Home » Spyware & Browser Hijacker Support Forum » system alert! blinkendes fragezeichen.. » Themenansicht
system alert! blinkendes fragezeichen.. |
||
|---|---|---|
| #0
| ||
|
15.08.2007, 23:29
...neu hier
Beiträge: 2 |
||
 
|
|
|
|
15.08.2007, 23:53
Ehrenmitglied
 Beiträge: 6028 |
#2
Download: RemoveVideoActiveXObject by Smeenk,zum Desktop
Danach doppelklicken Moeglich startet der Uninstaller von ein Roquescanner schliesse es nicht ab aber lass es seine Arbeit tun Rechner neu starten und nochmals RemoveVideoActiveXObject.exe Doppelklicken Poste nachher den logfile C:\RVAXO-results.log in dein folgender Bericht zusammen mit ein log von HijackThis __________ MfG Argus Dieser Beitrag wurde am 16.08.2007 um 01:01 Uhr von Arnold editiert.
|
|
|
|
|
|
|
16.08.2007, 11:41
...neu hier
Themenstarter Beiträge: 2 |
#3
das mit dem programm hab ich gemacht..
----------------RemoveVideoActiveXObject.exe first run------------- Files found: C:\WINDOWS\system32\vpccw.dll C:\Dokumente und Einstellungen\rm\FAVORI~1\Online Security Test.url Uninstallers Rogue scanners: Folders Found: C:\Programme\Video ActiveX Access --------------RemoveVideoActiveXObject.exe last run--------------- Files found: Uninstallers Rogue scanners: Folders Found: hijackthis ist hier: Logfile of HijackThis v1.99.1 Scan saved at 11:38:31, on 16.08.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Intel\Wireless\Bin\EvtEng.exe C:\Programme\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\Acer\eManager\anbmServ.exe C:\WINDOWS\Explorer.EXE C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Programme\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe C:\Programme\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe C:\Programme\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe c:\programme\mcafee.com\agent\mcdetect.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe c:\PROGRA~1\mcafee.com\agent\mctskshd.exe C:\Programme\Intel\Wireless\Bin\RegSrvc.exe C:\Programme\CyberLink\Shared Files\RichVideo.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe C:\Programme\Acer\Acer Arcade\PCMService.exe C:\Programme\QuickTime\qttask.exe c:\PROGRA~1\mcafee.com\vso\OasClnt.exe C:\Acer\Empowering Technology\eRecovery\Monitor.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\acer\epm\epm-dm.exe C:\Programme\Acer\Acer Arcade\Kernel\TV\CLSched.exe c:\programme\mcafee.com\vso\mcvsshld.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE c:\programme\mcafee.com\agent\mcagent.exe C:\WINDOWS\RTHDCPL.EXE C:\Programme\Java\jre1.6.0_01\bin\jusched.exe C:\WINDOWS\vsnpstd.exe C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Programme\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Skype\Phone\Skype.exe c:\progra~1\mcafee.com\vso\mcvsftsn.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\Mozilla Firefox\firefox.exe C:\Programme\Skype\Plugin Manager\skypePM.exe C:\Dokumente und Einstellungen\rm\Desktop\hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = fritz.box R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {5DDE5591-A8AB-4897-93EF-1E4E943F85A7} - C:\Programme\Video ActiveX Access\iesplg.dll (file missing) O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: Protection Bar - {CC18AE76-7E65-4258-A193-9EA0C52DA6B8} - C:\Programme\Video ActiveX Access\iesbpl.dll (file missing) O4 - HKLM\..\Run: [LaunchApp] Alaunch O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "C:\Programme\Acer\Acer Arcade\PCMService.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask O4 - HKLM\..\Run: [VirusScan Online] C:\Programme\McAfee.com\VSO\mcvsshld.exe O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe O4 - HKLM\..\Run: [OASClnt] C:\Programme\McAfee.com\VSO\oasclnt.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Programme\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updateMgr] C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9 O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Acer\Acer Arcade\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe O23 - Service: EvtEng - Intel Corporation - C:\Programme\Intel\Wireless\Bin\EvtEng.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\programme\mcafee.com\agent\mcdetect.exe O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe O23 - Service: RegSrvc - Intel Corporation - C:\Programme\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Programme\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe |
|
|
|
|
|
|
16.08.2007, 11:50
Ehrenmitglied
Beiträge: 6028 |
#4
Entferne auf C:\RVAXO-results.log -->Papierkorb leeren
Schliesse alle Fenster und starte Hijack This Klicke:Do a Systemscan only Setze ein Häckchen in das Kästchen vor den genannten Eintrag bei R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: (no name) - {5DDE5591-A8AB-4897-93EF-1E4E943F85A7} - C:\Programme\Video ActiveX Access\iesplg.dll (file missing) O3 - Toolbar: Protection Bar - {CC18AE76-7E65-4258-A193-9EA0C52DA6B8} - C:\Programme\Video ActiveX Access\iesbpl.dll (file missing) klicke:Fix checked Dein Internet Explorer muss geschlossen wenn Du Fix Checked klickst Und wenn das nächste mal wieder um ein Codec gefragt wird(Anhang)ignorieren   Anhang: Codec.JPG __________ MfG Argus |
|
|
|
|
|
|
19.08.2007, 11:00
...neu hier
Beiträge: 2 |
#5
Hallo,
habe hier die Daten hoffe das Ihr mir weiterhelfen könnt. Volume in drive C has no label. Volume Serial Number is BC93-FEC0 Directory of C:\DOCUME~1\Dominik\LOCALS~1\Temp 19.08.2007 10:51 16'384 ~DF8990.tmp 19.08.2007 09:58 4'592 SIntfIcn.ani 19.08.2007 09:58 24'744 SIntfNT.dll 19.08.2007 09:58 20'016 SIntf32.dll 19.08.2007 09:58 12'305 SIntf16.dll 19.08.2007 09:52 512 ~DF1EAB.tmp 19.08.2007 09:52 131'072 ~DF1DE6.tmp 19.08.2007 09:52 512 ~DF866.tmp 19.08.2007 09:52 131'072 ~DF7A9.tmp 19.08.2007 09:49 116'418 jusched.log 19.08.2007 09:45 4'096 ASFWHide 18.08.2007 23:49 2'686 wmplog00.sqm 18.08.2007 21:27 155'023 TFR34.tmp 18.08.2007 21:27 59'218 TFR2E.tmp 18.08.2007 21:27 46'660 TFR29.tmp 18.08.2007 21:27 46'021 TFRB.tmp 18.08.2007 21:27 16'178 TFR6.tmp 17.08.2007 16:55 73'276 ~e5.0001 16.08.2007 22:12 17'179 java_install_reg.log 16.08.2007 21:18 155'023 TFRA8.tmp 16.08.2007 21:18 59'218 TFRA3.tmp 16.08.2007 21:18 46'660 TFR9E.tmp 16.08.2007 21:18 88'486 TFR9A.tmp 16.08.2007 21:18 46'021 TFR91.tmp 16.08.2007 21:18 16'178 TFR86.tmp 16.08.2007 18:07 16'384 ~DFC06C.tmp 16.08.2007 18:07 16'384 ~DFB7CE.tmp 16.08.2007 16:02 87'520 unwise.exe 16.08.2007 16:01 41 Filzip.ini 16.08.2007 15:42 1'363 NetlogMusicTool.log 16.08.2007 13:11 0 aax52.tmp 16.08.2007 13:10 0 aax51.tmp 16.08.2007 13:10 0 aax50.tmp 16.08.2007 13:08 49'152 ~DF3633.tmp 16.08.2007 12:06 1'160 jinstall.cfg 15.08.2007 13:19 16'384 ~DF1B6D.tmp 15.08.2007 13:19 16'384 ~DFED1.tmp 15.08.2007 11:14 16'384 ~DFA5CA.tmp 15.08.2007 11:14 16'384 ~DF9C27.tmp 14.08.2007 17:34 4'964'870 fla80.tmp 14.08.2007 15:34 16'384 ~DF8936.tmp 14.08.2007 15:34 512 ~DF54A0.tmp 14.08.2007 15:34 16'384 ~DF5494.tmp 14.08.2007 14:44 512 ~DF8640.tmp 14.08.2007 14:44 131'072 ~DF8620.tmp 14.08.2007 14:44 512 ~DF77C2.tmp 14.08.2007 14:44 131'072 ~DF77B1.tmp 14.08.2007 10:07 16'384 ~DFB117.tmp 14.08.2007 10:07 16'384 ~DFA63B.tmp 13.08.2007 22:46 16'384 ~DFE0CB.tmp 13.08.2007 22:46 16'384 ~DFE123.tmp 13.08.2007 22:46 16'384 ~DFE0B1.tmp 13.08.2007 22:46 16'384 ~DFE097.tmp 13.08.2007 21:07 16'384 ~DF10D.tmp 13.08.2007 21:07 16'384 ~DFF12E.tmp 13.08.2007 19:43 16'384 ~DF7790.tmp 13.08.2007 19:43 16'384 ~DF6DA2.tmp 12.08.2007 19:08 512 ~DFF469.tmp 12.08.2007 19:08 16'384 ~DFF45E.tmp 12.08.2007 19:08 16'384 ~DFF445.tmp 12.08.2007 19:08 512 ~DFF41E.tmp 12.08.2007 19:08 512 ~DFF437.tmp 12.08.2007 19:08 16'384 ~DFF410.tmp 12.08.2007 19:08 512 ~DFF450.tmp 12.08.2007 19:08 16'384 ~DFF42C.tmp 12.08.2007 16:21 16'384 ~DF2B44.tmp 12.08.2007 16:20 16'384 ~DF1E1D.tmp 12.08.2007 16:20 512 ~DF1E28.tmp 12.08.2007 16:18 512 ~DFA0E6.tmp 12.08.2007 16:18 131'072 ~DFA0B1.tmp 12.08.2007 16:17 512 ~DF25D8.tmp 12.08.2007 16:17 131'072 ~DF22A9.tmp 12.08.2007 01:57 36'182 TFRD0.tmp 12.08.2007 01:57 28'671 TFRCF.tmp 12.08.2007 01:57 25'169 TFRCB.tmp 12.08.2007 01:57 148'468 TFRC7.tmp 12.08.2007 01:57 67'994 TFRC3.tmp 12.08.2007 01:57 62'753 TFRBF.tmp 12.08.2007 01:57 23'262 TFRBB.tmp 12.08.2007 01:57 23'427 TFRB7.tmp 12.08.2007 01:57 37'885 TFRB3.tmp 12.08.2007 01:57 40'950 TFRAF.tmp 12.08.2007 01:57 23'608 TFRAB.tmp 12.08.2007 01:57 35'574 TFRA7.tmp 12.08.2007 01:49 155'023 TFR9B.tmp 12.08.2007 01:49 88'486 TFR97.tmp 12.08.2007 00:51 59'218 TFR6F.tmp 12.08.2007 00:51 46'660 TFR67.tmp 12.08.2007 00:51 46'021 TFR4F.tmp 12.08.2007 00:51 16'178 TFR4B.tmp 11.08.2007 20:15 16'384 ~DFDC7.tmp 11.08.2007 20:15 16'384 ~DF3F3.tmp 11.08.2007 20:15 512 ~DF3FE.tmp 11.08.2007 19:12 16'384 ~DFFC3B.tmp 11.08.2007 18:26 512 ~DFA4F4.tmp 11.08.2007 18:26 131'072 ~DFA4E8.tmp 11.08.2007 18:26 512 ~DF934B.tmp 11.08.2007 18:26 131'072 ~DF9340.tmp 11.08.2007 18:07 16'384 ~DF1447.tmp 11.08.2007 18:07 16'384 ~DFBF9.tmp 11.08.2007 15:06 16'384 ~DF9741.tmp 11.08.2007 15:05 16'384 ~DF8CCE.tmp 10.08.2007 20:41 16'384 ~DF7599.tmp 10.08.2007 20:39 16'384 ~DF9484.tmp 10.08.2007 10:48 512 ~DF8780.tmp 10.08.2007 10:48 131'072 ~DF8775.tmp 09.08.2007 22:01 155'023 TFR92.tmp 09.08.2007 22:01 59'218 TFR8E.tmp 09.08.2007 22:01 46'660 TFR8A.tmp 09.08.2007 22:01 88'486 TFR84.tmp 09.08.2007 22:01 46'021 TFR80.tmp 09.08.2007 22:01 16'178 TFR78.tmp 09.08.2007 16:29 16'384 ~DFCA5E.tmp 09.08.2007 16:29 16'384 ~DFBEF7.tmp 09.08.2007 15:40 421'888 tmp43E0F.tmp 09.08.2007 13:55 16'384 ~DF1F94.tmp 09.08.2007 12:00 16'384 ~DF4266.tmp 09.08.2007 12:00 16'384 ~DF340D.tmp 08.08.2007 22:53 6'214'972 flaE.tmp 08.08.2007 22:50 512 ~DFAD3B.tmp 08.08.2007 22:50 131'072 ~DFAD1D.tmp 08.08.2007 22:50 512 ~DF9F4D.tmp 08.08.2007 22:50 131'072 ~DF9F31.tmp 08.08.2007 21:06 16'384 ~DF12CF.tmp 08.08.2007 21:06 16'384 ~DF821.tmp 08.08.2007 16:28 16'384 Perflib_Perfdata_268.dat 08.08.2007 16:25 512 ~DF48E8.tmp 08.08.2007 16:25 131'072 ~DF4874.tmp 08.08.2007 16:25 512 ~DF3084.tmp 08.08.2007 16:25 131'072 ~DF306C.tmp 08.08.2007 12:50 131'072 ~DF7076.tmp 08.08.2007 12:50 512 ~DF7081.tmp 08.08.2007 12:50 512 ~DF64F6.tmp 08.08.2007 12:50 131'072 ~DF64EA.tmp 08.08.2007 10:27 156 ACF.tmp 07.08.2007 21:34 155'023 TFR136.tmp 07.08.2007 21:34 59'218 TFR130.tmp 07.08.2007 21:34 46'660 TFR12F.tmp 07.08.2007 21:34 46'021 TFR124.tmp 07.08.2007 21:34 16'178 TFR11D.tmp 07.08.2007 20:00 156 ACDB.tmp 04.08.2007 21:55 155'023 TFR2A.tmp 04.08.2007 21:55 59'218 TFR25.tmp 04.08.2007 21:55 46'660 TFR22.tmp 04.08.2007 21:55 88'486 TFR1C.tmp 04.08.2007 21:55 46'021 TFRD.tmp 04.08.2007 21:55 16'178 TFRA.tmp 03.08.2007 20:19 3'888'054 mgxmbkgstd.bmp 03.08.2007 20:11 15'360 laf1.exe 03.08.2007 13:02 2'346 dotNetFx.log 03.08.2007 13:02 6'374 ASPNETSetup.log 03.08.2007 12:59 65'536 bfac.rra 03.08.2007 12:59 662 ISPackFiles.ini 03.08.2007 12:24 1'060 SketchUpUndo0.log 03.08.2007 12:13 16'384 ~DFF2A7.tmp 03.08.2007 12:13 16'384 ~DFEAD4.tmp 03.08.2007 12:13 512 ~DFEADF.tmp 03.08.2007 10:59 512 ~DFF3E9.tmp 03.08.2007 10:59 131'072 ~DFF3B8.tmp 03.08.2007 10:59 512 ~DFE700.tmp 03.08.2007 10:59 131'072 ~DFE6D1.tmp 02.08.2007 22:15 113 D653F3EC.TMP 02.08.2007 21:56 155'023 TFR21.tmp 02.08.2007 21:56 59'218 TFR20.tmp 02.08.2007 21:56 46'660 TFR15.tmp 02.08.2007 21:56 88'486 TFR10.tmp 02.08.2007 21:56 46'021 TFR5.tmp 02.08.2007 21:56 16'178 TFR2.tmp 02.08.2007 21:55 16'384 ~DF899C.tmp 02.08.2007 21:55 16'384 ~DF82CB.tmp 02.08.2007 20:30 10'225 TFR21B.tmp 02.08.2007 20:30 21'122 TFR217.tmp 02.08.2007 20:22 131'072 ~DFDBA1.tmp 02.08.2007 20:22 131'072 ~DFF0E7.tmp 02.08.2007 16:47 88'486 TFRA2.tmp 02.08.2007 15:01 36'182 TFR74.tmp 02.08.2007 15:01 28'671 TFR6D.tmp 02.08.2007 15:01 148'468 TFR62.tmp 02.08.2007 15:01 67'994 TFR5D.tmp 02.08.2007 15:01 62'753 TFR57.tmp 02.08.2007 15:01 23'262 TFR54.tmp 02.08.2007 15:01 23'427 TFR4E.tmp 02.08.2007 15:01 37'885 TFR4A.tmp 02.08.2007 15:01 40'950 TFR41.tmp 02.08.2007 15:01 23'608 TFR39.tmp 02.08.2007 15:01 35'574 TFR38.tmp 02.08.2007 14:36 155'023 TFR1E.tmp 02.08.2007 14:36 59'218 TFR19.tmp 02.08.2007 14:36 46'660 TFR16.tmp 02.08.2007 14:36 46'021 TFR11.tmp 02.08.2007 14:36 16'178 TFRF.tmp 02.08.2007 13:08 16'384 ~DFDC7F.tmp 02.08.2007 13:08 16'384 ~DFF11A.tmp 01.08.2007 19:04 16'384 ~DFA4EF.tmp 01.08.2007 19:04 16'384 ~DF9E82.tmp 01.08.2007 16:40 36'182 TFR8C.tmp 01.08.2007 16:40 28'671 TFR8B.tmp 01.08.2007 16:40 25'169 TFR87.tmp 01.08.2007 16:40 148'468 TFR83.tmp 01.08.2007 16:40 67'994 TFR7F.tmp 01.08.2007 16:40 62'753 TFR7B.tmp 01.08.2007 16:40 23'262 TFR77.tmp 01.08.2007 16:40 23'427 TFR73.tmp 01.08.2007 16:40 37'885 TFR6E.tmp 01.08.2007 16:40 40'950 TFR6A.tmp 01.08.2007 16:40 23'608 TFR66.tmp 01.08.2007 16:40 35'574 TFR61.tmp 01.08.2007 16:40 20'560 TFR5C.tmp 01.08.2007 15:53 155'023 TFR3E.tmp 01.08.2007 15:53 59'218 TFR36.tmp 01.08.2007 15:53 46'660 TFR32.tmp 01.08.2007 15:53 88'486 TFR2D.tmp 01.08.2007 15:53 46'021 TFR26.tmp 01.08.2007 15:53 16'178 TFR23.tmp 01.08.2007 10:02 16'384 ~DFF340.tmp 01.08.2007 10:02 16'384 ~DFEA94.tmp 31.07.2007 21:02 155'023 TFR28.tmp 31.07.2007 21:02 59'218 TFR24.tmp 31.07.2007 21:02 46'660 TFR1F.tmp 31.07.2007 21:02 88'486 TFR1B.tmp 31.07.2007 21:02 46'021 TFR17.tmp 31.07.2007 21:02 16'178 TFR13.tmp 31.07.2007 20:24 16'384 ~DFD6D.tmp 31.07.2007 20:24 512 ~DF543.tmp 