_1992.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=8723 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=41 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=18716 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=32439 - deleted
http://www.fun-photo.com/popin_functions.js - deleted
http://127.0.0.1:1027/js.cgi?pca&r=24626 - deleted
http://ads.allthatsearch.com/revenewAts.htm - deleted
http://127.0.0.1:1027/js.cgi?pca&r=32391 - deleted
http://www.fun-photo.com/rightMpop.html - deleted
http://www.searchingbooth.com/partner/a ... /style.css - deleted
http://c.icq.com/xtraz/img/avatar/avatar_697.gif - deleted
http://app.ezula.com/SniffemWO/data/upgrade.vrn - deleted
http://c.icq.com/xtraz/img/avatar/avatar_678.gif - deleted
http://c.icq.com/xtraz/img/avatar/avatar_656.gif - deleted
http://127.0.0.1:1027/js.cgi?pca&r=19169 - deleted
http://127.0.0.1:1027/js.cgi?pca&r=26962 - deleted
http://popunder.adsrevenue.net/popup.ph ... blk=1&fc=0 - deleted
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Verlauf\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Verlauf\History.IE5\MSHist012006052220060523\index.dat currently in use. Will be deleted when Windows is restarted.
'Typed URLs' (Internet Explorer) - removed from the registry.
Visited: Besitzer@http://banners.searchingbooth.com/advertpro/servlet/view/dynamic/html/zone?zid=16&pid=0&DHWidth=720&DHHeight=300&DHScroll=no - deleted
Visited: Besitzer@http://www.myfuncards.com/?partner=ZUxdm209&spu=true - deleted
Visited: Besitzer@http://banners.searchingbooth.com/advertpro/servlet/view/dynamic/html/zone?zid=16&pid=2 - deleted
Visited: Besitzer@http://www.top-banners.com/tmc/to.php?id=waltrf - deleted
Visited: Besitzer@file:///C:/Programme/ICQLite/Plugins/MIB/Service/srvMng/srv_mng5.html - deleted
Visited: Besitzer@file:///C:/Programme/ICQLite/Plugins/Main/communication/random_chat/index.html - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@10103[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@ad.yieldmanager[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@adopt.hbmediapro[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@ads.zwoops[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@adsby.uzoogle[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@aff01511[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@aff01512[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@aff01514[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@banners.searchingbooth[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@concierge[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@cpvfeed[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@did-it[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@ebayobjects[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@icq[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@ilove[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@mb[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@media.top-banners[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@myfuncards[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@nana.co[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@partners.webmasterplan[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@revenue[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@rn11[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@rtm[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@servedby.headlinesandnews[2].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\besitzer@Sharky[1].txt - deleted
C:\Dokumente und Einstellungen\Besitzer\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
Cookie:besitzer@myfuncards.com/ - deleted
Cookie:besitzer@revenue.net/ - deleted
Cookie:besitzer@nana.co.il/ - deleted
Cookie:besitzer@4.adbrite.com/mb/ - deleted
Cookie:besitzer@www.searchingbooth.com/partner/aff01512/ - deleted
Cookie:besitzer@concierge.com/ - deleted
Cookie:besitzer@www.searchingbooth.com/partner/aff01514/ - deleted
Cookie:besitzer@ads.zwoops.com/ - deleted
Cookie:besitzer@rn11.com/ - deleted
Cookie:besitzer@www.searchingbooth.com/partner/aff01511/ - deleted
Cookie:besitzer@ilove.at/ - deleted
Cookie:besitzer@did-it.com/ - deleted
Cookie:besitzer@cpvfeed.com/ - deleted
Cookie:besitzer@partners.webmasterplan.com/ - deleted
Cookie:besitzer@at.ebayrtm.com/rtm - deleted
Cookie:besitzer@ad.yieldmanager.com/ - deleted
Cookie:besitzer@ebayobjects.com/ - deleted
Cookie:besitzer@banners.searchingbooth.com/ - deleted
Cookie:besitzer@media.top-banners.com/ - deleted
Cookie:besitzer@servedby.headlinesandnews.com/ - deleted
Cookie:besitzer@www.allthatsearch.com/partner/Sharky/ - deleted