31.07.2007 20:24 16'384 ~DF537.tmp 31.07.2007 14:54 3'178 ~da1cf269b7ae1c7d371b5e81700?g 31.07.2007 14:54 21 ~da1cf269b7ae1c7d371b5e81700?d 31.07.2007 14:39 16'384 ~DFDFD7.tmp 31.07.2007 14:39 16'384 ~DFCA3C.tmp 31.07.2007 14:39 512 ~DFCA47.tmp 31.07.2007 14:39 512 ~DF9903.tmp 31.07.2007 14:39 131'072 ~DF98E0.tmp 31.07.2007 14:39 512 ~DF655A.tmp 31.07.2007 14:39 131'072 ~DF652F.tmp 31.07.2007 13:09 16'384 ~DF9E6.tmp 31.07.2007 13:09 16'384 ~DF331.tmp 30.07.2007 22:14 21 ~894084f0a774e1c848c268d98400?d 30.07.2007 22:14 2'439 ~894084f0a774e1c848c268d98400?g 30.07.2007 22:14 21 ~3f408332a70e21c7d15e3b937900?d 30.07.2007 22:14 2'236 ~3f408332a70e21c7d15e3b937900?g 30.07.2007 22:14 2'294 ~8e838edc4dcb11c7d2e450017e00?g 30.07.2007 22:14 21 ~8e838edc4dcb11c7d2e450017e00?d 30.07.2007 22:14 2'294 ~c5408328a29cf1c7d15e2880a900?g 30.07.2007 22:14 21 ~c5408328a29cf1c7d15e2880a900?d 30.07.2007 22:14 21 ~d40831da587e1c7d15e25b0900?d 30.07.2007 22:14 2'453 ~d40831da587e1c7d15e25b0900?g 30.07.2007 22:14 2'426 ~2d40859d9f7ee1c7d15e5bc33800?g 30.07.2007 22:14 21 ~2d40859d9f7ee1c7d15e5bc33800?d 30.07.2007 22:14 21 ~2540861ea9f331c7d15e4c43ef00?d 30.07.2007 22:14 2'152 ~2540861ea9f331c7d15e4c43ef00?g 30.07.2007 22:14 21 ~540861ea59bf1c7d15e143cac00?d 30.07.2007 22:14 2'477 ~540861ea59bf1c7d15e143cac00?g 30.07.2007 22:14 1'816 ~ff0fd6d13881c7cfa796cf3b00?g 30.07.2007 22:14 21 ~ff0fd6d13881c7cfa796cf3b00?d 30.07.2007 22:14 21 ~634f77e220601c7d2e49ac1f00?d 30.07.2007 22:14 2'388 ~634f77e220601c7d2e49ac1f00?g 30.07.2007 22:14 2'368 ~c2c6b0ae36be1c7d2c497781200?g 30.07.2007 22:14 21 ~c2c6b0ae36be1c7d2c497781200?d 29.07.2007 23:49 16'384 ~DF341B.tmp 29.07.2007 23:48 16'384 ~DF6B3.tmp 28.07.2007 23:32 21 ~ca34da5da70e21c7d15e3b937900?d 28.07.2007 23:32 2'236 ~ca34da5da70e21c7d15e3b937900?g 28.07.2007 23:32 21 ~d834dcf29f7ee1c7d15e5bc33800?d 28.07.2007 23:32 2'426 ~d834dcf29f7ee1c7d15e5bc33800?g 28.07.2007 23:32 21 ~d034df71a9f331c7d15e4c43ef00?d 28.07.2007 23:32 2'152 ~d034df71a9f331c7d15e4c43ef00?g 28.07.2007 23:28 21 ~145c5188e0c481c7bcd26a8b0c00?d 28.07.2007 23:28 4'186 ~145c5188e0c481c7bcd26a8b0c00?g 28.07.2007 23:28 3'431 ~e154f89487d21c7c49b927d2b00?g 28.07.2007 23:28 21 ~e154f89487d21c7c49b927d2b00?d 28.07.2007 23:28 2'664 ~58a3ef5b9d811c77562c07cd600?g 28.07.2007 23:28 21 ~58a3ef5b9d811c77562c07cd600?d 28.07.2007 23:28 21 ~87a41163e7dc91c7c49cd0c71a00?d 28.07.2007 23:28 2'534 ~87a41163e7dc91c7c49cd0c71a00?g 28.07.2007 23:28 21 ~6af2650bd5941c7c2479d3f8200?d 28.07.2007 23:28 3'148 ~6af2650bd5941c7c2479d3f8200?g 28.07.2007 23:28 3'557 ~eaf26517d6cd1c7c24723a79400?g 28.07.2007 23:28 21 ~eaf26517d6cd1c7c24723a79400?d 28.07.2007 23:28 3'199 ~3566d8a6afe341c7bbfaa0f55800?g 28.07.2007 23:28 21 ~3566d8a6afe341c7bbfaa0f55800?d 28.07.2007 23:28 2'624 ~353314c21de51c7caf6529af100?g 28.07.2007 23:28 21 ~353314c21de51c7caf6529af100?d 28.07.2007 23:28 21 ~7c34dd9fa774e1c848c268d98400?d 28.07.2007 23:28 2'439 ~7c34dd9fa774e1c848c268d98400?g 28.07.2007 23:28 21 ~3034da47a29cf1c7d15e2880a900?d 28.07.2007 23:28 2'294 ~3034da47a29cf1c7d15e2880a900?g 28.07.2007 23:28 21 ~f834da72a587e1c7d15e25b0900?d 28.07.2007 23:28 2'453 ~f834da72a587e1c7d15e25b0900?g 28.07.2007 23:28 2'868 ~b3314e31807f1c7c3302a5e0600?g 28.07.2007 23:28 21 ~b3314e31807f1c7c3302a5e0600?d 28.07.2007 23:28 21 ~181b2aa31f7a41c7c8b5f9e0b00?d 28.07.2007 23:28 2'268 ~181b2aa31f7a41c7c8b5f9e0b00?g 28.07.2007 23:28 21 ~f034df71a59bf1c7d15e143cac00?d 28.07.2007 23:28 2'477 ~f034df71a59bf1c7d15e143cac00?g 28.07.2007 23:28 2'810 ~262c4df1e25901c7d14c9b812400?g 28.07.2007 23:28 21 ~262c4df1e25901c7d14c9b812400?d 28.07.2007 23:26 21 ~f7b172871c6911c7d0b4fa935a00?d 28.07.2007 23:26 1'855 ~f7b172871c6911c7d0b4fa935a00?g 28.07.2007 23:26 21 ~ec7810551db251c7d0b534fcf700?d 28.07.2007 23:26 2'316 ~ec7810551db251c7d0b534fcf700?g 28.07.2007 23:26 2'341 ~a07810541d22d1c7d0b51991ec00?g 28.07.2007 23:26 21 ~a07810541d22d1c7d0b51991ec00?d 28.07.2007 23:26 2'269 ~694b8b61b9971c7d0b54ba34e00?g 28.07.2007 23:26 21 ~694b8b61b9971c7d0b54ba34e00?d 28.07.2007 23:26 2'294 ~a1b172862352f1c7d0b4db94c800?g 28.07.2007 23:26 21 ~a1b172862352f1c7d0b4db94c800?d 28.07.2007 19:56 16'384 ~DF51FC.tmp 28.07.2007 15:48 512 ~DF811A.tmp 28.07.2007 15:48 114'688 ~DF80DE.tmp 28.07.2007 15:47 512 ~DF6F31.tmp 28.07.2007 15:47 114'688 ~DF6E24.tmp 28.07.2007 03:07 21 ~436b316388d11c7cca855e8100?d 28.07.2007 03:07 2'575 ~436b316388d11c7cca855e8100?g 28.07.2007 03:07 21 ~ca42624c76f61c7cca83fc81e00?d 28.07.2007 03:07 2'182 ~ca42624c76f61c7cca83fc81e00?g 28.07.2007 03:07 2'586 ~6f47752b78fb1c7cca8448cd200?g 28.07.2007 03:07 21 ~6f47752b78fb1c7cca8448cd200?d 28.07.2007 03:07 21 ~6892c4cc858d1c7cca8245d1300?d 28.07.2007 03:07 2'469 ~6892c4cc858d1c7cca8245d1300?g 28.07.2007 03:07 21 ~e21935e5d80b1c7c7e457a12d00?d 28.07.2007 03:07 3'607 ~e21935e5d80b1c7c7e457a12d00?g 28.07.2007 03:07 2'308 ~658f261c7f881c7cca7efe95700?g 28.07.2007 03:07 21 ~658f261c7f881c7cca7efe95700?d 28.07.2007 03:07 21 ~e11138ee88531c7cca82a52f400?d 28.07.2007 03:07 2'471 ~e11138ee88531c7cca82a52f400?g 28.07.2007 03:07 2'046 ~4bb3811953831c7c036c937e900?g 28.07.2007 03:07 21 ~4bb3811953831c7c036c937e900?d 28.07.2007 03:07 3'472 ~74ea247cce2b1c7c3ae515b1d00?g 28.07.2007 03:07 21 ~74ea247cce2b1c7c3ae515b1d00?d 28.07.2007 03:07 21 ~12edc461759c1c7c3ab46eb5400?d 28.07.2007 03:07 2'673 ~12edc461759c1c7c3ab46eb5400?g 28.07.2007 03:07 2'625 ~2cc5b37c75871c7c3ab566a9d00?g 28.07.2007 03:07 21 ~2cc5b37c75871c7c3ab566a9d00?d 28.07.2007 03:07 2'788 ~7b1945d47ee11c7c3ab4bb00800?g 28.07.2007 03:07 21 ~7b1945d47ee11c7c3ab4bb00800?d 28.07.2007 03:07 21 ~936a679de7c01c7c5f6ed776500?d 28.07.2007 03:07 1'621 ~936a679de7c01c7c5f6ed776500?g 28.07.2007 03:07 2'684 ~816a67b3f86c1c7c5f6a25d5200?g 28.07.2007 03:07 21 ~816a67b3f86c1c7c5f6a25d5200?d 28.07.2007 03:07 21 ~1f6a67b2e75f1c7c5f691acdc00?d 28.07.2007 03:07 2'348 ~1f6a67b2e75f1c7c5f691acdc00?g 28.07.2007 03:07 21 ~d56a67a9f0b81c7c5f64db9d700?d 28.07.2007 03:07 21 ~a16a67a8b2941c7c5f658746c00?d 28.07.2007 03:07 2'147 ~a16a67a8b2941c7c5f658746c00?g 28.07.2007 03:07 2'475 ~d56a67a9f0b81c7c5f64db9d700?g 28.07.2007 03:07 1'977 ~a56a67a8ffff1c7bcd315032f00?g 28.07.2007 03:07 21 ~a56a67a8ffff1c7bcd315032f00?d 28.07.2007 03:07 2'722 ~c96a67a91189e1c7bcd2f2711600?g 28.07.2007 03:07 21 ~c96a67a91189e1c7bcd2f2711600?d 28.07.2007 03:07 21 ~e6e8a12a7ba51c7bd896110ab00?d 28.07.2007 03:07 2'424 ~e6e8a12a7ba51c7bd896110ab00?g 28.07.2007 03:07 21 ~5d05f70d754e1c7bd894f2f0800?d 28.07.2007 03:07 2'409 ~5d05f70d754e1c7bd894f2f0800?g 28.07.2007 03:07 2'669 ~51b1729821a4e1c7b4f5af09f100?g 28.07.2007 03:07 21 ~51b1729821a4e1c7b4f5af09f100?d 28.07.2007 03:07 21 ~d5544a11a774e1c848c268d98400?d 28.07.2007 03:07 2'439 ~d5544a11a774e1c848c268d98400?g 28.07.2007 03:07 21 ~8560c4a253831c7c036c937e900?d 28.07.2007 03:07 2'046 ~8560c4a253831c7c036c937e900?g 28.07.2007 03:07 3'472 ~ba3961c7ce2b1c7c3ae515b1d00?g 28.07.2007 03:07 21 ~ba3961c7ce2b1c7c3ae515b1d00?d 28.07.2007 03:07 2'673 ~dc3e81da759c1c7c3ab46eb5400?g 28.07.2007 03:07 21 ~dc3e81da759c1c7c3ab46eb5400?d 28.07.2007 03:07 21 ~e216f6c775871c7c3ab566a9d00?d 28.07.2007 03:07 2'625 ~e216f6c775871c7c3ab566a9d00?g 28.07.2007 03:07 21 ~b5ca006f7ee11c7c3ab4bb00800?d 28.07.2007 03:07 2'788 ~b5ca006f7ee11c7c3ab4bb00800?g 28.07.2007 03:07 1'990 ~7cfa0d0b173371c713aede68dd00?g 28.07.2007 03:07 21 ~7cfa0d0b173371c713aede68dd00?d 28.07.2007 03:07 2'786 ~625e98db30321c713db2421800?g 28.07.2007 03:07 21 ~625e98db30321c713db2421800?d 28.07.2007 03:07 21 ~82d41ef2400361c71ececd4fbe00?d 28.07.2007 03:07 1'866 ~82d41ef2400361c71ececd4fbe00?g 28.07.2007 03:07 822 ~145727a336f20a1c7220eb4b51000?g 28.07.2007 03:07 21 ~145727a336f20a1c7220eb4b51000?d 28.07.2007 03:07 21 ~7545727b2400361c71d5086d45500?d 28.07.2007 03:07 2'724 ~7545727b2400361c71d5086d45500?g 28.07.2007 03:07 2'240 ~cfe3b8902400361c71c6a47cbd400?g 28.07.2007 03:07 21 ~cfe3b8902400361c71c6a47cbd400?d 28.07.2007 03:07 1'764 ~394572547e90361c725b994dc6e00?g 28.07.2007 03:07 21 ~394572547e90361c725b994dc6e00?d 28.07.2007 03:07 2'606 ~7f8ac8c5519291c74a13bf707200?g 28.07.2007 03:07 21 ~7f8ac8c5519291c74a13bf707200?d 28.07.2007 03:07 3'365 ~5f8ac8c54dded1c74a139223c400?g 28.07.2007 03:07 21 ~5f8ac8c54dded1c74a139223c400?d 28.07.2007 03:07 2'568 ~af8ac8c45c33a1c74a1371f40500?g 28.07.2007 03:07 21 ~af8ac8c45c33a1c74a1371f40500?d 28.07.2007 03:07 21 ~e52b57811dc1e1c738be3bb4e100?d 28.07.2007 03:07 3'220 ~e52b57811dc1e1c738be3bb4e100?g 28.07.2007 03:07 2'535 ~2f5f12c94c74a1c74a1344a75700?g 28.07.2007 03:07 21 ~2f5f12c94c74a1c74a1344a75700?d 28.07.2007 03:07 21 ~2f2be9c97e90361c72f58248a0100?d 28.07.2007 03:07 1'556 ~2f2be9c97e90361c72f58248a0100?g 28.07.2007 03:07 21 ~2d47f7304c9f1c738bd723e2c00?d 28.07.2007 03:07 5'072 ~2d47f7304c9f1c738bd723e2c00?g 28.07.2007 03:07 2'810 ~82b2c65714eaa1c7c037a823c800?g 28.07.2007 03:07 21 ~82b2c65714eaa1c7c037a823c800?d 28.07.2007 03:07 21 ~7dbd85982a3c1c7c88d99d27900?d 28.07.2007 03:07 3'242 ~7dbd85982a3c1c7c88d99d27900?g 28.07.2007 03:07 21 ~c0a8789bf21e1c7bc19212ab600?d 28.07.2007 03:07 3'137 ~c0a8789bf21e1c7bc19212ab600?g 28.07.2007 03:07 2'971 ~b5cadc3810d401c775d3c1018500?g 28.07.2007 03:07 21 ~b5cadc3810d401c775d3c1018500?d 28.07.2007 03:07 21 ~60eb221a2f991c7c248d5939000?d 28.07.2007 03:07 2'733 ~60eb221a2f991c7c248d5939000?g 28.07.2007 03:07 21 ~8e0a551d5db7a1c74c0e71738e00?d 28.07.2007 03:07 2'133 ~8e0a551d5db7a1c74c0e71738e00?g 28.07.2007 03:07 21 ~6cf0005e880f1c738c073248d00?d 28.07.2007 03:07 2'938 ~6cf0005e880f1c738c073248d00?g 28.07.2007 03:07 1'816 ~fef462d13881c7cfa796cf3b00?g 28.07.2007 03:07 21 ~fef462d13881c7cfa796cf3b00?d 28.07.2007 03:07 2'654 ~b00e07e93840361c7302214d6ef00?g 28.07.2007 03:07 21 ~b00e07e93840361c7302214d6ef00?d 28.07.2007 03:07 4'150 ~cd5054e5d9201c738c022149900?g 28.07.2007 03:07 21 ~cd5054e5d9201c738c022149900?d 28.07.2007 03:07 21 ~fe2799461bb31c71ae058504300?d 28.07.2007 03:07 2'332 ~fe2799461bb31c71ae058504300?g 28.07.2007 03:07 2'737 ~147185a32e4d1c713db26055e00?g 28.07.2007 03:07 21 ~147185a32e4d1c713db26055e00?d 28.07.2007 03:07 21 ~7eb45f194fb791c74c0e6a4c8000?d 28.07.2007 03:07 2'384 ~7eb45f194fb791c74c0e6a4c8000?g 28.07.2007 03:07 21 ~97b70992102db1c738bbde1f9500?d 28.07.2007 03:07 1'733 ~97b70992102db1c738bbde1f9500?g 28.07.2007 03:07 1'274 ~ee5bcafc12e41c738bbb7f9f500?g 28.07.2007 03:07 21 ~ee5bcafc12e41c738bbb7f9f500?d 28.07.2007 03:07 21 ~aa829047202061c7131a65a3100?d 28.07.2007 03:07 1'717 ~aa829047202061c7131a65a3100?g 28.07.2007 03:07 21 ~3181894e8101c7bc1a99ffd00?d 28.07.2007 03:07 21 ~915737075511c7bc18be391f00?d 28.07.2007 03:07 1'524 ~3181894e8101c7bc1a99ffd00?g 28.07.2007 03:07 3'604 ~915737075511c7bc18be391f00?g 28.07.2007 03:07 21 ~38ea7367b8361c787e54d732200?d 28.07.2007 03:07 2'248 ~38ea7367b8361c787e54d732200?g 28.07.2007 03:07 21 ~6d46137a191f31c74aeecc11200?d 28.07.2007 03:07 3'302 ~6d46137a191f31c74aeecc11200?g 28.07.2007 03:07 1'884 ~5150875685241c7bc18cb560e00?g 28.07.2007 03:07 21 ~5150875685241c7bc18cb560e00?d 28.07.2007 03:07 21 ~243406fe3c4d1c7512ba65e7400?d 28.07.2007 03:07 21 ~ff8697cd30401c7c88f12860500?d 28.07.2007 03:07 2'864 ~ff8697cd30401c7c88f12860500?g 28.07.2007 03:07 3'593 ~243406fe3c4d1c7512ba65e7400?g 28.07.2007 03:07 3'528 ~fadbbf4e53311c738bd9ac62600?g 28.07.2007 03:07 21 ~fadbbf4e53311c738bd9ac62600?d 28.07.2007 03:07 1'571 ~55f233285e71c74f9fc5c89600?g 28.07.2007 03:07 21 ~55f233285e71c74f9fc5c89600?d 28.07.2007 03:07 1'967 ~ed1a5feb7961c73748b2c86900?g 28.07.2007 03:07 21 ~ed1a5feb7961c73748b2c86900?d 28.07.2007 03:07 21 ~d952cdae8cfe1c738bc8d5c6c00?d 28.07.2007 03:07 2'745 ~d952cdae8cfe1c738bc8d5c6c00?g 28.07.2007 03:07 21 ~f38351c39fb81c7bc19e5dcb700?d 28.07.2007 03:07 3'304 ~f38351c39fb81c7bc19e5dcb700?g 28.07.2007 03:07 3'264 ~27509b4aae2b1c7bc19d2c9e700?g 28.07.2007 03:07 21 ~27509b4aae2b1c7bc19d2c9e700?d 28.07.2007 03:07 3'434 ~e786e6aac2e41c7c1555a9d7d00?g 28.07.2007 03:07 21 ~e786e6aac2e41c7c1555a9d7d00?d 28.07.2007 03:07 2'129 ~ffa899d83cf061c74c0cd75f1600?g 28.07.2007 03:07 21 ~ffa899d83cf061c74c0cd75f1600?d 28.07.2007 03:07 2'030 ~c0265ff8fcd1c74f9e7f266c00?g 28.07.2007 03:07 21 ~c0265ff8fcd1c74f9e7f266c00?d 28.07.2007 03:07 21 ~c05c62d816061c74f9ebe54bd00?d 28.07.2007 03:07 2'030 ~c05c62d816061c74f9ebe54bd00?g 28.07.2007 03:07 21 ~5671b9d747d81c734d17b03bc00?d 28.07.2007 03:07 1'773 ~5671b9d747d81c734d17b03bc00?g 28.07.2007 03:07 1'853 ~bdd13fcaf101c734d1750ddb00?g 28.07.2007 03:07 21 ~bdd13fcaf101c734d1750ddb00?d 28.07.2007 03:07 4'194 ~62d4f0215daf01c734d166bfbf00?g 28.07.2007 03:07 21 ~62d4f0215daf01c734d166bfbf00?d 28.07.2007 03:07 21 ~f83351f231cd1c71b0f3de18e00?d 28.07.2007 03:07 3'294 ~f83351f231cd1c71b0f3de18e00?g 28.07.2007 03:07 2'953 ~870b933a173fc1c72da33a09fa00?g 28.07.2007 03:07 21 ~870b933a173fc1c72da33a09fa00?d 28.07.2007 03:07 21 ~4d509e0d1f8981c74ddd78043000?d 28.07.2007 03:07 3'312 ~4d509e0d1f8981c74ddd78043000?g 28.07.2007 03:07 21 ~a9509e0d2115b1c74ddd78043000?d 28.07.2007 03:07 3'279 ~a9509e0d2115b1c74ddd78043000?g 28.07.2007 03:07 3'548 ~29509e39217561c74f8fb04b7000?g 28.07.2007 03:07 21 ~29509e39217561c74f8fb04b7000?d 28.07.2007 03:07 3'359 ~e7509e11244ed1c74f8fb04b7000?g 28.07.2007 03:07 21 ~e7509e11244ed1c74f8fb04b7000?d 28.07.2007 03:07 21 ~4b509e1f90111c72da34d1cca00?d 28.07.2007 03:07 3'165 ~4b509e1f90111c72da34d1cca00?g 28.07.2007 03:07 21 ~947b9ebe7c01c7c5f6ed776500?d 28.07.2007 03:07 1'621 ~947b9ebe7c01c7c5f6ed776500?g 28.07.2007 03:07 2'684 ~1b47b9c5f86c1c7c5f6a25d5200?g 28.07.2007 03:07 21 ~1b47b9c5f86c1c7c5f6a25d5200?d 28.07.2007 03:07 2'348 ~8547b9c4e75f1c7c5f691acdc00?g 28.07.2007 03:07 21 ~8547b9c4e75f1c7c5f691acdc00?d 28.07.2007 03:07 21 ~3b47b9deb2941c7c5f658746c00?d 28.07.2007 03:07 2'147 ~3b47b9deb2941c7c5f658746c00?g 28.07.2007 03:07 2'475 ~4f47b9dff0b81c7c5f64db9d700?g 28.07.2007 03:07 1'977 ~3f47b9deffff1c7bcd315032f00?g 28.07.2007 03:07 21 ~3f47b9deffff1c7bcd315032f00?d 28.07.2007 03:07 21 ~4f47b9dff0b81c7c5f64db9d700?d 28.07.2007 03:07 2'722 ~5347b9df1189e1c7bcd2f2711600?g 28.07.2007 03:07 21 ~5347b9df1189e1c7bcd2f2711600?d 28.07.2007 03:07 21 ~ad47b9cd4a35e1c7782cd1f90300?d 28.07.2007 03:07 1'676 ~ad47b9cd4a35e1c7782cd1f90300?g 28.07.2007 03:07 21 ~4f47bf7774e951c77556cff62200?d 28.07.2007 03:07 2'772 ~4f47bf7774e951c77556cff62200?g 28.07.2007 03:07 21 ~947bce74874c1c755849825b300?d 28.07.2007 03:07 2'860 ~947bce74874c1c755849825b300?g 28.07.2007 03:07 4'101 ~b8faae5613791c713db5816c000?g 28.07.2007 03:07 21 ~b8faae5613791c713db5816c000?d 28.07.2007 03:07 3'269 ~daa4173246391c71ec3c40d2400?g 28.07.2007 03:07 21 ~daa4173246391c71ec3c40d2400?d 28.07.2007 03:07 21 ~124e099e86fc1c734d1940c6d00?d 28.07.2007 03:07 4'137 ~124e099e86fc1c734d1940c6d00?g 28.07.2007 03:07 2'990 ~9f50526f12a771c7bc194ae3dd00?g 28.07.2007 03:07 21 ~9f50526f12a771c7bc194ae3dd00?d 28.07.2007 03:07 21 ~5239cfd97ba51c7bd896110ab00?d 28.07.2007 03:07 2'424 ~5239cfd97ba51c7bd896110ab00?g 28.07.2007 03:07 2'409 ~c0a37c7a754e1c7bd894f2f0800?g 28.07.2007 03:07 21 ~c0a37c7a754e1c7bd894f2f0800?d 28.07.2007 03:07 3'868 ~5058b294cb81c7158eff882400?g 28.07.2007 03:07 21 ~5058b294cb81c7158eff882400?d 28.07.2007 03:07 3'286 ~866fa02f41af11c7bc1931db2c00?g 28.07.2007 03:07 21 ~866fa02f41af11c7bc1931db2c00?d 28.07.2007 03:07 2'555 ~bd4f33232d811c733471b79a500?g 28.07.2007 03:07 21 ~bd4f33232d811c733471b79a500?d 28.07.2007 03:07 21 ~b2408898167e9a1c7bc1a1cb2cd00?d 28.07.2007 03:07 1'552 ~b2408898167e9a1c7bc1a1cb2cd00?g 28.07.2007 03:07 2'669 ~cc17f9ef21a4e1c7b4f5af09f100?g 28.07.2007 03:07 21 ~cc17f9ef21a4e1c7b4f5af09f100?d 28.07.2007 03:07 21 ~ccab7a0a52b81c74fa051422700?d 28.07.2007 03:07 1'175 ~ccab7a0a52b81c74fa051422700?g 28.07.2007 03:07 21 ~d83a6da99d11c79e06a646d200?d 28.07.2007 03:07 2'057 ~d83a6da99d11c79e06a646d200?g 28.07.2007 03:07 2'542 ~411ccd2ea401c79e06b5c61b00?g 28.07.2007 03:07 21 ~6485b4ca6e1c79e071c4b3900?d 28.07.2007 03:07 21 ~411ccd2ea401c79e06b5c61b00?d 28.07.2007 03:07 2'194 ~6485b4ca6e1c79e071c4b3900?g 28.07.2007 03:07 2'164 ~6480a062d51e1c793de91b61300?g 28.07.2007 03:07 21 ~6480a062d51e1c793de91b61300?d 28.07.2007 03:07 3'274 ~8b73c07199511c789da78729700?g 28.07.2007 03:07 21 ~8b73c07199511c789da78729700?d 28.07.2007 03:07 21 ~7a9496acb1b91c789da714b8900?d 28.07.2007 03:07 2'588 ~7a9496acb1b91c789da714b8900?g 28.07.2007 03:07 2'339 ~de9496ad96ea1c789da73ade300?g 28.07.2007 03:07 21 ~de9496ad96ea1c789da73ade300?d 28.07.2007 03:07 2'487 ~e49496adab7b1c789da6c86d500?g 28.07.2007 03:07 21 ~e49496adab7b1c789da6c86d500?d 28.07.2007 03:07 21 ~3445bbe587761c78a3ca5ebc00?d 28.07.2007 03:07 2'320 ~3445bbe587761c78a3ca5ebc00?g 28.07.2007 03:07 3'155 ~10603b8883c01c787e0b60bd000?g 28.07.2007 03:07 21 ~10603b8883c01c787e0b60bd000?d 28.07.2007 03:07 21 ~da36571a27231c7b99753c57c00?d 28.07.2007 03:07 21 ~8c626c68190391c7c88ec63ac500?d 28.07.2007 03:07 3'285 ~8c626c68190391c7c88ec63ac500?g 28.07.2007 03:07 1'237 ~da36571a27231c7b99753c57c00?g 28.07.2007 03:07 3'451 ~863a1d218df61c7bc1939023a00?g 28.07.2007 03:07 21 ~863a1d218df61c7bc1939023a00?d 28.07.2007 03:07 21 ~5809a7c3ea951c7158eeb442700?d 28.07.2007 03:07 2'767 ~5809a7c3ea951c7158eeb442700?g 28.07.2007 03:07 21 ~41bbbcf10e141c7b4babe7b600?d 28.07.2007 03:07 1'955 ~41bbbcf10e141c7b4babe7b600?g 28.07.2007 03:07 21 ~435092f1f9c21c7bbf57228b300?d 28.07.2007 03:07 4'459 ~435092f1f9c21c7bbf57228b300?g 28.07.2007 03:07 2'395 ~1344c0ad6e471c7cfa7b8302700?g 28.07.2007 03:07 21 ~1344c0ad6e471c7cfa7b8302700?d 28.07.2007 03:07 21 ~1da66598a5d1c79e074e5c9b00?d 28.07.2007 03:07 2'172 ~1da66598a5d1c79e074e5c9b00?g 28.07.2007 03:07 21 ~6f1b27a2561f1c7bc18a2ce1400?d 28.07.2007 03:07 3'377 ~6f1b27a2561f1c7bc18a2ce1400?g 28.07.2007 03:07 2'078 ~eda665999e51c79e0747358d00?g 28.07.2007 03:07 21 ~eda665999e51c79e0747358d00?d 28.07.2007 03:07 21 ~3a36b557137231c722cacf4cbf00?d 28.07.2007 03:07 3'697 ~3a36b557137231c722cacf4cbf00?g 28.07.2007 03:07 2'557 ~1d53ea12142aa1c7b99518c24900?g 28.07.2007 03:07 21 ~1d53ea12142aa1c7b99518c24900?d 28.07.2007 03:07 21 ~4aad1e281248b1c7303a5ffcfc00?d 28.07.2007 03:07 3'008 ~4aad1e281248b1c7303a5ffcfc00?g 26.07.2007 16:08 16'384 ~DFAD77.tmp 26.07.2007 16:08 16'384 ~DFA32A.tmp 25.07.2007 15:43 512 ~DF81D7.tmp 25.07.2007 15:43 114'688 ~DF815A.tmp 25.07.2007 15:43 512 ~DF5E75.tmp 25.07.2007 15:43 114'688 ~DF5CB5.tmp 24.07.2007 10:58 512 ~DFA989.tmp 24.07.2007 10:58 114'688 ~DFA975.tmp 24.07.2007 10:57 512 ~DF9D46.tmp 24.07.2007 10:57 114'688 ~DF95EE.tmp 23.07.2007 21:51 81'920 ce81.rra 23.07.2007 18:12 0 Acr2F.tmp 23.07.2007 16:44 512 ~DF2383.tmp 23.07.2007 16:44 114'688 ~DF236B.tmp 23.07.2007 16:44 512 ~DF1746.tmp 23.07.2007 16:44 114'688 ~DF1719.tmp 22.07.2007 23:36 186 www50.tmp 22.07.2007 18:15 3'676'068 SonyEricssonPCSuite.log 22.07.2007 18:08 55'808 4e358.mst 21.07.2007 10:19 114'688 ~DFBFA3.tmp 21.07.2007 10:19 114'688 ~DFDCA6.tmp 21.07.2007 10:18 16'384 ~DFC07C.tmp 21.07.2007 10:18 16'384 ~DFDD2D.tmp 19.07.2007 21:10 0 ~WRD0002.doc 17.07.2007 21:45 512 ~DF6B74.tmp 17.07.2007 21:45 98'304 ~DF6B5F.tmp 17.07.2007 21:45 512 ~DF5F98.tmp 17.07.2007 21:45 98'304 ~DF5F8D.tmp 17.07.2007 20:54 512 ~DF2A02.tmp 17.07.2007 20:54 98'304 ~DF29F2.tmp 17.07.2007 20:54 512 ~DF1B84.tmp 17.07.2007 20:54 98'304 ~DF1B79.tmp 17.07.2007 20:01 178 AC71.tmp 17.07.2007 18:06 25'214 dat8.tmp 17.07.2007 18:03 16'384 ~DF4311.tmp 17.07.2007 18:02 16'384 ~DF3983.tmp 17.07.2007 18:02 512 ~DF398E.tmp 17.07.2007 18:02 1'048'576 fla3B.tmp 17.07.2007 17:57 512 ~DFB158.tmp 17.07.2007 17:57 98'304 ~DFB11B.tmp 17.07.2007 17:57 512 ~DFA218.tmp 17.07.2007 17:57 98'304 ~DFA20B.tmp 17.07.2007 12:57 3'086'032 fla3E.tmp 15.07.2007 14:39 512 ~DF9FA1.tmp 15.07.2007 14:39 98'304 ~DF9F96.tmp 15.07.2007 14:39 512 ~DF8451.tmp 15.07.2007 14:39 98'304 ~DF83E8.tmp 15.07.2007 13:45 5'084 ACA1.tmp 15.07.2007 10:29 512 ~DFB073.tmp 15.07.2007 10:29 98'304 ~DFB064.tmp 15.07.2007 10:29 512 ~DFA536.tmp 15.07.2007 10:29 98'304 ~DFA527.tmp 14.07.2007 19:36 16'384 ~DF42E9.tmp 14.07.2007 14:15 512 ~DF9346.tmp 14.07.2007 14:15 98'304 ~DF9321.tmp 14.07.2007 14:14 512 ~DF8761.tmp 14.07.2007 14:14 98'304 ~DF8738.tmp 14.07.2007 09:48 512 ~DF798F.tmp 14.07.2007 09:48 98'304 ~DF7976.tmp 14.07.2007 09:47 512 ~DF52FA.tmp 14.07.2007 09:47 98'304 ~DF527E.tmp 13.07.2007 14:19 16'384 ~DFAEB1.tmp 13.07.2007 14:19 16'384 ~DFAE66.tmp 13.07.2007 14:19 512 ~DFAE71.tmp 13.07.2007 14:19 512 ~DFAE8A.tmp 13.07.2007 14:19 16'384 ~DFAE98.tmp 13.07.2007 14:19 16'384 ~DFAE7F.tmp 13.07.2007 14:19 512 ~DFAEA3.tmp 13.07.2007 14:19 512 ~DFAEBC.tmp 13.07.2007 14:14 16'384 ~DFC2A.tmp 13.07.2007 14:14 512 ~DF197.tmp 13.07.2007 14:14 16'384 ~DF18C.tmp 13.07.2007 13:18 21 ~8560c4a253831c7c036c937e900.jpd 13.07.2007 13:18 1'644 ~8560c4a253831c7c036c937e900.jpg 13.07.2007 13:18 2'164 ~dc3e81da759c1c7c3ab46eb5400.jpg 13.07.2007 13:18 21 ~dc3e81da759c1c7c3ab46eb5400.jpd 13.07.2007 13:18 21 ~e216f6c775871c7c3ab566a9d00.jpd 13.07.2007 13:18 2'111 ~e216f6c775871c7c3ab566a9d00.jpg 13.07.2007 13:17 21 ~947b9ebe7c01c7c5f6ed776500.jpd 13.07.2007 13:17 1'333 ~947b9ebe7c01c7c5f6ed776500.jpg 13.07.2007 13:17 2'037 ~1b47b9c5f86c1c7c5f6a25d5200.jpg 13.07.2007 13:17 21 ~1b47b9c5f86c1c7c5f6a25d5200.jpd 13.07.2007 13:17 1'861 ~8547b9c4e75f1c7c5f691acdc00.jpg 13.07.2007 13:17 21 ~8547b9c4e75f1c7c5f691acdc00.jpd 13.07.2007 13:17 1'722 ~3b47b9deb2941c7c5f658746c00.jpg 13.07.2007 13:17 21 ~3b47b9deb2941c7c5f658746c00.jpd 13.07.2007 13:17 1'956 ~4f47b9dff0b81c7c5f64db9d700.jpg 13.07.2007 13:17 21 ~4f47b9dff0b81c7c5f64db9d700.jpd 13.07.2007 13:17 21 ~3f47b9deffff1c7bcd315032f00.jpd 13.07.2007 13:17 1'575 ~3f47b9deffff1c7bcd315032f00.jpg 13.07.2007 09:23 512 ~DFD4E6.tmp 13.07.2007 09:23 114'688 ~DFD4D0.tmp 13.07.2007 09:23 98'304 ~DFC4CD.tmp 13.07.2007 09:23 512 ~DFC4D8.tmp 13.07.2007 09:05 512 ~DFEC6E.tmp 13.07.2007 09:05 114'688 ~DFEC4B.tmp 13.07.2007 09:05 512 ~DFD80D.tmp 13.07.2007 09:05 98'304 ~DFCF33.tmp 12.07.2007 22:45 382'352 jre-6u2-windows-i586-p-iftw_7070c3f7.exe 12.07.2007 19:33 512 ~DFF4D1.tmp 12.07.2007 19:33 114'688 ~DFF43B.tmp 12.07.2007 19:33 512 ~DFE44D.tmp 12.07.2007 19:33 98'304 ~DFE440.tmp 12.07.2007 19:19 512 ~DFFF7E.tmp 12.07.2007 19:19 114'688 ~DFFF3C.tmp 12.07.2007 19:19 512 ~DFEEBE.tmp 12.07.2007 19:19 98'304 ~DFEE99.tmp 12.07.2007 15:16 4'592 temp.ani 12.07.2007 12:34 98'304 ~DFE141.tmp 12.07.2007 12:34 114'688 ~DF41E9.tmp 12.07.2007 12:34 16'384 ~DFE14C.tmp 12.07.2007 12:34 16'384 ~DF41F4.tmp 11.07.2007 13:35 21 ~ba3961c7ce2b1c7c3ae515b1d00.jpd 11.07.2007 13:35 2'681 ~ba3961c7ce2b1c7c3ae515b1d00.jpg 11.07.2007 13:35 2'240 ~b5ca006f7ee11c7c3ab4bb00800.jpg 11.07.2007 13:35 21 ~b5ca006f7ee11c7c3ab4bb00800.jpd 11.07.2007 13:35 21 ~5347b9df1189e1c7bcd2f2711600.jpd 11.07.2007 13:35 2'269 ~5347b9df1189e1c7bcd2f2711600.jpg 11.07.2007 13:31 21 ~6af2650bd5941c7c2479d3f8200.jpd 11.07.2007 13:31 2'400 ~6af2650bd5941c7c2479d3f8200.jpg 11.07.2007 13:31 21 ~eaf26517d6cd1c7c24723a79400.jpd 11.07.2007 13:31 2'721 ~eaf26517d6cd1c7c24723a79400.jpg 11.07.2007 13:31 21 ~b3314e31807f1c7c3302a5e0600.jpd 11.07.2007 13:31 2'325 ~b3314e31807f1c7c3302a5e0600.jpg 11.07.2007 13:31 2'314 ~82b2c65714eaa1c7c037a823c800.jpg 11.07.2007 13:31 21 ~82b2c65714eaa1c7c037a823c800.jpd 11.07.2007 13:31 2'153 ~60eb221a2f991c7c248d5939000.jpg 11.07.2007 13:31 21 ~60eb221a2f991c7c248d5939000.jpd 11.07.2007 13:31 2'844 ~e786e6aac2e41c7c1555a9d7d00.jpg 11.07.2007 13:31 21 ~e786e6aac2e41c7c1555a9d7d00.jpd 10.07.2007 17:00 84 italic.gif 07.07.2007 02:01 21'122 TFR12E.tmp 07.07.2007 02:01 155'023 TFR12A.tmp 07.07.2007 02:01 59'218 TFR126.tmp 07.07.2007 02:01 46'660 TFR11F.tmp 07.07.2007 02:01 88'486 TFR11E.tmp 07.07.2007 02:01 46'021 TFR11A.tmp 07.07.2007 02:01 10'225 TFR116.tmp 07.07.2007 02:01 16'178 TFR112.tmp 04.07.2007 21:36 16'384 ~WRF0003.tmp 04.07.2007 21:36 0 ~WRS0002.tmp 04.07.2007 21:36 0 ~WRD0001.doc 04.07.2007 21:29 31'232 ~WRC0000.tmp 04.07.2007 19:24 512 ~DFB612.tmp 04.07.2007 19:24 98'304 ~DFB57A.tmp 04.07.2007 19:24 512 ~DFA7F8.tmp 04.07.2007 19:24 98'304 ~DFA7DD.tmp 03.07.2007 18:42 1'629 tab_categories_118x28.gif 03.07.2007 18:02 21 ~5239cfd97ba51c7bd896110ab00.jpd 03.07.2007 18:02 2'032 ~5239cfd97ba51c7bd896110ab00.jpg 03.07.2007 18:02 21 ~c0a37c7a754e1c7bd894f2f0800.jpd 03.07.2007 18:02 1'995 ~c0a37c7a754e1c7bd894f2f0800.jpg 02.07.2007 20:31 21 ~145c5188e0c481c7bcd26a8b0c00.jpd 02.07.2007 20:31 3'021 ~145c5188e0c481c7bcd26a8b0c00.jpg 02.07.2007 20:31 2'223 ~58a3ef5b9d811c77562c07cd600.jpg 02.07.2007 20:31 21 ~58a3ef5b9d811c77562c07cd600.jpd 02.07.2007 20:31 21 ~3566d8a6afe341c7bbfaa0f55800.jpd 02.07.2007 20:31 2'421 ~3566d8a6afe341c7bbfaa0f55800.jpg 01.07.2007 22:11 21 ~33f740f7ffff1c7bcd315032f00.jpd 01.07.2007 22:11 1'575 ~33f740f7ffff1c7bcd315032f00.jpg 01.07.2007 22:11 1'503 ~9f740f7f4231c7bcd3ddc2100.jpg 01.07.2007 22:11 21 ~9f740f7f4231c7bcd3ddc2100.jpd 01.07.2007 22:11 21 ~5ff740f61189e1c7bcd2f2711600.jpd 01.07.2007 22:11 2'269 ~5ff740f61189e1c7bcd2f2711600.jpg 01.07.2007 22:11 1'937 ~5f740f6df401c7bcaf1c184600.jpg 01.07.2007 22:11 21 ~5f740f6df401c7bcaf1c184600.jpd 01.07.2007 22:11 2'760 ~e1f740f61953b1c7bcafc98fd00.jpg 01.07.2007 22:11 21 ~e1f740f61953b1c7bcafc98fd00.jpd 01.07.2007 22:11 21 ~c3f740c2ea251c7b68eebbd2000.jpd 01.07.2007 22:11 1'923 ~c3f740c2ea251c7b68eebbd2000.jpg 01.07.2007 22:11 21 ~89f740c3e7661c7b68ed516c900.jpd 01.07.2007 22:11 1'847 ~89f740c3e7661c7b68ed516c900.jpg 01.07.2007 22:11 21 ~85f740c2e0c11c7b68da64c2300.jpd 01.07.2007 22:11 1'880 ~85f740c2e0c11c7b68da64c2300.jpg 01.07.2007 22:11 2'070 ~aff740ea11d1a1c7a02787735600.jpg 01.07.2007 22:11 21 ~aff740ea11d1a1c7a02787735600.jpd 01.07.2007 22:11 21 ~43f740efe8e41c78fc3e05bc00.jpd 01.07.2007 22:11 2'015 ~43f740efe8e41c78fc3e05bc00.jpg 01.07.2007 22:11 21 ~3f740e46d8981c784e9557f4900.jpd 01.07.2007 22:11 1'808 ~3f740e46d8981c784e9557f4900.jpg 01.07.2007 22:11 2'200 ~1ff740e45faab1c778ef61ff8100.jpg 01.07.2007 22:11 21 ~1ff740e45faab1c778ef61ff8100.jpd 01.07.2007 22:11 21 ~a1f740e44a35e1c7783533bd6b00.jpd 01.07.2007 22:11 1'324 ~a1f740e44a35e1c7783533bd6b00.jpg 01.07.2007 22:11 21 ~57f740f876cd01c7781f53499900.jpd 01.07.2007 22:11 2'881 ~57f740f876cd01c7781f53499900.jpg 01.07.2007 22:11 21 ~f3f740f96a0d21c77815f1386600.jpd 01.07.2007 22:11 1'971 ~f3f740f96a0d21c77815f1386600.jpg 01.07.2007 22:11 1'567 ~c9f740f947ddd1c77815e54ca400.jpg 01.07.2007 22:11 21 ~c9f740f947ddd1c77815e54ca400.jpd 01.07.2007 22:11 21 ~bff740f84adde1c77815dbc33c00.jpd 01.07.2007 22:11 1'737 ~bff740f84adde1c77815dbc33c00.jpg 01.07.2007 22:11 21 ~9ff740f8581d81c77797cb05c00.jpd 01.07.2007 22:11 1'962 ~9ff740f8581d81c77797cb05c00.jpg 01.07.2007 22:11 21 ~21f740f8690b51c777b4adf9db00.jpd 01.07.2007 