Cookie:besitzer@adsby.uzoogle.com/ - deleted
Cookie:besitzer@www.allthatsearch.com/partner/10103/ - deleted
Cookie:besitzer@adopt.hbmediapro.com/ - deleted
Cookie:besitzer@icq.com/ - deleted
C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\9acu9vzd.default\history.dat currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\9acu9vzd.default\cookies.txt.old - deleted
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\05EE1EEF.TMP - deleted
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\D9164221.TMP - deleted
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF24C5.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF268F.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF3B63.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF56E7.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\Rar$EX00.360\ - deleted
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF24C5.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF268F.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF3B63.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\~DF56E7.tmp currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\temp\Perflib_Perfdata_7d8.dat currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\temp\teredo.txt - deleted
C:\WINDOWS\temp\ZLT013a8.TMP currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Dokumente und Einstellungen\Besitzer\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\Prefetch\ACSTART16.EXE-0687143C.pf - deleted
C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1FD09C3A.pf - deleted
C:\WINDOWS\Prefetch\APEV.EXE-28F1E7C4.pf - deleted
C:\WINDOWS\Prefetch\CLEANUP.EXE-21B56F2B.pf - deleted
C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf - deleted
C:\WINDOWS\Prefetch\DAEMON.EXE-1E729B4A.pf - deleted
C:\WINDOWS\Prefetch\EMULE.EXE-184A63F1.pf - deleted
C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf - deleted
C:\WINDOWS\Prefetch\EZPOPS~1.EXE-302646D4.pf - deleted
C:\WINDOWS\Prefetch\FIREFOX.EXE-1D57670A.pf - deleted
C:\WINDOWS\Prefetch\FRAPS.EXE-2E18AF75.pf - deleted
C:\WINDOWS\Prefetch\GLJ7.TMP-0405FDA5.pf - deleted
C:\WINDOWS\Prefetch\ICQLITE.EXE-2AEFACA7.pf - deleted
C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf - deleted
C:\WINDOWS\Prefetch\KEM.EXE-20837088.pf - deleted
C:\WINDOWS\Prefetch\KHALMNPR.EXE-098E13FC.pf - deleted
C:\WINDOWS\Prefetch\KHALMNPR.EXE-2F8F34CA.pf - deleted
C:\WINDOWS\Prefetch\LDMCONF.EXE-2E5D217E.pf - deleted
C:\WINDOWS\Prefetch\MCSHIELD.EXE-03C1D075.pf - deleted
C:\WINDOWS\Prefetch\MMOD.EXE-27399B09.pf - deleted
C:\WINDOWS\Prefetch\MOUSOMETER.EXE-0526C931.pf - deleted
C:\WINDOWS\Prefetch\MSMSGS.EXE-32066BA5.pf - deleted
C:\WINDOWS\Prefetch\NBJ.EXE-304078FF.pf - deleted
C:\WINDOWS\Prefetch\NEROCHECK.EXE-092C6DFA.pf - deleted
C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf - deleted
C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf - deleted
C:\WINDOWS\Prefetch\PDVDSERV.EXE-15757141.pf - deleted
C:\WINDOWS\Prefetch\READER_SL.EXE-36135169.pf - deleted
C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf - deleted
C:\WINDOWS\Prefetch\RUNDLL32.EXE-1218E1AC.pf - deleted
C:\WINDOWS\Prefetch\RUNDLL32.EXE-1340EF7F.pf - deleted
C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf - deleted
C:\WINDOWS\Prefetch\SHELL32.EXE-2E8E90E9.pf - deleted
C:\WINDOWS\Prefetch\SHSTAT.EXE-364ACD06.pf - deleted
C:\WINDOWS\Prefetch\SKYPE.EXE-21F19BC8.pf - deleted
C:\WINDOWS\Prefetch\SMAX4.EXE-2B732B8E.pf - deleted
C:\WINDOWS\Prefetch\SMAX4PNP.EXE-2279C3AD.pf - deleted
C:\WINDOWS\Prefetch\SP2PROTECT.EXE-0030AE62.pf - deleted
C:\WINDOWS\Prefetch\STEAM.EXE-25824B4E.pf - deleted
C:\WINDOWS\Prefetch\TBMON.EXE-20C28244.pf - deleted
C:\WINDOWS\Prefetch\TEATIMER.EXE-38E505A8.pf - deleted
C:\WINDOWS\Prefetch\UPDATERUI.EXE-339C6831.pf - deleted
C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf - deleted
C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf - deleted
C:\WINDOWS\Prefetch\WO.EXE-1659FDE2.pf - deleted
C:\WINDOWS\Prefetch\WOINSTALL.EXE-2D7E4B7D.pf - deleted
C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf - deleted
C:\WINDOWS\Prefetch\ZLCLIENT.EXE-0120F620.pf - deleted
'Run MRU' list - removed from the registry.
Search Assistant MRU list - removed from the registry.
Explorer Open/Save MRU list - removed from the registry.
Explorer Last Visited MRU list - removed from the registry.
Paint Recent File List - removed from the registry.
WordPad Recent File List - removed from the registry.
Telnet's MRU list - removed from the registry.
CleanUp! 4.5.1 recovered 2.7 MB of disk space from 432 files.
CleanUp! finished on 05/22/06 10:00:39.