22:11 1'947 ~21f740f8690b51c777b4adf9db00.jpg 01.07.2007 22:11 21 ~f3f7466c738881c76a368ece2000.jpd 01.07.2007 22:11 1'474 ~f3f7466c738881c76a368ece2000.jpg 01.07.2007 22:11 1'652 ~9ff7466d6dd571c76728786b5000.jpg 01.07.2007 22:11 21 ~9ff7466d6dd571c76728786b5000.jpd 01.07.2007 22:11 21 ~6ff7466c5508b1c76727f1b67300.jpd 01.07.2007 22:11 1'714 ~6ff7466c5508b1c76727f1b67300.jpg 01.07.2007 22:11 1'763 ~33f745fb3f9101c7568382e37e00.jpg 01.07.2007 22:11 21 ~33f745fb3f9101c7568382e37e00.jpd 01.07.2007 22:11 2'448 ~9f745fba86e1c75680714ca700.jpg 01.07.2007 22:11 21 ~9f745fba86e1c75680714ca700.jpd 01.07.2007 22:11 2'534 ~7ff745fac6ef1c756804febbb00.jpg 01.07.2007 22:11 21 ~7ff745fac6ef1c756804febbb00.jpd 01.07.2007 22:11 21 ~b7f745d5a2a11c755d2ff6a5400.jpd 01.07.2007 22:11 2'504 ~b7f745d5a2a11c755d2ff6a5400.jpg 01.07.2007 22:11 21 ~c3f745d4b8e41c755d2cd58f200.jpd 01.07.2007 22:11 2'142 ~c3f745d4b8e41c755d2cd58f200.jpg 01.07.2007 22:11 21 ~17f745d4cff61c755d292ef5500.jpd 01.07.2007 22:11 2'464 ~17f745d4cff61c755d292ef5500.jpg 01.07.2007 22:11 1'947 ~c5f745fd63bcc1c7537ac172f300.jpg 01.07.2007 22:11 21 ~c5f745fd63bcc1c7537ac172f300.jpd 01.07.2007 22:11 2'007 ~21f745fd619091c7537ab324d700.jpg 01.07.2007 22:11 21 ~21f745fd619091c7537ab324d700.jpd 01.07.2007 22:11 21 ~37f745d2601761c7537aabfdc900.jpd 01.07.2007 22:11 2'203 ~37f745d2601761c7537aabfdc900.jpg 01.07.2007 22:11 21 ~7ff745d34da5a1c74d1bf3051200.jpd 01.07.2007 22:11 2'040 ~7ff745d34da5a1c74d1bf3051200.jpg 01.07.2007 22:11 21 ~43f745e92f87e1c730de55943e00.jpd 01.07.2007 22:11 1'769 ~43f745e92f87e1c730de55943e00.jpg 01.07.2007 22:11 1'682 ~9f745e83e4cc1c730c613f79900.jpg 01.07.2007 22:11 21 ~9f745e83e4cc1c730c613f79900.jpd 01.07.2007 22:11 2'169 ~5ff745e93fb761c730c57308de00.jpg 01.07.2007 22:11 21 ~5ff745e93fb761c730c57308de00.jpd 01.07.2007 22:11 21 ~aff745e859c781c730c54e146b00.jpd 01.07.2007 22:11 2'237 ~aff745e859c781c730c54e146b00.jpg 01.07.2007 21:58 21 ~3181894e8101c7bc1a99ffd00.jpd 01.07.2007 21:58 1'478 ~3181894e8101c7bc1a99ffd00.jpg 01.07.2007 21:58 21 ~b2408898167e9a1c7bc1a1cb2cd00.jpd 01.07.2007 21:58 1'258 ~b2408898167e9a1c7bc1a1cb2cd00.jpg 01.07.2007 21:56 21 ~f38351c39fb81c7bc19e5dcb700.jpd 01.07.2007 21:56 2'385 ~f38351c39fb81c7bc19e5dcb700.jpg 01.07.2007 21:56 21 ~27509b4aae2b1c7bc19d2c9e700.jpd 01.07.2007 21:56 2'844 ~27509b4aae2b1c7bc19d2c9e700.jpg 01.07.2007 21:52 2'065 ~c0a8789bf21e1c7bc19212ab600.jpg 01.07.2007 21:52 21 ~c0a8789bf21e1c7bc19212ab600.jpd 01.07.2007 21:52 21 ~9f50526f12a771c7bc194ae3dd00.jpd 01.07.2007 21:52 2'337 ~9f50526f12a771c7bc194ae3dd00.jpg 01.07.2007 21:52 21 ~866fa02f41af11c7bc1931db2c00.jpd 01.07.2007 21:52 2'677 ~866fa02f41af11c7bc1931db2c00.jpg 01.07.2007 21:52 2'617 ~863a1d218df61c7bc1939023a00.jpg 01.07.2007 21:52 21 ~863a1d218df61c7bc1939023a00.jpd 01.07.2007 21:49 2'890 ~915737075511c7bc18be391f00.jpg 01.07.2007 21:49 21 ~915737075511c7bc18be391f00.jpd 01.07.2007 21:49 21 ~5150875685241c7bc18cb560e00.jpd 01.07.2007 21:49 1'671 ~5150875685241c7bc18cb560e00.jpg 01.07.2007 21:49 2'820 ~6f1b27a2561f1c7bc18a2ce1400.jpg 01.07.2007 21:49 21 ~6f1b27a2561f1c7bc18a2ce1400.jpd 01.07.2007 21:46 21 ~7cfa0d0b173371c713aede68dd00.jpd 01.07.2007 21:46 1'714 ~7cfa0d0b173371c713aede68dd00.jpg 01.07.2007 21:46 2'154 ~625e98db30321c713db2421800.jpg 01.07.2007 21:46 21 ~625e98db30321c713db2421800.jpd 01.07.2007 21:46 21 ~82d41ef2400361c71ececd4fbe00.jpd 01.07.2007 21:46 2'041 ~82d41ef2400361c71ececd4fbe00.jpg 01.07.2007 21:46 21 ~145727a336f20a1c7220eb4b51000.jpd 01.07.2007 21:46 897 ~145727a336f20a1c7220eb4b51000.jpg 01.07.2007 21:46 21 ~7545727b2400361c71d5086d45500.jpd 01.07.2007 21:46 2'804 ~7545727b2400361c71d5086d45500.jpg 01.07.2007 21:46 21 ~cfe3b8902400361c71c6a47cbd400.jpd 01.07.2007 21:46 2'497 ~cfe3b8902400361c71c6a47cbd400.jpg 01.07.2007 21:46 1'767 ~394572547e90361c725b994dc6e00.jpg 01.07.2007 21:46 21 ~394572547e90361c725b994dc6e00.jpd 01.07.2007 21:45 21 ~7f8ac8c5519291c74a13bf707200.jpd 01.07.2007 21:45 2'126 ~7f8ac8c5519291c74a13bf707200.jpg 01.07.2007 21:45 21 ~5f8ac8c54dded1c74a139223c400.jpd 01.07.2007 21:45 2'815 ~5f8ac8c54dded1c74a139223c400.jpg 01.07.2007 21:45 2'224 ~af8ac8c45c33a1c74a1371f40500.jpg 01.07.2007 21:45 21 ~af8ac8c45c33a1c74a1371f40500.jpd 01.07.2007 21:45 21 ~e52b57811dc1e1c738be3bb4e100.jpd 01.07.2007 21:45 3'154 ~e52b57811dc1e1c738be3bb4e100.jpg 01.07.2007 21:45 21 ~2f5f12c94c74a1c74a1344a75700.jpd 01.07.2007 21:45 2'184 ~2f5f12c94c74a1c74a1344a75700.jpg 01.07.2007 21:45 1'687 ~2f2be9c97e90361c72f58248a0100.jpg 01.07.2007 21:45 21 ~2f2be9c97e90361c72f58248a0100.jpd 01.07.2007 21:45 4'224 ~2d47f7304c9f1c738bd723e2c00.jpg 01.07.2007 21:45 21 ~2d47f7304c9f1c738bd723e2c00.jpd 01.07.2007 21:45 21 ~b5cadc3810d401c775d3c1018500.jpd 01.07.2007 21:45 2'251 ~b5cadc3810d401c775d3c1018500.jpg 01.07.2007 21:45 1'826 ~8e0a551d5db7a1c74c0e71738e00.jpg 01.07.2007 21:45 21 ~8e0a551d5db7a1c74c0e71738e00.jpd 01.07.2007 21:45 21 ~6cf0005e880f1c738c073248d00.jpd 01.07.2007 21:45 2'492 ~6cf0005e880f1c738c073248d00.jpg 01.07.2007 21:45 1'669 ~fef462d13881c73748c83d9300.jpg 01.07.2007 21:45 21 ~fef462d13881c73748c83d9300.jpd 01.07.2007 21:45 2'569 ~b00e07e93840361c7302214d6ef00.jpg 01.07.2007 21:45 21 ~b00e07e93840361c7302214d6ef00.jpd 01.07.2007 21:45 21 ~cd5054e5d9201c738c022149900.jpd 01.07.2007 21:45 3'472 ~cd5054e5d9201c738c022149900.jpg 01.07.2007 21:45 21 ~fe2799461bb31c71ae058504300.jpd 01.07.2007 21:45 2'109 ~fe2799461bb31c71ae058504300.jpg 01.07.2007 21:45 2'305 ~147185a32e4d1c713db26055e00.jpg 01.07.2007 21:45 21 ~147185a32e4d1c713db26055e00.jpd 01.07.2007 21:45 2'068 ~7eb45f194fb791c74c0e6a4c8000.jpg 01.07.2007 21:45 21 ~7eb45f194fb791c74c0e6a4c8000.jpd 01.07.2007 21:45 21 ~7cb432fd12601c713e1ec842100.jpd 01.07.2007 21:45 2'183 ~7cb432fd12601c713e1ec842100.jpg 01.07.2007 21:45 1'541 ~97b70992102db1c738bbde1f9500.jpg 01.07.2007 21:45 21 ~97b70992102db1c738bbde1f9500.jpd 01.07.2007 21:45 21 ~ee5bcafc12e41c738bbb7f9f500.jpd 01.07.2007 21:45 1'049 ~ee5bcafc12e41c738bbb7f9f500.jpg 01.07.2007 21:45 21 ~aa829047202061c7131a65a3100.jpd 01.07.2007 21:45 1'521 ~aa829047202061c7131a65a3100.jpg 01.07.2007 21:45 1'851 ~38ea7367b8361c787e54d732200.jpg 01.07.2007 21:45 21 ~38ea7367b8361c787e54d732200.jpd 01.07.2007 21:45 21 ~6d46137a191f31c74aeecc11200.jpd 01.07.2007 21:45 2'658 ~6d46137a191f31c74aeecc11200.jpg 01.07.2007 21:45 2'872 ~243406fe3c4d1c7512ba65e7400.jpg 01.07.2007 21:45 21 ~243406fe3c4d1c7512ba65e7400.jpd 01.07.2007 21:45 2'657 ~fadbbf4e53311c738bd9ac62600.jpg 01.07.2007 21:45 21 ~fadbbf4e53311c738bd9ac62600.jpd 01.07.2007 21:45 21 ~55f233285e71c74f9fc5c89600.jpd 01.07.2007 21:45 1'341 ~55f233285e71c74f9fc5c89600.jpg 01.07.2007 21:45 2'202 ~d952cdae8cfe1c738bc8d5c6c00.jpg 01.07.2007 21:45 1'559 ~ed1a5feb7961c73748b2c86900.jpg 01.07.2007 21:45 21 ~ed1a5feb7961c73748b2c86900.jpd 01.07.2007 21:45 21 ~d952cdae8cfe1c738bc8d5c6c00.jpd 01.07.2007 21:45 21 ~ffa899d83cf061c74c0cd75f1600.jpd 01.07.2007 21:45 1'818 ~ffa899d83cf061c74c0cd75f1600.jpg 01.07.2007 21:45 21 ~c0265ff8fcd1c74f9e7f266c00.jpd 01.07.2007 21:45 1'804 ~c0265ff8fcd1c74f9e7f266c00.jpg 01.07.2007 21:45 21 ~c05c62d816061c74f9ebe54bd00.jpd 01.07.2007 21:45 1'804 ~c05c62d816061c74f9ebe54bd00.jpg 01.07.2007 21:45 1'592 ~5671b9d747d81c734d17b03bc00.jpg 01.07.2007 21:45 21 ~5671b9d747d81c734d17b03bc00.jpd 01.07.2007 21:45 21 ~bdd13fcaf101c734d1750ddb00.jpd 01.07.2007 21:45 1'703 ~bdd13fcaf101c734d1750ddb00.jpg 01.07.2007 21:45 3'620 ~62d4f0215daf01c734d166bfbf00.jpg 01.07.2007 21:45 21 ~62d4f0215daf01c734d166bfbf00.jpd 01.07.2007 21:45 21 ~f83351f231cd1c71b0f3de18e00.jpd 01.07.2007 21:45 2'524 ~f83351f231cd1c71b0f3de18e00.jpg 01.07.2007 21:45 2'385 ~870b933a173fc1c72da33a09fa00.jpg 01.07.2007 21:45 21 ~870b933a173fc1c72da33a09fa00.jpd 01.07.2007 21:45 21 ~4d509e0d1f8981c74ddd78043000.jpd 01.07.2007 21:45 2'754 ~4d509e0d1f8981c74ddd78043000.jpg 01.07.2007 21:45 21 ~a9509e0d2115b1c74ddd78043000.jpd 01.07.2007 21:45 2'722 ~a9509e0d2115b1c74ddd78043000.jpg 01.07.2007 21:45 3'000 ~29509e39217561c74f8fb04b7000.jpg 01.07.2007 21:45 21 ~29509e39217561c74f8fb04b7000.jpd 01.07.2007 21:45 2'736 ~e7509e11244ed1c74f8fb04b7000.jpg 01.07.2007 21:45 21 ~e7509e11244ed1c74f8fb04b7000.jpd 01.07.2007 21:45 21 ~4b509e1f90111c72da34d1cca00.jpd 01.07.2007 21:45 2'611 ~4b509e1f90111c72da34d1cca00.jpg 01.07.2007 21:45 21 ~ad47b9cd4a35e1c7782cd1f90300.jpd 01.07.2007 21:45 1'324 ~ad47b9cd4a35e1c7782cd1f90300.jpg 01.07.2007 21:45 2'146 ~4f47bf7774e951c77556cff62200.jpg 01.07.2007 21:45 21 ~4f47bf7774e951c77556cff62200.jpd 01.07.2007 21:45 21 ~947bce74874c1c755849825b300.jpd 01.07.2007 21:45 2'200 ~947bce74874c1c755849825b300.jpg 01.07.2007 21:45 2'341 ~daa4173246391c71ec3c40d2400.jpg 01.07.2007 21:45 21 ~b8faae5613791c713db5816c000.jpd 01.07.2007 21:45 21 ~daa4173246391c71ec3c40d2400.jpd 01.07.2007 21:45 3'272 ~b8faae5613791c713db5816c000.jpg 01.07.2007 21:45 3'730 ~124e099e86fc1c734d1940c6d00.jpg 01.07.2007 21:45 21 ~124e099e86fc1c734d1940c6d00.jpd 01.07.2007 21:45 3'412 ~5058b294cb81c7158eff882400.jpg 01.07.2007 21:45 21 ~bd4f33232d811c733471b79a500.jpd 01.07.2007 21:45 2'052 ~bd4f33232d811c733471b79a500.jpg 01.07.2007 21:45 21 ~5058b294cb81c7158eff882400.jpd 01.07.2007 21:45 2'220 ~cc17f9ef21a4e1c7b4f5af09f100.jpg 01.07.2007 21:45 21 ~cc17f9ef21a4e1c7b4f5af09f100.jpd 01.07.2007 21:45 956 ~ccab7a0a52b81c74fa051422700.jpg 01.07.2007 21:45 21 ~ccab7a0a52b81c74fa051422700.jpd 01.07.2007 21:45 21 ~d83a6da99d11c79e06a646d200.jpd 01.07.2007 21:45 1'768 ~6485b4ca6e1c79e071c4b3900.jpg 01.07.2007 21:45 1'646 ~d83a6da99d11c79e06a646d200.jpg 01.07.2007 21:45 21 ~6485b4ca6e1c79e071c4b3900.jpd 01.07.2007 21:45 21 ~411ccd2ea401c79e06b5c61b00.jpd 01.07.2007 21:45 2'102 ~411ccd2ea401c79e06b5c61b00.jpg 01.07.2007 21:45 1'766 ~6480a062d51e1c793de91b61300.jpg 01.07.2007 21:45 21 ~6480a062d51e1c793de91b61300.jpd 01.07.2007 21:45 2'525 ~8b73c07199511c789da78729700.jpg 01.07.2007 21:45 21 ~8b73c07199511c789da78729700.jpd 01.07.2007 21:45 2'166 ~7a9496acb1b91c789da714b8900.jpg 01.07.2007 21:45 21 ~7a9496acb1b91c789da714b8900.jpd 01.07.2007 21:45 1'998 ~de9496ad96ea1c789da73ade300.jpg 01.07.2007 21:45 21 ~de9496ad96ea1c789da73ade300.jpd 01.07.2007 21:45 21 ~e49496adab7b1c789da6c86d500.jpd 01.07.2007 21:45 2'049 ~e49496adab7b1c789da6c86d500.jpg 01.07.2007 21:45 21 ~3445bbe587761c78a3ca5ebc00.jpd 01.07.2007 21:45 1'954 ~3445bbe587761c78a3ca5ebc00.jpg 01.07.2007 21:45 21 ~10603b8883c01c787e0b60bd000.jpd 01.07.2007 21:45 2'456 ~10603b8883c01c787e0b60bd000.jpg 01.07.2007 21:45 21 ~da36571a27231c7b99753c57c00.jpd 01.07.2007 21:45 1'155 ~da36571a27231c7b99753c57c00.jpg 01.07.2007 21:45 21 ~5809a7c3ea951c7158eeb442700.jpd 01.07.2007 21:45 2'338 ~5809a7c3ea951c7158eeb442700.jpg 01.07.2007 21:45 21 ~41bbbcf10e141c7b4babe7b600.jpd 01.07.2007 21:45 1'586 ~41bbbcf10e141c7b4babe7b600.jpg 01.07.2007 21:45 2'600 ~435092f1f9c21c7bbf57228b300.jpg 01.07.2007 21:45 21 ~435092f1f9c21c7bbf57228b300.jpd 01.07.2007 21:45 3'069 ~3a36b557137231c722cacf4cbf00.jpg 01.07.2007 21:45 21 ~1da66598a5d1c79e074e5c9b00.jpd 01.07.2007 21:45 1'722 ~1da66598a5d1c79e074e5c9b00.jpg 01.07.2007 21:45 21 ~3a36b557137231c722cacf4cbf00.jpd 01.07.2007 21:45 21 ~eda665999e51c79e0747358d00.jpd 01.07.2007 21:45 1'646 ~eda665999e51c79e0747358d00.jpg 01.07.2007 21:45 21 ~1d53ea12142aa1c7b99518c24900.jpd 01.07.2007 21:45 2'104 ~1d53ea12142aa1c7b99518c24900.jpg 01.07.2007 21:45 21 ~4aad1e281248b1c7303a5ffcfc00.jpd 01.07.2007 21:45 2'510 ~4aad1e281248b1c7303a5ffcfc00.jpg 01.07.2007 21:45 1'714 ~29cc0e2c445ec1c7143efb4cf100.jpg 01.07.2007 21:45 21 ~29cc0e2c445ec1c7143efb4cf100.jpd 01.07.2007 21:45 21 ~29d3b56cca7891c7143e3dc1fe00.jpd 01.07.2007 21:45 1'995 ~29d3b56cca7891c7143e3dc1fe00.jpg 01.07.2007 21:45 1'825 ~29a9884c5f68761c7143f80d0a100.jpg 01.07.2007 21:45 21 ~29a9884c5f68761c7143f80d0a100.jpd 01.07.2007 21:45 21 ~35030975102db1c773c079ef7600.jpd 01.07.2007 21:45 2'264 ~35030975102db1c773c079ef7600.jpg 01.07.2007 21:45 1'821 ~de376e1daf451c77eb9f81c4400.jpg 01.07.2007 21:45 21 ~de376e1daf451c77eb9f81c4400.jpd 01.07.2007 21:45 21 ~692620ac103e61c7a453a290fc00.jpd 01.07.2007 21:45 2'209 ~692620ac103e61c7a453a290fc00.jpg 01.07.2007 21:45 21 ~816f4525972571c783941b506300.jpd 01.07.2007 21:45 2'133 ~816f4525972571c783941b506300.jpg 01.07.2007 21:45 2'394 ~657881ff142ebb1c78394e337400.jpg 01.07.2007 21:45 21 ~657881ff142ebb1c78394e337400.jpd 01.07.2007 21:45 21 ~5357556b2a5c1c7b4a884de1200.jpd 01.07.2007 21:45 2'068 ~5357556b2a5c1c7b4a884de1200.jpg 01.07.2007 21:45 1'822 ~bf9b7be022451c7b4a91188d000.jpg 01.07.2007 21:45 21 ~bf9b7be022451c7b4a91188d000.jpd 01.07.2007 21:45 2'531 ~e6a16d606b7d1c77f56497a1100.jpg 01.07.2007 21:45 21 ~e6a16d606b7d1c77f56497a1100.jpd 01.07.2007 21:45 21 ~7d4fed0030bc1c7b4a931b88f00.jpd 01.07.2007 21:45 2'212 ~7d4fed0030bc1c7b4a931b88f00.jpg 01.07.2007 21:45 21 ~ee553e7eee941c61e20b0c31700.jpd 01.07.2007 21:45 2'136 ~ee553e7eee941c61e20b0c31700.jpg 01.07.2007 21:45 2'869 ~e16dff2d75831c79d67801e2500.jpg 01.07.2007 21:45 21 ~e16dff2d75831c79d67801e2500.jpd 01.07.2007 21:45 21 ~acae6a9fc6b41c79007c2293600.jpd 01.07.2007 21:45 1'707 ~acae6a9fc6b41c79007c2293600.jpg 01.07.2007 21:45 1'263 ~9c2f7bae3ad41c79e3bdc527900.jpg 01.07.2007 21:45 21 ~9c2f7bae3ad41c79e3bdc527900.jpd 01.07.2007 21:45 2'062 ~d10e011f19361c7a399b676e00.jpg 01.07.2007 21:45 21 ~d10e011f19361c7a399b676e00.jpd 01.07.2007 21:45 21 ~681bd7d11f2f1c7a3aadfed7f00.jpd 01.07.2007 21:45 1'307 ~681bd7d11f2f1c7a3aadfed7f00.jpg 01.07.2007 21:45 2'015 ~abc6215c18e41c7762de6bb7800.jpg 01.07.2007 21:45 21 ~abc6215c18e41c7762de6bb7800.jpd 30.06.2007 10:49 512 ~DFCE5B.tmp 30.06.2007 10:49 98'304 ~DFCDD1.tmp 30.06.2007 10:48 512 ~DFA71B.tmp 30.06.2007 10:48 98'304 ~DFA705.tmp 25.06.2007 17:28 512 ~DFF6DF.tmp 25.06.2007 17:28 81'920 ~DFF66C.tmp 25.06.2007 17:27 512 ~DFC9CE.tmp 25.06.2007 17:27 81'920 ~DFC5D3.tmp 23.06.2007 14:13 16'384 ~DF16EF.tmp 23.06.2007 12:51 16'384 ~DF1D28.tmp 23.06.2007 12:51 16'384 ~DF1654.tmp 23.06.2007 00:02 62'753 TFR63.tmp 23.06.2007 00:02 67'994 TFR5E.tmp 23.06.2007 00:02 155'023 TFR56.tmp 23.06.2007 00:02 59'218 TFR53.tmp 23.06.2007 00:02 46'660 TFR4C.tmp 23.06.2007 00:02 88'486 TFR48.tmp 23.06.2007 00:02 46'021 TFR47.tmp 22.06.2007 22:12 16'384 ~DFC385.tmp 22.06.2007 22:11 16'384 ~DFB3DF.tmp 22.06.2007 20:39 421 DelUS.bat 22.06.2007 20:27 36'182 TFR69.tmp 22.06.2007 20:27 28'671 TFR65.tmp 22.06.2007 20:27 25'169 TFR60.tmp 22.06.2007 20:27 148'468 TFR5B.tmp 22.06.2007 20:27 67'994 TFR55.tmp 22.06.2007 20:27 62'753 TFR51.tmp 22.06.2007 20:27 23'262 TFR4D.tmp 22.06.2007 20:27 23'427 TFR49.tmp 22.06.2007 20:27 37'885 TFR40.tmp 22.06.2007 20:27 40'950 TFR3F.tmp 22.06.2007 20:27 23'608 TFR3A.tmp 22.06.2007 20:27 35'574 TFR37.tmp 22.06.2007 20:27 20'560 TFR33.tmp 22.06.2007 20:10 46'596 drm_dialogs.dll 22.06.2007 19:55 155'023 TFR1D.tmp 22.06.2007 19:55 59'218 TFR1A.tmp 22.06.2007 19:55 46'660 TFR18.tmp 22.06.2007 19:55 88'486 TFR14.tmp 22.06.2007 19:55 46'021 TFRE.tmp 22.06.2007 19:55 10'225 TFR9.tmp 22.06.2007 19:55 16'178 TFR8.tmp 22.06.2007 17:14 81'920 ~DF6EA3.tmp 22.06.2007 17:14 81'920 ~DF7B30.tmp 22.06.2007 17:13 16'384 ~DF6EC8.tmp 22.06.2007 17:13 16'384 ~DF7B3D.tmp 22.06.2007 11:04 36'182 TFR88.tmp 22.06.2007 11:04 28'671 TFR82.tmp 22.06.2007 11:04 25'169 TFR7E.tmp 22.06.2007 11:04 148'468 TFR7A.tmp 22.06.2007 11:04 23'262 TFR75.tmp 22.06.2007 11:04 23'427 TFR71.tmp 22.06.2007 11:04 37'885 TFR6B.tmp 22.06.2007 11:04 40'950 TFR68.tmp 22.06.2007 11:04 23'608 TFR64.tmp 22.06.2007 11:04 35'574 TFR5F.tmp 22.06.2007 11:04 16'178 TFR5A.tmp 22.06.2007 11:04 20'560 TFR59.tmp 22.06.2007 10:07 62'753 TFR45.tmp 22.06.2007 10:07 67'994 TFR44.tmp 22.06.2007 10:07 155'023 TFR3C.tmp 22.06.2007 10:07 59'218 TFR3B.tmp 22.06.2007 10:07 46'660 TFR35.tmp 22.06.2007 10:07 88'486 TFR30.tmp 22.06.2007 10:07 46'021 TFR2F.tmp 22.06.2007 09:41 16'384 ~DFAE55.tmp 22.06.2007 09:41 16'384 ~DFA7CA.tmp 22.06.2007 01:32 36'182 TFR99.tmp 22.06.2007 01:32 28'671 TFR98.tmp 22.06.2007 01:32 25'169 TFR94.tmp 22.06.2007 01:32 148'468 TFR90.tmp 22.06.2007 01:32 23'262 TFR89.tmp 22.06.2007 01:32 23'427 TFR85.tmp 22.06.2007 01:32 37'885 TFR81.tmp 22.06.2007 01:32 40'950 TFR7D.tmp 22.06.2007 01:32 |
|
|
|
|
|
|
19.08.2007, 11:06
Moderator
Beiträge: 7805 |
#6
Die Reihenfolge der Reporte ist falsch. Bitte Position 1-3 abarbeiten: http://board.protecus.de/t23188.htm
__________ MfG Ralf SEO-Spam Hunter |
|
|
|
|
|
|
19.08.2007, 16:16
...neu hier
Beiträge: 2 |
#7
Ok habe es jetzt.
ComboFix 07-08-14.4 - "Dominik" 2007-08-19 15:44:38.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.573 [GMT 2:00] * Created a new restore point ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\keys.dat C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0104.dbd C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0106.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0204.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0315.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0412.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0504.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon0904.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon1125.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon1204.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon1215.dbd C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon1909.ddx C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon1920.dbd C:\DOCUME~1\ALLUSE~1\APPLIC~1.\nfo\mon2007.dbd C:\DOCUME~1\ALLUSE~1\APPLIC~1.\vidmon C:\DOCUME~1\ALLUSE~1\APPLIC~1.\vidmon\vidmon.inf C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\#SharedObjects\XTJ3JWRF\iforex.com C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\#SharedObjects\XTJ3JWRF\iforex.com\Emerp\Events\flash_object.swf\user_data.sol C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\#SharedObjects\XTJ3JWRF\www.broadcaster.com C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com\settings.sol C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com C:\DOCUME~1\Dominik\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol C:\Program Files\Common Files\{3C93F~1 C:\Program Files\Common Files\{BC93F~1 C:\Program Files\Common Files\{BC93F~2 C:\Program Files\Common Files\{BC93F~3 C:\Program Files\Common Files\uninstall information C:\windows\system32\_000009_.tmp.dll C:\windows\system32\khtbpdl.dll C:\windows\system32\svchosts.lzma C:\windows\system32\sysdm.exe C:\windows\system32\vidmon C:\windows\system32\winsys.exe ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) -------\LEGACY_COM+_MESSAGES -------\COM+ Messages ((((((((((((((((((((((((( Files Created from 2007-07-19 to 2007-08-19 ))))))))))))))))))))))))))))))) 2007-08-19 15:44 51,200 --a------ C:\WINDOWS\nircmd.exe 2007-08-17 13:33 <DIR> d-------- C:\Program Files\CRS-MegaDev 2007-08-16 18:23 <DIR> d-------- C:\Program Files\Common Files\Skype 2007-08-16 18:23 <DIR> d-------- C:\DOCUME~1\Dominik\APPLIC~1\Skype 2007-08-16 13:07 <DIR> d-------- C:\DOCUME~1\Dominik\APPLIC~1\DivX 2007-08-16 13:05 <DIR> d-------- C:\Program Files\DivX 2007-08-15 22:09 114,688 --a------ C:\WINDOWS\system32\netlogun.exe 2007-08-15 13:28 <DIR> d-------- C:\Program Files\MSXML 4.0 2007-08-14 15:16 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP 2007-08-14 15:15 <DIR> d-------- C:\Fraps 2007-08-14 14:19 107,864 --a------ C:\WINDOWS\system32\tsccvid.dll 2007-08-14 14:19 <DIR> d-------- C:\WINDOWS\system32\QuickTime 2007-08-14 14:18 <DIR> d-------- C:\Program Files\TechSmith 2007-08-14 10:22 <DIR> d--h----- C:\Program Files\InstallShield Installation Information 2007-08-14 10:22 <DIR> d-------- C:\Program Files\Ubisoft 2007-08-08 15:03 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-08-07 18:38 368,640 --a------ C:\WINDOWS\system32\ReWire.dll 2007-08-07 18:38 <DIR> d-------- C:\Program Files\Ableton 2007-08-07 18:38 <DIR> d-------- C:\DOCUME~1\Dominik\APPLIC~1\Ableton 2007-08-06 11:16 <DIR> d-------- C:\Program Files\NoLimits Track Packager 2007-08-03 22:43 <DIR> d-------- C:\digital-eXperiment 2007-08-03 22:43 <DIR> d-------- C:\cartextures 2007-08-03 20:03 <DIR> d-------- C:\Program Files\MAGIX 2007-08-03 15:50 <DIR> d-------- C:\Program Files\NoLimits Coasters v1.6 2007-08-03 13:31 32,256 --a------ C:\WINDOWS\system32\drivers\maplom.sys 2007-08-03 13:30 <DIR> d-------- C:\Program Files\SlySoft 2007-08-03 13:01 <DIR> d-------- C:\WINDOWS\system32\URTTEMP 2007-08-03 12:44 <DIR> d-------- C:\Program Files\@Last Software 2007-07-30 16:39 15,920 --a------ C:\WINDOWS\system32\drivers\PdiPorts.sys 2007-07-30 16:39 11,776 --a------ C:\WINDOWS\system32\drivers\pdiddcci.sys 2007-07-30 16:39 <DIR> d-------- C:\DOCUME~1\Dominik\APPLIC~1\DisplayTune 2007-07-30 16:38 974,848 --a------ C:\WINDOWS\mfc70.dll 2007-07-30 16:38 95,744 --a------ C:\WINDOWS\atl80.dll 2007-07-30 16:38 69,632 --a------ C:\WINDOWS\mfcm80.dll 2007-07-30 16:38 626,688 --a------ C:\WINDOWS\msvcr80.dll 2007-07-30 16:38 57,344 --a------ C:\WINDOWS\mfcm80u.dll 2007-07-30 16:38 548,864 --a------ C:\WINDOWS\msvcp80.dll 2007-07-30 16:38 487,424 --a------ C:\WINDOWS\msvcp70.dll 2007-07-30 16:38 479,232 --a------ C:\WINDOWS\msvcm80.dll 2007-07-30 16:38 372,736 --a------ C:\WINDOWS\ijl15.dll 2007-07-30 16:38 344,064 --a------ C:\WINDOWS\msvcr70.dll 2007-07-30 16:38 1,392,671 --a------ C:\WINDOWS\msvbvm60.dll 2007-07-30 16:38 1,093,632 --a------ C:\WINDOWS\mfc80.dll 2007-07-30 16:38 1,079,808 --a------ C:\WINDOWS\mfc80u.dll 2007-07-30 16:38 <DIR> d-------- C:\Program Files\Portrait Displays 2007-07-30 16:38 <DIR> d-------- C:\Program Files\Common Files\Portrait Displays 2007-07-28 19:20 <DIR> d-------- C:\Program Files\NoLimits Coasters Demo v1.55 2007-07-23 21:48 <DIR> d-------- C:\DOCUME~1\Dominik\APPLIC~1\InstallShield 2007-07-22 18:09 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-08-19 12:27 43520 --a------ C:\windows\system32\CmdLineExt03.dll 2007-08-16 18:23 --------- d-------- C:\Program Files\Skype 2007-08-16 16:01 --------- d-------- C:\Program Files\Filzip 2007-08-16 16:01 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-08-12 01:59 --------- d-------- C:\Program Files\MSN Messenger 2007-08-11 18:36 85720 --a------ C:\Program Files\WHITES~2.jpg 2007-08-11 18:36 5708 --a------ C:\Program Files\whitestone.3ds 2007-08-09 15:57 --------- d-------- C:\Program Files\psquery 2007-08-08 12:47 --------- d-------- C:\Program Files\TuneUp Utilities 2006 2007-08-03 20:17 --------- d-------- C:\Program Files\Common Files\MAGIX Shared 2007-08-03 12:44 --------- d-------- C:\Program Files\@Last Software 2007-07-26 04:53 43528 --------- C:\windows\system32\drivers\pxhelp20.sys 2007-07-23 18:21 2320000 --a------ C:\windows\system32\TUKernel.exe 2007-07-22 18:09 --------- d-------- C:\Program Files\Sony Ericsson 2007-07-22 18:09 --------- d-------- C:\Program Files\Common Files\Teleca Shared 2007-07-17 20:01 --------- d-------- C:\Program Files\Atari 2007-07-16 16:39 --------- d-------- C:\Program Files\RN Tools 2007-07-12 18:58 --------- d-------- C:\Program Files\Vstep 2007-07-12 18:18 50520 --a------ C:\windows\system32\csvidcap.dll 2007-07-12 09:06 81920 --a------ C:\windows\system32\frapsvid.dll 2007-06-30 19:45 --------- d-------- C:\DOCUME~1\Dominik\APPLIC~1\Wings3D 2007-06-30 11:28 --------- d-------- C:\Program Files\LimeWire 2007-06-26 17:13 851968 -----c--- C:\windows\system32\dllcache\vgx.dll 2007-06-26 16:09 658944 -----c--- C:\windows\system32\dllcache\wininet.dll 2007-06-26 08:08 1104896 --a------ C:\windows\system32\msxml3.dll 2007-06-26 08:08 1104896 -----c--- C:\windows\system32\dllcache\msxml3.dll 2007-06-23 14:39 --------- d-------- C:\Program Files\Google 2007-06-22 20:35 --------- d-------- C:\Program Files\E-Color 2007-06-22 19:16 --------- d-------- C:\DOCUME~1\Dominik\APPLIC~1\Styler 2007-06-22 17:41 --------- d-------- C:\Program Files\LClock 2007-06-19 16:58 502272 --a------ C:\windows\system32\winlogon.exe 2007-06-19 16:14 --------- d-------- C:\DOCUME~1\Dominik\APPLIC~1\BitTorrent 2007-06-19 15:58 --------- d-------- C:\Program Files\Common Files\Stardock 2007-06-19 15:55 --------- d-------- C:\Program Files\Gigabyte 2007-06-19 15:31 282112 --a------ C:\windows\system32\gdi32.dll 2007-06-19 15:31 282112 -----c--- C:\windows\system32\dllcache\gdi32.dll 2007-06-14 20:09 96256 -----c--- C:\windows\system32\dllcache\inseng.dll 2007-06-14 20:09 615424 -----c--- C:\windows\system32\dllcache\urlmon.dll 2007-06-14 20:09 55808 -----c--- C:\windows\system32\dllcache\extmgr.dll 2007-06-14 20:09 532480 -----c--- C:\windows\system32\dllcache\mstime.dll 2007-06-14 20:09 474112 -----c--- C:\windows\system32\dllcache\shlwapi.dll 2007-06-14 20:09 449024 -----c--- C:\windows\system32\dllcache\mshtmled.dll 2007-06-14 20:09 39424 -----c--- C:\windows\system32\dllcache\pngfilt.dll 2007-06-14 20:09 357888 -----c--- C:\windows\system32\dllcache\dxtmsft.dll 2007-06-14 20:09 3058688 -----c--- C:\windows\system32\dllcache\mshtml.dll 2007-06-14 20:09 251392 -----c--- C:\windows\system32\dllcache\iepeers.dll 2007-06-14 20:09 205312 -----c--- C:\windows\system32\dllcache\dxtrans.dll 2007-06-14 20:09 16384 -----c--- C:\windows\system32\dllcache\jsproxy.dll 2007-06-14 20:09 151040 -----c--- C:\windows\system32\dllcache\cdfview.dll 2007-06-14 20:09 1494528 -----c--- C:\windows\system32\dllcache\shdocvw.dll 2007-06-14 20:09 146432 -----c--- C:\windows\system32\dllcache\msrating.dll 2007-06-14 20:09 1054208 -----c--- C:\windows\system32\dllcache\danim.dll 2007-06-14 20:09 1023488 -----c--- C:\windows\system32\dllcache\browseui.dll 2007-06-14 16:07 18432 -----c--- C:\windows\system32\dllcache\iedw.exe 2007-06-13 12:23 1033216 --a------ C:\windows\explorer.exe 2007-06-13 12:23 1033216 -----c--- C:\windows\system32\dllcache\explorer.exe 2006-11-28 19:58 266 ---h----- C:\Program Files\desktop.ini 2006-11-28 19:58 11079 ---h----- C:\Program Files\folder.htt ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{34E6F97C-34E0-4CE5-B92B-F83634BEDC01}] C:\Program Files\Video ActiveX Access\iesplg.