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 847E-5B34

Verzeichnis von C:\WINDOWS\system32

21.05.2006 22:12 890 vsconfig.xml
21.05.2006 22:11 28.066 nvapps.xml
20.05.2006 16:36 13.646 wpa.dbl
20.05.2006 14:48 16 Chmtps.psc
20.05.2006 13:06 664 d3d9caps.dat
20.05.2006 12:18 230 spupdsvc.inf
17.05.2006 17:10 176.167 rmoc3260.dll
17.05.2006 17:10 5.632 pndx5032.dll
17.05.2006 17:10 6.656 pndx5016.dll
17.05.2006 17:09 278.528 pncrt.dll
14.05.2006 09:41 687.592 atmtd.dll._
14.05.2006 09:41 687.592 atmtd.dll
12.05.2006 17:54 4.212 zllictbl.dat
12.05.2006 17:02 1.289.864 FNTCACHE.DAT
07.05.2006 18:46 234.272 MBT2FW95.DLL
04.05.2006 06:26 5.818.784 MRT.exe
22.04.2006 17:22 60.200 sirenacm.dll
19.04.2006 14:46 776 ryjh.sys
04.04.2006 21:02 98.304 CmdLineExt.dll
30.03.2006 11:26 1.492.480 shdocvw.dll
30.03.2006 03:16 18.944 xpsp3res.dll
26.03.2006 14:29 401.084 perfh009.dat
26.03.2006 14:29 61.360 perfc009.dat
26.03.2006 14:29 417.136 perfh007.dat
26.03.2006 14:29 74.942 perfc007.dat
26.03.2006 14:29 966.434 PerfStringBackup.INI
24.03.2006 18:18 552 d3d8caps.dat
24.03.2006 06:37 49.152 wdigest.dll
23.03.2006 22:34 3.074.560 mshtml.dll
23.03.2006 15:51 15.584 spmsg.dll
23.03.2006 15:51 22.752 spupdsvc.exe
18.03.2006 13:09 615.424 urlmon.dll
17.03.2006 11:11 679.424 inetcomm.dll
17.03.2006 06:03 8.493.056 shell32.dll
17.03.2006 02:38 28.672 verclsid.exe
10.03.2006 06:09 5.533.696 wmp.dll
08.03.2006 14:24 117.760 xmllite.dll
04.03.2006 05:34 664.064 wininet.dll
04.03.2006 05:34 474.624 shlwapi.dll
04.03.2006 05:34 146.432 msrating.dll
04.03.2006 05:34 448.512 mshtmled.dll
04.03.2006 05:34 532.480 mstime.dll
04.03.2006 05:34 39.424 pngfilt.dll
04.03.2006 05:34 96.768 inseng.dll
04.03.2006 05:34 205.312 dxtrans.dll
04.03.2006 05:34 55.808 extmgr.dll