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 14:04] "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-08 03:07 C:\WINDOWS\system32\HdAShCut.exe] "RTHDCPL"="RTHDCPL.EXE" [2005-07-13 04:37 C:\WINDOWS\RTHDCPL.EXE] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-04 01:32] "MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 01:31] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 01:32] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 01:32] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 04:23] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2007-04-22 09:47] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-01-25 20:01] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-10-25 19:58] "EasyTuneV"="C:\Program Files\Gigabyte\ET5\GUI.exe" [2004-06-14 12:54] "Ashampoo FireWall"="C:\Program Files\Ashampoo\Ashampoo FireWall\FireWall.exe" [2006-09-13 13:22] "LClock"="C:\Program Files\LClock\LClock.exe" [2004-09-20 01:27] "Vista Sidebar"="C:\Program Files\Vista Sidebar\sidebar.exe" [] "VisualTooltip"="C:\Program Files\VisualTooltip\VisualToolTip.exe" [2006-10-06 09:21] "Blaero Start Orb"="C:\Program Files\Blaero Start Orb\Blaero Start Orb.exe" [] "Styler"="C:\Program Files\Styler\Styler.exe" [] "NvCplDaemon"="C:\windows\system32\NvCpl.dll" [2004-09-30 07:35] "nwiz"="nwiz.exe" [2004-09-30 07:35 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\windows\system32\NvMcTray.dll" [2004-09-30 07:35] "DT HPW"="C:\Program Files\Portrait Displays\HP My Display\DTHtml.exe" [2007-01-16 18:12] "Maplom"="C:\Program Files\SlySoft\Game Jackal\GameJackal.exe" [2007-06-23 09:37] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\windows\system32\ctfmon.exe" [2004-08-04 03:56] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 13:55] "BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" [] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-08-06 12:43] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce] "ICQ Lite"=C:\Program Files\ICQLite\ICQLite.exe -trayboot C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 02:01:04] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\2] FriendlyName= Our Planet Earth From Space: Global Incident [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{04DCB78C-AB45-83AD-A86A-6DFB90277939}"= C:\Program Files\psquery\psquery.dll [ ] R1 DumaNT;NVIDIA Stereo Helper Service;C:\windows\system32\DRIVERS\dumant.sys R1 oreans32;oreans32;\??\C:\WINDOWS\system32\drivers\oreans32.sys R2 UxTuneUp;TuneUp Design Expansion;C:\windows\System32\svchost.exe -k netsvcs R3 ASFWHide;ASFWHide;\??\C:\DOCUME~1\Dominik\LOCALS~1\Temp\ASFWHide R3 Maplom;Maplom;C:\windows\system32\drivers\Maplom.sys R3 MarkFun_NT;MarkFun_NT;\??\C:\Program Files\Gigabyte\ET5\markfun.w32 R3 pdiddcci;DDC/CI monitor;C:\windows\system32\DRIVERS\pdiddcci.sys R3 PdiPorts;Portrait Displays low level device driver;C:\windows\system32\Drivers\PdiPorts.sys S3 GMSIPCI;GMSIPCI;\??\E:\INSTALL\GMSIPCI.SYS S3 oUltraf;oUltraf;\??\C:\DOCUME~1\Dominik\LOCALS~1\Temp\oUltraf.sys S3 s115bus;Sony Ericsson Device 115 driver (WDM);C:\windows\system32\DRIVERS\s115bus.sys S3 UPnPService;UPnPService;C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe S4 cdawdm;CDAWDM;C:\windows\system32\DRIVERS\CDAWDM.sys HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B1Command] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B1Command- explorer CD-Browser\index.html] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B2Command] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B2Command- \Internet\ie5setup.exe] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B3Command] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B3Command- notepad readme.txt] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B4Command] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B4Command- CD-Browser\Katalog\ar500deu.exe] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B5Command] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71204c82-ef73-11db-91c6-806d6172696f}\AR_B5Command- explorer \kwinter.pdf] *Newly Created Service* - MARKFUN_NT Contents of the 'Scheduled Tasks' folder 2007-08-17 17:01:31 C:\windows\Tasks\1-Click Maintenance.job - C:\Program Files\TuneUp Utilities 2006\SystemOptimizer.exe 2007-08-19 13:51:09 C:\windows\Tasks\RollerCoaster Tycoon 3.job - C:\PROGRA~1\Atari\ROLLER~1\RCT3.exe 2007-08-11 22:03:01 C:\windows\Tasks\{D34F18B0-576E-11D0-B28C-00C04FD7CD22}_GAMEPC_Dominik.job - C:\WINDOWS\system32\mobsync.exe ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-19 16:09:09 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** Completion time: 2007-08-19 16:15:16 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 2007-08-19 16:13 --- E O F --- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:18:00, on 19.08.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\windows\System32\smss.exe C:\windows\system32\winlogon.exe C:\windows\system32\services.exe C:\windows\system32\lsass.exe C:\windows\system32\svchost.exe C:\windows\System32\svchost.exe C:\WINDOWS\system32\brss01a.exe C:\windows\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\windows\system32\nvsvc32.exe C:\windows\system32\svchost.exe C:\WINDOWS\system32\dllhost.exe C:\windows\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\eHome\ehmsas.exe C:\windows\RTHDCPL.EXE C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Gigabyte\ET5\GUI.exe C:\Program Files\Ashampoo\Ashampoo FireWall\FireWall.exe C:\Program Files\LClock\LClock.exe C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe C:\Program Files\SlySoft\Game Jackal\GameJackal.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\windows\system32\ctfmon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\PROGRA~1\Mozilla Firefox\firefox.exe C:\Documents and Settings\Dominik\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing) O2 - BHO: (no name) - {34E6F97C-34E0-4CE5-B92B-F83634BEDC01} - C:\Program Files\Video ActiveX Access\iesplg.dll (file missing) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing) O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll (file missing) O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe O4 - HKLM\..\Run: [Ashampoo FireWall] "C:\Program Files\Ashampoo\Ashampoo FireWall\FireWall.exe" -TRAY O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe O4 - HKLM\..\Run: [Vista Sidebar] C:\Program Files\Vista Sidebar\sidebar.exe O4 - HKLM\..\Run: [VisualTooltip] C:\Program Files\VisualTooltip\VisualToolTip.exe O4 - HKLM\..\Run: [Blaero Start Orb] C:\Program Files\Blaero Start Orb\Blaero Start Orb.exe O4 - HKLM\..\Run: [Styler] C:\Program Files\Styler\Styler.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DT HPW] C:\Program Files\Portrait Displays\HP My Display\DTHtml.exe -startup_folder O4 - HKLM\..\Run: [Maplom] C:\Program Files\SlySoft\Game Jackal\GameJackal.exe /silent O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/ActiveX/VMRCActiveXClient1.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://d-o-m-i-i-i.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164381940812 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1170615578953 O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://dominikschuez.spaces.live.com/PhotoUpload/MsnPUpld.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe O24 - Desktop Component 0: (no name) - http://www.vistawallpaper.com/data/media/2/img22.jpg O24 - Desktop Component 2: Our Planet Earth From Space: Global Incident - http://satellite.ehabich.info/ndt_incident.htm -- End of file - 9115 bytes . . Bitte nur die Eintraege der letzten 3 Monate pro Ordner posten . . Volume in drive C has no label. Volume Serial Number is BC93-FEC0 Directory of C:\windows\system32 19.08.2007 16:10 7'883 nvapps.xml 19.08.2007 12:27 43'520 CmdLineExt03.dll 15.08.2007 22:12 114'688 netlogun.exe 13.08.2007 19:41 402'476 perfh009.dat 13.08.2007 19:41 63'120 perfc009.dat 13.08.2007 19:41 473'036 PerfStringBackup.INI 11.08.2007 22:46 41 Filzip.ini 09.08.2007 15:40 4'636'532 TmpA278921 07.08.2007 11:58 2'278 wpa.dbl 03.08.2007 13:31 27 mcheck.mhf 03.08.2007 06:34 16'789'464 MRT.exe 26.07.2007 04:49 3'136 dtu_de.qm 23.07.2007 18:21 2'320'000 TUKernel.exe 22.07.2007 18:39 279'552 swreg.exe 12.07.2007 18:18 50'520 csvidcap.dll 12.07.2007 09:06 81'920 frapsvid.dll 12.07.2007 04:54 107'864 tsccvid.dll 26.06.2007 16:09 658'944 wininet.dll 26.06.2007 08:08 1'104'896 msxml3.dll 22.06.2007 21:31 6'184 d3d9caps.dat 19.06.2007 16:58 502'272 winlogon.exe 19.06.2007 16:20 1'100 d3d8caps.dat 19.06.2007 15:31 282'112 gdi32.dll 16.06.2007 12:36 0 SYSTEM.INI 16.06.2007 12:36 0 WIN.INI 14.06.2007 20:09 1'494'528 shdocvw.dll 14.06.2007 20:09 474'112 shlwapi.dll 14.06.2007 20:09 3'058'688 mshtml.dll 14.06.2007 20:09 532'480 mstime.dll 14.06.2007 20:09 615'424 urlmon.dll 14.06.2007 20:09 39'424 pngfilt.dll 14.06.2007 20:09 55'808 extmgr.dll 14.06.2007 20:09 16'384 jsproxy.dll 14.06.2007 20:09 205'312 dxtrans.dll 14.06.2007 20:09 96'256 inseng.dll 14.06.2007 20:09 251'392 iepeers.dll 14.06.2007 20:09 449'024 mshtmled.dll 14.06.2007 20:09 146'432 msrating.dll 14.06.2007 20:09 357'888 dxtmsft.dll 14.06.2007 20:09 1'054'208 danim.dll 14.06.2007 20:09 151'040 cdfview.dll 14.06.2007 20:09 1'023'488 browseui.dll 14.06.2007 15:39 115'712 xpsp3res.dll 11.06.2007 23:51 10'834'944 wmp.dll 19.05.2007 18:22 41'965 PUXPPLAT.UND 17.05.2007 20:15 3'970'048 logonuiX.exe 17.05.2007 16:06 237'552 FNTCACHE.DAT 17.05.2007 13:28 549'376 oleaut32.dll 16.05.2007 17:12 683'520 inetcomm.dll 08.05.2007 15:03 1'275'392 msxml4.dll 26.04.2007 12:19 98'304 CmdLineExt.dll 25.04.2007 16:21 144'896 schannel.dll 24.04.2007 11:32 1'485'696 LegitCheckControl.DLL 18.04.2007 18:12 2'854'400 msi.dll 16.04.2007 23:47 33'624 wups.dll 16.04.2007 23:46 25'944 wuaucpl.cpl.mui 16.04.2007 23:46 25'944 wuapi.dll.mui 16.04.2007 23:45 1'710'936 wuaueng.dll 16.04.2007 23:45 549'720 wuapi.dll 16.04.2007 23:45 325'976 wucltui.dll 16.04.2007 23:45 216'408 wuaucpl.cpl 16.04.2007 23:45 203'096 wuweb.dll 16.04.2007 23:45 92'504 cdm.dll 16.04.2007 23:45 43'352 wups2.dll 16.04.2007 23:45 53'080 wuauclt.exe 16.04.2007 23:45 20'312 wuaueng.dll.mui 16.04.2007 23:44 34'136 wucltui.dll.mui 16.04.2007 23:44 271'224 mucltui.dll 16.04.2007 23:44 208'248 muweb.dll 16.04.2007 23:43 30'072 mucltui.dll.mui 16.04.2007 17:52 984'576 kernel32.dll 13.04.2007 04:21 271'360 mscoree.dll 04.04.2007 19:55 261'480 xactengine2_7.dll 04.04.2007 19:53 81'768 xinput1_3.dll 02.04.2007 07:58 546'304 hhctrl.ocx 01.04.2007 22:58 385 BOOTBAK.INI 23.03.2007 07:07 1'683'280 XpsSvcs.dll 23.03.2007 07:07 583'504 XPSSHHDR.dll 22.03.2007 21:25 124'928 prntvpt.dll 18.03.2007 19:42 9'296 jupdate-1.5.0_11-b03.log 17.03.2007 15:43 292'864 winsrv.dll 16.03.2007 21:19 4 pqtdag.vxd 16.03.2007 15:16 1'918 DeIsL2.isu 16.03.2007 15:02 1'946 DeIsL1.isu 15.03.2007 19:16 236'928 WgaLogon.dll 15.03.2007 17:57 443'752 d3dx10_33.dll 14.03.2007 20:56 16'832 amcompat.tlb 14.03.2007 20:56 23'392 nscompat.tlb 14.03.2007 20:55 2'272 w95inf16.dll 14.03.2007 20:55 4'608 w95inf32.dll 12.03.2007 17:42 3'495'784 d3dx9_33.dll 12.03.2007 17:42 1'123'696 D3DCompiler_33.dll 08.03.2007 17:36 40'960 mf3216.dll 08.03.2007 17:36 577'536 user32.dll 08.03.2007 17:36 577'536 SET1B.tmp 08.03.2007 17:36 281'600 SET1D.tmp 08.03.2007 15:47 1'843'584 win32k.sys 05.03.2007 13:42 15'128 x3daudio1_1.dll 28.02.2007 19:04 16'826 brdiag.GID 28.02.2007 11:10 2'180'352 ntoskrnl.exe 28.02.2007 10:38 2'057'600 ntkrnlpa.exe 23.02.2007 19:41 75 LuResult.txt 23.02.2007 13:23 5'501 rtclcmg32.dll 17.02.2007 21:11 122'198 TZLog.log 12.02.2007 17:58 368'640 ReWire.dll 07.02.2007 10:53 663'552 mgxoschk.dll 05.02.2007 22:17 185'344 upnphost.dll 29.01.2007 10:58 60'416 tzchange.exe 25.01.2007 20:01 185'952 rmoc3260.dll 25.01.2007 20:01 5'632 pndx5032.dll 25.01.2007 20:01 6'656 pndx5016.dll 25.01.2007 20:01 278'528 pncrt.dll 24.01.2007 16:27 255'848 xactengine2_6.dll 19.01.2007 13:53 51'056 sirenacm.dll 12.01.2007 13:20 30 brss01a.ini 12.01.2007 13:20 184 brsvc01a.bsi 19.12.2006 23:52 134'656 shsvcs.dll 19.12.2006 23:52 8'453'632 shell32.dll 19.12.2006 20:16 333'824 wiaservc.dll 15.12.2006 04:09 127'078 javaws.exe 15.12.2006 04:09 49'265 jpicpl32.cpl 15.12.2006 02:31 53'346 javaw.exe 15.12.2006 02:30 49'248 java.exe 13.12.2006 16:49 4'390 MRT.INI 11.12.2006 01:29 7'287'808 vistaui.exe 10.12.2006 15:10 14'640 spmsg.dll 09.12.2006 15:40 147'456 vbzip10.dll 08.12.2006 18:25 8'370 jupdate-1.5.0_09-b03.log 08.12.2006 13:02 251'672 xactengine2_5.dll 04.12.2006 16:21 414'720 msscp.dll 03.12.2006 17:15 111'104 Uharc.exe 03.12.2006 17:15 19'968 reico.exe 03.12.2006 17:15 69'632 moveex.exe 03.12.2006 17:14 8'636 modifype.exe 03.12.2006 17:10 81'920 closeapp.exe 02.12.2006 17:23 8'312 jupdate-1.5.0_08-b03.log 01.12.2006 05:20 212'480 swxcacls.exe 29.11.2006 17:21 370'688 swsc.exe 29.11.2006 14:06 3'426'072 d3dx9_32.dll 28.11.2006 19:58 266 desktop.ini 28.11.2006 19:58 13'122 folder.htt 28.11.2006 18:29 502'272 winlogon.old 27.11.2006 16:54 433'152 riched20.dll 27.11.2006 16:54 539'136 msftedit.dll 27.11.2006 02:34 49'152 vfind.exe 24.11.2006 22:15 485 $winnt$.inf 24.11.2006 22:12 2'577 CONFIG.NT 24.11.2006 22:10 488 logonui.exe.manifest 24.11.2006 22:10 488 WindowsLogon.manifest 24.11.2006 22:10 749 cdplayer.exe.manifest 24.11.2006 22:10 749 nwc.cpl.manifest 24.11.2006 22:10 749 wuaucpl.cpl.manifest 24.11.2006 22:10 749 ncpa.cpl.manifest 24.11.2006 22:10 749 sapi.cpl.manifest 24.11.2006 22:08 21'640 emptyregdb.dat 24.11.2006 19:08 34'064 lhacm.acm 24.11.2006 19:06 2'978 jupdate-1.4.2_03-b02.log 24.11.2006 14:03 0 h323log.txt 24.11.2006 13:41 146'650 BuzzingBee.wav 24.11.2006 13:41 940'794 LoopyMusic.wav 03.11.2006 11:02 8'282'112 wmploc.dll 03.11.2006 10:56 99'840 wmpshell.dll 03.11.2006 10:55 275'968 wmerror.dll 03.11.2006 10:54 8'192 asferror.dll 02.11.2006 18:02 483'328 actskn45.ocx 01.11.2006 21:17 927'504 mfc40u.dll 25.10.2006 20:15 65'536 QuickTimeVR.qtx 25.10.2006 20:15 49'152 QuickTime.qts 19.10.2006 15:56 713'216 sxs.dll 18.10.2006 22:58 8'704 uwdf.exe 18.10.2006 22:58 8'704 wdfmgr.exe 18.10.2006 22:47 154'624 wpdmtp.dll 18.10.2006 22:47 35'840 wpdconns.dll 18.10.2006 22:47 1'329'152 WMSPDMOE.dll 18.10.2006 22:47 63'488 wpdmtpus.dll 18.10.2006 22:47 4'096 WMVADVD.dll 18.10.2006 22:47 656'896 WMVXENCD.dll 18.10.2006 22:47 356'352 wpdsp.dll 18.10.2006 22:47 767'488 WMVSENCD.dll 18.10.2006 22:47 2'603'008 WpdShext.dll 18.10.2006 22:47 1'382'912 WMVSDECD.dll 18.10.2006 22:47 629'760 wpd_ci.dll 18.10.2006 22:47 1'574'912 WMVENCOD.dll 18.10.2006 22:47 4'096 wmvdmoe2.dll 18.10.2006 22:47 4'096 wmvdmod.dll 18.10.2006 22:47 4'096 wmsdmoe2.dll 18.10.2006 22:47 38'400 wpdshextres.dll 18.10.2006 22:47 133'632 WPDShServiceObj.dll 18.10.2006 22:47 1'543'680 WMVDECOD.dll 18.10.2006 22:47 603'648 WMSPDMOD.dll 18.10.2006 22:47 4'096 WMVADVE.DLL 18.10.2006 22:47 2'450'944 wmvcore.dll 18.10.2006 22:47 4'096 wmsdmod.dll 18.10.2006 22:47 130'048 wmpps.dll 18.10.2006 22:47 1'661'440 wmpencen.dll 18.10.2006 22:47 613'376 wmpmde.dll 18.10.2006 22:47 204'288 wmpsrcwp.dll 18.10.2006 22:47 348'672 wmdrmnet.dll 18.10.2006 22:47 295'936 wmpeffects.dll 18.10.2006 22:47 157'184 wmidx.dll 18.10.2006 22:47 535'040 wmdrmsdk.dll 18.10.2006 22:47 314'880 wmpdxm.dll 18.10.2006 22:47 242'688 wmpasf.dll 18.10.2006 22:47 937'984 WMNetMgr.dll 18.10.2006 22:47 284'160 PortableDeviceApi.dll 18.10.2006 22:47 132'096 PortableDeviceWiaCompat.dll 18.10.2006 22:47 166'912 PortableDeviceTypes.dll 18.10.2006 22:47 101'888 PortableDeviceClassExtension.dll 18.10.2006 22:47 757'248 WMADMOD.dll 18.10.2006 22:47 1'117'696 WMADMOE.dll 18.10.2006 22:47 199'168 PortableDeviceWMDRM.dll 18.10.2006 22:47 222'208 WMASF.dll 18.10.2006 22:47 429'056 wmdrmdev.dll 18.10.2006 22:47 37'376 wmdmps.dll 18.10.2006 22:47 33'792 wmdmlog.dll 18.10.2006 22:47 211'456 qasf.dll 18.10.2006 22:47 4'096 wdfapi.dll 18.10.2006 22:47 175'616 mspmsp.dll 18.10.2006 22:47 321'536 mswmdm.dll 18.10.2006 22:47 27'136 mspmsnsv.dll 18.10.2006 22:47 179'712 msnetobj.dll 18.10.2006 22:47 212'992 MFPLAT.dll 18.10.2006 22:47 4'096 MPG4DMOD.dll 18.10.2006 22:47 259'072 MP43DECD.dll 18.10.2006 22:47 4'096 MP43DMOD.dll 18.10.2006 22:47 259'072 MPG4DECD.dll 18.10.2006 22:47 11'264 LAPRXY.dll 18.10.2006 22:47 4'096 MP4SDMOD.dll 18.10.2006 22:47 317'440 MP4SDECD.dll 18.10.2006 22:47 542'720 blackbox.dll 18.10.2006 22:47 229'376 cewmdm.dll 18.10.2006 22:47 991'744 drmv2clt.dll 18.10.2006 22:47 276'992 audiodev.dll 18.10.2006 21:05 232'448 l3codecp.acm 18.10.2006 21:03 100'864 logagent.exe 18.10.2006 21:00 249'856 drmupgds.exe 18.10.2006 21:00 17'408 wpdshextautoplay.exe 16.10.2006 18:15 122'880 oledlg.dll 14.10.2006 10:13 981'760 mfc42u.dll 13.10.2006 14:35 65'536 nwwks.dll 13.10.2006 14:35 64'000 nwapi32.dll 13.10.2006 14:35 142'336 nwprovau.dll 05.10.2006 17:22 24'072 uxtuneup.dll 02.10.2006 17:24 94'208 DLLCPY32.dll 02.10.2006 17:24 36'864 DLLPNT32.dll 02.10.2006 17:24 32'768 STRING32.dll 02.10.2006 17:24 487'424 DLLAV32.dll 02.10.2006 17:24 163'840 DLLDEV32.dll 02.10.2006 17:24 151'552 DLLDRV32.dll 02.10.2006 17:24 53'248 DLLIO32.dll 02.10.2006 17:24 188'416 DLLRES32.dll 28.09.2006 17:05 237'848 xactengine2_4.dll 28.09.2006 17:05 2'414'360 d3dx9_31.dll 25.08.2006 17:45 617'472 comctl32.dll 22.08.2006 05:05 498'742 dxmasf.dll 21.08.2006 14:21 16'896 fltlib.dll 21.08.2006 11:14 23'040 fltmc.exe 21.08.2006 10:52 246'814 strmdll.dll 17.08.2006 14:28 132'096 wkssvc.dll 17.08.2006 14:28 721'920 lsasrv.dll 17.08.2006 14:28 332'288 netapi32.dll 16.08.2006 13:58 100'352 6to4svc.dll 28.07.2006 10:30 236'824 xactengine2_3.dll 28.07.2006 10:30 62'744 xinput1_2.dll 25.07.2006 13:29 61'440 mfc70ita.dll 25.07.2006 13:29 61'440 mfc70deu.dll 25.07.2006 13:29 964'608 MFC70U.DLL 25.07.2006 13:29 84'992 ATL70.DLL 25.07.2006 13:29 61'440 mfc70esp.dll 25.07.2006 13:29 57'344 mfc70enu.dll 25.07.2006 13:29 61'440 mfc70fra.dll 21.07.2006 16:16 430'080 MXRestore.exe 21.07.2006 10:24 72'704 hlink.dll 18.07.2006 01:03 49'152 mgxasio2.dll 29.06.2006 14:07 14'048 spmsg2.dll 26.06.2006 19:37 8'192 rasadhlp.dll 26.06.2006 19:37 148'480 dnsapi.dll 22.06.2006 12:47 181'248 rasmans.dll 22.06.2006 07:06 1'435'648 query.dll 22.06.2006 07:06 69'120 ciodm.dll 01.06.2006 20:47 163'840 jgdw400.dll 01.06.2006 20:47 27'648 jgpl400.dll 01.06.2006 20:09 208'896 nvunrm.exe 01.06.2006 20:09 208'896 nvusmb.exe 01.06.2006 20:09 208'896 NVUNINST.EXE 31.05.2006 08:24 230'168 xactengine2_2.dll 19.05.2006 14:59 111'616 dhcpcsvc.dll 19.05.2006 14:59 94'720 iphlpapi.dll 17.05.2006 12:43 465'864 jscript.dll 17.05.2006 04:46 104 winx.url 31.03.2006 13:40 2'388'176 d3dx9_30.dll 31.03.2006 13:39 229'584 xactengine2_1.dll 31.03.2006 13:39 62'672 xinput1_1.dll 17.03.2006 02:38 28'672 verclsid.exe 01.03.2006 21:42 956'416 msdtctm.dll 01.03.2006 21:42 161'280 msdtcuiu.dll 01.03.2006 21:42 66'560 mtxclu.dll 01.03.2006 21:42 11'776 xolehlp.dll 01.03.2006 21:42 426'496 msdtcprx.dll 01.03.2006 21:42 91'136 mtxoci.dll 18.02.2006 10:05 3'823'616 desk.exe 16.02.2006 06:19 890'987 aurora_5xxx.scr 12.02.2006 12:43 5'642'680 aurora_4050.scr 07.02.2006 18:56 218'624 uxtheme.dll 03.02.2006 09:43 2'332'368 d3dx9_29.dll 03.02.2006 09:42 230'096 xactengine2_0.dll 03.02.2006 09:41 14'032 x3daudio1_0.dll 04.01.2006 05:35 68'096 webclnt.dll 05.12.2005 19:09 2'323'664 d3dx9_28.dll 05.12.2005 19:07 61'136 xinput9_1_0.dll 21.10.2005 00:20 1'082'368 esent.dll 18.10.2005 19:56 94'720 imekr61.ime 17.10.2005 23:14 118'272 t2embed.dll 17.10.2005 23:14 80'896 fontsub.dll 23.09.2005 08:28 32'768 netfxperf.dll 23.09.2005 08:28 150'016 mscorier.dll 23.09.2005 08:28 74'240 mscories.dll 23.09.2005 08:28 83'456 dfshim.dll 10.09.2005 03:53 2'067'968 cdosys.dll 01.09.2005 03:41 19'968 linkinfo.dll 30.08.2005 05:54 1'287'168 quartz.dll 23.08.2005 05:35 123'392 umpnpmgr.dll 22.08.2005 20:29 197'632 netman.dll 30.07.2005 02:09 202'240 fdco1ins.dll 30.07.2005 02:09 202'240 fdco1.dll 30.07.2005 02:09 9'728 bdco1.dll 30.07.2005 02:09 9'728 bdco1ins.dll 29.07.2005 09:25 33'280 nvconrm.dll 28.07.2005 12:52 15'840 Machnm1.exe 26.07.2005 06:39 397'824 rpcss.dll 26.07.2005 06:39 101'376 txflog.dll 26.07.2005 06:39 37'888 olecnv32.dll 26.07.2005 06:39 74'752 olecli32.dll 26.07.2005 06:39 1'285'120 ole32.dll 26.07.2005 06:39 243'200 es.dll 26.07.2005 06:39 540'160 comuid.dll 26.07.2005 06:39 97'792 comrepl.dll 26.07.2005 06:39 1'267'200 comsvcs.dll 26.07.2005 06:39 60'416 colbact.dll 26.07.2005 06:39 498'688 clbcatq.dll 26.07.2005 06:39 625'152 catsrvut.dll 26.07.2005 06:39 110'080 clbcatex.dll 26.07.2005 06:39 225'792 catsrv.dll 22.07.2005 20:59 2'319'568 d3dx9_27.dll 21.07.2005 14:33 2'846'720 NCTAudioCompress3.dll 19.07.2005 18:53 249'856 NCTQuickTimeFile.dll 08.07.2005 19:31 495'104 NCTVideoCoreM.dll 08.07.2005 18:27 249'344 tapisrv.dll 08.07.2005 18:27 76'800 remotesp.tsp 01.07.2005 19:09 215'552 NCTWMVFile.dll 29.06.2005 17:28 188'416 NCTVideoFile.dll 29.06.2005 03:46 74'240 mscms.dll 29.06.2005 03:46 254'976 icm32.dll 28.06.2005 10:21 22'752 spupdsvc.exe 21.06.2005 09:12 294'912 ALSNDMGR.CPL 15.06.2005 19:49 295'936 kerberos.dll 11.06.2005 01:53 57'856 spoolsv.exe 07.06.2005 19:11 382'464 NCTAVIFile.dll 07.06.2005 15:28 155'648 SDCtrls.dll 04.06.2005 02:01 3'632 nvnrm.nvu 04.06.2005 02:01 1'348 nvsmb.nvu 01.06.2005 13:16 778'240 NCTAudioCompress2.dll 01.06.2005 13:11 877'568 NCTAudioFile2.dll 27.05.2005 04:04 41'472 hhsetup.dll 27.05.2005 04:04 155'136 itircl.dll 27.05.2005 04:04 137'216 itss.dll 26.05.2005 16:34 2'297'552 d3dx9_26.dll 26.05.2005 08:14 262'144 RTSndMgr.CPL 26.05.2005 05:16 194'328 wuaueng1.dll 26.05.2005 05:16 172'312 wuauclt1.exe 26.05.2005 05:16 198'424 iuengine.dll 25.05.2005 16:24 764'416 NCTRMFile.dll 18.05.2005 07:38 40'960 ChCfg.exe 12.05.2005 01:34 540'672 nvhwvid.dll 12.05.2005 01:34 147'456 nvcolor.exe 11.05.2005 01:45 75'776 telnet.exe 04.05.2005 15:45 78'848 msiexec.exe 04.05.2005 15:45 884'736 msimsg.dll 04.05.2005 15:45 15'360 msisip.dll 04.05.2005 15:45 271'360 msihnd.dll 14.04.2005 20:07 780'288 NCTVideoCompress.dll 09.04.2005 21:05 27'807 mgxcdr.txt 18.03.2005 18:19 2'337'488 d3dx9_25.dll 02.03.2005 20:09 56'832 authz.dll 05.02.2005 21:46 3'802'320 d3dx9d_24.dll 05.02.2005 21:45 2'222'800 d3dx9_24.dll 28.01.2005 14:44 96'768 drmstor.dll 28.01.2005 14:44 10'752 wpdtrace.dll 28.01.2005 14:44 331'776 wpdmtpdr.dll 28.01.2005 14:44 258'296 drmclien.dll 08.01.2005 03:07 61'952 HdAShCut.exe 08.01.2005 03:07 25'088 HdAProp.dll 08.01.2005 03:07 5'120 HdAudRes.dll 07.12.2004 21:32 96'768 srvsvc.dll 17.11.2004 19:41 347'136 hypertrm.dll 09.11.2004 10:11 282'624 msicpl.dll 14.10.2004 12:23 5'267'456 nvoglnt.dll 30.09.2004 07:35 274'432 nvwrspl.dll 30.09.2004 07:35 274'432 nvwrsno.dll 30.09.2004 07:35 299'008 nvwrspt.dll 30.09.2004 07:35 294'912 nvwrsnl.dll 30.09.2004 07:35 184'320 nvwrsko.dll 30.09.2004 07:35 196'608 nvwrsja.dll 30.09.2004 07:35 299'008 nvwrsit.dll 30.09.2004 07:35 290'816 nvwrshu.dll 30.09.2004 07:35 258'048 nvwrshe.dll 30.09.2004 07:35 299'008 nvwrsfr.dll 30.09.2004 07:35 278'528 nvwrsfi.dll 30.09.2004 07:35 303'104 nvwrsesm.dll 30.09.2004 07:35 311'296 nvwrses.dll 30.09.2004 07:35 262'144 nvwrseng.dll 30.09.2004 07:35 311'296 nvwrsel.dll 30.09.2004 07:35 282'624 nvwrsde.dll 30.09.2004 07:35 274'432 nvwrsda.dll 30.09.2004 07:35 262'144 nvwrscs.dll 30.09.2004 07:35 13'621 nvdisp.nvu 30.09.2004 07:35 258'048 nvwrsar.dll 30.09.2004 07:35 4'603'904 nvcpl.dll 30.09.2004 07:35 1'019'904 nvwimg.dll 30.09.2004 07:35 1'646'592 nvwdmcpl.dll 30.09.2004 07:35 81'920 nvwddi.dll 30.09.2004 07:35 442'368 nvappbar.exe 30.09.2004 07:35 290'816 nvwrsru.dll 30.09.2004 07:35 32'256 nvcodins.dll 30.09.2004 07:35 274'432 nvwrssk.dll 30.09.2004 07:35 278'528 nvwrssl.dll 30.09.2004 07:35 274'432 nvwrssv.dll 30.09.2004 07:35 172'032 nvudisp.exe 30.09.2004 07:35 278'528 nvwrstr.dll 30.09.2004 07:35 73'728 nvtuicpl.cpl 30.09.2004 07:35 127'043 nvsvc32.exe 30.09.2004 07:35 151'552 nvwrszhc.dll 30.09.2004 07:35 155'648 nvwrszht.dll 30.09.2004 07:35 462'848 nvshell.dll 30.09.2004 07:35 110'592 nvrszht.dll 30.09.2004 07:35 200'704 nvrszhc.dll 30.09.2004 07:35 229'376 nvrstr.dll 30.09.2004 07:35 393'216 keystone.exe 30.09.2004 07:35 225'280 nvrssv.dll 30.09.2004 07:35 229'376 nvrssl.dll 30.09.2004 07:35 225'280 nvrssk.dll 30.09.2004 07:35 241'664 nvrsru.dll 30.09.2004 07:35 294'912 nvwrsptb.dll 30.09.2004 07:35 241'664 nvrspt.dll 30.09.2004 07:35 225'280 nvrspl.dll 30.09.2004 07:35 225'280 nvrsno.dll 30.09.2004 07:35 245'760 nvrsnl.dll 30.09.2004 07:35 233'472 nvrsko.dll 30.09.2004 07:35 237'568 nvrsja.dll 30.09.2004 07:35 253'952 nvrsit.dll 30.09.2004 07:35 229'376 nvrshu.dll 30.09.2004 07:35 286'720 nvrshe.dll 30.09.2004 07:35 253'952 nvrsfr.dll 30.09.2004 07:35 217'088 nvrsfi.dll 30.09.2004 07:35 245'760 nvrsesm.dll 30.09.2004 07:35 249'856 nvrses.dll 30.09.2004 07:35 1'339'392 nvdspsch.exe 30.09.2004 07:35 221'184 nvrseng.dll 30.09.2004 07:35 921'600 nwiz.exe 30.09.2004 07:35 249'856 nvrsel.dll 30.09.2004 07:35 249'856 nvrsde.dll 30.09.2004 07:35 229'376 nvrsda.dll 30.09.2004 07:35 221'184 nvrscs.dll 30.09.2004 07:35 290'816 nvrsar.dll 30.09.2004 07:35 32'256 nvcod.dll 30.09.2004 07:35 245'760 nvnt4cpl.dll 30.09.2004 07:35 3'730'944 nv4_disp.dll 30.09.2004 07:35 86'016 nvmctray.dll 30.09.2004 07:35 1'441'792 nview.dll 30.09.2004 07:35 237'568 nvrsptb.dll 06.09.2004 18:06 53'248 xvid.ax 04.09.2004 06:45 172'032 LClock.cpl 03.09.2004 23:43 199 paypal.url 10.08.2004 14:11 85'504 mhn.dll 10.08.2004 14:11 8'704 igdetect.dll 10.08.2004 13:43 4'396'544 wpgldfsh.scr 10.08.2004 13:43 1'742'336 mypixdx.scr 10.08.2004 13:43 7'093'760 space.scr 10.08.2004 13:43 3'343'360 nature.scr 10.08.2004 13:43 5'068'800 davinci.scr 10.08.2004 07:32 20'992 hid.dll 10.08.2004 07:32 47'104 cnbjmon.dll 10.08.2004 07:32 47'616 iyuv_32.dll 10.08.2004 07:32 17'408 msyuv.dll 10.08.2004 07:32 15'360 pjlmon.dll 10.08.2004 07:32 52'224 dmutil.dll 10.08.2004 07:32 51'712 wzcsapi.dll 10.08.2004 07:32 359'936 wzcsvc.dll 10.08.2004 07:32 35'328 pid.dll 10.08.2004 07:32 294'912 msh263.drv 10.08.2004 07:32 23'552 wdmaud.drv 10.08.2004 07:11 1'616'384 msvidctl.dll 10.08.2004 07:11 154'112 vbicodec.ax 10.08.2004 07:11 331'776 encdec.dll 10.08.2004 07:11 69'632 msscds32.ax 10.08.2004 07:11 258'048 wmvds32.ax 10.08.2004 07:11 262'144 mpg4ds32.ax 10.08.2004 07:11 303'616 wmstream.dll 10.08.2004 07:11 278'559 wmv8ds32.ax 10.08.2004 07:11 4'126 msdxmlc.dll 10.08.2004 07:11 86'016 sl_anet.acm 10.08.2004 07:11 61'952 acelpdec.ax 10.08.2004 07:11 294'912 msaud32.acm 10.08.2004 07:11 62'976 mpeg2data.ax 10.08.2004 07:11 268'288 sbe.dll 10.08.2004 07:11 240'640 wstrenderer.ax 10.08.2004 07:11 165'376 wstpager.ax 10.08.2004 06:45 844'314 msdxm.ocx 09.08.2004 22:27 114'688 wscript.exe 09.08.2004 22:27 98'304 cscript.exe 09.08.2004 22:27 28'672 wshcon.dll 09.08.2004 22:27 65'536 wshext.dll 09.08.2004 22:27 438'272 vbscript.dll 09.08.2004 22:27 151'552 scrobj.dll 09.08.2004 22:27 151'552 scrrun.dll 09.08.2004 22:27 28'672 dispex.dll 09.08.2004 19:50 98'304 wshom.ocx 04.08.2004 10:56 130'048 ksproxy.ax 04.08.2004 10:56 4'096 ksuser.dll 04.08.2004 