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 847E-5B34

Verzeichnis von C:\DOKUME~1\Besitzer\LOKALE~1\Temp

22.05.2006 10:15 0 xx6
22.05.2006 10:15 0 xx4
22.05.2006 10:15 0 xx5
22.05.2006 10:15 0 xx3
22.05.2006 10:15 0 xx2
22.05.2006 09:46 16.384 ~DF56E7.tmp
22.05.2006 09:46 16.384 ~DF3B63.tmp
22.05.2006 09:46 512 ~DF268F.tmp
22.05.2006 09:46 16.384 ~DF24C5.tmp
9 Datei(en) 49.664 Bytes
0 Verzeichnis(se), 21.231.681.536 Bytes frei


Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 847E-5B34

Verzeichnis von C:\WINDOWS

22.05.2006 10:18 190 mousom.ini
22.05.2006 09:47 127.804 woinstall.exe
22.05.2006 09:41 0 0.log
22.05.2006 09:40 1.888.590 WindowsUpdate.log
22.05.2006 09:39 2.048 bootstat.dat
21.05.2006 23:12 32.620 SchedLgU.Txt
21.05.2006 23:12 50 wiaservc.log
21.05.2006 23:12 411 wiadebug.log
21.05.2006 19:59 79 sierra.ini
21.05.2006 17:35 512 randseed.rnd
20.05.2006 14:42 54.156 QTFont.qfn
20.05.2006 13:44 787.529 setupapi.log
20.05.2006 12:31 60.373 iis6.log
20.05.2006 12:31 143.073 comsetup.log
20.05.2006 12:31 86.833 ntdtcsetup.log
20.05.2006 12:31 161.646 tsoc.log
20.05.2006 12:31 1.374 imsins.log
20.05.2006 12:31 22.583 ocmsn.log
20.05.2006 12:31 16.773 ie7beta2Uninst.log
20.05.2006 12:17 32.364 updspapi.log
20.05.2006 12:16 215.085 ocgen.log
20.05.2006 12:16 20.829 msgsocm.log
20.05.2006 12:16 390.267 FaxSetup.log
19.05.2006 21:37 1.409 QTFont.for
19.05.2006 21:04 202 NeroDigital.ini
19.05.2006 20:08 192 winamp.ini
19.05.2006 17:18 159.999 wmsetup.log
17.05.2006 17:13 4.295 mozver.dat
17.05.2006 17:11 25 cdplayer.ini
14.05.2006 15:32 2.510 wallpap.exe
13.05.2006 11:26 4.003 spupdsvc.log
12.05.2006 23:38 16.385 ie7beta2_main.log
12.05.2006 23:36 1.374 imsins.BAK
12.05.2006 23:36 22.141 ie7beta2.log
12.05.2006 23:32 3.920 KB915865.log
12.05.2006 23:31 11.071 KB904942.log
12.05.2006 18:33 15.772 KB913580.log
12.05.2006 18:11 573 win.ini
12.05.2006 18:08 0 mousepad17.exe
12.05.2006 18:07 0 keyboard17.exe
12.05.2006 10:51 0 keyboard191.dat
11.05.2006 19:27 0 keyboard181.dat
10.05.2006 15:57 0 keyboard171.dat
07.05.2006 18:46 24.576 newname17.exe
06.05.2006 14:49 20.080 NETVISION.exe
28.04.2006 12:24 11.271 KB900485.log
20.04.2006 18:42 18.350 KB908531.log
20.04.2006 18:42 17.555 KB911562.log
20.04.2006 18:41 19.974 KB912812.log
20.04.2006 18:40 17.813 KB911565.log
20.04.2006 18:40 12.111 KB911567.log
13.04.2006 13:26 70.845 War3Unin.dat
24.03.2006 21:00 65.536 IFinst27.exe
10.03.2006 15:55 588 setupact.log
02.03.2006 15:42 107.134 UninstallFirefox.exe
16.02.2006 19:15 10.685 KB911927.log


Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 847E-5B34

Verzeichnis von C:\

22.05.2006 10:18 0 sys.txt
22.05.2006 10:18 9.678 system.txt
22.05.2006 10:18 647 systemtemp.txt
22.05.2006 10:17 101.839 system32.txt
22.05.2006 09:39 805.306.368 pagefile.sys
11.05.2006 19:27 81.920 defender19a.exe