05:31 77'890 usrdpa.dll 04.08.2004 05:31 72'192 sprio800.dll 04.08.2004 05:31 69'699 usrcoina.dll 04.08.2004 05:31 61'500 usrcntra.dll 04.08.2004 05:31 13'824 wowfaxui.dll 04.08.2004 05:31 69'632 spnike.dll 04.08.2004 05:31 55'296 dvdplay.exe 04.08.2004 05:31 102'457 usrv42a.dll 04.08.2004 05:31 323'641 usrdtea.dll 04.08.2004 05:31 157'696 paqsp.dll 04.08.2004 05:31 86'073 usrfaxa.dll 04.08.2004 05:31 3'200 wowfax.dll 04.08.2004 05:31 49'209 usrv80a.dll 04.08.2004 05:31 8'192 tsbyuv.dll 04.08.2004 05:31 53'305 usrlbva.dll 04.08.2004 05:31 45'116 usrvoica.dll 04.08.2004 05:31 8'192 streamci.dll 04.08.2004 05:31 41'019 usrsvpia.dll 04.08.2004 05:31 69'700 usrshuta.exe 04.08.2004 05:31 49'211 usrvpa.dll 04.08.2004 05:31 77'891 usrmlnka.exe 04.08.2004 05:31 147'968 mdwmdmsp.dll 04.08.2004 05:31 70'656 sprio600.dll 04.08.2004 05:31 77'883 usrrtosa.dll 04.08.2004 05:31 49'211 usrsdpia.dll 04.08.2004 05:31 61'508 usrprbda.exe 04.08.2004 04:07 1'788 Dcache.bin 04.08.2004 04:02 329'728 netsetup.exe 04.08.2004 04:01 87'176 rdpwsx.dll 04.08.2004 04:01 12'168 tsddd.dll 04.08.2004 04:01 92'168 rdpdd.dll 04.08.2004 03:56 33'280 kmddsp.tsp 04.08.2004 03:56 610'304 sspipes.scr 04.08.2004 03:56 14'336 ssstars.scr 04.08.2004 03:56 25'600 netsetup.cpl 04.08.2004 03:56 679'936 sstext3d.scr 04.08.2004 03:56 18'944 ssmyst.scr 04.08.2004 03:56 12'288 tracert.exe 04.08.2004 03:56 848'384 ir41_32.ax 04.08.2004 03:56 380'416 irprops.cpl 04.08.2004 03:56 188'416 msh261.drv 04.08.2004 03:56 259'584 tracerpt.exe 04.08.2004 03:56 14'848 stimon.exe 04.08.2004 03:56 266'240 intl.cpl 04.08.2004 03:56 13'824 wscntfy.exe 04.08.2004 03:56 654'848 appwiz.cpl 04.08.2004 03:56 47'104 ssmypics.scr 04.08.2004 03:56 20'992 ssmarque.scr 04.08.2004 03:56 50'176 utilman.exe 04.08.2004 03:56 199'680 iac25_32.ax 04.08.2004 03:56 347'136 tourstart.exe 04.08.2004 03:56 32'768 odbccp32.cpl 04.08.2004 03:56 80'384 firewall.cpl 04.08.2004 03:56 393'216 ssflwbox.scr 04.08.2004 03:56 14'336 svchost.exe 04.08.2004 03:56 29'696 hidphone.tsp 04.08.2004 03:56 73'216 tlntsvr.exe 04.08.2004 03:56 68'608 access.cpl 04.08.2004 03:56 206'848 unimdm.tsp 04.08.2004 03:56 221'184 msadds32.ax 04.08.2004 03:56 358'400 inetcpl.cpl 04.08.2004 03:56 17'408 ipconf.tsp 04.08.2004 03:56 65'536 wextract.exe 04.08.2004 03:56 9'216 scrnsave.scr 04.08.2004 03:56 135'168 desk.cpl 04.08.2004 03:56 154'624 ivfsrc.ax 04.08.2004 03:56 78'336 tlntsess.exe 04.08.2004 03:56 61'440 tlntadmn.exe 04.08.2004 03:56 148'480 wscui.cpl 04.08.2004 03:56 403'968 nusrmgr.cpl 04.08.2004 03:56 110'592 bthprops.cpl 04.08.2004 03:56 704'512 ss3dfo.scr 04.08.2004 03:56 148'992 mpg2splt.ax 04.08.2004 03:56 16'896 upnpcont.exe 04.08.2004 03:56 470'528 hdwwiz.cpl 04.08.2004 03:56 471'040 sysdm.cpl 04.08.2004 03:56 230'400 timedate.cpl 04.08.2004 03:56 30'720 vbisurf.ax 04.08.2004 03:56 56'832 ndptsp.tsp 04.08.2004 03:56 11'776 spnpinst.exe 04.08.2004 03:56 902'656 mmsys.cpl 04.08.2004 03:56 351'232 taskmgr.exe 04.08.2004 03:56 2'659'328 wiaacmgr.exe 04.08.2004 03:56 289'792 vssvc.exe 04.08.2004 03:56 380'416 powercfg.cpl 04.08.2004 03:56 24'576 userinit.exe 04.08.2004 03:56 220'672 logon.scr 04.08.2004 03:56 32'256 wpabaln.exe 04.08.2004 03:56 18'432 ups.exe 04.08.2004 03:56 5'632 winver.exe 04.08.2004 03:56 265'728 h323.tsp 04.08.2004 03:56 32'256 wpnpinst.exe 04.08.2004 03:56 146'432 winspool.drv 04.08.2004 03:56 538'624 spider.exe 04.08.2004 03:56 30'720 xcopy.exe 04.08.2004 03:56 105'984 sysocmgr.exe 04.08.2004 03:56 19'968 ssbezier.scr 04.08.2004 03:56 502'272 winlogon.bak 04.08.2004 03:56 205'312 joy.cpl 04.08.2004 03:56 50'688 smss.exe 04.08.2004 03:56 89'600 smlogsvc.exe 04.08.2004 03:56 8'192 smbinst.exe 04.08.2004 03:56 26'112 skeys.exe 04.08.2004 03:56 70'144 sigverif.exe 04.08.2004 03:56 19'456 shutdown.exe 04.08.2004 03:56 77'824 shrpubw.exe 04.08.2004 03:56 42'496 shmgrate.exe 04.08.2004 03:56 23'040 setup.exe 04.08.2004 03:56 31'232 sethc.exe 04.08.2004 03:56 140'800 sessmgr.exe 04.08.2004 03:56 108'032 services.exe 04.08.2004 03:56 215'552 osk.exe 04.08.2004 03:56 18'432 secedit.exe 04.08.2004 03:56 77'312 sdbinst.exe 04.08.2004 03:56 58'368 packager.exe 04.08.2004 03:56 121'856 schtasks.exe 04.08.2004 03:56 95'744 scardsvr.exe 04.08.2004 03:56 13'312 savedump.exe 04.08.2004 03:56 14'336 runonce.exe 04.08.2004 03:56 33'280 rundll32.exe 04.08.2004 03:56 77'312 rtcshare.exe 04.08.2004 03:56 107'520 rsnotify.exe 04.08.2004 03:56 14'848 rsh.exe 04.08.2004 03:56 13'824 rexec.exe 04.08.2004 03:56 11'776 regsvr32.exe 04.08.2004 03:56 50'176 reg.exe 04.08.2004 03:56 67'072 rdshost.exe 04.08.2004 03:56 13'824 rdsaddin.exe 04.08.2004 03:56 62'464 rdpclip.exe 04.08.2004 03:56 21'504 rcp.exe 04.08.2004 03:56 35'840 rcimlby.exe 04.08.2004 03:56 56'832 rasphone.exe 04.08.2004 03:56 20'480 qprocess.exe 04.08.2004 03:56 15'872 perfmon.exe 04.08.2004 03:56 9'216 proxycfg.exe 04.08.2004 03:56 50'176 proquota.exe 04.08.2004 03:56 109'568 progman.exe 04.08.2004 03:56 49'152 powercfg.exe 04.08.2004 03:56 131'584 sndrec32.exe 04.08.2004 03:56 17'920 ping.exe 04.08.2004 03:56 1'200'128 ntbackup.exe 04.08.2004 03:56 67'584 openfiles.exe 04.08.2004 03:56 19'968 mqbkup.exe 04.08.2004 03:56 4'608 mqsvc.exe 04.08.2004 03:56 69'632 odbcconf.exe 04.08.2004 03:56 117'248 mqtgsvc.exe 04.08.2004 03:56 76'800 nslookup.exe 04.08.2004 03:56 32'768 odbcad32.exe 04.08.2004 03:56 6'144 msdtc.exe 04.08.2004 03:56 61'440 notepad.exe 04.08.2004 03:56 36'864 netstat.exe 04.08.2004 03:56 29'184 mshta.exe 04.08.2004 03:56 86'016 netsh.exe 04.08.2004 03:56 474'112 mspaint.exe 04.08.2004 03:56 12'288 mstinit.exe 04.08.2004 03:56 111'104 netdde.exe 04.08.2004 03:56 124'928 net1.exe 04.08.2004 03:56 42'496 net.exe 04.08.2004 03:56 53'760 narrator.exe 04.08.2004 03:56 4'096 nddeapir.exe 04.08.2004 03:56 419'840 ntvdm.exe 04.08.2004 03:56 815'104 mmc.exe 04.08.2004 03:56 143'360 mobsync.exe 04.08.2004 03:56 32'768 mnmsrvc.exe 04.08.2004 03:56 123'392 mplay32.exe 04.08.2004 03:56 114'688 iexpress.exe 04.08.2004 03:56 85'504 makecab.exe 04.08.2004 03:56 53'248 ipv6.exe 04.08.2004 03:56 42'496 ftp.exe 04.08.2004 03:56 193'024 fsquirt.exe 04.08.2004 03:56 72'704 magnify.exe 04.08.2004 03:56 119'808 gpresult.exe 04.08.2004 03:56 20'992 fontview.exe 04.08.2004 03:56 150'016 imapi.exe 04.08.2004 03:56 27'136 findstr.exe 04.08.2004 03:56 45'568 extrac32.exe 04.08.2004 03:56 13'312 lsass.exe 04.08.2004 03:56 39'424 grpconv.exe 04.08.2004 03:56 514'560 logonui.exe 04.08.2004 03:56 55'808 ipconfig.exe 04.08.2004 03:56 59'392 logman.exe 04.08.2004 03:56 34'304 ie4uinit.exe 04.08.2004 03:56 23'552 ipxroute.exe 04.08.2004 03:56 75'264 locator.exe 04.08.2004 03:56 193'024 eudcedit.exe 04.08.2004 03:56 50'176 eventcreate.exe 04.08.2004 03:56 32'768 asr_pfu.exe 04.08.2004 03:56 25'088 at.exe 04.08.2004 03:56 11'264 atmadm.exe 04.08.2004 03:56 14'336 auditusr.exe 04.08.2004 03:56 588'800 autochk.exe 04.08.2004 03:56 30'208 asr_fmt.exe 04.08.2004 03:56 1'298'432 dxdiag.exe 04.08.2004 03:56 580'608 autofmt.exe 04.08.2004 03:56 11'264 autolfn.exe 04.08.2004 03:56 180'224 dwwin.exe 04.08.2004 03:56 17'920 dvdupgrd.exe 04.08.2004 03:56 20'480 wmpui.dll 04.08.2004 03:56 10'752 dumprep.exe 04.08.2004 03:56 71'680 blastcln.exe 04.08.2004 03:56 20'480 wmpcore.dll 04.08.2004 03:56 20'480 wmpcd.dll 04.08.2004 03:56 83'456 dpvsetup.exe 04.08.2004 03:56 18'432 dpnsvr.exe 04.08.2004 03:56 30'208 dplaysvr.exe 04.08.2004 03:56 15'872 dmremote.exe 04.08.2004 03:56 224'768 dmadmin.exe 04.08.2004 03:56 5'120 dllhost.exe 04.08.2004 03:56 44'544 alg.exe 04.08.2004 03:56 163'840 diskpart.exe 04.08.2004 03:56 98'304 ahui.exe 04.08.2004 03:56 85'504 diantz.exe 04.08.2004 03:56 4'096 actmovie.exe 04.08.2004 03:56 104'960 dfrgntfs.exe 04.08.2004 03:56 183'808 accwiz.exe 04.08.2004 03:56 82'432 dfrgfat.exe 04.08.2004 03:56 15'360 ctfmon.exe 04.08.2004 03:56 6'144 csrss.exe 04.08.2004 03:56 25'088 defrag.exe 04.08.2004 03:56 27'648 conime.exe 04.08.2004 03:56 63'488 cmstp.exe 04.08.2004 03:56 30'208 ddeshare.exe 04.08.2004 03:56 39'936 cmmon32.exe 04.08.2004 03:56 602'624 autoconv.exe 04.08.2004 03:56 47'104 cmdl32.exe 04.08.2004 03:56 388'608 cmd.exe 04.08.2004 03:56 33'280 clipsrv.exe 04.08.2004 03:56 102'912 clipbrd.exe 04.08.2004 03:56 20'480 cliconfg.exe 04.08.2004 03:56 64'000 cleanmgr.exe 04.08.2004 03:56 56'320 cipher.exe 04.08.2004 03:56 5'632 cisvc.exe 04.08.2004 03:56 30'749 vbajet32.dll 04.08.2004 03:56 26'112 vdmdbg.dll 04.08.2004 03:56 51'712 vdmredir.dll 04.08.2004 03:56 18'944 version.dll 04.08.2004 03:56 430'592 vssapi.dll 04.08.2004 03:56 174'592 w32time.dll 04.08.2004 03:56 406'528 usp10.dll 04.08.2004 03:56 723'456 userenv.dll 04.08.2004 03:56 15'872 w3ssl.dll 04.08.2004 03:56 16'896 usbmon.dll 04.08.2004 03:56 37'888 url.dll 04.08.2004 03:56 239'616 upnpui.dll 04.08.2004 03:56 132'608 upnp.dll 04.08.2004 03:56 49'152 wdigest.dll 04.08.2004 03:56 13'824 uniplat.dll 04.08.2004 03:56 74'240 unimdmat.dll 04.08.2004 03:56 915'456 webcheck.dll 04.08.2004 03:56 35'840 umandlg.dll 04.08.2004 03:56 275'456 ulib.dll 04.08.2004 03:56 25'600 udhisapi.dll 04.08.2004 03:56 44'032 twext.dll 04.08.2004 03:56 93'696 tscfgwmi.dll 04.08.2004 03:56 90'624 trkwks.dll 04.08.2004 03:56 7'168 tlntsvrp.dll 04.08.2004 03:56 385'536 themeui.dll 04.08.2004 03:56 295'424 termsrv.dll 04.08.2004 03:56 358'400 termmgr.dll 04.08.2004 03:56 45'568 tcpmonui.dll 04.08.2004 03:56 45'568 tcpmon.dll 04.08.2004 03:56 14'848 tcpmib.dll 04.08.2004 03:56 181'760 tapi32.dll 04.08.2004 03:56 858'624 tapi3.dll 04.08.2004 03:56 984'576 syssetup.dll 04.08.2004 03:56 135'680 webvw.dll 04.08.2004 03:56 191'488 syncui.dll 04.08.2004 03:56 57'856 synceng.dll 04.08.2004 03:56 75'776 strmfilt.dll 04.08.2004 03:56 401'408 stobject.dll 04.08.2004 03:56 136'704 sti_ci.dll 04.08.2004 03:56 67'584 sti.dll 04.08.2004 03:56 71'680 ssdpsrv.dll 04.08.2004 03:56 34'816 ssdpapi.dll 04.08.2004 03:56 463'360 wiadefui.dll 04.08.2004 03:56 170'496 srsvc.dll 04.08.2004 03:56 239'104 srrstr.dll 04.08.2004 03:56 67'584 srclient.dll 04.08.2004 03:56 180'800 sqlunirl.dll 0 Dieser Beitrag wurde am 19.08.2007 um 16:20 Uhr von dominikschuez editiert.
|
|
|
|
|
|
|
19.08.2007, 16:52
Moderator
Beiträge: 7805 |
#8
Teste C:\WINDOWS\system32\netlogun.exe bitte bei Jotti oder Virustotal
Hake zusaetzlich in Hijackthis folgendes an und druecke fix checked: R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - O2 - BHO: (no name) - {5DDE5591-A8AB-4897-93EF-1E4E943F85A7} - C:\Programme\Video ActiveX Access\iesplg.dll (file missing) O3 - Toolbar: Protection Bar - {CC18AE76-7E65-4258-A193-9EA0C52DA6B8} - C:\Programme\Video ActiveX Access\iesbpl.dll (file missing) Starte neu und loesche C:\Programme\Video ActiveX Access\ und berichte, was die Scanner bei der Datei gemeldet haben,,, __________ MfG Ralf SEO-Spam Hunter |
|
|
|
|
|
|
25.08.2007, 17:45
...neu hier
Beiträge: 6 |
#9
So etwas ähnliches hatte ich auch mal, habs mit Spybot:Seatch & Destroy hinbekommen.
1) Googleseite anwählen 2) Spybot Seatch & Destroy eingeben 3) Seite anklicken 4) Spybot s.d. downloaden 5) Spybot s.d. installieren 6) mit Spybot s.d. Überprüfen |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Seite(n): 1
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
genau dass: http://board.protecus.de/t25330.htm
aber hab kein plan wie ich da vorgehn muss um das weg zu bekommen..hab schon rumprobiert aba ka^^..
Logfile of HijackThis v1.99.1
Scan saved at 23:33:48, on 15.08.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Intel\Wireless\Bin\EvtEng.exe
C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programme\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Programme\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Programme\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
c:\programme\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\Programme\Acer\Acer Arcade\PCMService.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\acer\epm\epm-dm.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\McAfee.com\VSO\mcvsshld.exe
c:\programme\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\Programme\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\vsnpstd.exe
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Programme\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Skype\Phone\Skype.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Programme\ICQLite\ICQLite.exe
C:\Programme\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Dokumente und Einstellungen\rm\Desktop\hijackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = fritz.box
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5DDE5591-A8AB-4897-93EF-1E4E943F85A7} - C:\Programme\Video ActiveX Access\iesplg.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Protection Bar - {CC18AE76-7E65-4258-A193-9EA0C52DA6B8} - C:\Programme\Video ActiveX Access\iesbpl.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Programme\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [OASClnt] C:\Programme\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Programme\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: EvtEng - Intel Corporation - C:\Programme\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\programme\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe